Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Kontrola

Nemáte v tuto chvíli žádný problém s pc a chcete se jen ujistit, že je vše v pořádku?
Vložte log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
Lord999
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 13 říj 2012 11:34

Kontrola

#1 Příspěvek od Lord999 »

zdravím vás, mohl bych někoho poporsit zda by se podival na log zda je vše v pořádku ? Díky


Logfile of random's system information tool 1.10 (written by random/random)
Run by Ondra at 2015-01-18 20:13:53
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 788 GB (83%) free of 954 GB
Total RAM: 2012 MB (35% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:14:36, on 18.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16483)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\SysWOW64\ctfmon.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files\trend micro\Ondra.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 1696716967
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 1696716967
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.mystartsearch.com/web/?type= ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.mystartsearch.com/web/?type= ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... 1696716967
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: unisaLes - {698a595c-42c0-4e39-b134-32bc81043826} - C:\Program Files (x86)\unisaLes\FiyFUBCpMG5U4E.dll (file missing)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: youtubeadblocker - {ae13b412-7bf2-4cf9-8fce-48611a8b9b66} - C:\Program Files (x86)\youtubeadblocker\OslTvVafsF8bA3.dll (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - Startup: Castle Defense 1.4.6 APK Mod Unlimited Crystals Download.lnk = C:\ProgramData\{1e2acc94-f6b3-c9a5-1e2a-acc94f6b3253}\Castle Defense 1.4.6 APK Mod Unlimited Crystals Download.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\Alwil Software\Avast5\afwServ.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - Unknown owner - C:\Windows\System32\TuneUpDefragService.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 6328 bytes

======Listing Processes======



\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\Alwil Software\Avast5\AvastSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"taskhost.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\Alwil Software\Avast5\afwServ.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-4b0bb853-a70e-4394-b8a0-a62b8e508022 -SystemEventPortName:HostProcess-40336516-2976-46e6-9e3e-5391a723d358 -IoCancelEventPortName:HostProcess-8657770c-9072-46f7-a1e4-9d6d21df14dd -NonStateChangingEventPortName:HostProcess-2f6b1f60-d8e4-4150-9026-c7163fba91b9 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:0bdead6c-53d0-48e8-ab19-040345ed2b7d -DeviceGroupId:WpdFsGroup
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Program Files\TortoiseSVN\bin\TSVNCache.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Program Files\Alwil Software\Avast5\AvastUI.exe" /nogui
C:\Windows\system32\wbem\unsecapp.exe -Embedding
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
ctfmon.exe
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&t ... 1696716967

C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe7_ Global\UsGthrCtrlFltPipeMssGthrPipe7 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\Ondra\Downloads\RSITx64.exe"

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{698a595c-42c0-4e39-b134-32bc81043826}]
unisaLes - C:\Program Files (x86)\unisaLes\FiyFUBCpMG5U4E.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll [2015-01-16 705448]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}]
youtubeadblocker - C:\Program Files (x86)\youtubeadblocker\OslTvVafsF8bA3.x64.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{698a595c-42c0-4e39-b134-32bc81043826}]
unisaLes - C:\Program Files (x86)\unisaLes\FiyFUBCpMG5U4E.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-07-06 463272]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2015-01-16 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}]
youtubeadblocker - C:\Program Files (x86)\youtubeadblocker\OslTvVafsF8bA3.dll []

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-07-06 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{318A227B-5E9F-45bd-8999-7F8F10CA4CF5}
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-11 162328]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-11 386584]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-11 417304]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-10-01 22066272]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Ondra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Age2 Config.lnk]
C:\Program Files (x86)\Age Of Empires 2 & The Conquerors Expansion - Full Game\Data\Aconfig.exe []

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\Alwil Software\Avast5\AvastUI.exe [2015-01-16 5227112]

C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Castle Defense 1.4.6 APK Mod Unlimited Crystals Download.lnk - C:\ProgramData\{1e2acc94-f6b3-c9a5-1e2a-acc94f6b3253}\Castle Defense 1.4.6 APK Mod Unlimited Crystals Download.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 272896]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2015-01-18 19:48:38 ----D---- C:\ProgramData\IHProtectUpDate
2015-01-18 19:45:25 ----D---- C:\ProgramData\16193218898048447688
2015-01-18 19:44:04 ----D---- C:\ProgramData\{1e2acc94-f6b3-c9a5-1e2a-acc94f6b3253}
2015-01-16 20:41:42 ----A---- C:\Windows\system32\drivers\aswKbd.sys
2015-01-16 20:41:20 ----A---- C:\Windows\system32\aswBoot.exe
2015-01-16 20:41:04 ----A---- C:\Windows\avastSS.scr
2015-01-16 20:40:12 ----A---- C:\Windows\system32\drivers\aswNdisFlt.sys
2015-01-15 15:18:28 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-12-25 09:15:16 ----A---- C:\Windows\system32\FNTCACHE.DAT

