zasekávání programů a lišty

[danieldvo]

Windows 7 professional 64bit
procesor Intel Core 2 duo
RAM 4GB

Objevil se poměrně zvláštní program ve fungování počítače. Zapnu PC a vše bez problému naběhne spouštím internet a vše bez problému používám pc potom kliknu na lištu s tlač. Start a prostě nereaguje kurzor se hýbe ale ať klikáte na liště na co chcete tak nic ale prohlížeč i plocha fungují normálně vše se vyřeší až tak že přes CTRL+ALT+DEL. spustíte správce uloh a potom zase vše funguje. Další problém je podobný spustíte nějaký program (já to zaznamenal třeba u programů které používám už strašně dlouho bez jediného problému tj. např. Gimp nebo Inkscape, profiCad ) no program se bez problému spustí jde vybrat i nástroj ale potom už nemůžete dál pracovat ne že by program zamrzl tak že by vyskočilo okno že přestal pracovat a něco takovýho, program prostě jede ale nejde v něm nic dělat kurzorem jde hýbat když najedete na nějakou ikonu tak třeba i reaguje na to že jste na ni najeli ale nejde na ni kliknout někdy program vypnout jde někdy ne takže ukončím přes správce uloh a třeba za půl hodiny program funguje jakoby nic. Počítač používám k práci takže to obtěžuje dost jak to vyřešit, čím to může být ? Díky.
Od rána mi svítí v liště ikonka sítě přeškrtnutá s tím že net nefunguje ale když otevřu centrum síť... tak tam prostě vše jede, internet jede teď jsem na něm a na routeru také vše svítí v pohodě, wifi funguje taky ...

[Rudy]

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .

[danieldvo]

takže jsem postupoval podle návodu v odkazu a tady je ten FRST

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-12-2014
Ran by Bratcice (administrator) on BRATCICE-PC on 21-12-2014 12:25:41
Running from C:\Users\Bratcice\Desktop
Loaded Profile: Bratcice (Available profiles: Bratcice)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Bratcice\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-11-20] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5223016 2014-11-01] (AVAST Software)
HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6501656 2014-10-23] (Piriform Ltd)
HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\RunOnce: [Adobe Speed Launcher] => 1419151822
Startup: C:\Users\Bratcice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-2230995972-827467957-943234889-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
HKU\S-1-5-21-2230995972-827467957-943234889-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.seznam.cz/
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 188.95.56.2 188.95.56.3

