skoušel jsem to ale nod mi píše že aktualizace není
mám to odjinstalovat a nainstalovat znovu?
problem z virem
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: problem z virem
Odinstalujte a pak stahnete novou verzi http://www.eset.com/cz/stahnout/domacno ... /family/2/"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
přeinstalovano
seznam mi pořád nejde zobrazit
seznam mi pořád nejde zobrazit
Re: problem z virem
Dejte mi log FRST.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 26-11-2014 01
Ran by Fasmanova (administrator) on FASMANOVA-PC on 26-11-2014 21:51:07
Running from C:\Users\Fasmanova\Desktop
Loaded Profile: Fasmanova (Available profiles: Fasmanova)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Realtek Semiconductor Corp.) C:\Users\Fasmanova\AppData\Local\temp\RtkBtMnt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Google Inc.) C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ArcadeDeluxeAgent] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [156968 2009-01-21] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [202024 2009-01-21] (CyberLink)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-05] (Google)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6793760 2009-02-19] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1410344 2008-12-05] (Synaptics, Inc.)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1069576 2009-06-25] (Dritek System Inc.)
HKLM\...\Run: [BackupManagerTray] => C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [249600 2009-04-11] (NewTech Infosystems, Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [440864 2009-06-23] (Acer Incorporated)
HKLM\...\Run: [EgisTecLiveUpdate] => C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-05-13] (Egis Technology Inc.)
HKLM\...\Run: [mwlDaemon] => C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [345384 2009-05-14] (Egis Technology Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2014-10-01] (ESET)
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-09-16] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-08-05] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk
ShortcutTarget: program.lnk -> C:\PROGRA~2\5CE882BA.cpp (No File)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKU\S-1-5-21-3113580287-2961506000-3482422984-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Pomocník pro přihlášení ke službě Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3113580287-2961506000-3482422984-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-16]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [75048 2008-12-18] ()
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2014-10-01] (ESET)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [707104 2009-06-23] (Acer Incorporated)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-05] (Google)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [225280 2007-02-28] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-02-28] (Hewlett-Packard Co.) [File not signed]
R2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-05-14] (Egis Technology Inc.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [61184 2009-04-11] (NewTech Infosystems, Inc.)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144632 2008-09-23] (NewTech Infosystems, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
S0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [190368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2014-10-10] (ESET)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [23424 2009-12-15] (Huawei Tech. Co., Ltd.)
R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-12-04] (Egis Incorporated.)
R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-12-04] (Egis Incorporated.)
R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-12-04] (Egis Incorporated.)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CFcatchme; \??\C:\Users\FASMAN~1\AppData\Local\Temp\CFcatchme.sys [X]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [112640 2009-12-15] (Huawei Technologies Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-26 21:38 - 2014-11-26 21:39 - 00000000 ____D () C:\Windows\LastGood
2014-11-26 21:36 - 2014-11-26 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-11-26 21:07 - 2014-11-26 21:14 - 01761992 _____ (ESET) C:\Users\Fasmanova\Downloads\eset_nod32_antivirus_live_installer_ (1).exe
2014-11-26 21:05 - 2014-11-26 21:05 - 01761992 _____ (ESET) C:\Users\Fasmanova\Downloads\eset_nod32_antivirus_live_installer_.exe
2014-11-26 21:00 - 2014-11-26 21:00 - 00066257 _____ () C:\Users\Fasmanova\Desktop\zalohanod.xml
2014-11-26 20:46 - 2014-11-26 21:51 - 00014436 _____ () C:\Users\Fasmanova\Desktop\FRST.txt
2014-11-26 20:46 - 2014-11-26 20:47 - 00026566 _____ () C:\Users\Fasmanova\Desktop\Addition.txt
2014-11-26 20:45 - 2014-11-26 21:51 - 00000000 ___DC () C:\FRST
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Downloads\FRSTLauncher.exe
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Desktop\FRSTLauncher.exe
2014-11-26 20:44 - 2014-11-26 20:44 - 01109504 _____ (Farbar) C:\Users\Fasmanova\Desktop\FRST.exe
2014-11-26 20:43 - 2014-11-26 20:43 - 01109504 _____ (Farbar) C:\Users\Fasmanova\Downloads\FRST.exe
2014-11-26 20:39 - 2014-11-26 20:40 - 00000000 __SDC () C:\32788R22FWJFW
2014-11-26 18:52 - 2014-11-26 18:52 - 00008817 ____C () C:\ComboFix.txt
2014-11-25 23:29 - 2014-11-26 20:40 - 00000000 ____D () C:\Windows\erdnt
2014-11-25 23:22 - 2014-11-25 23:25 - 00003236 _____ () C:\Users\Fasmanova\Desktop\Rkill.txt
2014-11-25 23:22 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Desktop\rkill.com
2014-11-25 23:20 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Downloads\rkill.com