======List of files/folders modified in the last 1 month======

2015-01-18 20:14:14 ----D---- C:\Program Files\trend micro
2015-01-18 20:06:16 ----D---- C:\Windows\temp
2015-01-18 19:52:59 ----D---- C:\Users\Ondra\AppData\Roaming\Skype
2015-01-18 19:50:19 ----RD---- C:\Program Files (x86)
2015-01-18 19:48:39 ----D---- C:\Windows\SysWOW64
2015-01-18 19:48:38 ----D---- C:\ProgramData
2015-01-18 19:10:55 ----D---- C:\Users\Ondra\AppData\Roaming\dvdcss
2015-01-17 10:22:12 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-16 20:44:48 ----D---- C:\Windows\system32\drivers
2015-01-16 20:44:48 ----D---- C:\Windows\inf
2015-01-16 20:44:37 ----D---- C:\Windows\system32\catroot
2015-01-16 20:44:31 ----D---- C:\Windows\system32\DriverStore
2015-01-16 20:44:09 ----SHD---- C:\System Volume Information
2015-01-16 20:42:08 ----D---- C:\Windows\system32\Tasks
2015-01-16 20:41:20 ----D---- C:\Windows\System32
2015-01-16 20:41:19 ----D---- C:\Windows
2015-01-15 14:06:54 ----D---- C:\Windows\system32\catroot2
2015-01-09 17:20:59 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-08 14:14:13 ----D---- C:\FFOutput
2015-01-05 13:32:10 ----D---- C:\Windows\system32\config
2014-12-30 21:50:26 ----D---- C:\Windows\system32\NDF
2014-12-24 18:16:32 ----D---- C:\Windows\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswNdisFlt;Avast! Firewall Driver; C:\Windows\system32\DRIVERS\aswNdisFlt.sys [2015-01-16 449936]
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2015-01-16 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2015-01-16 267632]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2015-01-16 28184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2015-01-16 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2015-01-16 1050432]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2015-01-16 436624]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-02-22 283064]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2015-01-16 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2015-01-16 83280]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2015-01-16 116728]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-02-11 10628640]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-02-09 325664]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthAvrcp;Bluetooth AVRCP Profile; C:\Windows\system32\DRIVERS\BthAvrcp.sys [2009-08-13 29184]
S3 BthEnum;Služba Bluetooth Enumerator; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 Dot4;MS IEEE-1284.4 Driver; C:\Windows\system32\DRIVERS\Dot4.sys [2009-07-14 145920]
S3 Dot4Print;Print Class Driver for IEEE-1284.4; C:\Windows\system32\DRIVERS\Dot4Prt.sys [2010-11-20 19968]
S3 dot4usb;MS Dot4USB Filter Dot4USB Filter; C:\Windows\system32\DRIVERS\dot4usb.sys [2009-07-14 43008]
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2011-08-17 19968]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 41984]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2015-01-16 50344]
R2 avast! Firewall;avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [2015-01-16 104416]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-02-11 76888]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 HPSLPSVC;HP Network Devices Support; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S2 Net Driver HPZ12;Net Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 Pml Driver HPZ12;Pml Driver HPZ12; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2015-01-15 114800]
S3 TuneUp.Defrag;@%SystemRoot%\System32\TuneUpDefragService.exe,-1; C:\Windows\System32\TuneUpDefragService.exe [2013-05-24 425216]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-05-24 1255736]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Kontrola

#2 Příspěvek od altrok »

Zdravim :bye:

:arrow: Skodnou tam mate.

:arrow: V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

:arrow: Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
  • ukoncete vsechny programy
  • kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
  • kliknete na Scan, pote na Clean
  • po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Lord999
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 13 říj 2012 11:34

Re: Kontrola

#3 Příspěvek od Lord999 »

# AdwCleaner v4.108 - Report created 18/01/2015 at 21:15:21
# Updated 17/01/2015 by Xplode
# Database : 2015-01-13.2 [Live]
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Ondra - ONDRA-PC
# Running from : C:\Users\Ondra\Desktop\adwcleaner_4.108.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\IHProtectUpDate
Folder Deleted : C:\ProgramData\16193218898048447688

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk
Shortcut Disinfected : C:\Users\Ondra\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [fftoolbar2014@etech.com]
Key Deleted : HKCU\Software\Mozilla\Extends
Key Deleted : HKLM\SOFTWARE\Classes\P698a595c_42c0_4e39_b134_32bc81043826_.P698a595c_42c0_4e39_b134_32bc81043826_
Key Deleted : HKLM\SOFTWARE\Classes\P698a595c_42c0_4e39_b134_32bc81043826_.P698a595c_42c0_4e39_b134_32bc81043826_.9
Key Deleted : HKLM\SOFTWARE\Classes\Pae13b412_7bf2_4cf9_8fce_48611a8b9b66_.Pae13b412_7bf2_4cf9_8fce_48611a8b9b66_
Key Deleted : HKLM\SOFTWARE\Classes\Pae13b412_7bf2_4cf9_8fce_48611a8b9b66_.Pae13b412_7bf2_4cf9_8fce_48611a8b9b66_.9
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{698a595c-42c0-4e39-b134-32bc81043826}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{ae13b412-7bf2-4cf9-8fce-48611a8b9b66}
Key Deleted : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\GetPrivate
Key Deleted : HKLM\SOFTWARE\SupDp
Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
Key Deleted : HKLM\SOFTWARE\IHProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4CEE92A3-9F0C-51AB-ADC0-34EC24AD7B7E}

***** [ Browsers ] *****

-\\ Internet Explorer v9.0.8112.16483

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v35.0 (x86 cs)

[czrn65eq.default-1373650185905\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.alias", "mystartsearch");
[czrn65eq.default-1373650185905\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.iconURL", "hxxp://www.mystartsearch.com/favicon.ico");
[czrn65eq.default-1373650185905\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.name", "mystartsearch");
[czrn65eq.default-1373650185905\prefs.js] - Line Deleted : user_pref("browser.search.searchengine.url", "hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}");
[czrn65eq.default-1373650185905\prefs.js] - Line Deleted : user_pref("browser.search.selectedEngine", "mystartsearch");

*************************

AdwCleaner[R1].txt - [822 octets] - [10/08/2014 21:31:46]
AdwCleaner[R2].txt - [7343 octets] - [18/01/2015 21:12:40]
AdwCleaner[S1].txt - [882 octets] - [10/08/2014 21:33:23]
AdwCleaner[S2].txt - [6278 octets] - [18/01/2015 21:15:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S2].txt - [6338 octets] ##########
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Kontrola

#4 Příspěvek od altrok »

:arrow: Dejte novy log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Lord999
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 13 říj 2012 11:34

