Prosím o kontrolu logu

[ExExcipial]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-07-2015
Ran by Misa (administrator) on PC-MISA on 14-07-2015 17:57:59
Running from C:\Documents and Settings\Misa\Plocha
Loaded Profiles: Misa (Available Profiles: Misa)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Ralink Technology, Corp.) C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\Service\RaRegistry.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
(C-Media Electronic Inc. (www.cmedia.com.tw)) C:\WINDOWS\mixer.exe
(Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
() C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ATICCC] => C:\Program Files\ATI Technologies\ATI.ACE\cli.exe [57344 2005-07-27] (ATI Technologies Inc.)
HKLM\...\Run: [C-Media Mixer] => Mixer.exe /startup
HKLM\...\Run: [NeroFilterCheck] => C:\WINDOWS\system32\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [CmPCIaudio] => RunDll32 CMICNFG3.cpl,CMICtrlWnd
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.)
HKLM\...\Run: [Easy-PrintToolBox] => C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE [398944 2006-10-17] (CANON INC.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [998104 2015-07-07] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2005-07-27] (ATI Technologies Inc.)
HKU\S-1-5-21-790525478-2025429265-1177238915-1003\...\Winlogon: [Shell] C:\WINDOWS\explorer.exe [1034240 2008-04-14] (Microsoft Corporation) <==== ATTENTION
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Hlavní panel ATI CATALYST.lnk [2010-09-15]
ShortcutTarget: Hlavní panel ATI CATALYST.lnk -> C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe (ATI Technologies Inc.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\TP-LINK Wireless Configuration Utility.lnk [2014-11-01]
ShortcutTarget: TP-LINK Wireless Configuration Utility.lnk -> C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\TWCU.exe ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyServer: [S-1-5-21-790525478-2025429265-1177238915-1003] => http=127.0.0.1:63455
HKU\S-1-5-21-790525478-2025429265-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=UP21&ocid=UP21DHP&dt=032513
HKU\S-1-5-21-790525478-2025429265-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-790525478-2025429265-1177238915-1003\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60568
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> DefaultScope {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.bing.com/search?FORM=UP21DF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.bing.com/search?FORM=UP21DF& ... -SearchBox
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> {6A5168E2-2B2D-4CC2-A20D-C6CF87B9530F} URL = http://www.crawler.com/search/dispatche ... tbid=60568
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... 329&lng=cs
SearchScopes: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> {C2A35211-7354-456A-883F-5C324B5EF055} URL = http://websearch.ask.com/redirect?clien ... DC8F780F1F
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-12-18] (Oracle Corporation)
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-12-18] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2010-06-24] (Společnost Microsoft)
Toolbar: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> No Name - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
Toolbar: HKU\S-1-5-21-790525478-2025429265-1177238915-1003 -> No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} - No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/ ... ontrol.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{BF42858A-EB82-4A81-87E7-9F660262F96E}: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_190.dll [2015-07-04] ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-12-18] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-12-18] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-05-11] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll [2010-07-17] (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\crawlersrch.xml [2007-07-26]
FF Extension: Skype extension - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2011-05-13]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} [2010-09-18]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-09-18]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2010-09-28]

Chrome:
=======
CHR Profile: C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-11-27]
CHR Extension: (Google Drive) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-11-27]
CHR Extension: (YouTube) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-15]
CHR Extension: (Google Search) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-15]
CHR Extension: (Google Wallet) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-05]
CHR Extension: (Gmail) - C:\Documents and Settings\Misa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-15]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [Not Found]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [380928 2005-07-27] (ATI Technologies Inc.) [File not signed]
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [516096 2005-07-26] () [File not signed]
S3 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [99936 2006-11-10] ()
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2013-12-18] (Oracle Corporation)
R2 RalinkRegistryWriter; C:\Program Files\TP-LINK\TP-LINK Wireless Configuration Utility\Service\RaRegistry.exe [375872 2013-06-17] (Ralink Technology, Corp.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 ati2mtag; C:\WINDOWS\System32\DRIVERS\ati2mtag.sys [1314816 2005-07-27] (ATI Technologies Inc.) [File not signed]
S3 cmpci; C:\WINDOWS\System32\drivers\cmaudio.sys [377358 2002-11-18] (C-Media Inc)
R3 cmuda3; C:\WINDOWS\System32\drivers\cmudax3.sys [1872320 2009-11-02] (C-Media Inc) [File not signed]
R3 gameenum; C:\WINDOWS\System32\DRIVERS\gameenum.sys [10624 2008-04-14] (Microsoft Corporation)
R3 rt2870; C:\WINDOWS\System32\DRIVERS\rt2870.sys [1660488 2013-09-06] (Ralink Technology, Corp.)
R2 Scutum50; C:\WINDOWS\System32\Drivers\Scutum50.sys [19072 2013-06-17] (Printing Communications Assoc., Inc. (PCAUSA)) [File not signed]
R0 SiSide; C:\WINDOWS\System32\DRIVERS\siside.sys [4096 2003-03-25] (Silicon Integrated Systems Corp.)
R0 sisidex; C:\WINDOWS\System32\drivers\sisidex.sys [49024 2002-10-17] (Windows (R) 2000 DDK provider) [File not signed]
R3 SISNIC; C:\WINDOWS\System32\DRIVERS\sisnic.sys [32768 2008-04-14] (SiS Corporation)
R0 sisperf; C:\WINDOWS\System32\drivers\sisperf.sys [9472 2002-08-20] (Silicon Integrated Systems Corp.) [File not signed]
S3 aeaudio; system32\drivers\aeaudio.sys [X]
S4 IntelIde; No ImagePath
S3 smwdm; system32\drivers\smwdm.sys [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-14 17:57 - 2015-07-14 17:58 - 00013593 _____ C:\Documents and Settings\Misa\Plocha\FRST.txt
2015-07-14 17:57 - 2015-07-14 17:58 - 00000000 ____D C:\FRST
2015-07-14 17:57 - 2015-07-14 17:57 - 00029696 _____ C:\Documents and Settings\Misa\Local Settings\Data aplikací\MSGBOX.EXE
2015-07-14 17:57 - 2015-07-14 17:57 - 00015327 _____ C:\Documents and Settings\Misa\Plocha\LM.bat
2015-07-14 17:56 - 2015-07-14 17:56 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Misa\Plocha\FRSTLauncher.exe
2015-07-14 17:55 - 2015-07-14 17:55 - 01636864 _____ (Farbar) C:\Documents and Settings\Misa\Plocha\FRST.exe
2015-07-14 17:46 - 2015-07-14 17:46 - 00090112 _____ C:\WINDOWS\Minidump\Mini071415-01.dmp

