Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu (ads by onlinebrowseradvertising)

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#1 Příspěvek od yorg »

Dobrý den.
Měl jsem problém s tím, že se mi ve FF opakovaně zobrazovaly plochy pro reklamu "ads by onlinebrowseradvertising" a mimo to mi vyskakovalo prázdné okna bez obsahu.
Příčinou byl pravděpodobně malware Plus-HD-9.4 0.94.107, který se i po odstranění z doplňku po restartu PC opakovaně instaloval.

Pokusil jsem se to odstranit a chtěl bych vás poprosit o kontrolu, zda to bylo úspěšné a zda tam přece jen něco nezůstalo.

Děkuji

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014
Ran by Jiri (administrator) on JIRI-PC on 23-06-2014 20:34:48
Running from C:\Users\Jiri\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(LSoft Technologies Inc) C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NirSoft) C:\Program Files\volumouse\volumouse.exe
(Create Software) C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files\volumouse\volumouse32.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(Software602) C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Prog-Soft s.r.o.) C:\Program Files (x86)\PSPad\PSPad.exe
(forum.viry.cz) C:\Users\Jiri\Desktop\FRST-OlderVersion\FRSTLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Print2PDF Print Monitor] => C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [220992 2011-10-04] (Software602)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [$Volumouse$] => C:\Program Files\volumouse\volumouse.exe [88576 2012-01-08] (NirSoft)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Create Synchronicity - Scheduler] => C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe [245248 2012-03-11] (Create Software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [SkyDrive] => C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251048 2014-06-22] (Microsoft Corporation)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [NokiaSuite.exe] => C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090912 2013-10-02] (Nokia)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe ( )
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OUTLOOK – zástupce.lnk
ShortcutTarget: OUTLOOK – zástupce.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE (Microsoft Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.webisgreat.info/?l=1&q ... Z&unqvl=48
SearchScopes: HKLM-x32 - {BB74DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.webisgreat.info/?l=1&q ... Z&unqvl=48
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... rms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... earchTerms}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Mouse Gestures - {A6A49249-57AE-4295-8D4D-18A9502C7D8E} - C:\Program Files\Internet Explorer\Plugins\Drowse\MouseGestures.dll (Drowse)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/Shar ... vSniff.cab
DPF: HKLM-x32 {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/Shar ... /cabsa.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.196.124.1 217.196.124.14

FireFox:
========
FF ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
FF SelectedSearchEngine: Conduit Search
FF Homepage: chrome://fastdial/content/fastdial.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 - C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: OvisLink.com/CBCamV - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll (OvisLink)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jiri\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\cs@dictionaries.addons.mozilla.org [2014-06-20]
FF Extension: Fast Dial - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\fastdial@telega.phpnet.us [2014-06-20]
FF Extension: Garmin Communicator - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-06-20]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]
FF Extension: Flashblock - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-06-20]
FF Extension: Cookies Manager+ - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2014-06-20]
FF Extension: Block site - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-06-20]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\elemhidehelper@adblockplus.org.xpi [2014-06-20]
FF Extension: FireGestures - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\firegestures@xuldev.org.xpi [2014-06-20]
FF Extension: HyperTranslate - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\hypertranslate@mdc.com.xpi [2014-06-20]
FF Extension: Czech (CZ) Language Pack - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\langpack-cs@firefox.mozilla.org.xpi [2014-06-20]
FF Extension: QuickDrag - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\quickdrag@mozilla.ktechcomputing.com.xpi [2014-06-20]
FF Extension: Rotate Image - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\rotateimage@minisystems.de.xpi [2014-06-20]
FF Extension: FxIF - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi [2014-06-20]
FF Extension: Stylish - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-06-20]
FF Extension: Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-20]
FF Extension: Tab Mix Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-06-20]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (YTBBoOkMarrK) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef [2014-02-14]
CHR Extension: (No Name) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol [2012-08-21]
CHR Extension: (SNT) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi [2014-02-14]
CHR Extension: (Best Save) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej [2014-02-14]
CHR Extension: (YoutubeAdblocker) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj [2014-02-14]
CHR Extension: (wweBsaavie) - C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek [2014-02-14]
CHR HKCU\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24]
CHR HKLM-x32\...\Chrome\Extension: [bhnjjbcnbmjmhgpliahlamecmbejpaol] - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx [2012-07-24]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [73728 2010-04-14] (Software602 a.s.) [File not signed]
R2 Active@ Disk Monitor; C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [1464328 2010-09-15] (LSoft Technologies Inc)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2013-12-03] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2013-12-03] (globalUpdate) [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
R3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 20:23 - 2014-06-23 20:34 - 00020465 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:54 - 2014-06-23 19:54 - 00000921 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-22 21:30 - 2014-06-23 20:34 - 00000000 ____D () C:\FRST
2014-06-22 21:29 - 2014-06-23 20:23 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:52 - 2014-06-21 23:06 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-15 20:09 - 2014-06-15 20:10 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 17:38 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 17:38 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 17:38 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 17:38 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 17:38 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 17:38 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 17:38 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 17:38 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 17:38 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 17:38 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 17:38 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 17:38 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 17:38 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 17:38 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 17:38 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 17:38 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 17:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 17:38 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 17:38 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 17:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 17:37 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 17:37 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 19:02 - 2014-06-21 23:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 22:57 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL

==================== One Month Modified Files and Folders =======

2014-06-23 20:34 - 2014-06-23 20:23 - 00020465 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:34 - 2014-06-22 21:30 - 00000000 ____D () C:\FRST
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 20:23 - 2014-06-22 21:29 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-23 20:17 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 20:17 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 20:16 - 2013-08-30 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-23 20:14 - 2009-07-14 17:18 - 00673174 _____ () C:\Windows\system32\perfh005.dat
2014-06-23 20:14 - 2009-07-14 17:18 - 00143268 _____ () C:\Windows\system32\perfc005.dat
2014-06-23 20:14 - 2009-07-14 07:13 - 01596572 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 20:13 - 2012-08-20 19:35 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\AIMP3
2014-06-23 20:13 - 2012-08-20 17:10 - 01561474 ____N () C:\Windows\WindowsUpdate.log
2014-06-23 20:10 - 2013-12-03 23:59 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-06-23 20:10 - 2012-10-19 21:53 - 00000000 ___RD () C:\Users\Jiri\SkyDrive
2014-06-23 20:10 - 2012-08-20 21:19 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Skype
2014-06-23 20:09 - 2013-06-25 20:01 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-06-23 20:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 20:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-06-23 20:04 - 2014-03-19 22:54 - 00000000 ____D () C:\Program Files\Conduit
2014-06-23 20:04 - 2014-02-14 22:41 - 00000000 ____D () C:\Users\Jiri\AppData\Local\genienext
2014-06-23 20:04 - 2012-08-21 11:13 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Conduit
2014-06-23 20:04 - 2012-08-21 11:13 - 00000000 ____D () C:\Program Files (x86)\Conduit
2014-06-23 19:57 - 2013-07-13 20:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-23 19:54 - 2014-06-22 21:54 - 00000921 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:17 - 2014-02-20 21:33 - 00002157 _____ () C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 11:04 - 2013-12-03 23:59 - 00000912 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-22 10:35 - 2009-07-14 07:08 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-21 23:06 - 2014-06-21 22:52 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 23:05 - 2014-06-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-21 23:04 - 2013-11-05 20:49 - 00000000 ____D () C:\Users\Jiri\Desktop\angličtina
2014-06-21 23:04 - 2013-11-05 20:45 - 00000000 ___RD () C:\Users\Jiri\Desktop\Programy
2014-06-21 23:04 - 2012-09-30 10:58 - 00000000 ____D () C:\Users\Jiri\AppData\Local\CrashDumps
2014-06-21 23:04 - 2012-08-20 18:05 - 00000000 ____D () C:\Windows\Panther
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 22:01 - 2013-12-03 23:59 - 00000000 ____D () C:\Program Files\PCDApp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-19 23:19 - 2013-12-03 23:59 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Seznam.cz
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-16 22:46 - 2013-10-23 23:01 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\vlc
2014-06-16 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-15 20:10 - 2014-06-15 20:09 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 20:09 - 2012-08-20 17:37 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Adobe
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 18:51 - 2013-08-17 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:48 - 2012-08-20 20:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 18:48 - 2012-08-20 19:26 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 18:46 - 2014-05-06 21:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 17:45 - 2013-03-14 19:25 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-12 17:44 - 2014-03-19 22:31 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2014-06-12 17:44 - 2012-08-21 07:16 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 17:33 - 2014-03-15 10:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 17:33 - 2012-08-20 21:11 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 17:33 - 2012-08-20 17:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 22:57 - 2014-06-11 18:05 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-06-11 17:58 - 2014-03-25 21:16 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-09 20:48 - 2012-08-20 20:49 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-06-08 11:13 - 2014-06-12 17:37 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 17:37 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 22:11 - 2014-03-02 21:40 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\avidemux
2014-06-07 21:10 - 2014-03-04 00:36 - 00000000 ___RD () C:\Users\Jiri\Desktop\video
2014-06-05 23:09 - 2012-09-19 19:44 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\YouTube Downloader
2014-06-05 19:38 - 2012-08-30 19:01 - 00000000 ____D () C:\Users\Jiri\AppData\Local\GARMIN_Corp
2014-06-03 19:54 - 2012-08-20 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-02 19:45 - 2014-05-22 21:44 - 00000000 ____D () C:\ProgramData\Corel
2014-06-01 19:26 - 2012-08-20 18:29 - 00000784 _____ () C:\Users\Jiri\Desktop\LR disk H.cmd
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL
2014-05-30 12:21 - 2014-06-12 17:38 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-12 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-12 17:38 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-12 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-12 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-12 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-12 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-12 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-12 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-12 17:38 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-12 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-12 17:38 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-12 17:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-12 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-12 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-12 17:38 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-12 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 17:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-12 17:38 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-12 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-12 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-12 17:38 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-12 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-12 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-12 17:38 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-12 17:38 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-12 17:38 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-12 17:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 17:38 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-12 17:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 17:38 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 17:38 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-12 17:38 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-12 17:38 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-12 17:38 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-12 17:38 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-12 17:38 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-27 16:08 - 2012-08-20 20:35 - 00000000 ____D () C:\ProgramData\TEMP
2014-05-24 20:22 - 2012-08-20 18:29 - 00000079 _____ () C:\Users\Jiri\Desktop\ping_dlouhy.cmd
2014-05-24 20:19 - 2012-08-20 18:29 - 00000044 _____ () C:\Users\Jiri\Desktop\ping_kratky.cmd