Re: Kontrola

#5 Příspěvek od Lord999 »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 18-01-2015 01
Ran by Ondra (administrator) on ONDRA-PC on 18-01-2015 21:37:34
Running from C:\Users\Ondra\Desktop
Loaded Profiles: Ondra (Available profiles: Ondra)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\afwServ.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(http://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [5227112 2015-01-16] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22066272 2014-10-01] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll (http://tortoisesvn.net)
BootExecute: autocheck autochk * aswBoot.exe /M:49e9c265 /wow /dir:"C:\Program Files\Alwil Software\Avast5"
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\czrn65eq.default-1373650185905
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_202.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_202.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Computer, Inc.)
FF Extension: Greasemonkey - C:\Users\Ondra\AppData\Roaming\Mozilla\Firefox\Profiles\czrn65eq.default-1373650185905\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2013-07-12]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-04-01]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2015-01-16]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2015-01-16] (AVAST Software)
R2 avast! Firewall; C:\Program Files\Alwil Software\Avast5\afwServ.exe [104416 2015-01-16] (AVAST Software)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-02-11] ()
S3 TuneUp.Defrag; C:\Windows\System32\TuneUpDefragService.exe [425216 2013-05-24] (TuneUp Software GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 HPSLPSVC; C:\Users\Ondra\AppData\Local\Temp\7zS2F7C\hpslpsvc64.dll [X]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-01-16] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2015-01-16] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [83280 2015-01-16] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449936 2015-01-16] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-01-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-01-16] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-01-16] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-01-16] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-01-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-01-16] ()
S3 BthAvrcp; C:\Windows\System32\DRIVERS\BthAvrcp.sys [29184 2009-08-13] (CSR, plc)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-22] (Disc Soft Ltd)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-18 21:37 - 2015-01-18 21:38 - 00013515 _____ () C:\Users\Ondra\Desktop\FRST.txt
2015-01-18 21:36 - 2015-01-18 21:37 - 00000000 ____D () C:\FRST
2015-01-18 21:36 - 2015-01-18 21:36 - 02126848 _____ (Farbar) C:\Users\Ondra\Desktop\FRST64.exe
2015-01-18 21:12 - 2015-01-18 21:12 - 02186752 _____ () C:\Users\Ondra\Desktop\adwcleaner_4.108.exe
2015-01-18 20:13 - 2015-01-18 20:13 - 01222144 _____ () C:\Users\Ondra\Downloads\RSITx64.exe
2015-01-17 14:48 - 2015-01-17 15:23 - 326471552 _____ () C:\Users\Ondra\Downloads\Simpsonovi-25x21---Přátelství-za-všechny-peníze-DVB-T-CZ.avi
2015-01-16 20:45 - 2015-01-16 20:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-01-16 20:41 - 2015-01-16 20:41 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-01-16 20:41 - 2015-01-16 20:41 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-01-16 20:41 - 2015-01-16 20:40 - 00028184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2015-01-16 20:40 - 2015-01-16 20:40 - 00449936 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-01-15 15:18 - 2015-01-15 15:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-01-08 13:42 - 2015-01-08 14:04 - 213902729 _____ () C:\Users\Ondra\Downloads\Simpsonovi-25x15---Válka-umění.mp4
2015-01-07 08:35 - 2015-01-07 17:34 - 444106396 _____ () C:\Users\Ondra\Downloads\kdo-prezije-mikronesie-1x14.avi
2015-01-06 16:37 - 2015-01-06 17:00 - 214659074 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x14.avi.part
2015-01-05 12:42 - 2015-01-05 13:02 - 358671386 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x12.avi
2015-01-05 10:04 - 2015-01-05 10:23 - 346496464 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x11.avi
2015-01-05 09:46 - 2015-01-18 21:17 - 00002892 _____ () C:\Windows\PFRO.log
2015-01-04 22:26 - 2015-01-05 09:52 - 354984796 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x10.avi
2015-01-04 21:43 - 2015-01-04 22:06 - 374843496 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x09.avi
2015-01-03 21:21 - 2015-01-03 21:44 - 367791426 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x07.avi
2015-01-03 20:49 - 2015-01-03 21:11 - 383750376 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x06.avi
2015-01-02 21:23 - 2015-01-02 21:53 - 383388318 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Mikronésie-1x05.avi
2015-01-02 10:42 - 2015-01-02 11:09 - 246667264 _____ () C:\Users\Ondra\Downloads\Simpsonovi-25x01-Homerland.avi.part
2015-01-02 09:19 - 2015-01-02 09:51 - 561508558 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Čína-2-capula.avi
2015-01-01 18:22 - 2015-01-01 18:40 - 173018614 _____ () C:\Users\Ondra\Downloads\Simpsonovi-25x14---Zima-jeho-spokojenosti-(CZ-dabing).avi
2015-01-01 13:56 - 2015-01-16 21:50 - 00000000 ____D () C:\Users\Ondra\Desktop\Dk
2015-01-01 13:28 - 2015-01-01 14:07 - 367069184 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Cookovy-ostrovy-1x06.avi
2014-12-31 12:07 - 2014-12-31 12:38 - 554247476 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Cookovy-ostrovy-5.avi
2014-12-30 18:35 - 2015-02-01 19:35 - 566100420 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Cookovy-ostrovy-15.avi
2014-12-29 21:42 - 2014-12-29 22:14 - 575934894 _____ () C:\Users\Ondra\Downloads\Kdo-přežije-Cookovy-ostrovy-11.avi
2014-12-29 12:49 - 2014-12-29 12:49 - 00000000 ____D () C:\Users\Ondra\Downloads\ostatní
2014-12-29 12:48 - 2014-12-29 12:49 - 00000000 ____D () C:\Users\Ondra\Downloads\Seriály
2014-12-26 23:06 - 2014-12-26 23:06 - 00008496 _____ () C:\Users\Ondra\Documents\jjj.txt
2014-12-25 09:15 - 2015-01-18 21:17 - 00004148 _____ () C:\Windows\setupact.log
2014-12-25 09:15 - 2014-12-25 09:15 - 00272840 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-12-25 09:15 - 2014-12-25 09:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-24 18:43 - 2014-12-24 18:43 - 00059376 _____ () C:\Users\Ondra\AppData\Local\GDIPFONTCACHEV1.DAT
2014-12-24 18:05 - 2014-12-28 18:52 - 00000000 ____D () C:\Users\Ondra\Desktop\West

