
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:2-08-2014
Ran by Honza at 2014-08-03 16:27:50 Run:1
Running from C:\Documents and Settings\Honza\Plocha
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKU\S-1-5-21-746137067-1326574676-1417001333-1004\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21445248 2014-05-08] (Skype Technologies S.A.)
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
CHR Extension: (avast! Online Security) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-08-03]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
14-08-03 12:05 - 2014-08-03 12:05 - 00029696 _____ () C:\Documents and Settings\Honza\Local Settings\Data aplikací\MSGBOX.EXE
2014-08-03 12:05 - 2014-08-03 12:05 - 00015327 _____ () C:\Documents and Settings\Honza\Plocha\LM.bat
2014-08-03 12:05 - 2014-08-03 12:05 - 00012197 _____ () C:\Documents and Settings\Honza\Plocha\FRST.txt
2014-08-03 12:04 - 2014-08-03 12:04 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Honza\Plocha\FRSTLauncher.exe
2014-08-03 11:41 - 2014-08-03 11:48 - 00000740 _____ () C:\runcheck.txt
2014-08-03 11:41 - 2014-08-03 11:42 - 00001247 _____ () C:\zoek-results.log
2014-08-03 11:37 - 2014-08-03 11:37 - 00000000 ____D () C:\zoek_backup
2014-08-03 11:20 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\system32\sqlite3.dll
2014-08-03 11:19 - 2014-08-03 11:29 - 00000000 ____D () C:\AdwCleaner
2014-08-03 11:01 - 2014-08-03 11:01 - 00000000 ____D () C:\rsit
2014-08-03 11:01 - 2014-08-03 11:01 - 00000000 ____D () C:\Program Files\trend micro
2014-08-03 10:41 - 2014-08-03 10:41 - 00127488 _____ () C:\Documents and Settings\Honza\Dokumenty\cc_20140803_104101.reg
C:\Documents and Settings\Honza\Local Settings\Temp\7za.exe
C:\Documents and Settings\Honza\Local Settings\Temp\hijackthis.exe
C:\Documents and Settings\Honza\Local Settings\Temp\NirCmd.exe
C:\Documents and Settings\Honza\Local Settings\Temp\PEVZ.EXE
C:\Documents and Settings\Honza\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\Honza\Local Settings\Temp\remove.exe
C:\Documents and Settings\Honza\Local Settings\Temp\sed.exe
C:\Documents and Settings\Honza\Local Settings\Temp\shortcut.exe
C:\Documents and Settings\Honza\Local Settings\Temp\swreg.exe
C:\Documents and Settings\Honza\Local Settings\Temp\swxcacls.exe
C:\Documents and Settings\Honza\Local Settings\Temp\wget.exe
C:\Documents and Settings\Honza\Local Settings\Temp\zoek-delete.exe
C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job
C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job
C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job
Hosts:
Reboot:
End
*****************
HKU\S-1-5-21-746137067-1326574676-1417001333-1004\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
"HKCR\PROTOCOLS\Handler\linkscanner" => Key deleted successfully.
"HKCR\CLSID\{F274614C-63F8-47D5-A4D1-FBDDE494F8D1}" => Key not found.
HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value deleted successfully.
C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki => Moved successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
14-08-03 12:05 - 2014-08-03 12:05 - 00029696 _____ () C:\Documents and Settings\Honza\Local Settings\Data aplikací\MSGBOX.EXE => Error: No automatic fix found for this entry.
"C:\Documents and Settings\Honza\Plocha\LM.bat" => File/Directory not found.
C:\Documents and Settings\Honza\Plocha\FRST.txt => Moved successfully.
C:\Documents and Settings\Honza\Plocha\FRSTLauncher.exe => Moved successfully.
C:\runcheck.txt => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\WINDOWS\system32\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Documents and Settings\Honza\Dokumenty\cc_20140803_104101.reg => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\7za.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\hijackthis.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\NirCmd.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\PEVZ.EXE => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\Quarantine.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\remove.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\sed.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\shortcut.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\swreg.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\swxcacls.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\wget.exe => Moved successfully.
C:\Documents and Settings\Honza\Local Settings\Temp\zoek-delete.exe => Moved successfully.
C:\WINDOWS\tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\tasks\avast! Emergency Update.job => Moved successfully.
C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_HP_rmv.job => Moved successfully.
C:\WINDOWS\tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job => Moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\tasks\Měsíční oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\WINDOWS\tasks\Přihlášení k oznamování konce poskytování služeb pro Microsoft Windows XP.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
The system needed a reboot.
==== End of Fixlog ====