2014-11-25 21:41 - 2014-11-25 21:51 - 00000000 ___DC () C:\AdwCleaner
2014-11-25 21:41 - 2014-11-25 21:47 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe
2014-11-25 21:34 - 2014-11-25 21:34 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe
2014-11-25 20:58 - 2014-11-25 21:01 - 00000000 ___DC () C:\rsit
2014-11-25 18:43 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-23 15:15 - 2014-10-10 02:01 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-23 15:15 - 2014-10-10 02:00 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-23 15:15 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-23 15:15 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-23 15:15 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-23 15:15 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-23 15:14 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-23 15:14 - 2014-09-19 01:50 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-23 15:13 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-23 15:12 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-23 15:11 - 2014-10-18 02:08 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-23 15:02 - 2014-10-13 00:34 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-14 14:49 - 2014-10-27 20:10 - 12366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-14 14:49 - 2014-10-27 20:05 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-14 14:49 - 2014-10-27 20:02 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-14 14:49 - 2014-10-27 19:59 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-14 14:49 - 2014-10-27 19:59 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-14 14:49 - 2014-10-27 19:58 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-14 14:49 - 2014-10-27 19:57 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-14 14:49 - 2014-10-27 19:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-14 14:49 - 2014-10-27 19:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-14 14:49 - 2014-10-27 19:55 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-14 14:49 - 2014-10-27 19:55 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-14 14:49 - 2014-10-27 19:54 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-26 21:47 - 2009-09-16 20:50 - 01431389 _____ () C:\Windows\WindowsUpdate.log
2014-11-26 21:39 - 2009-09-16 21:00 - 00000000 ____D () C:\Users\Fasmanova
2014-11-26 21:31 - 2010-04-05 12:08 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-26 21:11 - 2014-03-04 15:50 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf37b9862cc29.job
2014-11-26 21:11 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 21:11 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-26 21:11 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 21:10 - 2009-09-16 21:02 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-11-26 21:10 - 2006-11-02 14:01 - 00032520 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-26 18:43 - 2009-09-16 14:20 - 00007052 _____ () C:\Users\Fasmanova\AppData\Local\d3d9caps.dat
2014-11-26 18:43 - 2006-11-02 11:23 - 00000215 ____C () C:\Windows\system.ini
2014-11-26 18:42 - 2013-11-12 20:24 - 00103032 _____ () C:\Windows\PFRO.log
2014-11-25 23:53 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
2014-11-25 23:43 - 2006-11-02 13:47 - 00304904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-25 21:01 - 2013-11-02 17:18 - 00000000 ____D () C:\Program Files\trend micro
2014-11-23 15:56 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-23 15:53 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-11-23 15:10 - 2013-08-13 12:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-23 15:03 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-11-03 15:42 - 2006-11-02 11:33 - 01603480 _____ () C:\Windows\system32\PerfStringBackup.INI
Some content of TEMP:
====================
C:\Users\Fasmanova\AppData\Local\temp\InstHelper.exe
C:\Users\Fasmanova\AppData\Local\temp\RtkBtMnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-26 21:17
==================== End Of Log ============================
Ran by Fasmanova (administrator) on FASMANOVA-PC on 26-11-2014 21:51:07
Running from C:\Users\Fasmanova\Desktop
Loaded Profile: Fasmanova (Available profiles: Fasmanova)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 9
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
() C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe
(Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\MWLService.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe
(Software 2000 Limited) C:\Windows\System32\spool\drivers\w32x86\3\HP1006MC.EXE
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe
(CyberLink Corp.) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe
(CyberLink) C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe
(Google) C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(NewTech Infosystems, Inc.) C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe
(Egis Technology Inc.) C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Egis Technology Inc.) C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
(Microsoft Corporation) C:\Program Files\Windows Media Player\wmpnscfg.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
(Realtek Semiconductor Corp.) C:\Users\Fasmanova\AppData\Local\temp\RtkBtMnt.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe
(Google Inc.) C:\Program Files\Google\Google Toolbar\GoogleToolbarUser_32.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTray.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer PowerSmart Manager\ePowerEvent.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ArcadeDeluxeAgent] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe [156968 2009-01-21] (CyberLink Corp.)