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-02-01 19:03 - 2013-06-05 18:35 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{46EFB8E1-4716-4A70-B5DF-F61B8BF0BF94}
2015-01-18 21:26 - 2009-07-14 05:45 - 00010832 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-18 21:26 - 2009-07-14 05:45 - 00010832 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-18 21:22 - 2013-05-23 18:18 - 01752607 _____ () C:\Windows\WindowsUpdate.log
2015-01-18 21:20 - 2013-05-23 18:50 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\Skype
2015-01-18 21:19 - 2013-05-28 20:30 - 00004184 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-01-18 21:17 - 2013-06-28 20:11 - 00000000 ____D () C:\Users\Ondra\AppData\Local\TSVNCache
2015-01-18 21:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-18 21:15 - 2014-08-10 21:31 - 00000000 ____D () C:\AdwCleaner
2015-01-18 21:15 - 2013-05-23 18:36 - 00001156 _____ () C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-01-18 21:15 - 2013-05-23 18:36 - 00000929 _____ () C:\Users\Ondra\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2015-01-18 20:14 - 2014-03-13 18:28 - 00000000 ____D () C:\Program Files\trend micro
2015-01-18 19:10 - 2013-05-23 20:10 - 00000000 ____D () C:\Users\Ondra\AppData\Roaming\dvdcss
2015-01-17 11:15 - 2012-06-16 10:20 - 00000000 ___RD () C:\Users\Ondra\Desktop\Programy
2015-01-17 10:22 - 2013-05-24 15:25 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-01-16 20:42 - 2013-05-28 20:30 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-01-16 20:41 - 2014-05-19 17:39 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-01-16 20:41 - 2014-01-26 18:10 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2015-01-16 20:41 - 2013-05-28 20:31 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-01-16 20:41 - 2013-05-28 20:30 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-01-16 20:41 - 2013-05-28 20:30 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-01-16 20:41 - 2013-05-23 19:18 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2015-01-16 20:41 - 2013-05-23 19:18 - 00083280 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-01-09 17:20 - 2009-07-14 16:18 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2015-01-09 17:20 - 2009-07-14 16:18 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2015-01-09 17:20 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-08 14:14 - 2013-10-02 18:00 - 00000000 ____D () C:\FFOutput
2014-12-30 21:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-29 12:05 - 2013-06-12 10:07 - 00000000 ____D () C:\Users\Ondra\Downloads\Filmy
2014-12-24 18:16 - 2014-08-04 13:29 - 00000000 ____D () C:\Windows\Minidump
2014-12-24 18:09 - 2012-04-22 13:36 - 00000000 ____D () C:\Users\Ondra\Desktop\Důležité
2014-12-21 09:07 - 2009-07-14 06:08 - 00032546 _____ () C:\Windows\Tasks\SCHEDLGU.TXT

==================== Files in the root of some directories =======
2013-06-08 19:01 - 2013-06-09 11:30 - 0007859 _____ () C:\Users\Ondra\AppData\Roaming\pcouffin.cat
2013-06-08 19:01 - 2013-06-09 11:30 - 0001167 _____ () C:\Users\Ondra\AppData\Roaming\pcouffin.inf
2013-06-08 19:02 - 2013-06-09 11:30 - 0000074 _____ () C:\Users\Ondra\AppData\Roaming\pcouffin.log
2013-06-08 19:01 - 2013-06-09 11:30 - 0082816 _____ (VSO Software) C:\Users\Ondra\AppData\Roaming\pcouffin.sys
2014-07-05 10:50 - 2014-07-14 11:20 - 0001041 _____ () C:\Users\Ondra\AppData\Roaming\vso_ts_preview.xml
2013-12-17 22:00 - 2013-12-17 22:00 - 0000000 ___SH () C:\Users\Ondra\AppData\Local\LumaEmu
2013-05-27 18:02 - 2013-05-27 18:03 - 0007626 _____ () C:\Users\Ondra\AppData\Local\Resmon.ResmonCfg
2013-09-26 19:41 - 2014-03-19 17:42 - 0004832 _____ () C:\ProgramData\hpzinstall.log

Some content of TEMP:
====================
C:\Users\Ondra\AppData\Local\Temp\Quarantine.exe
C:\Users\Ondra\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Ondra\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-07 22:01

==================== End Of Log ============================

----------------------------------------------------------------------------



Additional scan result of Farbar Recovery Scan Tool (x64) Version: 18-01-2015 01
Ran by Ondra at 2015-01-18 21:39:28
Running from C:\Users\Ondra\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 11 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 11.7.700.202 - Adobe Systems Incorporated)
Adobe Flash Player 14 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 14.0.0.145 - Adobe Systems Incorporated)
Age Of Empires 2 & The Conquerors Expansion - Full Game (HKLM-x32\...\Age Of Empires 2 & The Conquerors Expansion - Full Game) (Version: - )
Aladin: Nasiřina pomsta (HKLM-x32\...\InstallShield_{59AB2A69-52CD-473A-925A-7637A5F69334}) (Version: 1.0 - Disney Interactive)
Aladin: Nasiřina pomsta (x32 Version: 1.0 - Disney Interactive) Hidden
Avast Internet Security (HKLM-x32\...\avast) (Version: 10.0.2208 - AVAST Software)
BitTorrent (HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\...\BitTorrent) (Version: 7.9.2.35704 - BitTorrent Inc.)
ConvertXtoDVD 2.2.3.258 (HKLM-x32\...\{BB406CEB-6207-4512-9BB2-89950DC9D6B6}_is1) (Version: 2.2.3.258 - VSO-Software SARL)
ConvertXtoDVD 4.0.6.316 (HKLM-x32\...\{DB6AB705-C9BD-40E3-8929-2EA57F36A4FF}_is1) (Version: 4.0.6.316 - )
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
Duke Nukem - Manhattan Project (x32 Version: 1.0.1 - Arush Entertainment) Hidden
Emilka Holubová - Montezumův poklad (HKLM-x32\...\Emilka Holubová - Montezumův poklad) (Version: - )
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
GTA San Andreas (HKLM-x32\...\{D417C96A-FCC7-4590-A1BB-FAF73F5BC98E}) (Version: 1.00.00001 - Rockstar Games)
GTA:SanAndreas_CZ (HKLM-x32\...\GTA:SanAndreas_CZ) (Version: - )
Java 7 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.250 - Oracle)
Microsoft .NET Framework 4.5.1 (čeština) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1029) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Mozilla Firefox 35.0 (x86 cs) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 cs)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 29.0.1 - Mozilla)
Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version: - )
NFS: Most Wanted CZ (HKLM-x32\...\NFS: Most Wanted) (Version: CZ - Sub - Zero)
Nokia Connectivity Cable Driver (HKLM\...\{BC4AE628-81A4-4FC6-863A-7A9BA2E2531F}) (Version: 7.1.32.69 - )
Office Apps (HKLM-x32\...\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}) (Version: - )
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.15.209.2010 - Realtek)
Rise of Nations: Extended Edition (HKLM-x32\...\Rise of Nations: Extended Edition_is1) (Version: - Microsoft Studios)
S.W.I.N.E. (HKLM-x32\...\{A145C3F3-00FA-4AC0-9F55-3900D02DBE07}) (Version: - )
Shade: Hněv andělů (HKLM-x32\...\{5F055711-2CAF-4323-8443-BEE4913FC7E6}) (Version: 1.20.000 - )
SimCity (HKLM-x32\...\SimCity_R.G. Mechanics_is1) (Version: - R.G. Mechanics, markfiter)
Skype™ 6.21 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 6.21.104 - Skype Technologies S.A.)
Stellarium 0.12.4 (HKLM-x32\...\Stellarium_is1) (Version: 0.12.4 - Stellarium team)
TortoiseSVN 1.8.0.24401 (64 bit) (HKLM\...\{67630560-B0DC-4FC6-8B04-7B949F8ABEF0}) (Version: 1.8.24401 - TortoiseSVN)
Unreal Anthology (HKLM-x32\...\{14AA72DA-DB40-4A34-93A6-401A81D7AF9E}_is1) (Version: - CD Projekt)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Zoo Tycoon: Complete Collection (HKLM-x32\...\Zoo Tycoon 1.0) (Version: - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)


