Prosím o preventivní kontrolu

[marv96]

Dobrý den, prosím o preventivní kontrolu, děkuji.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-11-2014
Ran by Vaio (administrator) on VGN-A297XP on 02-11-2014 17:06:54
Running from C:\Documents and Settings\Vaio\Plocha
Loaded Profile: Vaio (Available profiles: Vaio)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 6
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() C:\WINDOWS\system32\ati2evxx.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
() C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Wacom Technology, Corp.) C:\WINDOWS\system32\Tablet.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
(Sony Corporation) C:\Program Files\Sony\HotKey Utility\HKServ.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\soundman.exe
() C:\WINDOWS\ATK0100\Hcontrol.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Wacom Technology, Corp.) C:\WINDOWS\system32\WTablet\TabUserW.exe
() C:\WINDOWS\ATK0100\ATKOSD.exe
(Sony Corporation) C:\Program Files\Sony\HotKey Utility\HKWnd.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(forum.viry.cz) C:\Documents and Settings\Vaio\Plocha\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [BluetoothAuthenticationAgent] => rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
HKLM\...\Run: [IntelZeroConfig] => C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [1372160 2009-11-03] (Intel(R) Corporation)
HKLM\...\Run: [IntelWireless] => C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1202448 2009-11-03] (Intel(R) Corporation)
HKLM\...\Run: [HKSERV.EXE] => C:\Program Files\Sony\HotKey Utility\HKserv.exe [122880 2004-06-29] (Sony Corporation)
HKLM\...\Run: [SoundMan] => C:\WINDOWS\SOUNDMAN.EXE [577536 2007-04-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Hcontrol] => C:\WINDOWS\ATK0100\Hcontrol.exe [61440 2003-09-19] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-11-02] (AVAST Software)
HKLM\...\Winlogon: [UIHost] C:\WINDOWS\system32\logonui.exe [515072 2008-04-14] (Microsoft Corporation)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll ()
Winlogon\Notify\VESWinlogon: C:\WINDOWS\system32\VESWinlogon.dll (Sony Corporation)
HKLM\...\Policies\Explorer: [NoSharedDocuments] 1
HKU\S-1-5-21-343818398-436374069-1202660629-1003\...\Policies\Explorer: [NoSharedDocuments] 1
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\TabUserW.exe.lnk
ShortcutTarget: TabUserW.exe.lnk -> C:\WINDOWS\system32\WTablet\TabUserW.exe (Wacom Technology, Corp.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
BootExecute: autocheck autochk * sdnclean.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... R}&ar=home
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: ""
SearchScopes: HKLM - DefaultScope value is missing.
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Vaio\Data aplikací\Mozilla\Firefox\Profiles\41q8pgns.default
FF Homepage: hxxp://www.yr.no/place/Czech_Republic/Prague/P ... _hour.html
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Ghostery - C:\Documents and Settings\Vaio\Data aplikací\Mozilla\Firefox\Profiles\41q8pgns.default\Extensions\firefox@ghostery.com.xpi [2014-09-01]
FF Extension: NoScript - C:\Documents and Settings\Vaio\Data aplikací\Mozilla\Firefox\Profiles\41q8pgns.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2014-11-01]
FF Extension: Adblock Plus - C:\Documents and Settings\Vaio\Data aplikací\Mozilla\Firefox\Profiles\41q8pgns.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-17]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-10-13]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-02]