HKLM\...\Run: [CLMLServer] => C:\Program Files\Acer Arcade Deluxe\Acer Arcade Deluxe\Kernel\CLML\CLMLSvc.exe [202024 2009-01-21] (CyberLink)
HKLM\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-05] (Google)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [6793760 2009-02-19] (Realtek Semiconductor)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1410344 2008-12-05] (Synaptics, Inc.)
HKLM\...\Run: [LManager] => C:\Program Files\Launch Manager\LManager.exe [1069576 2009-06-25] (Dritek System Inc.)
HKLM\...\Run: [BackupManagerTray] => C:\Program Files\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe [249600 2009-04-11] (NewTech Infosystems, Inc.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Acer\Acer PowerSmart Manager\ePowerTrayLauncher.exe [440864 2009-06-23] (Acer Incorporated)
HKLM\...\Run: [EgisTecLiveUpdate] => C:\Program Files\EgisTec Egis Software Update\EgisUpdate.exe [199464 2009-05-13] (Egis Technology Inc.)
HKLM\...\Run: [mwlDaemon] => C:\Program Files\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe [345384 2009-05-14] (Egis Technology Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2014-10-01] (ESET)
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-09-16] (Google Inc.)
AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GoogleDesktopNetwork3.dll => C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork3.dll [123392 2010-08-05] (Google)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk
ShortcutTarget: program.lnk -> C:\PROGRA~2\5CE882BA.cpp (No File)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKLM -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
SearchScopes: HKU\S-1-5-21-3113580287-2961506000-3482422984-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACAW
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Pomocník pro přihlášení ke službě Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKU\S-1-5-21-3113580287-2961506000-3482422984-1000 -> Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.14.0.8050.1202.dll (Microsoft Corporation)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/WLPG,version=14.0.8051.1204 -> C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-16]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 CLHNService; C:\Program Files\Acer Arcade Deluxe\HomeMedia\Kernel\DMP\CLHNService.exe [75048 2008-12-18] ()
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2014-10-01] (ESET)
R2 ePowerSvc; C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe [707104 2009-06-23] (Acer Incorporated)
S3 GoogleDesktopManager-051210-111108; C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [30192 2010-08-05] (Google)
R3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [225280 2007-02-28] (Hewlett-Packard Co.) [File not signed]
R2 hpqddsvc; C:\Program Files\HP\Digital Imaging\bin\hpqddsvc.dll [131072 2007-02-28] (Hewlett-Packard Co.) [File not signed]
R2 MWLService; C:\Program Files\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-05-14] (Egis Technology Inc.)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [43520 2006-11-08] (Hewlett-Packard) [File not signed]
R2 NTI IScheduleSvc; C:\Program Files\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe [61184 2009-04-11] (NewTech Infosystems, Inc.)
R2 NTISchedulerSvc; C:\Program Files\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe [144632 2008-09-23] (NewTech Infosystems, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53248 2006-11-08] (Hewlett-Packard) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
S0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [190368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2014-10-10] (ESET)
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [23424 2009-12-15] (Huawei Tech. Co., Ltd.)
R1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [19504 2008-12-04] (Egis Incorporated.)
R1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2008-12-04] (Egis Incorporated.)
R1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [59952 2008-12-04] (Egis Incorporated.)