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-08 19:43




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:26.65 GB) NTFS
Drive d: (disk500GB) (Fixed) (Total:465.76 GB) (Free:219.92 GB) NTFS
Drive f: (data) (Fixed) (Total:1397.26 GB) (Free:792.76 GB) NTFS

Available physical RAM: 5761.04 MB
Total physical RAM: 8190.05 MB
Percentage of memory in use: 29%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: D4F83DD6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=112 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 8305B1E2)
Partition 1: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 1397 GB) (Disk ID: 0264FC25)
Partition 1: (Not Active) - (Size=-698723860480) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jiri\Desktop" je 9 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyDrive
"C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe" /background [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================


Dodatek:
Přílohy
Addition.7z
(9.28 KiB) Staženo 43 x
Naposledy upravil(a) vyosek dne 23 čer 2014 19:53, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#3 Příspěvek od yorg »

Děkuji za odpověď.
Jak vidím, tak tam toho ještě bylo dost ...

# AdwCleaner v3.213 - Report created 23/06/2014 at 21:54:13
# Updated 23/06/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Jiri - JIRI-PC
# Running from : C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\SNT
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\AlllCheaPPrrice
Folder Deleted : C:\ProgramData\websavvee
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files\Conduit
Folder Deleted : C:\Program Files\PCDApp
Folder Deleted : C:\Users\Administrator\AppData\Local\torch
Folder Deleted : C:\Users\Guest\AppData\Local\torch
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\torch
Folder Deleted : C:\Users\Jiri\AppData\Local\Conduit
Folder Deleted : C:\Users\Jiri\AppData\Local\genienext
Folder Deleted : C:\Users\Jiri\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Jiri\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Jiri\AppData\Local\torch
Folder Deleted : C:\Users\Jiri\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Jiri\AppData\Roaming\iPumper
Folder Deleted : C:\Users\sdileni\AppData\Local\torch
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
Folder Deleted : C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
Folder Deleted : C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
File Deleted : C:\END
File Deleted : C:\Users\Jiri\daemonprocess.txt
File Deleted : C:\Users\Jiri\AppData\Roaming\LiveSupport.exe_log.txt
File Deleted : C:\Users\Jiri\AppData\Roaming\regsvr32.exe_log.txt
File Deleted : C:\Windows\System32\Tasks\Escolade
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
File Deleted : C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
File Deleted : C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskPIP_FF__RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskSLib_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\LatestDLMgr_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\TaskScheduler_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKCU\Software\AppDataLow\{5F189DF5-2D05-472B-9091-84D9848AE48B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\S-5195167130
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_pinnacle-videospin_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BB74DE59-BC4C-4172-9AC4-73315F71CFFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{813A22E0-3E2B-4188-9BDA-ECA9878B8D48}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BCFF5F55-6F44-11D2-86F8-00104B265ED5}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\PIP
Key Deleted : HKCU\Software\Pokki
Key Deleted : HKCU\Software\RegisteredApplicationsEx
Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9}
Key Deleted : HKLM\Software\{77D46E27-0E41-4478-87A6-AABE6FBCF252}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C670DCAE-E392-AA32-6F42-143C7FC4BDFD}
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17126


-\\ Mozilla Firefox v30.0 (cs)

[ File : C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js ]

Line Deleted : user_pref("browser.search.selectedEngine", "Conduit Search");

-\\ Google Chrome v

[ File : C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [8729 octets] - [23/06/2014 21:53:11]
AdwCleaner[S0].txt - [8495 octets] - [23/06/2014 21:54:13]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8555 octets] ##########
Naposledy upravil(a) vyosek dne 24 čer 2014 05:40, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#4 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#5 Příspěvek od yorg »

Zde je požadovaný log.

Zoek.exe v5.0.0.0 Updated 22-06-2014
Tool run by Jiri on po 23.06.2014 at 22:13:46,09.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jiri\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

23.6.2014 22:14:40 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{62D40876-DF18-411F-9D34-A9DD7A197BC5} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{A6A49249-57AE-4295-8D4D-18A9502C7D8E} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{9a757e3e-b120-4cce-adb0-781b2a8eac03} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{C9C42510-9B41-42c1-9DCD-7282A2D07C61} deleted successfully
HKEY_USERS\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110511311164} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js:
user_pref("browser.startup.homepage", "chrome://fastdial/content/fastdial.html");

Added to C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\prefs.js:

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F} deleted
C:\Users\Jiri\AppData\LocalLow\{07739F97-FEFB-82EA-0061-1E6AB6BFFB8F} deleted
C:\Users\Jiri\AppData\LocalLow\{145D3096-67EA-B9FC-E79E-79FA947DCC14} deleted
C:\Users\Jiri\AppData\LocalLow\{966FBDF6-DE27-4F10-8CE1-7651EB976285} deleted
C:\Users\Jiri\AppData\LocalLow\{C80B0340-8095-56D5-60A8-27E3E596660C} deleted
C:\Users\Jiri\AppData\LocalLow\{CC225A68-1882-64CD-2112-A81B17DA0DE2} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{07739F97-FEFB-82EA-0061-1E6AB6BFFB8F} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{145D3096-67EA-B9FC-E79E-79FA947DCC14} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{966FBDF6-DE27-4F10-8CE1-7651EB976285} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{C80B0340-8095-56D5-60A8-27E3E596660C} deleted
C:\Users\Jiri\AppData\Local\Packages\windows_ie_ac_001\AC\{CC225A68-1882-64CD-2112-A81B17DA0DE2} deleted
C:\PROGRA~3\8f0ada70845d6e39 deleted
C:\Users\Jiri\.android deleted
C:\PROGRA~3\TubeItAdBlockFr deleted
C:\PROGRA~2\TubeItAdBlockFr deleted
C:\PROGRA~2\Mozilla Firefox\defaults\preferences\pref.js deleted
C:\PROGRA~3\InstallMate deleted
C:\PROGRA~3\GreatSoft deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\Jiri\AppData\Local\CRE deleted
C:\Users\Jiri\AppData\Local\cache deleted
C:\Users\Jiri\Searches deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
"C:\Users\Jiri\AppData\Roaming\DriveCalculator Preferences" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk\klcehoppgafgogecnclcbbbnocokbhkk.crx" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk\update.xml" deleted
"C:\PROGRA~3\klcehoppgafgogecnclcbbbnocokbhkk" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
- esk slovnk pro kontrolu pravopisu - %ProfilePath%\extensions\cs@dictionaries.addons.mozilla.org
- Fast Dial - %ProfilePath%\extensions\fastdial@telega.phpnet.us
- Garmin Communicator - %ProfilePath%\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
- IE Tab 2 FF 3.6 - %ProfilePath%\extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
- Flashblock - %ProfilePath%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
- Cookies Manager - %ProfilePath%\extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d}
- <--Block site--> - %ProfilePath%\extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc}
- Element Hiding Helper for Adblock Plus - %ProfilePath%\extensions\elemhidehelper@adblockplus.org.xpi
- FireGestures - %ProfilePath%\extensions\firegestures@xuldev.org.xpi
- HyperTranslate - %ProfilePath%\extensions\hypertranslate@mdc.com.xpi
- Czech CZ Language Pack - %ProfilePath%\extensions\langpack-cs@firefox.mozilla.org.xpi
- QuickDrag - %ProfilePath%\extensions\quickdrag@mozilla.ktechcomputing.com.xpi
- Rotate Image - %ProfilePath%\extensions\rotateimage@minisystems.de.xpi
- FxIF - %ProfilePath%\extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi
- Stylish - %ProfilePath%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi
- Adblock Plus - %ProfilePath%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
- Tab Mix Plus - %ProfilePath%\extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
9FD6A1990289B9290563CA069CB74EF9 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll - Shockwave Flash
78A14800AFD86B235DC48B260E8AEFDE - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll - OvisLinkCBCamV
99F97C9FE748C37528C338A423577FCB - C:\Users\Jiri\AppData\Roaming\Mozilla\plugins\np-mswmp.dll - Microsoft® Windows Media Player Firefox Plugin


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bhnjjbcnbmjmhgpliahlamecmbejpaol - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx[]

HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions
bhnjjbcnbmjmhgpliahlamecmbejpaol - C:\Users\Jiri\AppData\Local\CRE\bhnjjbcnbmjmhgpliahlamecmbejpaol.crx[]

YTBBoOkMarrK - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
YTBBoOkMarrK - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek
SNT - sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YTBBoOkMarrK - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef
SNT - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi
Best Save - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej
YoutubeAdblocker - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj
wweBsaavie - sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek

==== Chrome Fix ======================

C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\jfikikiemnifdppbigilchpicekihoaj deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\aojbkmefjmhhefefadehhnicacmpegef deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bpmepegjgagabbdocebdhdbgknofnioi deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\gecgipfabdickgidpmbicneamekgbaej deleted successfully
C:\Users\Administrator\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Administrator\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\Jiri\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully
C:\Users\sdileni\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\ocfpkehbmaabndjnlcapcnpjeeeibjek deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{3A7B27C9-F3CE-4D89-984D-25274E12BEDF} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jiri\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully
HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\Extensions\bhnjjbcnbmjmhgpliahlamecmbejpaol deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Data aplikací\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jiri\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Jiri\AppData\Local\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Cache emptied successfully
C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\fastdial\cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=569 folders=188 47894821 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Jiri\AppData\Local\Temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jiri\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on po 23.06.2014 at 22:26:12,22 ======================
Naposledy upravil(a) vyosek dne 24 čer 2014 05:39, celkem upraveno 1 x.
Důvod: log odstranen z quote
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#6 Příspěvek od vyosek »

:arrow: Nedavejte ty logy do Quote

:arrow: Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#7 Příspěvek od yorg »

Omlouvám se. Měl jsem za to, že to je přehlednější.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-06-2014
Ran by Jiri (administrator) on JIRI-PC on 24-06-2014 15:48:21
Running from C:\Users\Jiri\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(LSoft Technologies Inc) C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NirSoft) C:\Program Files\volumouse\volumouse.exe
(Create Software) C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe
(Microsoft Corporation) C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files\volumouse\volumouse32.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Software602) C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
( ) C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Print2PDF Print Monitor] => C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe [220992 2011-10-04] (Software602)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [$Volumouse$] => C:\Program Files\volumouse\volumouse.exe [88576 2012-01-08] (NirSoft)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Create Synchronicity - Scheduler] => C:\Program Files (x86)\Create Software\Create Synchronicity\Create Synchronicity.exe [245248 2012-03-11] (Create Software)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [GarminExpressTrayApp] => C:\Program Files (x86)\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [SkyDrive] => C:\Users\Jiri\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251048 2014-06-22] (Microsoft Corporation)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
ShortcutTarget: SpyderUtility.lnk -> C:\Program Files (x86)\Datacolor\Spyder4Pro\Utility\SpyderUtility.exe ( )
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShortcutTarget: Mozilla Firefox.lnk -> C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OUTLOOK – zástupce.lnk
ShortcutTarget: OUTLOOK – zástupce.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE (Microsoft Corporation)
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... rms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... earchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} http://security.symantec.com/sscv6/Shar ... vSniff.cab
DPF: HKLM-x32 {644E432F-49D3-41A1-8DD5-E099162EEEC5} http://security.symantec.com/sscv6/Shar ... /cabsa.cab
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 217.196.124.1 217.196.124.14