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-10-28]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://www.seznam.cz/", "https://www.google.com/"
CHR Profile: C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-14]
CHR Extension: (Disk Google) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-14]
CHR Extension: (YouTube) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-14]
CHR Extension: (Vyhledávání Google) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-14]
CHR Extension: (Avast SafePrice) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2014-11-02]
CHR Extension: (Tabulky Google) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-14]
CHR Extension: (Peněženka Google) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-14]
CHR Extension: (Gmail) - C:\Users\Bratcice\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-14]
CHR HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - No Path
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-10-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-10-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-10-28] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-10-28] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2014-11-01] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-10-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-10-28] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2014-11-21] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2014-10-28] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2014-10-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2014-10-28] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-21 12:25 - 2014-12-21 12:26 - 00012786 _____ () C:\Users\Bratcice\Desktop\FRST.txt
2014-12-21 12:24 - 2014-12-21 12:24 - 00112640 _____ (forum.viry.cz) C:\Users\Bratcice\Desktop\FRSTLauncher.exe
2014-12-21 12:24 - 2014-12-21 12:23 - 02122240 _____ (Farbar) C:\Users\Bratcice\Desktop\FRST64.exe
2014-12-21 12:23 - 2014-12-21 12:25 - 00000000 ____D () C:\FRST
2014-12-21 11:01 - 2014-12-21 11:01 - 00085216 _____ () C:\Users\Bratcice\AppData\Local\recently-used.xbel
2014-12-21 00:32 - 2014-12-21 00:32 - 00000000 ____D () C:\Users\Bratcice\Desktop\navrhweb
2014-12-20 23:12 - 2014-12-20 23:12 - 00000000 ____D () C:\Users\Bratcice\Desktop\free obrazky
2014-12-19 12:46 - 2014-12-19 12:53 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (11)
2014-12-17 21:58 - 2014-12-17 21:58 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Zoner
2014-12-17 21:58 - 2014-12-17 21:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoner Callisto 5 FREE
2014-12-17 19:51 - 2014-12-17 19:51 - 00000881 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Inkscape.lnk
2014-12-17 19:50 - 2014-12-17 19:50 - 00000819 _____ () C:\Users\Public\Desktop\Inkscape.lnk
2014-12-17 19:47 - 2014-12-17 19:51 - 00000000 ____D () C:\Users\Bratcice\Inkscape
2014-12-17 14:40 - 2014-12-17 14:43 - 748044094 _____ () C:\Users\Bratcice\Desktop\David Guetta Dangerous (Official video) ft Sam Martin.avi
2014-12-16 18:29 - 2014-12-16 19:06 - 00000000 ____D () C:\Users\Bratcice\Documents\GTA San Andreas User Files
2014-12-16 18:15 - 2014-12-16 18:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-12-16 15:25 - 2014-12-21 09:49 - 00000504 _____ () C:\Windows\setupact.log
2014-12-16 15:25 - 2014-12-16 15:25 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-15 23:06 - 2014-12-21 00:51 - 00047310 _____ () C:\Windows\IE10_main.log
2014-12-15 21:40 - 2014-12-15 22:04 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\ProfiCAD
2014-12-15 21:40 - 2014-12-15 21:40 - 00000657 _____ () C:\Users\Public\Desktop\ProfiCAD.lnk
2014-12-15 21:40 - 2014-12-15 21:40 - 00000000 ____D () C:\Users\Public\Documents\ProfiCAD Samples
2014-12-15 21:40 - 2014-12-15 21:40 - 00000000 ____D () C:\Users\Public\Documents\ProfiCAD Library
2014-12-15 21:40 - 2014-12-15 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProfiCAD
2014-12-14 10:34 - 2014-12-14 11:56 - 00000000 ____D () C:\Users\Bratcice\Desktop\prospekt
2014-12-13 23:11 - 2014-12-13 23:19 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (9)
2014-12-13 21:16 - 2014-12-14 15:04 - 00118616 _____ () C:\Users\Bratcice\Desktop\dům.svg
2014-12-13 10:54 - 2014-12-13 10:54 - 15190546 _____ () C:\Users\Bratcice\Desktop\Objevte internet, který umí víc.avi
2014-12-13 10:52 - 2014-12-13 10:53 - 11089334 _____ () C:\Users\Bratcice\Desktop\Objevte internet, který vám zabezpečí domácnost.avi
2014-12-13 10:48 - 2014-12-13 10:48 - 15431628 _____ () C:\Users\Bratcice\Desktop\Přejme vám hodně štěstí do roku 2015.avi
2014-12-12 10:07 - 2014-12-12 10:07 - 00000000 ____D () C:\Windows\system32\appraiser
2014-12-10 23:05 - 2014-10-18 03:05 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2014-12-10 23:05 - 2014-10-18 02:33 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2014-12-10 15:39 - 2014-11-21 12:34 - 09058816 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-12-10 15:39 - 2014-11-21 11:23 - 00482816 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-12-10 15:39 - 2014-11-21 10:28 - 00386048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-12-10 15:38 - 2014-12-04 03:50 - 00830976 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2014-12-10 15:38 - 2014-12-04 03:50 - 00741376 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2014-12-10 15:38 - 2014-12-04 03:50 - 00413184 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-12-10 15:38 - 2014-12-04 03:50 - 00396800 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-12-10 15:38 - 2014-12-04 03:50 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-12-10 15:38 - 2014-12-04 03:50 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2014-12-10 15:38 - 2014-12-04 03:44 - 01083392 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-12-10 15:38 - 2014-12-02 00:28 - 01232040 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2014-12-10 15:38 - 2014-11-21 12:35 - 01188864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 12289024 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 02467328 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 01541632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00134144 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-12-10 15:38 - 2014-11-21 12:34 - 00065024 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-12-10 15:38 - 2014-11-21 12:33 - 00495616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-12-10 15:38 - 2014-11-21 12:33 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-12-10 15:38 - 2014-11-21 12:33 - 00174592 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-12-10 15:38 - 2014-11-21 12:33 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-12-10 15:38 - 2014-11-21 12:33 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-12-10 15:38 - 2014-11-21 12:32 - 01538048 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-12-10 15:38 - 2014-11-21 11:44 - 00981504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 06026240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 01267712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 00627712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 00132096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 00064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-12-10 15:38 - 2014-11-21 11:43 