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-07-14 18:00 - 2010-09-15 23:03 - 00000000 ____D C:\Documents and Settings\Misa\Local Settings\Temp
2015-07-14 17:57 - 2010-09-15 23:03 - 00000000 ___HD C:\Documents and Settings\Misa\Local Settings\Data aplikací
2015-07-14 17:57 - 2010-09-15 23:03 - 00000000 ____D C:\Documents and Settings\Misa\Plocha
2015-07-14 17:51 - 2014-03-21 19:59 - 00023560 _____ C:\WINDOWS\setupapi.log
2015-07-14 17:51 - 2010-09-15 22:53 - 01972988 _____ C:\WINDOWS\WindowsUpdate.log
2015-07-14 17:51 - 2001-10-25 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2015-07-14 17:50 - 2013-11-27 19:41 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-07-14 17:50 - 2010-09-15 23:01 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-07-14 17:38 - 2012-02-25 22:02 - 00002529 _____ C:\Documents and Settings\Misa\Plocha\Microsoft Office Outlook 2003.lnk
2015-07-14 17:37 - 2013-11-27 19:41 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-07-14 15:08 - 2010-09-15 23:21 - 00524288 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2015-07-14 15:08 - 2010-09-15 23:03 - 00000272 ___SH C:\Documents and Settings\Misa\ntuser.ini
2015-07-14 15:08 - 2010-09-15 23:01 - 00032566 _____ C:\WINDOWS\SchedLgU.Txt
2015-07-14 14:44 - 2011-10-30 12:08 - 00000464 ____H C:\WINDOWS\Tasks\User_Feed_Synchronization-{223F7E97-48A5-4911-8C6C-542EA712494A}.job
2015-07-09 10:36 - 2012-12-22 10:33 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-09 10:36 - 2012-12-22 10:33 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-07-09 10:36 - 2011-10-28 16:54 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-07-09 10:32 - 2014-01-20 16:48 - 00000143 _____ C:\Documents and Settings\Misa\intlname.ols
2015-07-02 10:08 - 2013-11-27 19:43 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk

==================== Files in the root of some directories =======

2010-09-18 08:56 - 2010-12-25 20:13 - 0000932 ____C () C:\Program Files\coolplayer.ini
2010-09-18 08:41 - 2002-06-06 20:16 - 0349696 ____C () C:\Program Files\coolplayer2002cz.exe
2010-09-18 08:56 - 2010-12-25 20:13 - 0001109 ____C () C:\Program Files\default.m3u
2010-11-14 16:50 - 2013-06-28 17:18 - 0011264 ____C () C:\Documents and Settings\Misa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-09-15 23:21 - 2010-09-15 23:21 - 0000124 _____ () C:\Documents and Settings\Misa\Local Settings\Data aplikací\fusioncache.dat
2015-07-14 17:57 - 2015-07-14 17:57 - 0029696 _____ () C:\Documents and Settings\Misa\Local Settings\Data aplikací\MSGBOX.EXE

Some files in TEMP:
====================
C:\Documents and Settings\Misa\Local Settings\Temp\jre-7u51-windows-i586-iftw.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of log ============================

[Rudy]

Zdravím!
Spusťte tuto utilitu:

Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.