==================== Restore Points =========================

29-10-2014 16:58:36 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610
29-10-2014 17:00:40 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
16-01-2015 20:35:32 avast! antivirus system restore point
16-01-2015 20:42:56 Instalace balíčku ovladače zařízení: Avast Síťová služba

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2014-03-14 19:33 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)

Task: {03B18E86-ABAF-40AD-AF75-B9D25E643721} - System32\Tasks\{37AE3FC3-1B97-49C2-BB2F-A62E4F5693D8} => I:\SETUP.EXE
Task: {18FB918C-27E0-4AF4-BD36-77AF0DF9918B} - System32\Tasks\FRAPS => C:\Program Files (x86)\fraps\fraps.exe
Task: {1EA339B3-AA71-4E00-930C-3D08016BF859} - System32\Tasks\{904E8F48-AD05-478D-8A28-A94DEB11F4A0} => D:\SETUP\INSTALL.EXE
Task: {218CBAB2-222A-46EC-B1B7-47E5E6EA90BD} - System32\Tasks\{A49621EE-6C4E-4746-AFAD-1E51C2222EFF} => D:\nfs (G_)\daemon347.exe
Task: {237FEE4C-E606-4B61-B914-65BBBA8702CF} - System32\Tasks\{0491861E-59DE-431C-9D16-074B488B929B} => pcalua.exe -a "D:\Gta 2.exe" -d D:\
Task: {24D91BFC-F96A-4119-B9B1-4B5587098AB0} - System32\Tasks\{33414359-92D8-4219-83AD-CCA454E60002} => Firefox.exe http://ui.skype.com/ui/0/7.0.80.100/cs/ ... rogressBar
Task: {27B331FA-AE5C-47E1-BE89-DC3467146016} - System32\Tasks\{2772EA45-51D8-4046-8D7B-95A42DB419EE} => D:\SETUP.EXE
Task: {2C3EF7DA-6873-4CCE-A752-CAE00EDCAA78} - System32\Tasks\{634AB180-EFEE-48A2-8E72-C99F786BB0D0} => D:\Setup.exe
Task: {36C2AB90-4A0F-46CE-BF07-FDB1EBFFE6DF} - System32\Tasks\{30CA83EC-84B0-44F9-AF55-A567FD35DE40} => D:\SETUP\INSTALL.EXE
Task: {404F5E83-5537-46C0-A08A-C29BF6DE667B} - System32\Tasks\{FF1BC69F-2739-4380-AA58-043BFA5C33EE} => D:\SETUP.EXE
Task: {463F2A99-C482-4A9E-BB38-F593E747FC5D} - System32\Tasks\avast! Emergency Update => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe [2015-01-16] (AVAST Software)
Task: {6B125FC9-3508-42FE-8203-4269DCF0BA03} - System32\Tasks\{ECF27A9B-DF22-428D-9DAA-659ECA98336C} => I:\SETUP.EXE
Task: {777DCC6B-7CCA-4594-BA05-1F1E8DE6EF58} - System32\Tasks\{CAD7DBB4-B492-46AD-AE74-26106692BD3F} => D:\SETUP\INSTALL.EXE
Task: {7AA9497D-3797-4DC1-9B35-4462AA55B896} - System32\Tasks\{649766EE-4D02-4D38-A3AD-4067095699F4} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {92CAC85B-ACB5-4525-9911-83C2E6D44AF4} - System32\Tasks\{48BAB383-B691-4D0F-9085-1218058E0A35} => D:\SETUP.EXE
Task: {CFFCCF31-E04F-44C3-A0DD-D7F13548893A} - System32\Tasks\{271AF7B4-14A2-47EA-9C6B-4C69DFEC8E72} => pcalua.exe -a C:\PROGRA~2\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe -c /M{8B9336DB-8D04-4325-BAFC-C7141D8E6CA1} /l1033
Task: {D66A304B-5CD9-4E4C-9596-F22890A208F9} - System32\Tasks\{02DDAA1E-A122-4A59-9D5D-FAC9977FC637} => C:\GTA2\Gta2\gta2 manager.exe
Task: {D8882773-3322-44FA-A822-E2D7E5D2D5CE} - System32\Tasks\{8E361E18-C126-4258-A128-C2C81F9B2D7B} => msiexec.exe /package "C:\Users\Ondra\Downloads\msxml.msi"
Task: {DBF7492E-7D95-443F-ACC6-BAF7748CCF10} - System32\Tasks\{1A2DD0EE-BB15-40F7-95C5-CAB5250AE879} => D:\SETUP.EXE
Task: {E7954E87-127F-4F13-A853-7CF482AC69CE} - System32\Tasks\{79D8514D-B71B-46F5-9302-80089FB44F82} => C:\GTA2\Gta2\gta2 manager.exe