FF Extension: No Name - wrc@avast.com [Not Found]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-02]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [385024 2004-08-26] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-02] (AVAST Software)
R2 S24EventMonitor; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [909312 2009-11-03] (Intel(R) Corporation) [File not signed]
R2 TabletService; C:\WINDOWS\system32\Tablet.exe [753664 2005-12-05] (Wacom Technology, Corp.) [File not signed]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 ALCXWDM; C:\WINDOWS\System32\drivers\ALCXWDM.SYS [4122368 2008-09-24] (Realtek Semiconductor Corp.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-11-02] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [70384 2014-11-02] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55240 2014-11-02] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-11-02] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [787800 2014-11-02] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [422760 2014-11-02] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57928 2014-11-02] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [206248 2014-11-02] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 CEDTV; C:\WINDOWS\System32\Drivers\DTVM5P2.sys [19072 2005-08-15] (Computer & Entertainment, Inc.) [File not signed]
S3 CEDTVLDR; C:\WINDOWS\System32\Drivers\CEDTVLDR.sys [16640 2005-02-15] (Computer & Entertainment, Inc.) [File not signed]
R3 E1000; C:\WINDOWS\System32\DRIVERS\e1000325.sys [125952 2003-08-14] (Intel Corporation)
R3 HSFHWICH; C:\WINDOWS\System32\DRIVERS\HSFHWICH.sys [197120 2003-10-14] (Conexant Systems, Inc.)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ATKACPI.sys [5760 2007-08-28] ()
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R0 PenClass; C:\WINDOWS\System32\Drivers\PenClass.sys [8138 2005-11-29] (Wacom Technology Corporation) [File not signed]
R2 s24trans; C:\WINDOWS\System32\DRIVERS\s24trans.sys [11904 2008-08-13] (Intel Corporation)
R3 SPI; C:\WINDOWS\System32\DRIVERS\SonyPI.sys [37040 2001-08-17] (Sony Corporation)
R2 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [13120 2013-08-25] ()
R3 tifmsony; C:\WINDOWS\System32\drivers\tifmsony.sys [65024 2004-05-21] (Texas Instruments)
R3 w29n51; C:\WINDOWS\System32\DRIVERS\w29n51.sys [2216064 2009-11-11] (Intel® Corporation)
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-02 17:06 - 2014-11-02 17:07 - 00010756 _____ () C:\Documents and Settings\Vaio\Plocha\FRST.txt
2014-11-02 16:46 - 2014-11-02 17:06 - 00000000 ____D () C:\FRST
2014-11-02 16:43 - 2014-11-02 16:43 - 01106432 _____ (Farbar) C:\Documents and Settings\Vaio\Plocha\FRST.exe
2014-11-02 16:43 - 2014-11-02 16:43 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Vaio\Plocha\FRSTLauncher.exe
2014-11-02 16:00 - 2014-11-02 16:09 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-02 16:00 - 2014-11-02 16:09 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2014-11-02 16:00 - 2014-11-02 16:00 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-11-02 16:00 - 2014-10-01 11:11 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2014-11-02 16:00 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-11-02 15:33 - 2014-11-02 15:33 - 00000000 ____D () C:\Documents and Settings\Vaio\Local Settings\Data aplikací\Temp