R3 Ntfs; C:\Windows\system32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-21] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CFcatchme; \??\C:\Users\FASMAN~1\AppData\Local\Temp\CFcatchme.sys [X]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [112640 2009-12-15] (Huawei Technologies Co., Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-26 21:38 - 2014-11-26 21:39 - 00000000 ____D () C:\Windows\LastGood
2014-11-26 21:36 - 2014-11-26 21:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-11-26 21:07 - 2014-11-26 21:14 - 01761992 _____ (ESET) C:\Users\Fasmanova\Downloads\eset_nod32_antivirus_live_installer_ (1).exe
2014-11-26 21:05 - 2014-11-26 21:05 - 01761992 _____ (ESET) C:\Users\Fasmanova\Downloads\eset_nod32_antivirus_live_installer_.exe
2014-11-26 21:00 - 2014-11-26 21:00 - 00066257 _____ () C:\Users\Fasmanova\Desktop\zalohanod.xml
2014-11-26 20:46 - 2014-11-26 21:51 - 00014436 _____ () C:\Users\Fasmanova\Desktop\FRST.txt
2014-11-26 20:46 - 2014-11-26 20:47 - 00026566 _____ () C:\Users\Fasmanova\Desktop\Addition.txt
2014-11-26 20:45 - 2014-11-26 21:51 - 00000000 ___DC () C:\FRST
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Downloads\FRSTLauncher.exe
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Desktop\FRSTLauncher.exe
2014-11-26 20:44 - 2014-11-26 20:44 - 01109504 _____ (Farbar) C:\Users\Fasmanova\Desktop\FRST.exe
2014-11-26 20:43 - 2014-11-26 20:43 - 01109504 _____ (Farbar) C:\Users\Fasmanova\Downloads\FRST.exe
2014-11-26 20:39 - 2014-11-26 20:40 - 00000000 __SDC () C:\32788R22FWJFW
2014-11-26 18:52 - 2014-11-26 18:52 - 00008817 ____C () C:\ComboFix.txt
2014-11-25 23:29 - 2014-11-26 20:40 - 00000000 ____D () C:\Windows\erdnt
2014-11-25 23:22 - 2014-11-25 23:25 - 00003236 _____ () C:\Users\Fasmanova\Desktop\Rkill.txt
2014-11-25 23:22 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Desktop\rkill.com
2014-11-25 23:20 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Downloads\rkill.com
2014-11-25 21:41 - 2014-11-25 21:51 - 00000000 ___DC () C:\AdwCleaner
2014-11-25 21:41 - 2014-11-25 21:47 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe
2014-11-25 21:34 - 2014-11-25 21:34 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe
2014-11-25 20:58 - 2014-11-25 21:01 - 00000000 ___DC () C:\rsit
2014-11-25 18:43 - 2014-10-24 02:03 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-23 15:15 - 2014-10-10 02:01 - 00449536 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-23 15:15 - 2014-10-10 02:00 - 01259008 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-23 15:15 - 2014-10-10 02:00 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-23 15:15 - 2014-10-10 00:22 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-23 15:15 - 2014-08-27 01:55 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-23 15:15 - 2014-08-27 01:55 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-23 15:14 - 2014-10-24 02:04 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-23 15:14 - 2014-09-19 01:50 - 00278528 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-23 15:13 - 2014-08-12 03:25 - 00729600 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-23 15:12 - 2014-10-03 02:18 - 00274432 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-23 15:12 - 2014-10-03 02:17 - 00170496 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-23 15:11 - 2014-10-18 02:08 - 00564224 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-23 15:02 - 2014-10-13 00:34 - 02054656 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-14 14:49 - 2014-10-27 20:10 - 12366848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-14 14:49 - 2014-10-27 20:05 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-14 14:49 - 2014-10-27 20:02 - 09739776 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-14 14:49 - 2014-10-27 19:59 - 01139712 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-14 14:49 - 2014-10-27 19:59 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-14 14:49 - 2014-10-27 19:58 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-14 14:49 - 2014-10-27 19:57 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-11-14 14:49 - 2014-10-27 19:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 01802752 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00421376 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-14 14:49 - 2014-10-27 19:56 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-14 14:49 - 2014-10-27 19:55 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-14 14:49 - 2014-10-27 19:55 - 00353792 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-11-14 14:49 - 2014-10-27 19:55 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-11-14 14:49 - 2014-10-27 19:55 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-11-14 14:49 - 2014-10-27 19:54 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-26 21:47 - 2009-09-16 20:50 - 01431389 _____ () C:\Windows\WindowsUpdate.log