==================== Loaded Modules (whitelisted) =============

2013-06-17 19:27 - 2013-06-17 19:27 - 00075504 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2013-06-17 19:27 - 2013-06-17 19:27 - 00088304 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2014-02-11 13:12 - 2014-02-11 13:12 - 00076888 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-01-18 15:20 - 2015-01-18 15:20 - 02911744 _____ () C:\Program Files\Alwil Software\Avast5\defs\15011800\algo.dll
2015-01-18 21:20 - 2015-01-18 21:20 - 02911744 _____ () C:\Program Files\Alwil Software\Avast5\defs\15011801\algo.dll
2013-06-17 18:35 - 2013-06-17 18:35 - 00065264 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2013-06-17 18:34 - 2013-06-17 18:34 - 00070896 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2015-01-16 20:40 - 2015-01-16 20:40 - 38562088 _____ () C:\Program Files\Alwil Software\Avast5\libcef.dll
2015-01-15 15:18 - 2015-01-15 15:18 - 03925104 _____ () C:\Program Files (x86)\Mozilla Firefox\mozjs.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)

AlternateDataStreams: C:\ProgramData\TEMP:54D3B4D3

==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) =============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== MSCONFIG/TASK MANAGER disabled items =========

(Currently there is no automatic fix for this section.)

MSCONFIG\startupfolder: C:^Users^Ondra^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Age2 Config.lnk => C:\Windows\pss\Age2 Config.lnk.Startup
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

========================= Accounts: ==========================

Administrator (S-1-5-21-3172588593-3335336786-2879373708-500 - Administrator - Disabled)
Guest (S-1-5-21-3172588593-3335336786-2879373708-501 - Limited - Disabled)
Ondra (S-1-5-21-3172588593-3335336786-2879373708-1000 - Administrator - Enabled) => C:\Users\Ondra

==================== Faulty Device Manager Devices =============


==================== Event log errors: =========================

Application errors:
==================
Error: (01/16/2015 08:43:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Služba Šifrování selhala při volání OnIdentity() v objektu System Writer.


Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! Network Shield Support.

System Error:
Systém nemůže nalézt uvedený soubor.
.

Error: (12/15/2014 06:34:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program UT2004.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 9a4

Čas spuštění: 01d018879b736c72

Čas ukončení: 96

Cesta k aplikaci: C:\Program Files (x86)\Unreal Anthology\UT2004\System\UT2004.exe

ID hlášení:

Error: (12/01/2014 07:50:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: SimCity.exe, verze: 10.0.0.0, časové razítko: 0x5318d470
Název chybujícího modulu: 1911.dll, verze: 0.0.0.0, časové razítko: 0x5330b0f3
Kód výjimky: 0xc0000005
Posun chyby: 0x0006544c
ID chybujícího procesu: 0x29c
Čas spuštění chybující aplikace: 0xSimCity.exe0
Cesta k chybující aplikaci: SimCity.exe1
Cesta k chybujícímu modulu: SimCity.exe2
ID zprávy: SimCity.exe3

Error: (11/26/2014 02:32:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program hl2.exe verze 0.0.0.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: c2c

Čas spuštění: 01d009798ffd6dcd

Čas ukončení: 420

Cesta k aplikaci: C:\GarryMod\hl2.exe

ID hlášení:

Error: (11/16/2014 09:16:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program vlc.exe verze 0.9.4.0 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1198

Čas spuštění: 01d001d9f955b820

Čas ukončení: 48

Cesta k aplikaci: C:\Program Files (x86)\VideoLAN\VLC\vlc.exe

ID hlášení: 590c3342-6dcd-11e4-9081-6cf049ae3dc4

Error: (11/11/2014 02:28:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: plugin-container.exe, verze: 33.1.0.5423, časové razítko: 0x545c0a59
Název chybujícího modulu: mozalloc.dll, verze: 33.1.0.5423, časové razítko: 0x545be5ee
Kód výjimky: 0x80000003
Posun chyby: 0x00001425
ID chybujícího procesu: 0xe1c
Čas spuštění chybující aplikace: 0xplugin-container.exe0
Cesta k chybující aplikaci: plugin-container.exe1
Cesta k chybujícímu modulu: plugin-container.exe2
ID zprávy: plugin-container.exe3

Error: (11/11/2014 02:28:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 33.1.0.5423 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1e0

Čas spuštění: 01cffdaefc94f2ee

Čas ukončení: 127

Cesta k aplikaci: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

ID hlášení: 7a76b2e5-69a6-11e4-9092-6cf049ae3dc4

Error: (11/11/2014 01:56:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Program firefox.exe verze 33.0.3.5422 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: ca4

Čas spuštění: 01cffda9f81777f4

Čas ukončení: 181

Cesta k aplikaci: C:\Program Files (x86)\Mozilla Firefox\firefox.exe

ID hlášení: 2e74d99f-69a2-11e4-9092-6cf049ae3dc4

Error: (11/07/2014 10:05:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: Montezumůvpoklad.exe, verze: 0.0.0.0, časové razítko: 0x45f7ed5e
Název chybujícího modulu: Montezumůvpoklad.exe, verze: 0.0.0.0, časové razítko: 0x45f7ed5e
Kód výjimky: 0xc000000d
Posun chyby: 0x001c6940
ID chybujícího procesu: 0x106c
Čas spuštění chybující aplikace: 0xMontezumůvpoklad.exe0
Cesta k chybující aplikaci: Montezumůvpoklad.exe1
Cesta k chybujícímu modulu: Montezumůvpoklad.exe2
ID zprávy: Montezumůvpoklad.exe3