FireFox:
========
FF ProfilePath: C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979
FF Homepage: chrome://fastdial/content/fastdial.html
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_206.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3522.0110 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: OvisLink.com/CBCamV - C:\Windows\Downloaded Program Files\npOvisLinkCamV.dll (OvisLink)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Jiri\AppData\Roaming\mozilla\plugins\np-mswmp.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\cs@dictionaries.addons.mozilla.org [2014-06-20]
FF Extension: Fast Dial - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\fastdial@telega.phpnet.us [2014-06-20]
FF Extension: Garmin Communicator - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2014-06-20]
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]
FF Extension: Flashblock - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2014-06-20]
FF Extension: Cookies Manager+ - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{bb6bc1bb-f824-4702-90cd-35e2fb24f25d} [2014-06-20]
FF Extension: Block site - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dd3d7613-0246-469d-bc65-2a3cc1668adc} [2014-06-20]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\elemhidehelper@adblockplus.org.xpi [2014-06-20]
FF Extension: FireGestures - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\firegestures@xuldev.org.xpi [2014-06-20]
FF Extension: HyperTranslate - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\hypertranslate@mdc.com.xpi [2014-06-20]
FF Extension: Czech (CZ) Language Pack - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\langpack-cs@firefox.mozilla.org.xpi [2014-06-20]
FF Extension: QuickDrag - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\quickdrag@mozilla.ktechcomputing.com.xpi [2014-06-20]
FF Extension: Rotate Image - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\rotateimage@minisystems.de.xpi [2014-06-20]
FF Extension: FxIF - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{11483926-db67-4190-91b1-ef20fcec5f33}.xpi [2014-06-20]
FF Extension: Stylish - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8}.xpi [2014-06-20]
FF Extension: Adblock Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-20]
FF Extension: Tab Mix Plus - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2014-06-20]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [73728 2010-04-14] (Software602 a.s.) [File not signed]
R2 Active@ Disk Monitor; C:\Program Files (x86)\LSoft Technologies Inc\Active@ Hard Disk Monitor\DiskMonitorService.exe [1464328 2010-09-15] (LSoft Technologies Inc)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.02\AsSysCtrlService.exe [90112 2009-08-19] (ASUSTeK Computer Inc.) [File not signed]
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-10-22] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28216 2012-09-01] (Intel Corporation)
R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [104912 2007-11-07] (EZB Systems, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 Spyder4; C:\Windows\System32\DRIVERS\dccmtr.sys [15360 2011-06-02] (Datacolor)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-23 22:25 - 2014-06-23 22:25 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Data aplikacÝ
2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:54 - 2014-06-23 21:50 - 00001437 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-22 21:30 - 2014-06-24 15:48 - 00000000 ____D () C:\FRST
2014-06-22 21:29 - 2014-06-23 20:23 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:52 - 2014-06-21 23:06 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-15 20:09 - 2014-06-15 20:10 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 17:38 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 17:38 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 17:38 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 17:38 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 17:38 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 17:38 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 17:38 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 17:38 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 17:38 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 17:38 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 17:38 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 17:38 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 17:38 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 17:38 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 17:38 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 17:38 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 17:38 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 17:38 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 17:38 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 17:38 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 17:38 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 17:38 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 17:38 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 17:38 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 17:38 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 17:38 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 17:38 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 17:38 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 17:38 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 17:38 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 17:38 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 17:38 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 17:38 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-12 17:38 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-12 17:38 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 17:38 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 17:38 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 17:38 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 17:38 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 17:38 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 17:38 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 17:37 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 17:37 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 19:02 - 2014-06-21 23:05 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 22:57 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL

==================== One Month Modified Files and Folders =======

2014-06-24 15:48 - 2014-06-23 20:23 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-24 15:48 - 2014-06-22 21:30 - 00000000 ____D () C:\FRST
2014-06-24 15:48 - 2012-08-20 17:10 - 01609713 _____ () C:\Windows\WindowsUpdate.log
2014-06-24 15:45 - 2014-06-23 21:55 - 00000224 _____ () C:\Windows\setupact.log
2014-06-24 15:45 - 2013-06-25 20:01 - 00000000 _____ () C:\Windows\system32\Drivers\lvuvc.hs
2014-06-24 15:45 - 2012-10-19 21:53 - 00000000 ___RD () C:\Users\Jiri\SkyDrive
2014-06-24 15:45 - 2012-08-20 21:19 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Skype
2014-06-24 15:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-23 23:12 - 2012-08-20 17:14 - 00000000 ____D () C:\Users\Jiri
2014-06-23 22:33 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-23 22:33 - 2009-07-14 06:45 - 00013472 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-23 22:30 - 2009-07-14 17:18 - 00673174 _____ () C:\Windows\system32\perfh005.dat
2014-06-23 22:30 - 2009-07-14 17:18 - 00143268 _____ () C:\Windows\system32\perfc005.dat
2014-06-23 22:30 - 2009-07-14 07:13 - 01596572 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-23 22:26 - 2014-06-23 22:14 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:26 - 2014-06-23 21:55 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 22:25 - 2014-06-23 22:25 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Data aplikacÝ
2014-06-23 22:23 - 2014-06-23 22:13 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:13 - 2014-06-23 22:25 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:54 - 2014-06-23 21:53 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 21:50 - 2014-06-22 21:54 - 00001437 _____ () C:\Users\Jiri\Desktop\popis.TXT
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 20:23 - 2014-06-22 21:29 - 02082816 _____ (Farbar) C:\Users\Jiri\Desktop\FRST64.exe
2014-06-23 20:16 - 2013-08-30 16:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-23 20:13 - 2012-08-20 19:35 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\AIMP3
2014-06-23 20:09 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\Help
2014-06-23 19:57 - 2013-07-13 20:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-23 18:51 - 2014-06-23 18:51 - 00000000 ___HD () C:\OneDriveTemp
2014-06-22 21:17 - 2014-02-20 21:33 - 00002157 _____ () C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 12:14 - 2014-06-22 12:14 - 00000000 ____D () C:\Users\Jiri\Desktop\Benro C2580F
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-22 10:35 - 2009-07-14 07:08 - 00032558 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-21 23:06 - 2014-06-21 22:52 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-06-21 23:05 - 2014-06-11 19:02 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-21 23:04 - 2013-11-05 20:49 - 00000000 ____D () C:\Users\Jiri\Desktop\angličtina
2014-06-21 23:04 - 2013-11-05 20:45 - 00000000 ___RD () C:\Users\Jiri\Desktop\Programy
2014-06-21 23:04 - 2012-09-30 10:58 - 00000000 ____D () C:\Users\Jiri\AppData\Local\CrashDumps
2014-06-21 23:04 - 2012-08-20 18:05 - 00000000 ____D () C:\Windows\Panther
2014-06-21 22:53 - 2014-06-21 22:53 - 00000000 ____D () C:\Users\Jiri\AppData\Local\Anvisoft
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp
2014-06-19 23:19 - 2013-12-03 23:59 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Seznam.cz
2014-06-18 21:08 - 2014-06-18 21:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia
2014-06-16 22:46 - 2013-10-23 23:01 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\vlc
2014-06-16 20:14 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-15 20:10 - 2014-06-15 20:09 - 00000135 _____ () C:\Windows\SysWOW64\debug.log
2014-06-15 20:09 - 2012-08-20 17:37 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\Adobe
2014-06-15 08:46 - 2014-06-15 08:46 - 00108544 _____ () C:\Windows\SysWOW64\installd.exe
2014-06-15 08:45 - 2014-06-15 08:45 - 00246784 _____ () C:\Windows\SysWOW64\hfpapi.dll
2014-06-15 08:45 - 2014-06-15 08:45 - 00108544 _____ () C:\Windows\SysWOW64\hfnapi.dll
2014-06-12 18:51 - 2013-08-17 21:01 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 18:48 - 2012-08-20 20:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 18:48 - 2012-08-20 19:26 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 18:46 - 2014-05-06 21:00 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 17:44 - 2014-03-19 22:31 - 00003556 _____ () C:\Windows\System32\Tasks\GarminUpdaterTask
2014-06-12 17:44 - 2012-08-21 07:16 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-12 17:44 - 2012-08-20 19:42 - 00000000 ____D () C:\Program Files (x86)\Garmin
2014-06-12 17:33 - 2014-03-15 10:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-12 17:33 - 2012-08-20 21:11 - 00000000 ____D () C:\ProgramData\Skype
2014-06-12 17:33 - 2012-08-20 17:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-11 22:57 - 2014-06-11 18:05 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\FreeFileSync
2014-06-11 21:20 - 2014-06-11 21:20 - 00000244 _____ () C:\Users\Jiri\Desktop\ecce homo fotky.URL
2014-06-11 18:43 - 2014-06-11 18:43 - 00000000 ____D () C:\ProgramData\F-Secure
2014-06-11 18:05 - 2014-06-11 18:05 - 00000938 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000926 _____ () C:\Users\Public\Desktop\FreeFileSync.lnk
2014-06-11 18:05 - 2014-06-11 18:05 - 00000000 ____D () C:\Program Files\FreeFileSync
2014-06-11 17:58 - 2014-03-25 21:16 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-06-09 20:48 - 2012-08-20 20:49 - 00000000 ____D () C:\Program Files (x86)\rajce
2014-06-08 11:13 - 2014-06-12 17:37 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 17:37 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 22:11 - 2014-03-02 21:40 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\avidemux
2014-06-07 21:10 - 2014-03-04 00:36 - 00000000 ___RD () C:\Users\Jiri\Desktop\video
2014-06-05 23:09 - 2012-09-19 19:44 - 00000000 ____D () C:\Users\Jiri\AppData\Roaming\YouTube Downloader
2014-06-05 19:38 - 2012-08-30 19:01 - 00000000 ____D () C:\Users\Jiri\AppData\Local\GARMIN_Corp
2014-06-03 19:54 - 2012-08-20 20:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
2014-06-02 19:45 - 2014-05-22 21:44 - 00000000 ____D () C:\ProgramData\Corel
2014-06-01 19:26 - 2012-08-20 18:29 - 00000784 _____ () C:\Users\Jiri\Desktop\LR disk H.cmd
2014-05-31 13:10 - 2014-05-31 13:10 - 00000221 _____ () C:\Users\Jiri\Desktop\4 - OSEL.CZ - popularizační videa ČAV.URL
2014-05-30 12:21 - 2014-06-12 17:38 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-30 12:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-30 12:02 - 2014-06-12 17:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-30 11:45 - 2014-06-12 17:38 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-30 11:39 - 2014-06-12 17:38 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-30 11:38 - 2014-06-12 17:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-30 11:28 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-30 11:27 - 2014-06-12 17:38 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-30 11:24 - 2014-06-12 17:38 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-30 11:21 - 2014-06-12 17:38 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-30 11:21 - 2014-06-12 17:38 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-30 11:20 - 2014-06-12 17:38 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-30 11:18 - 2014-06-12 17:38 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-30 11:11 - 2014-06-12 17:38 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-30 11:08 - 2014-06-12 17:38 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-30 11:06 - 2014-06-12 17:38 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-30 11:02 - 2014-06-12 17:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-30 10:55 - 2014-06-12 17:38 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-30 10:49 - 2014-06-12 17:38 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-30 10:46 - 2014-06-12 17:38 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-30 10:44 - 2014-06-12 17:38 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-30 10:43 - 2014-06-12 17:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-30 10:42 - 2014-06-12 17:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-30 10:38 - 2014-06-12 17:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-30 10:35 - 2014-06-12 17:38 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-30 10:34 - 2014-06-12 17:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-30 10:33 - 2014-06-12 17:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-30 10:30 - 2014-06-12 17:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-30 10:29 - 2014-06-12 17:38 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-30 10:28 - 2014-06-12 17:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-30 10:27 - 2014-06-12 17:38 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-30 10:24 - 2014-06-12 17:38 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-05-30 10:23 - 2014-06-12 17:38 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-30 10:16 - 2014-06-12 17:38 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-30 10:10 - 2014-06-12 17:38 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-30 10:06 - 2014-06-12 17:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-30 10:04 - 2014-06-12 17:38 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-30 10:02 - 2014-06-12 17:38 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-30 09:56 - 2014-06-12 17:38 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-30 09:54 - 2014-06-12 17:38 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-30 09:50 - 2014-06-12 17:38 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-05-30 09:49 - 2014-06-12 17:38 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-30 09:43 - 2014-06-12 17:38 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-30 09:40 - 2014-06-12 17:38 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-30 09:30 - 2014-06-12 17:38 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-30 09:21 - 2014-06-12 17:38 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-30 09:15 - 2014-06-12 17:38 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-30 09:13 - 2014-06-12 17:38 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-27 16:08 - 2012-08-20 20:35 - 00000000 ____D () C:\ProgramData\TEMP