2014-11-02 15:05 - 2014-11-02 15:05 - 00000000 ____D () C:\WINDOWS\jumpshot.com
2014-11-02 15:05 - 2014-11-02 15:05 - 00000000 ____D () C:\Documents and Settings\Vaio\Data aplikací\AVAST Software
2014-11-02 15:04 - 2014-11-02 17:03 - 00000312 ____H () C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-11-02 15:04 - 2014-11-02 15:04 - 00787800 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswsnx.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00422760 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00291352 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-11-02 15:04 - 2014-11-02 15:04 - 00206248 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00070384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswmonflt.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00057928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00055240 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00049944 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-11-02 15:04 - 2014-11-02 15:04 - 00024184 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2014-11-02 15:04 - 2014-11-02 15:04 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\AVAST Software
2014-11-02 14:57 - 2014-11-02 14:57 - 00000000 ____D () C:\Program Files\AVAST Software
2014-11-02 14:54 - 2014-11-02 14:57 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-11-02 13:08 - 2014-11-02 13:18 - 87896011 _____ () C:\Documents and Settings\Vaio\Plocha\Jiří Schelinger live Nitra 1978 - 79.mp4
2014-11-02 12:13 - 2014-11-02 12:13 - 04184008 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\Vaio\Plocha\tdsskiller.exe
2014-11-02 12:09 - 2014-11-02 12:11 - 19828376 _____ (Malwarebytes Corporation ) C:\Documents and Settings\Vaio\Plocha\mbam-setup-2.0.3.1025.exe
2014-11-02 12:02 - 2014-11-02 12:02 - 00000079 _____ () C:\WINDOWS\wininit.ini
2014-11-02 11:55 - 2014-11-02 11:55 - 04862664 _____ (AVAST Software) C:\Documents and Settings\Vaio\Plocha\avast_free_antivirus_setup_online.exe
2014-11-02 11:38 - 2014-11-02 11:38 - 00000000 ____D () C:\WINDOWS\system32\appmgmt
2014-11-02 11:23 - 2014-11-02 14:53 - 00000216 _____ () C:\WINDOWS\wiadebug.log
2014-11-02 11:23 - 2014-11-02 14:53 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-11-02 11:23 - 2014-11-02 11:23 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-11-02 02:27 - 2014-11-02 11:11 - 00000000 ___RD () C:\Documents and Settings\Vaio\Plocha\Ovladače Vaio VGN-A297XP
2014-10-31 00:26 - 2014-10-31 00:26 - 00000000 ____D () C:\Documents and Settings\Vaio\Data aplikací\Canneverbe Limited
2014-10-31 00:19 - 2014-10-31 00:19 - 00000000 ____D () C:\Documents and Settings\Vaio\Local Settings\Data aplikací\Apple
2014-10-31 00:00 - 2014-10-31 00:00 - 00023392 _____ () C:\WINDOWS\system32\nscompat.tlb
2014-10-31 00:00 - 2014-10-31 00:00 - 00016832 _____ () C:\WINDOWS\system32\amcompat.tlb
2014-10-29 14:40 - 2003-02-06 19:01 - 06912056 _____ () C:\WINDOWS\VAIO GrandBlue Wallpaper TrueColor 1920x1200.bmp
2014-10-26 22:37 - 2014-10-26 22:37 - 00000000 ____D () C:\Documents and Settings\Vaio\Data aplikací\Miranda
2014-10-26 22:36 - 2014-10-26 22:36 - 00000707 _____ () C:\Documents and Settings\Vaio\Plocha\Miranda IM.lnk
2014-10-26 22:36 - 2014-10-26 22:36 - 00000000 ____D () C:\Program Files\Miranda IM
2014-10-26 22:36 - 2014-10-26 22:36 - 00000000 ____D () C:\Documents and Settings\Vaio\Nabídka Start\Programy\Miranda IM
2014-10-14 10:15 - 2014-10-14 10:15 - 00000000 ____D () C:\Documents and Settings\Vaio\Data aplikací\LibreOffice