2014-11-26 21:39 - 2009-09-16 21:00 - 00000000 ____D () C:\Users\Fasmanova
2014-11-26 21:31 - 2010-04-05 12:08 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-26 21:11 - 2014-03-04 15:50 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf37b9862cc29.job
2014-11-26 21:11 - 2006-11-02 14:01 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-26 21:11 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-26 21:11 - 2006-11-02 13:47 - 00003616 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-26 21:10 - 2009-09-16 21:02 - 00000012 _____ () C:\Windows\bthservsdp.dat
2014-11-26 21:10 - 2006-11-02 14:01 - 00032520 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-11-26 18:43 - 2009-09-16 14:20 - 00007052 _____ () C:\Users\Fasmanova\AppData\Local\d3d9caps.dat
2014-11-26 18:43 - 2006-11-02 11:23 - 00000215 ____C () C:\Windows\system.ini
2014-11-26 18:42 - 2013-11-12 20:24 - 00103032 _____ () C:\Windows\PFRO.log
2014-11-25 23:53 - 2006-11-02 12:18 - 00000000 ___RD () C:\Users\Public
2014-11-25 23:43 - 2006-11-02 13:47 - 00304904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-25 21:01 - 2013-11-02 17:18 - 00000000 ____D () C:\Program Files\trend micro
2014-11-23 15:56 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-23 15:53 - 2006-11-02 12:18 - 00000000 ____D () C:\Windows\rescache
2014-11-23 15:10 - 2013-08-13 12:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-23 15:03 - 2006-11-02 11:24 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2014-11-03 15:42 - 2006-11-02 11:33 - 01603480 _____ () C:\Windows\system32\PerfStringBackup.INI
Some content of TEMP:
====================
C:\Users\Fasmanova\AppData\Local\temp\InstHelper.exe
C:\Users\Fasmanova\AppData\Local\temp\RtkBtMnt.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-26 21:17
==================== End Of Log ============================
Re: problem z virem
Tvorba fixlistu pro FRST
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-09-16] (Google Inc.) Startup: C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk ShortcutTarget: program.lnk -> C:\PROGRA~2\5CE882BA.cpp (No File) HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION S3 catchme; \??\C:\ComboFix\catchme.sys [X] S3 CFcatchme; \??\C:\Users\FASMAN~1\AppData\Local\Temp\CFcatchme.sys [X] 2014-11-26 20:46 - 2014-11-26 21:51 - 00014436 _____ () C:\Users\Fasmanova\Desktop\FRST.txt 2014-11-26 20:46 - 2014-11-26 20:47 - 00026566 _____ () C:\Users\Fasmanova\Desktop\Addition.txt 2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Downloads\FRSTLauncher.exe 2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Desktop\FRSTLauncher.exe 2014-11-26 18:52 - 2014-11-26 18:52 - 00008817 ____C () C:\ComboFix.txt 2014-11-25 23:29 - 2014-11-26 20:40 - 00000000 ____D () C:\Windows\erdnt 2014-11-25 23:22 - 2014-11-25 23:25 - 00003236 _____ () C:\Users\Fasmanova\Desktop\Rkill.txt 2014-11-25 23:22 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Desktop\rkill.com 2014-11-25 23:20 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Downloads\rkill.com 2014-11-25 21:41 - 2014-11-25 21:51 - 00000000 ___DC () C:\AdwCleaner 2014-11-25 21:41 - 2014-11-25 21:47 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe 2014-11-25 21:34 - 2014-11-25 21:34 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe 2014-11-25 20:58 - 2014-11-25 21:01 - 00000000 ___DC () C:\rsit CMD: ping -n 3 www.seznam.cz Hosts: EmptyTemp: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 26-11-2014 01
Ran by Fasmanova at 2014-11-26 22:01:20 Run:1
Running from C:\Users\Fasmanova\Desktop
Loaded Profile: Fasmanova (Available profiles: Fasmanova)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-09-16] (Google Inc.)