Error: (11/06/2014 07:24:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Název chybující aplikace: rise.exe, verze: 0.2009.9.1500, časové razítko: 0x539841bb
Název chybujícího modulu: ntdll.dll, verze: 6.1.7601.17725, časové razítko: 0x4ec49b8f
Kód výjimky: 0xc0000374
Posun chyby: 0x000ce6c3
ID chybujícího procesu: 0xea4
Čas spuštění chybující aplikace: 0xrise.exe0
Cesta k chybující aplikaci: rise.exe1
Cesta k chybujícímu modulu: rise.exe2
ID zprávy: rise.exe3


System errors:
=============
Error: (01/18/2015 09:20:20 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba HP Network Devices Support byla ukončena s následující chybou:
%%126

Error: (01/18/2015 09:17:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Pml Driver HPZ12 byla ukončena s následující chybou:
%%126

Error: (01/18/2015 09:17:18 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Služba Net Driver HPZ12 byla ukončena s následující chybou:
%%126

Error: (01/18/2015 09:15:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Windows Search neuspěla při spuštění v důsledku následující chyby:
%%1069

Error: (01/18/2015 09:15:54 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WSearch se nemohla přihlásit jako NT AUTHORITY\SYSTEM s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (01/18/2015 09:15:54 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Služba Služba Windows Media Player Network Sharing neuspěla při spuštění v důsledku následující chyby:
%%1069

Error: (01/18/2015 09:15:54 PM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Služba WMPNetworkSvc se nemohla přihlásit jako NT AUTHORITY\NetworkService s aktuálně konfigurovaným heslem z důvodu následující chyby:
%%50

Chcete-li zajistit správnou konfiguraci služby, použijte modul snap-in Služby konzoly Microsoft Management Console (MMC).

Error: (01/18/2015 09:15:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Windows Search byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/18/2015 09:15:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba Windows Media Player Network Sharing byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 30000 milisekund: Restartovat službu.

Error: (01/18/2015 09:15:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Služba Služba zařazování tisku byla nečekaně ukončena. Stalo se to 1 krát. Následující opravná akce bude spuštěna za 60000 milisekund: Restartovat službu.


Microsoft Office Sessions:
=========================
Error: (01/16/2015 08:43:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description:
Details:
AddLegacyDriverFiles: Unable to back up image of binary avast! Network Shield Support.

System Error:
Systém nemůže nalézt uvedený soubor.

Error: (12/15/2014 06:34:20 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: UT2004.exe0.0.0.09a401d018879b736c7296C:\Program Files (x86)\Unreal Anthology\UT2004\System\UT2004.exe

Error: (12/01/2014 07:50:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SimCity.exe10.0.0.05318d4701911.dll0.0.0.05330b0f3c00000050006544c29c01d00d977ac8a7ecC:\Program Files (x86)\R.G. Mechanics\SimCity\SimCity\SimCity.exeC:\Program Files (x86)\R.G. Mechanics\SimCity\SimCity\1911.dlle22800e3-798a-11e4-b3be-6cf049ae3dc4

Error: (11/26/2014 02:32:48 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: hl2.exe0.0.0.0c2c01d009798ffd6dcd420C:\GarryMod\hl2.exe

Error: (11/16/2014 09:16:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: vlc.exe0.9.4.0119801d001d9f955b82048C:\Program Files (x86)\VideoLAN\VLC\vlc.exe590c3342-6dcd-11e4-9081-6cf049ae3dc4

Error: (11/11/2014 02:28:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: plugin-container.exe33.1.0.5423545c0a59mozalloc.dll33.1.0.5423545be5ee8000000300001425e1c01cffdb239b0c533C:\Program Files (x86)\Mozilla Firefox\plugin-container.exeC:\Program Files (x86)\Mozilla Firefox\mozalloc.dll8df9a47e-69a6-11e4-9092-6cf049ae3dc4

Error: (11/11/2014 02:28:00 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe33.1.0.54231e001cffdaefc94f2ee127C:\Program Files (x86)\Mozilla Firefox\firefox.exe7a76b2e5-69a6-11e4-9092-6cf049ae3dc4

Error: (11/11/2014 01:56:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: firefox.exe33.0.3.5422ca401cffda9f81777f4181C:\Program Files (x86)\Mozilla Firefox\firefox.exe2e74d99f-69a2-11e4-9092-6cf049ae3dc4

Error: (11/07/2014 10:05:53 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Montezumůvpoklad.exe0.0.0.045f7ed5eMontezumůvpoklad.exe0.0.0.045f7ed5ec000000d001c6940106c01cfface8ff6d447C:\Program Files (x86)\Emilka Holubová - Montezumův poklad\Montezumůvpoklad.exeC:\Program Files (x86)\Emilka Holubová - Montezumův poklad\Montezumůvpoklad.exedb43f1b5-66c1-11e4-accb-6cf049ae3dc4

Error: (11/06/2014 07:24:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rise.exe0.2009.9.1500539841bbntdll.dll6.1.7601.177254ec49b8fc0000374000ce6c3ea401cff9ed2f60983cC:\Program Files (x86)\Rise of Nations\rise.exeC:\Windows\SysWOW64\ntdll.dll147f7f49-65e2-11e4-918b-6cf049ae3dc4


CodeIntegrity Errors:
===================================
Date: 2014-03-14 15:49:21.314
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2014-03-14 15:49:21.174
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Processor: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Percentage of memory in use: 77%
Total physical RAM: 2012.49 MB
Available physical RAM: 458.73 MB
Total Pagefile: 4024.98 MB
Available Pagefile: 2167.34 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:931.51 GB) (Free:769.11 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive h: (PHONE CARD) (Removable) (Total:1.88 GB) (Free:0.32 GB) FAT

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A138FFE3)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (Size: 1.9 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Kontrola

#6 Příspěvek od altrok »

:arrow: Opravdu hodne hazardujete, protoze nemate aktualizovanou vetsinu dulezitych programu...

:arrow: Doinstalujte Internet Explorer 11 a pak i vsechny ostatni dulezite Microsoft aktualizace jinak cistime zbytecne a Vas PC je o dost vic nachylnejsi k utokum.