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-12-10 15:38 - 2014-11-21 11:42 - 11019264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-12-10 15:38 - 2014-11-21 11:42 - 02086912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-12-10 15:38 - 2014-11-21 11:42 - 00345600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-12-10 15:38 - 2014-11-21 11:42 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-12-10 15:38 - 2014-11-21 11:42 - 00176640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-12-10 15:38 - 2014-11-21 11:41 - 01466368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-12-10 15:38 - 2014-11-21 11:41 - 00142848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-12-10 15:38 - 2014-11-21 11:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-12-10 15:38 - 2014-11-21 11:41 - 00016384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-12-10 15:38 - 2014-11-21 09:55 - 01638912 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-12-10 15:38 - 2014-11-21 08:53 - 01638912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-12-10 15:38 - 2014-11-11 04:09 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-12-10 15:38 - 2014-11-11 03:44 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-12-10 15:38 - 2014-11-11 02:46 - 00119296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2014-12-10 15:38 - 2014-11-08 04:16 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-12-10 15:38 - 2014-11-08 03:45 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-12-10 15:38 - 2014-10-30 03:04 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-12-10 15:38 - 2014-10-30 03:03 - 00165888 _____ (Microsoft Corporation) C:\Windows\system32\charmap.exe
2014-12-10 15:38 - 2014-10-30 02:46 - 00428544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-12-10 15:38 - 2014-10-30 02:45 - 00155136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\charmap.exe
2014-12-10 15:38 - 2014-10-03 03:12 - 02020352 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2014-12-10 15:38 - 2014-10-03 03:12 - 00346624 _____ (Microsoft Corporation) C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 15:38 - 2014-10-03 03:12 - 00310272 _____ (Microsoft Corporation) C:\Windows\system32\WsmWmiPl.dll
2014-12-10 15:38 - 2014-10-03 03:12 - 00181248 _____ (Microsoft Corporation) C:\Windows\system32\WsmAuto.dll
2014-12-10 15:38 - 2014-10-03 03:11 - 00266240 _____ (Microsoft Corporation) C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 15:38 - 2014-10-03 02:45 - 01177088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2014-12-10 15:38 - 2014-10-03 02:45 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManMigrationPlugin.dll
2014-12-10 15:38 - 2014-10-03 02:45 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmWmiPl.dll
2014-12-10 15:38 - 2014-10-03 02:45 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmAuto.dll
2014-12-10 15:38 - 2014-10-03 02:44 - 00198656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSManHTTPConfig.exe
2014-12-09 21:17 - 2014-12-09 21:17 - 00749724 _____ () C:\Users\Bratcice\Desktop\Jobscz Šťastný človek nelpí na cíli.avi
2014-12-09 21:16 - 2014-12-09 21:16 - 01151292 _____ () C:\Users\Bratcice\Desktop\Pracecz Utekl Ne, jen si našel lepší práci.avi
2014-12-09 21:16 - 2014-12-09 21:16 - 00960686 _____ () C:\Users\Bratcice\Desktop\Pracecz Případ pro kriminálku Ne! Jen si našla lepší práci.avi
2014-12-09 21:16 - 2014-12-09 21:16 - 00862614 _____ () C:\Users\Bratcice\Desktop\Pracecz Dělá, že tu není Ne, jen si našel lepší práci.avi
2014-12-09 19:07 - 2014-12-09 21:58 - 00000000 ____D () C:\Users\Bratcice\Desktop\web
2014-12-09 18:11 - 2014-12-09 19:10 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (8)
2014-12-07 22:01 - 2014-12-07 23:26 - 00000000 ____D () C:\Users\Bratcice\Desktop\napady
2014-12-07 16:42 - 2008-08-18 18:18 - 00077824 _____ (Fox Magic Software) C:\Windows\SysWOW64\fmcodec.DLL
2014-12-07 16:32 - 2014-12-19 16:51 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (7)
2014-12-07 11:19 - 2014-12-07 11:37 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (6)
2014-12-06 13:34 - 2014-12-06 13:35 - 21809664 _____ () C:\Users\Bratcice\Desktop\Kryštůfek záchranář má své první profesionální video.avi
2014-12-05 13:11 - 2014-12-05 13:12 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (5)
2014-12-04 12:19 - 2014-12-04 12:41 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (2)
2014-12-03 20:16 - 2014-12-03 20:16 - 00003106 _____ () C:\Windows\System32\Tasks\{2FFF0785-DDFF-4979-BD6D-05F54FD2AEE0}
2014-11-30 14:05 - 2014-11-30 14:05 - 00001374 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2014-11-30 14:05 - 2014-11-30 14:05 - 00001305 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2014-11-30 14:05 - 2014-11-30 14:05 - 00000000 ____D () C:\Windows\cs
2014-11-30 14:04 - 2014-11-30 14:04 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2014-11-30 14:03 - 2014-11-30 14:04 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2014-11-30 14:03 - 2014-11-30 14:03 - 00000984 _____ () C:\Users\Bratcice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Movie Maker.lnk
2014-11-30 14:03 - 2014-11-30 14:03 - 00000000 ____D () C:\Program Files\Movie Maker
2014-11-30 14:02 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-11-30 14:02 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-11-30 14:02 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-11-30 14:02 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-11-30 14:02 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-11-30 14:02 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-11-30 14:02 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-11-30 14:02 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-11-30 14:01 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-11-30 14:01 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-11-30 14:00 - 2014-11-30 14:00 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-11-30 14:00 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-11-30 14:00 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-11-30 13:59 - 2014-11-30 14:06 - 00000000 ____D () C:\Users\Bratcice\AppData\Local\Windows Live
2014-11-30 13:39 - 2014-11-30 13:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-11-30 11:30 - 2014-11-30 12:04 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (4)
2014-11-30 11:29 - 2014-11-30 11:29 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Ashampoo
2014-11-30 11:29 - 2014-11-30 11:29 - 00000000 ____D () C:\Users\Bratcice\AppData\Local\ashampoo
2014-11-30 11:29 - 2014-11-30 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2014-11-30 11:29 - 2014-11-30 11:29 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-11-28 15:47 - 2014-11-28 15:47 - 00000000 ____D () C:\Users\Bratcice\Desktop\win_x86
2014-11-26 22:09 - 2014-12-19 13:35 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (3)
2014-11-25 16:33 - 2014-11-25 16:40 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Audacity
2014-11-25 16:33 - 2014-11-25 16:33 - 00000657 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-11-23 17:24 - 2014-12-14 23:27 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka
2014-11-23 15:59 - 2014-11-23 15:59 - 00000863 _____ () C:\Users\Bratcice\.lmmsrc.xml
2014-11-23 15:54 - 2014-11-23 15:54 - 00000000 ____D () C:\Users\Bratcice\AppData\Local\WebVentures