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-02 17:07 - 2013-10-13 00:34 - 00000000 ____D () C:\Documents and Settings\Vaio\Local Settings\Temp
2014-11-02 17:06 - 2013-10-13 00:34 - 00000000 ___HD () C:\Documents and Settings\Vaio\Local Settings\Data aplikací
2014-11-02 17:06 - 2013-10-13 00:34 - 00000000 ____D () C:\Documents and Settings\Vaio\Plocha
2014-11-02 17:04 - 2013-10-13 00:28 - 01901801 _____ () C:\WINDOWS\WindowsUpdate.log
2014-11-02 17:03 - 2014-01-11 13:23 - 00012922 _____ () C:\WINDOWS\system32\tablet.dat
2014-11-02 17:03 - 2013-10-13 00:33 - 00032488 _____ () C:\WINDOWS\SchedLgU.Txt
2014-11-02 17:03 - 2013-10-13 00:33 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-11-02 17:03 - 2001-10-25 13:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-11-02 17:02 - 2013-10-13 00:34 - 00000178 ___SH () C:\Documents and Settings\Vaio\ntuser.ini
2014-11-02 16:45 - 2013-10-13 02:16 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-11-02 16:12 - 2014-01-28 19:09 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-11-02 16:00 - 2013-10-13 02:16 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-11-02 16:00 - 2013-10-13 02:16 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-11-02 15:28 - 2013-10-13 01:31 - 00701104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-11-02 15:28 - 2013-10-13 01:31 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-11-02 15:24 - 2014-04-08 09:16 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-02 15:20 - 2014-06-04 15:16 - 00000000 ____D () C:\Program Files\Safari
2014-11-02 15:19 - 2014-06-04 15:16 - 00001854 _____ () C:\Documents and Settings\All Users\Plocha\Safari.lnk
2014-11-02 15:19 - 2014-06-04 15:16 - 00001854 _____ () C:\Documents and Settings\All Users\Nabídka Start\Programy\Safari.lnk
2014-11-02 15:05 - 2013-10-13 00:34 - 00000000 __RHD () C:\Documents and Settings\Vaio\Data aplikací
2014-11-02 13:29 - 2013-10-13 00:34 - 00000000 ___RD () C:\Documents and Settings\Vaio\Dokumenty
2014-11-02 10:42 - 2013-10-13 00:34 - 00000000 ____D () C:\Documents and Settings\Vaio
2014-11-02 02:23 - 2014-09-23 10:49 - 00009216 _____ () C:\Documents and Settings\Vaio\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-02 02:23 - 2014-02-15 11:55 - 00000000 ____D () C:\Program Files\The KMPlayer
2014-11-01 17:31 - 2014-09-25 09:59 - 00000000 ____D () C:\Documents and Settings\Vaio\Plocha\INSTAL
2014-11-01 14:10 - 2014-01-08 12:21 - 00001784 ____H () C:\Documents and Settings\Vaio\Dokumenty\Default.rdp
2014-11-01 13:07 - 2014-09-05 17:58 - 00000000 ____D () C:\Documents and Settings\Vaio\Local Settings\Data aplikací\Paint.NET
2014-10-31 15:22 - 2013-10-13 02:14 - 00000000 __SHD () C:\WINDOWS\CSC
2014-10-31 09:55 - 2013-10-13 02:10 - 00000000 ____D () C:\WINDOWS\Help
2014-10-31 09:55 - 2013-10-13 00:34 - 00000000 ___RD () C:\Documents and Settings\Vaio\Oblíbené položky
2014-10-31 09:55 - 2013-10-13 00:34 - 00000000 ___RD () C:\Documents and Settings\Vaio\Nabídka Start\Programy
2014-10-31 09:55 - 2013-10-13 00:34 - 00000000 ___RD () C:\Documents and Settings\Vaio\Dokumenty\Obrázky
2014-10-31 09:55 - 2013-10-13 00:34 - 00000000 ___RD () C:\Documents and Settings\Vaio\Dokumenty\Hudba
2014-10-31 00:19 - 2014-06-04 15:16 - 00002265 _____ () C:\Documents and Settings\All Users\Nabídka Start\Programy\Apple Software Update.lnk
2014-10-31 00:05 - 2013-10-13 01:21 - 00000000 ____D () C:\Program Files\Google
2014-10-31 00:03 - 2013-10-13 11:58 - 00000000 ____D () C:\WINDOWS\ie8updates
2014-10-31 00:02 - 2013-10-13 00:49 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-10-31 00:00 - 2013-10-13 00:34 - 00000798 _____ () C:\Documents and Settings\Vaio\Nabídka Start\Programy\Windows Media Player.lnk
2014-10-31 00:00 - 2001-10-25 13:00 - 00000507 _____ () C:\WINDOWS\win.ini
2014-10-30 09:13 - 2014-01-11 13:05 - 00000000 ____D () C:\Documents and Settings\Vaio\Data aplikací\TeamViewer
2014-10-27 10:01 - 2014-06-04 15:23 - 00026108 ____H () C:\WINDOWS\system32\mlfcache.dat
2014-10-27 07:56 - 2014-09-05 17:58 - 00024664 _____ () C:\Documents and Settings\Vaio\Local Settings\Data aplikací\GDIPFONTCACHEV1.DAT
2014-10-27 07:51 - 2013-10-13 02:17 - 01205600 _____ () C:\WINDOWS\system32\PerfStringBackup.INI