Startup: C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk
ShortcutTarget: program.lnk -> C:\PROGRA~2\5CE882BA.cpp (No File)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CFcatchme; \??\C:\Users\FASMAN~1\AppData\Local\Temp\CFcatchme.sys [X]
2014-11-26 20:46 - 2014-11-26 21:51 - 00014436 _____ () C:\Users\Fasmanova\Desktop\FRST.txt
2014-11-26 20:46 - 2014-11-26 20:47 - 00026566 _____ () C:\Users\Fasmanova\Desktop\Addition.txt
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Downloads\FRSTLauncher.exe
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Desktop\FRSTLauncher.exe
2014-11-26 18:52 - 2014-11-26 18:52 - 00008817 ____C () C:\ComboFix.txt
2014-11-25 23:29 - 2014-11-26 20:40 - 00000000 ____D () C:\Windows\erdnt
2014-11-25 23:22 - 2014-11-25 23:25 - 00003236 _____ () C:\Users\Fasmanova\Desktop\Rkill.txt
2014-11-25 23:22 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Desktop\rkill.com
2014-11-25 23:20 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Downloads\rkill.com
2014-11-25 21:41 - 2014-11-25 21:51 - 00000000 ___DC () C:\AdwCleaner
2014-11-25 21:41 - 2014-11-25 21:47 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe
2014-11-25 21:34 - 2014-11-25 21:34 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe
2014-11-25 20:58 - 2014-11-25 21:01 - 00000000 ___DC () C:\rsit
CMD: ping -n 3 www.seznam.cz
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => value deleted successfully.
C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk => Moved successfully.
C:\PROGRA~2\5CE882BA.cpp not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
catchme => Service deleted successfully.
CFcatchme => Service deleted successfully.
C:\Users\Fasmanova\Desktop\FRST.txt => Moved successfully.
C:\Users\Fasmanova\Desktop\Addition.txt => Moved successfully.
C:\Users\Fasmanova\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Fasmanova\Desktop\FRSTLauncher.exe => Moved successfully.
C:\ComboFix.txt => Moved successfully.
C:\Windows\erdnt => Moved successfully.
C:\Users\Fasmanova\Desktop\Rkill.txt => Moved successfully.
C:\Users\Fasmanova\Desktop\rkill.com => Moved successfully.
C:\Users\Fasmanova\Downloads\rkill.com => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe => Moved successfully.
C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe => Moved successfully.
C:\rsit => Moved successfully.
========= ping -n 3 www.seznam.cz =========
P��kaz PING na www.seznam.cz [77.75.76.3] - 32 bajt� dat:
Odpov�� od 77.75.76.3: bajty=32 �as=28ms TTL=246
Odpov�� od 77.75.76.3: bajty=32 �as=28ms TTL=246
Odpov�� od 77.75.76.3: bajty=32 �as=29ms TTL=246
Statistika ping pro 77.75.76.3:
Pakety: Odeslan� = 3, P�ijat� = 3, Ztracen� = 0 (ztr�ta 0%),
P�ibli�n� doba do p�ijet� odezvy v milisekund�ch:
Minimum = 28ms, Maximum = 29ms, Pr�m�r = 28ms
========= End of CMD: =========
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 2.2 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Ran by Fasmanova at 2014-11-26 22:01:20 Run:1
Running from C:\Users\Fasmanova\Desktop
Loaded Profile: Fasmanova (Available profiles: Fasmanova)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [68856 2009-09-16] (Google Inc.)