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-12-21 12:18 - 2014-10-15 21:35 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-21 12:03 - 2014-10-14 22:53 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-21 11:28 - 2009-12-30 01:39 - 01595880 _____ () C:\Windows\WindowsUpdate.log
2014-12-21 10:46 - 2010-11-21 10:27 - 00668138 _____ () C:\Windows\system32\perfh005.dat
2014-12-21 10:46 - 2010-11-21 10:27 - 00140798 _____ () C:\Windows\system32\perfc005.dat
2014-12-21 10:46 - 2009-07-14 06:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-21 10:42 - 2009-07-14 05:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-21 10:42 - 2009-07-14 05:45 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-21 09:50 - 2014-10-28 11:20 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-12-21 09:50 - 2014-10-17 16:29 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Skype
2014-12-21 09:50 - 2014-10-14 22:53 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-21 09:49 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-20 19:15 - 2014-11-08 00:01 - 00000000 ____D () C:\Users\Bratcice\Desktop\dStyle
2014-12-20 12:20 - 2014-10-16 19:16 - 00000000 ____D () C:\Users\Bratcice\.gimp-2.8
2014-12-19 22:16 - 2014-10-27 17:33 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LEGO Company
2014-12-19 13:34 - 2014-10-17 20:02 - 00000000 ____D () C:\Users\Bratcice\AppData\Local\gtk-2.0
2014-12-17 19:52 - 2014-10-16 19:16 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\inkscape
2014-12-17 19:47 - 2009-12-30 01:45 - 00000000 ____D () C:\Users\Bratcice
2014-12-16 18:29 - 2014-10-30 16:25 - 00000000 ____D () C:\Users\Bratcice\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-12-16 18:15 - 2014-11-06 20:51 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-12-14 23:08 - 2014-11-17 15:10 - 00000000 ____D () C:\Users\Bratcice\Desktop\Nová složka (10)
2014-12-14 17:08 - 2014-10-18 12:40 - 00000000 ____D () C:\Users\Bratcice\Documents\Euro Truck Simulator 2
2014-12-13 23:24 - 2014-10-17 18:20 - 00000000 ___HD () C:\Users\Bratcice\Desktop\.picasaoriginals
2014-12-13 12:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-12-12 10:11 - 2014-10-15 19:24 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-12-12 10:07 - 2009-12-29 23:12 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-12-12 10:07 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-12-10 23:10 - 2014-10-15 19:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-12-10 23:10 - 2014-10-14 20:41 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-10 23:06 - 2014-10-14 20:41 - 112710672 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-09 19:18 - 2014-10-15 21:35 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-12-09 19:18 - 2014-10-15 21:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-12-09 19:18 - 2014-10-15 21:35 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-12-07 16:52 - 2014-10-19 00:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2014-12-07 16:51 - 2014-10-14 01:05 - 00114096 _____ () C:\Users\Bratcice\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-07 16:42 - 2014-10-25 20:02 - 00000049 _____ () C:\Windows\SysWOW64\ScrRecX.log
2014-12-07 16:42 - 2014-10-18 23:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
2014-12-06 10:26 - 2009-07-14 05:45 - 00439928 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-02 14:13 - 2014-11-16 09:35 - 00000000 ____D () C:\Users\Bratcice\Desktop\videa
2014-11-30 14:04 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-11-24 14:04 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-23 18:51 - 2014-11-17 15:14 - 00000000 ____D () C:\Users\Bratcice\Desktop\pracovny
2014-11-21 23:20 - 2014-10-28 11:18 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-12-15 16:04