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (SYSTEM) (Fixed) (Total:24.53 GB) (Free:16.24 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive d: (VAIO) (Fixed) (Total:50 GB) (Free:46.77 GB) NTFS

Available physical RAM: 655.78 MB
Total physical RAM: 1022.8 MB
Percentage of memory in use: 35%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 74.5 GB) (Disk ID: 78A478A4)
Partition 1: (Active) - (Size=24.5 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=50 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\Vaio\Plocha" je 375 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\WINDOWS\\system32\\sessmgr.exe"="C:\\WINDOWS\\system32\\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP"="5985:TCP:*:Disabled:Vzdlen sprva systmu Windows "
"80:TCP"="80:TCP:*:Disabled:Vzdlen sprva systmu Windows - reim kompatibility (HTTP-In) "
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001


==================== End Of Log ==============================

[Roli]

Zdravím, nic špatného tam nevidím.

[marv96]

Děkuji
Mezitím jsem vygeneroval ještě log pomocí RSIT, tak ho přidávám, jakej je v těchto skenerech rozdíl netuším. Nejde mi korektně nainstalovat a spustit MBAM.

Logfile of random's system information tool 1.10 (written by random/random)
Run by Vaio at 2014-11-02 18:28:58
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 17 GB (66%) free of 25 GB
Total RAM: 1023 MB (32% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:29:04, on 2.11.2014
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\WiFi\bin\EvtEng.exe
C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
C:\WINDOWS\system32\Tablet.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe
C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\WTablet\TabUserW.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Vaio\Plocha\RSIT.exe
C:\Program Files\trend micro\Vaio.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe" /tf Intel Wireless Tray
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: TabUserW.exe.lnk = C:\WINDOWS\system32\WTablet\TabUserW.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless WiFi Service (S24EventMonitor) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\S24EvMon.exe
O23 - Service: TabletService - Wacom Technology, Corp. - C:\WINDOWS\system32\Tablet.exe

--
End of file - 4742 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\Vaio\Data aplikací\Mozilla\Firefox\Profiles\41q8pgns.default

prefs.js - "browser.startup.homepage" - "http://www.yr.no/place/Czech_Republic/P ... _hour.html"

"{20a82645-c095-46ed-80e3-08825760534b}"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.189 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\WINDOWS\system32\Adobe\Director\np32dsw.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"=bthprops.cpl,,BluetoothAuthenticationAgent []
"IntelZeroConfig"=C:\Program Files\Intel\WiFi\bin\ZCfgSvc.exe [2009-11-03 1372160]
"IntelWireless"=C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [2009-11-03 1202448]
"HKSERV.EXE"=C:\Program Files\Sony\HotKey Utility\HKserv.exe [2004-06-29 122880]
"SoundMan"=C:\WINDOWS\SOUNDMAN.EXE [2007-04-16 577536]
"Hcontrol"=C:\WINDOWS\ATK0100\Hcontrol.exe [2003-09-19 61440]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-02 5223016]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]

C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
TabUserW.exe.lnk - C:\WINDOWS\system32\WTablet\TabUserW.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2004-08-26 86016]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\VESWinlogon]
C:\WINDOWS\system32\VESWinlogon.dll [2007-01-11 98304]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NoSharedDocuments"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoSharedDocuments"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\system32\sessmgr.exe"="C:\WINDOWS\system32\sessmgr.exe:*:Disabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 1 month======

2014-11-02 18:28:58 ----D---- C:\rsit
2014-11-02 18:28:58 ----D---- C:\Program Files\trend micro
2014-11-02 16:46:30 ----D---- C:\FRST
2014-11-02 16:10:21 ----A---- C:\TDSSKiller.3.0.0.41_02.11.2014_16.10.21_log.txt
2014-11-02 16:00:14 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-11-02 16:00:14 ----D---- C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-11-02 16:00:14 ----A---- C:\WINDOWS\system32\drivers\mbamchameleon.sys
2014-11-02 16:00:14 ----A---- C:\WINDOWS\system32\drivers\mbam.sys
2014-11-02 15:05:11 ----D---- C:\Documents and Settings\Vaio\Data aplikací\AVAST Software
2014-11-02 15:05:00 ----D---- C:\WINDOWS\jumpshot.com
2014-11-02 15:04:25 ----A---- C:\WINDOWS\system32\drivers\aswVmm.sys
2014-11-02 15:04:25 ----A---- C:\WINDOWS\system32\drivers\aswTdi.sys
2014-11-02 15:04:24 ----A---- C:\WINDOWS\system32\drivers\aswSP.sys
2014-11-02 15:04:24 ----A---- C:\WINDOWS\system32\drivers\aswRvrt.sys
2014-11-02 15:04:24 ----A---- C:\WINDOWS\system32\drivers\aswmonflt.sys
2014-11-02 15:04:24 ----A---- C:\WINDOWS\system32\drivers\aswHwid.sys
2014-11-02 15:04:23 ----A---- C:\WINDOWS\system32\drivers\aswRdr.sys
2014-11-02 15:04:22 ----A---- C:\WINDOWS\system32\drivers\aswsnx.sys
2014-11-02 15:04:21 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-11-02 15:04:18 ----A---- C:\WINDOWS\avastSS.scr
2014-11-02 14:57:40 ----D---- C:\Program Files\AVAST Software
2014-11-02 14:54:47 ----D---- C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-11-02 12:02:34 ----A---- C:\WINDOWS\wininit.ini
2014-11-02 11:38:02 ----D---- C:\WINDOWS\system32\appmgmt
2014-10-31 00:26:20 ----D---- C:\Documents and Settings\Vaio\Data aplikací\Canneverbe Limited
2014-10-26 22:37:26 ----D---- C:\Documents and Settings\Vaio\Data aplikací\Miranda
2014-10-26 22:36:37 ----D---- C:\Program Files\Miranda IM
2014-10-14 10:15:40 ----D---- C:\Documents and Settings\Vaio\Data aplikací\LibreOffice