Startup: C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk
ShortcutTarget: program.lnk -> C:\PROGRA~2\5CE882BA.cpp (No File)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 CFcatchme; \??\C:\Users\FASMAN~1\AppData\Local\Temp\CFcatchme.sys [X]
2014-11-26 20:46 - 2014-11-26 21:51 - 00014436 _____ () C:\Users\Fasmanova\Desktop\FRST.txt
2014-11-26 20:46 - 2014-11-26 20:47 - 00026566 _____ () C:\Users\Fasmanova\Desktop\Addition.txt
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Downloads\FRSTLauncher.exe
2014-11-26 20:45 - 2014-11-26 20:45 - 00112640 _____ (forum.viry.cz) C:\Users\Fasmanova\Desktop\FRSTLauncher.exe
2014-11-26 18:52 - 2014-11-26 18:52 - 00008817 ____C () C:\ComboFix.txt
2014-11-25 23:29 - 2014-11-26 20:40 - 00000000 ____D () C:\Windows\erdnt
2014-11-25 23:22 - 2014-11-25 23:25 - 00003236 _____ () C:\Users\Fasmanova\Desktop\Rkill.txt
2014-11-25 23:22 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Desktop\rkill.com
2014-11-25 23:20 - 2014-11-25 23:20 - 01944824 _____ (Bleeping Computer, LLC) C:\Users\Fasmanova\Downloads\rkill.com
2014-11-25 21:41 - 2014-11-25 21:51 - 00000000 ___DC () C:\AdwCleaner
2014-11-25 21:41 - 2014-11-25 21:47 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe
2014-11-25 21:34 - 2014-11-25 21:34 - 02148864 _____ () C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe
2014-11-25 20:58 - 2014-11-25 21:01 - 00000000 ___DC () C:\rsit
CMD: ping -n 3 www.seznam.cz
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Windows\CurrentVersion\Run\\swg => value deleted successfully.
C:\Users\Fasmanova\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\program.lnk => Moved successfully.
C:\PROGRA~2\5CE882BA.cpp not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
"HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
"HKU\S-1-5-21-3113580287-2961506000-3482422984-1000\SOFTWARE\Policies\Microsoft\Internet Explorer" => Key deleted successfully.
catchme => Service deleted successfully.
CFcatchme => Service deleted successfully.
C:\Users\Fasmanova\Desktop\FRST.txt => Moved successfully.
C:\Users\Fasmanova\Desktop\Addition.txt => Moved successfully.
C:\Users\Fasmanova\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Fasmanova\Desktop\FRSTLauncher.exe => Moved successfully.
C:\ComboFix.txt => Moved successfully.
C:\Windows\erdnt => Moved successfully.
C:\Users\Fasmanova\Desktop\Rkill.txt => Moved successfully.
C:\Users\Fasmanova\Desktop\rkill.com => Moved successfully.
C:\Users\Fasmanova\Downloads\rkill.com => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Fasmanova\Downloads\adwcleaner_4.102 (1).exe => Moved successfully.
C:\Users\Fasmanova\Downloads\adwcleaner_4.102.exe => Moved successfully.
C:\rsit => Moved successfully.
========= ping -n 3 www.seznam.cz =========
P��kaz PING na www.seznam.cz [77.75.76.3] - 32 bajt� dat:
Odpov�� od 77.75.76.3: bajty=32 �as=28ms TTL=246
Odpov�� od 77.75.76.3: bajty=32 �as=28ms TTL=246
Odpov�� od 77.75.76.3: bajty=32 �as=29ms TTL=246
Statistika ping pro 77.75.76.3:
Pakety: Odeslan� = 3, P�ijat� = 3, Ztracen� = 0 (ztr�ta 0%),
P�ibli�n� doba do p�ijet� odezvy v milisekund�ch:
Minimum = 28ms, Maximum = 29ms, Pr�m�r = 28ms
========= End of CMD: =========
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 2.2 GB temporary data.
The system needed a reboot.
==== End of Fixlog ====
Re: problem z virem
Jak se chova nas pacient 
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
omlouvam se ale par dni jsem byl bez internetu
pc je sviznejsi ale seznam.cz porad nejde
pc je sviznejsi ale seznam.cz porad nejde
Re: problem z virem
Ani jeden prohlizec??
Ani nouzovy rezim??
Kontaktoval bych poskytovatele
Ani nouzovy rezim??
Kontaktoval bych poskytovatele
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
v jinem prohlizeci to funguje
tak asi budu pouzivat chrome
tak asi budu pouzivat chrome
Re: problem z virem
Zkuste FF odinstalovat, smazat profil a znovu nainstalovat"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
ale ja sem pouzival IE a tam mi to nefungovalo
Re: problem z virem
Pak je nekde chyba v nastaveni IE, pokud to na Chrome funguje
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: problem z virem
tak se nastaveni IE restartoval do zakladu a jede to
diky za pomoc
diky za pomoc
Přispějete na provoz fóra?