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:99.51 GB) (Free:56.37 GB) NTFS
Drive d: () (Fixed) (Total:198.48 GB) (Free:142.48 GB) NTFS

Available physical RAM: 1664.18 MB
Total physical RAM: 4095.3 MB
Percentage of memory in use: 59%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 298.1 GB) (Disk ID: 1C3101F6)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=99.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=198.5 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Bratcice\Desktop" je 6567 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-2230995972-827467957-943234889-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - No Path
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
End

Uložte na plochu jako fixlist.txt. Pak znovu spusťte FRST a klikněte na >Fix<. Zkopírujte sem pak log, který se na závěr vytvoří.

[danieldvo]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 21-12-2014
Ran by Bratcice at 2014-12-21 14:14:22 Run:1
Running from C:\Users\Bratcice\Desktop
Loaded Profile: Bratcice (Available profiles: Bratcice)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [507776 2014-10-07] (Oracle Corporation)
HKU\S-1-5-21-2230995972-827467957-943234889-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR HKU\S-1-5-21-2230995972-827467957-943234889-1000\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - No Path
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-2230995972-827467957-943234889-1000\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKU\S-1-5-21-2230995972-827467957-943234889-1000\SOFTWARE\Google\Chrome\Extensions\fcfenmboojpjinhpgggodefccipikbpd" => Key deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl" => Key deleted successfully.
"C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx" => File/Directory not found.
c2cautoupdatesvc => Service stopped successfully.
c2cautoupdatesvc => Service deleted successfully.
c2cpnrsvc => Service stopped successfully.
c2cpnrsvc => Service deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.

==== End of Fixlog ====

[Rudy]

Smazáno. Nastala nějaká změna?

[danieldvo]

Už se zdálo že je to pryč ale problém přetrvává .. (ale už mi nesvítí že nefunguje internet)..

[Rudy]

Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a djte log. Předem nic nemažte.

[danieldvo]

log z čeho ? opět z toho FRST ?

[Rudy]

Když MBAM, tak z něj.

[danieldvo]

jo nemohl jsem najít ten log v tom.

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 21.12.2014
Scan Time: 19:25:37
Logfile: scan.txt
Administrator: Yes

Version: 2.00.4.1028
Malware Database: v2014.12.21.04
Rootkit Database: v2014.12.14.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Bratcice

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 318301
Time Elapsed: 7 min, 22 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 3
PUP.Optional.Bitcoin, C:\Windows\SysWOW64\acumncusbrsp.exe, Quarantined, [1761452098e42b0b6928e529738fc43c],
Trojan.BitMiner, C:\Windows\SysWOW64\dcgmncusbrsp.exe, Quarantined, [fc7c065f3745f343ddaf22fd6f932bd5],
PUP.BitCoinMiner, C:\Windows\SysWOW64\lcpmncusbrsp.exe, Quarantined, [a9cf8adb3f3dc0761d3561cbda279868],

Physical Sectors: 0
(No malicious items detected)


(end)

[Rudy]

Nalezené položky smažte.

[danieldvo]

smazal ale nepomohlo to.

[Rudy]

Co jste instaloval před tím, než se problém obejvil?

[danieldvo]

nic extra jsem neinstaloval jen dva programy, které používám na více počítačích již několik let a bez problému a Adobe reader 11