Some content of TEMP:
====================
C:\Users\Jiri\AppData\Local\Temp\NEventMessages.dll
C:\Users\Jiri\AppData\Local\Temp\NOSEventMessages.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-08 19:43

==================== End Of Log ============================
Přílohy
Addition.7z
(9.11 KiB) Staženo 56 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#8 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... EFC0EA9&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp

Task: {4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {A7974057-5413-4775-B7C5-D28D668A1075} - \Escolade No Task File <==== ATTENTION
Task: {B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

Hosts:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#9 Příspěvek od yorg »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 22-06-2014
Ran by Jiri at 2014-06-24 17:34:58 Run:1
Running from C:\Users\Jiri\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Run: [] => [X]
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\...\Policies\Explorer: []
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk
Startup: C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - URL http://www.trovigo.com/Results.aspx?gd= ... EFC0EA9&q={searchTerms}&SSPV=
SearchScopes: HKCU - SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... hx?prefix={searchTerms}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} [2014-06-20]

CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 efavdrv; \??\C:\Windows\system32\drivers\efavdrv.sys [X]
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]

2014-06-23 22:25 - 2014-06-23 22:13 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-06-23 22:14 - 2014-06-23 22:26 - 00034875 _____ () C:\zoek-results.log
2014-06-23 22:13 - 2014-06-23 22:23 - 00000000 ____D () C:\zoek_backup
2014-06-23 22:12 - 2014-05-21 08:36 - 01285120 _____ () C:\Users\Jiri\Desktop\zoek.exe
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.scr
2014-06-23 22:12 - 2014-05-21 08:31 - 01414867 _____ () C:\Users\Jiri\Desktop\zoek.com
2014-06-23 21:55 - 2014-06-24 15:45 - 00000224 _____ () C:\Windows\setupact.log
2014-06-23 21:55 - 2014-06-23 22:26 - 00000888 _____ () C:\Windows\PFRO.log
2014-06-23 21:55 - 2014-06-23 21:55 - 00000000 _____ () C:\Windows\setuperr.log
2014-06-23 21:53 - 2014-06-23 21:54 - 00000000 ____D () C:\AdwCleaner
2014-06-23 21:53 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-06-23 21:52 - 2014-06-23 21:52 - 01342659 _____ () C:\Users\Jiri\Desktop\adwcleaner_3.213.exe
2014-06-23 20:35 - 2014-06-23 20:35 - 00009504 _____ () C:\Users\Jiri\Desktop\Addition.7z
2014-06-23 20:23 - 2014-06-24 15:48 - 00017572 _____ () C:\Users\Jiri\Desktop\FRST.txt
2014-06-23 20:23 - 2014-06-23 20:23 - 00000000 ____D () C:\Users\Jiri\Desktop\FRST-OlderVersion
2014-06-23 18:56 - 2014-06-23 18:56 - 00000687 _____ () C:\awh1110.tmp
2014-06-22 20:28 - 2014-06-22 20:28 - 00000687 _____ () C:\awhE4D2.tmp
2014-06-22 10:40 - 2014-06-22 10:40 - 00000687 _____ () C:\awh1C46.tmp
2014-06-21 22:25 - 2014-06-21 22:25 - 00000687 _____ () C:\awhE252.tmp
2014-06-21 21:20 - 2014-06-21 21:20 - 00000687 _____ () C:\awhE4F1.tmp
2014-06-21 09:56 - 2014-06-21 09:56 - 00000687 _____ () C:\awhE742.tmp
2014-06-20 17:23 - 2014-06-20 17:23 - 00000687 _____ () C:\awhE9A2.tmp