======List of files/folders modified in the last 1 month======

2014-11-02 18:28:58 ----RD---- C:\Program Files
2014-11-02 17:07:42 ----D---- C:\WINDOWS
2014-11-02 17:06:57 ----D---- C:\WINDOWS\system32\CatRoot2
2014-11-02 17:04:02 ----D---- C:\WINDOWS\Temp
2014-11-02 17:03:52 ----D---- C:\WINDOWS\system32
2014-11-02 17:03:01 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-11-02 16:10:35 ----D---- C:\WINDOWS\system32\drivers
2014-11-02 16:04:07 ----D---- C:\WINDOWS\Prefetch
2014-11-02 15:28:43 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2014-11-02 15:24:05 ----D---- C:\Program Files\Mozilla Firefox
2014-11-02 15:20:02 ----SHD---- C:\WINDOWS\Installer
2014-11-02 15:20:02 ----D---- C:\Program Files\Safari
2014-11-02 15:19:50 ----D---- C:\WINDOWS\WinSxS
2014-11-02 15:04:34 ----SD---- C:\WINDOWS\Tasks
2014-11-02 12:29:36 ----D---- C:\WINDOWS\system32\config
2014-11-02 11:38:07 ----D---- C:\Program Files\Common Files
2014-11-02 11:18:00 ----SD---- C:\Documents and Settings\Vaio\Data aplikací\Microsoft
2014-11-02 02:36:30 ----SD---- C:\Documents and Settings\All Users\Data aplikací\Microsoft
2014-11-02 02:23:56 ----D---- C:\Program Files\The KMPlayer
2014-11-01 15:50:23 ----HD---- C:\WINDOWS\inf
2014-10-31 15:22:57 ----SHD---- C:\WINDOWS\CSC
2014-10-31 09:55:52 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-10-31 09:55:52 ----D---- C:\WINDOWS\system32\cs-cz
2014-10-31 09:55:52 ----D---- C:\WINDOWS\Help
2014-10-31 09:55:52 ----D---- C:\Program Files\Internet Explorer
2014-10-31 00:05:58 ----D---- C:\Program Files\Google
2014-10-31 00:03:46 ----D---- C:\WINDOWS\ie8updates
2014-10-31 00:03:13 ----D---- C:\WINDOWS\WBEM
2014-10-31 00:02:14 ----HD---- C:\Program Files\InstallShield Installation Information
2014-10-31 00:00:43 ----A---- C:\WINDOWS\win.ini
2014-10-31 00:00:34 ----D---- C:\Program Files\Windows Media Player
2014-10-30 09:13:24 ----D---- C:\Documents and Settings\Vaio\Data aplikací\TeamViewer
2014-10-27 07:51:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 agp440;Filtr Intel sběrnice AGP; C:\WINDOWS\system32\DRIVERS\agp440.sys [2008-04-13 42368]
R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-11-02 49944]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-11-02 206248]
R0 ohci1394;Hostitelský řadič IEEE 1394 dle standardu OHCI Texas Instruments; C:\WINDOWS\system32\DRIVERS\ohci1394.sys [2008-04-13 61696]
R0 PenClass;Pen Class; C:\WINDOWS\system32\Drivers\PenClass.sys [2005-11-29 8138]
R0 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-09-28 77568]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2014-11-02 55240]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-11-02 787800]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-11-02 422760]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2014-11-02 57928]
R1 DMICall;Sony DMI Call service; C:\WINDOWS\system32\DRIVERS\DMICall.sys [2000-12-05 3952]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-11-02 24184]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-11-02 70384]
R2 mdmxsdk;mdmxsdk; C:\WINDOWS\system32\DRIVERS\mdmxsdk.sys [2003-04-09 11043]
R2 s24trans;WLAN Transport; C:\WINDOWS\system32\DRIVERS\s24trans.sys [2008-08-13 11904]
R2 StarOpen;StarOpen; C:\WINDOWS\system32\drivers\StarOpen.sys [2013-08-25 13120]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2008-09-24 4122368]
R3 Arp1394;Protokol 1394 ARP Client; C:\WINDOWS\system32\DRIVERS\arp1394.sys [2008-04-14 60800]