:arrow: Vypnete trvale Windows Defender - http://windows.microsoft.com/cs-cz/wind ... =windows-7

:arrow: Doporucuji zvysenou opatrnost pri pouzivani TuneUp

:arrow: Aktualizujte Adobe Flash Player na aktualni verzi 16 - nezapomente pred stazenim odstrknout instalaci adwaru v podobe McAfee Security Scan - http://get.adobe.com/cz/flashplayer/

:arrow: Odinstalujte prehistorickou a deravou verzi javy Java 7 Update 25 - pokud javu potrebujete, nainstalujte pak aktualni verzi z java.com (nezapomente na fajfky - adware v podobe Asku)... bezpecnejsi je javu vubec nemit nainstalovanou.

  • Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
  • ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
  • znovu spustte FRST a kliknete na Fix
  • po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

    Kód: Vybrat vše

    Start
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-3172588593-3335336786-2879373708-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @oberon-media.com/ONCAdapter -> C:\Program Files (x86)\Common Files\Oberon Media\NCAdapter\1.0.0.8\npapicomadapter.dll No File
CHR dev: Chrome dev build detected! <======= ATTENTION

S2 HPSLPSVC; C:\Users\Ondra\AppData\Local\Temp\7zS2F7C\hpslpsvc64.dll [X]
S2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [X]
S2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]

2015-01-18 21:37 - 2015-01-18 21:38 - 00013515 _____ () C:\Users\Ondra\Desktop\FRST.txt
2015-01-18 21:12 - 2015-01-18 21:12 - 02186752 _____ () C:\Users\Ondra\Desktop\adwcleaner_4.108.exe
2015-01-18 20:13 - 2015-01-18 20:13 - 01222144 _____ () C:\Users\Ondra\Downloads\RSITx64.exe
2015-01-18 21:15 - 2014-08-10 21:31 - 00000000 ____D () C:\AdwCleaner
2015-01-18 20:14 - 2014-03-13 18:28 - 00000000 ____D () C:\Program Files\trend micro

Task: {03B18E86-ABAF-40AD-AF75-B9D25E643721} - System32\Tasks\{37AE3FC3-1B97-49C2-BB2F-A62E4F5693D8} => I:\SETUP.EXE
Task: {18FB918C-27E0-4AF4-BD36-77AF0DF9918B} - System32\Tasks\FRAPS => C:\Program Files (x86)\fraps\fraps.exe
Task: {1EA339B3-AA71-4E00-930C-3D08016BF859} - System32\Tasks\{904E8F48-AD05-478D-8A28-A94DEB11F4A0} => D:\SETUP\INSTALL.EXE
Task: {218CBAB2-222A-46EC-B1B7-47E5E6EA90BD} - System32\Tasks\{A49621EE-6C4E-4746-AFAD-1E51C2222EFF} => D:\nfs (G_)\daemon347.exe
Task: {237FEE4C-E606-4B61-B914-65BBBA8702CF} - System32\Tasks\{0491861E-59DE-431C-9D16-074B488B929B} => pcalua.exe -a "D:\Gta 2.exe" -d D:\
Task: {27B331FA-AE5C-47E1-BE89-DC3467146016} - System32\Tasks\{2772EA45-51D8-4046-8D7B-95A42DB419EE} => D:\SETUP.EXE
Task: {2C3EF7DA-6873-4CCE-A752-CAE00EDCAA78} - System32\Tasks\{634AB180-EFEE-48A2-8E72-C99F786BB0D0} => D:\Setup.exe
Task: {36C2AB90-4A0F-46CE-BF07-FDB1EBFFE6DF} - System32\Tasks\{30CA83EC-84B0-44F9-AF55-A567FD35DE40} => D:\SETUP\INSTALL.EXE
Task: {404F5E83-5537-46C0-A08A-C29BF6DE667B} - System32\Tasks\{FF1BC69F-2739-4380-AA58-043BFA5C33EE} => D:\SETUP.EXE
Task: {6B125FC9-3508-42FE-8203-4269DCF0BA03} - System32\Tasks\{ECF27A9B-DF22-428D-9DAA-659ECA98336C} => I:\SETUP.EXE
Task: {777DCC6B-7CCA-4594-BA05-1F1E8DE6EF58} - System32\Tasks\{CAD7DBB4-B492-46AD-AE74-26106692BD3F} => D:\SETUP\INSTALL.EXE
Task: {7AA9497D-3797-4DC1-9B35-4462AA55B896} - System32\Tasks\{649766EE-4D02-4D38-A3AD-4067095699F4} => pcalua.exe -a D:\SETUP.EXE -d D:\
Task: {92CAC85B-ACB5-4525-9911-83C2E6D44AF4} - System32\Tasks\{48BAB383-B691-4D0F-9085-1218058E0A35} => D:\SETUP.EXE
Task: {D66A304B-5CD9-4E4C-9596-F22890A208F9} - System32\Tasks\{02DDAA1E-A122-4A59-9D5D-FAC9977FC637} => C:\GTA2\Gta2\gta2 manager.exe
Task: {DBF7492E-7D95-443F-ACC6-BAF7748CCF10} - System32\Tasks\{1A2DD0EE-BB15-40F7-95C5-CAB5250AE879} => D:\SETUP.EXE
Task: {E7954E87-127F-4F13-A853-7CF482AC69CE} - System32\Tasks\{79D8514D-B71B-46F5-9302-80089FB44F82} => C:\GTA2\Gta2\gta2 manager.exe
AlternateDataStreams: C:\ProgramData\TEMP:54D3B4D3
Hosts:
EmptyTemp:
End
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Lord999
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 13 říj 2012 11:34

Re: Kontrola

#7 Příspěvek od Lord999 »

problém je v tom , když sem se snažil o aktualizace vždy mě to koplo neznámou chybu
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Kontrola

#8 Příspěvek od altrok »

:arrow: Operacni system je legalni? Mluvime jen o Microsoft aktualizacich, ze?
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Lord999
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 13 říj 2012 11:34

Re: Kontrola

#9 Příspěvek od Lord999 »

ano
Nahoru
altrok
Moderátor
Moderátor
Příspěvky: 7317
Registrován: 15 lis 2012 22:26
Bydliště: Znojmo

Re: Kontrola

#10 Příspěvek od altrok »

Pak se obratte na podporu Microsoftu, ktera nejlepe poradi...
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Nahoru
Odpovědět

Zpět na „Preventivní kontroly logů“