Task: {4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16} - \globalUpdateUpdateTaskMachineCore No Task File <==== ATTENTION
Task: {A7974057-5413-4775-B7C5-D28D668A1075} - \Escolade No Task File <==== ATTENTION
Task: {B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E} - \globalUpdateUpdateTaskMachineUA No Task File <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

AlternateDataStreams: C:\ProgramData\TEMP:12B8C802
AlternateDataStreams: C:\ProgramData\TEMP:39413AC3
AlternateDataStreams: C:\ProgramData\TEMP:3F30E778
AlternateDataStreams: C:\ProgramData\TEMP:493B3641
AlternateDataStreams: C:\ProgramData\TEMP:69E87FA2
AlternateDataStreams: C:\ProgramData\TEMP:838D4792
AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
AlternateDataStreams: C:\ProgramData\TEMP:DEDD192D

Hosts:
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-568965196-4160365152-1778891523-1001\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SpyderUtility.lnk => Moved successfully.
C:\Users\Jiri\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Mozilla Firefox.lnk => Moved successfully.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1'=> Key not found.
'HKLM\Software\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}'=> Key not found.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2'=> Key not found.
'HKLM\Software\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}'=> Key not found.
'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3'=> Key not found.
'HKLM\Software\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3'=> Key not found.
'HKLM\Software\Wow6432Node\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}'=> Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\URL http://www.trovigo.com/Results.aspx?gd= ... => Value not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\SuggestionsURL_JSON http://suggest.search.conduit.com/CSugg ... => Value not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}' => Key deleted successfully.
'HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}'=> Key not found.
C:\Users\Jiri\AppData\Roaming\Mozilla\Firefox\Profiles\fycg6gli.default-1403282050979\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB} => Moved successfully.
'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.
catchme => Service deleted successfully.
efavdrv => Service deleted successfully.
MBAMSwissArmy => Service deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Jiri\Desktop\zoek.exe => Moved successfully.
C:\Users\Jiri\Desktop\zoek.scr => Moved successfully.
C:\Users\Jiri\Desktop\zoek.com => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Jiri\Desktop\adwcleaner_3.213.exe => Moved successfully.
"C:\Users\Jiri\Desktop\Addition.7z" => File/Directory not found.
"C:\Users\Jiri\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Jiri\Desktop\FRST-OlderVersion => Moved successfully.
C:\awh1110.tmp => Moved successfully.
C:\awhE4D2.tmp => Moved successfully.
C:\awh1C46.tmp => Moved successfully.
C:\awhE252.tmp => Moved successfully.
C:\awhE4F1.tmp => Moved successfully.
C:\awhE742.tmp => Moved successfully.
C:\awhE9A2.tmp => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4C8F4FCF-2C5F-459C-8B43-11FE9E6CAC16}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineCore' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A7974057-5413-4775-B7C5-D28D668A1075}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A7974057-5413-4775-B7C5-D28D668A1075}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Escolade' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B6C9E973-DD2A-4EC4-9DF2-C4A6AD8B395E}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\globalUpdateUpdateTaskMachineUA' => Key deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\ProgramData\TEMP => ":12B8C802" ADS removed successfully.
C:\ProgramData\TEMP => ":39413AC3" ADS removed successfully.
C:\ProgramData\TEMP => ":3F30E778" ADS removed successfully.
C:\ProgramData\TEMP => ":493B3641" ADS removed successfully.
C:\ProgramData\TEMP => ":69E87FA2" ADS removed successfully.
C:\ProgramData\TEMP => ":838D4792" ADS removed successfully.
C:\ProgramData\TEMP => ":A1EDB939" ADS removed successfully.
C:\ProgramData\TEMP => ":DEDD192D" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.


The system needed a reboot.

==== End of Fixlog ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#10 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
yorg
Návštěvník
Návštěvník
Příspěvky: 19
Registrován: 12 čer 2007 06:33

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#11 Příspěvek od yorg »

vyosek píše: :arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
A z mé strany patří velké poděkování. :thumbsup:
Netušil jsem, že tam toho tolik může být. A to se snažím chovat zodpovědně a nelezu, kde je na první pohled zřejmé, že tam je nebezpečno.
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: Prosím o kontrolu logu (ads by onlinebrowseradvertising)

#12 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“