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2004-08-26 747008]
R3 E1000;Intel(R) PRO/1000 Adapter Driver; C:\WINDOWS\system32\DRIVERS\e1000325.sys [2003-08-14 125952]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 HSF_DP;HSF_DP; C:\WINDOWS\system32\DRIVERS\HSF_DP.sys [2003-10-14 1043072]
R3 HSFHWICH;HSFHWICH; C:\WINDOWS\system32\DRIVERS\HSFHWICH.sys [2003-10-14 197120]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2007-08-28 5760]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\system32\DRIVERS\nic1394.sys [2008-04-14 61824]
R3 SNC;Zařízení pro ovládání přenosného počítače Sony; C:\WINDOWS\system32\DRIVERS\SonyNC.sys [2001-08-17 20752]
R3 SPI;Programovatelné zařízení Sony pro ovládání V/V ; C:\WINDOWS\system32\DRIVERS\SonyPI.sys [2001-08-17 37040]
R3 tifmsony;tifmsony; C:\WINDOWS\system32\drivers\tifmsony.sys [2004-05-21 65024]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-13 20608]
R3 w29n51;Intel(R) PRO/Wireless 2200BG Network Connection Driver for Windows XP; C:\WINDOWS\system32\DRIVERS\w29n51.sys [2009-11-11 2216064]
R3 winachsf;winachsf; C:\WINDOWS\system32\DRIVERS\HSF_CNXT.sys [2003-10-14 679808]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\WINDOWS\system32\DRIVERS\BthEnum.sys [2008-04-14 17024]
S3 BTHMODEM;Ovladač pro sériovou komunikaci protokolem Bluetooth; C:\WINDOWS\system32\DRIVERS\bthmodem.sys [2008-04-14 37888]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\WINDOWS\system32\DRIVERS\bthpan.sys [2008-04-14 101120]
S3 BTHPORT;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2008-06-14 272128]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2008-04-14 18944]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 CEDTV;USBDTV USB2.0 DVB-T device; C:\WINDOWS\System32\Drivers\DTVM5P2.sys [2005-08-15 19072]
S3 CEDTVLDR;DVB-T USB2.0 device firmware loader; C:\WINDOWS\System32\Drivers\CEDTVLDR.sys [2005-02-15 16640]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\WINDOWS\system32\DRIVERS\rfcomm.sys [2008-04-14 59136]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 usbser;Motorola USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2008-04-14 26112]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-09-28 82944]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2004-08-26 385024]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-02 50344]
R2 BthServ;Bluetooth Support Service; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-11-03 874768]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-11-03 473360]
R2 S24EventMonitor;Intel(R) PROSet/Wireless WiFi Service; C:\Program Files\Intel\WiFi\bin\S24EvMon.exe [2009-11-03 909312]
R2 TabletService;TabletService; C:\WINDOWS\system32\Tablet.exe [2005-12-05 753664]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-04-08 119408]
S3 WinRM;Windows Remote Management (WS-Management); C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-11-02 267440]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe [2008-07-29 132096]

-----------------EOF-----------------

[Roli]

Děkuji
Mezitím jsem vygeneroval ještě log pomocí RSIT, tak ho přidávám, jakej je v těchto skenerech rozdíl netuším. Nejde mi korektně nainstalovat a spustit MBAM.

Mezi RSIT a FRST je trochu rozdíl, ale je jedno který použiješ.

Mbam musíš použít starší 1.75 verzi, jiná na XP nepojede.

[marv96]

OK, díky!

[Roli]

Není zač a