Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
joj
Návštěvník
Návštěvník
Příspěvky: 151
Registrován: 10 říj 2013 13:01

Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#1 Příspěvek od joj »

Logfile of random's system information tool 1.10 (written by random/random)
Run by lenka at 2015-07-24 20:30:34
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 49 GB (49%) free of 100 GB
Total RAM: 3549 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:30:46, on 24.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-10.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\PROGRA~1\MediaKey\MediaKey.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Philips Display\SmartControl\DTHtml.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\PDF Architect\HelperService.exe
C:\Program Files\PDF Architect\ConversionService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdiSdkHelper.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\lenka\Plocha\RSIT.exe
C:\Program Files\trend micro\lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MediaKey.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
O4 - HKLM\..\Run: [DT PLP] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -PLP
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\RunOnce: [20150107] C:\Program Files\AVAST Software\Avast\setup\emupdate\3aee20eb-dc6d-4f03-a98b-3fc52e243ad2.exe /check
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83] "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
O4 - Startup: crossbrowse.lnk = C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
O8 - Extra context menu item: Copy to &Lightning Note - C:\Program Files\Corel\WordPerfect Office X6\Programs\WPLightningCopyToNote.hta
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - c:\Program Files\Corel\WordPerfect Office X6\Programs\WPLauncher.hta
O8 - Extra context menu item: Otevřít obrázek v aplikaci &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1029\phdintl.dll/phdContext.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{76BC75D0-CB1A-489A-A9A9-BC91C891C314}: NameServer = 8.8.8.8,8.8.4.4
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files\PDF Architect\ConversionService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe

--
End of file - 8782 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\tasks\Crossbrowse.job - C:\Program Files\Crossbrowse\Crossbrowse\Application\utility.exe /rawdata='E0MFvNlZfC8q/uOScLGPKS6nn4XgV6pWYV1xZAkw/Cit0F+BKB35sATXbn7usXhfzd2xMWSAHiVk/gXnxjr24sN60yr7HfoMyoKNlp6+nTxmcv7/k0pj3/9p9knih7rtPn2fbXdvS8wPFJHJq+7Zt9K/+0F+XD8LGbFFH5MwWL82QGgUjPZw/UZ9JxcdcejBLgrBc6oleVzfDv8xoG9zHe5D/dA9eOKzaJG1TPshMt5lnk6yhOl6sG5YvEAJxc0u1CSGE+J3BjmJLwkjWratujMPFjuBTNq8yeueiVnO2Ai+6dT11+jS4S20HOpzXNIJrDedNseM/+AwmbFl7Uespw=='
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-1-6.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-1-6.exe /rawdata=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
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-1-7.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-1-7.exe /rawdata=gQCk4/PCy+88bdhVnZw1g8+/eYSTciq1JPlyVvnMBpuxt3c4CjHBcYBJd68jMUEri80ndwLD4zDL4mIoJnYVs2Gj2v6F6Ope+TgKKQhlxky9KewKs9HgpLd5VVD7WfACEKomtWwmRQ4CcLvVwwkWAbxblB1PdrD2yonBfLBO3u0fIjdmt4unPZj7+ej6Hp3PliRU5T2+ufiNrWTssQWXS5TJEAXDH8SucxPDT7oT6SJOiZgMRhUUd5FjRq1YhXlvJgzCaI4u8uA5ZJNgTe2/3Dg0UTA53T3D45MSjrJV6eMUx/QXtV7TFiVhLmGjwLSyLANC8nUSVqjIE39sXJS6tWN165fExjA9gjp3HimXuVSvsvafF/qoASzWh7Gyv0IwvAN+uyHnBtAIz2wO6e43VuL4pSwMJdwNnBUiVhqkT1UhnLqFSW3a+Y9e1egU831mZ6RLmk7NznK7v6M8KPIYZhbmWf0dazLS99Soo27UWfUUzBd6UNVRUu13YyIuU687vSt6rDdaJmd98KN123O7govDyO1JCBNycqLxRa1k1OqkKZ77lRtYAfOrAFdD3g8M3pdEGg8zaaKDEnkWarsXKutS74INfzohCb94b8FfjeRm0fuP1u9Fqa6HBXp0boZ8DHXXgz2f/nChQ0L1/L3ue7NFna0gyChlNdU+P52kQ9AXMfEdkooJCGgzX1uwXyektvJCC9yYLAf08dmQH4jYuDiA0Rd1P7yyDscNI4Ay93mgeY3c2Ap7It5VMXUXEOIHBM52QJ/PRMx21l7+GjPQ9CtTDYKYxtEV/aPkBpo2GUpfG3Xgur96JgwBuWOaCdt3TIFmclDIlk1VdSxT+Qc14JQnMcGhlz0f75pIvHr1LpY8MJKjvSrAdBGRIRLYHgRUVpZmbobtFpQkW9zxmOredWHbIoXta07/RxTO3Vtj5+S16H1BtJF3CpMWSnDUPQdMhOBagMVSx28/r9BGmGdFZ9ZIav21YrDEYjtNmfYnGVNLrXS4AXmuOyLI/d8O0xnUmlE5GYEd/OeQh0b4QAtmaWcP/1RH50X7j/VAfKM84CYY6Jc8kqg0j3yI/z7LG0FMp1yMSOcLREvI1lXgh4MeeMNANIgCCDF5Zp6W/It1ZqLlSncwb8ydwy6YujXKhp+1tEv6QbtYARHmAeuHrOK4LA5P9SeynKngR9e3blrssUBnY75Vm31T1XPBU34kQEIWZ5J8Ysys1qT+F5d/81DaDBrAnBdSfUD/rQzfuoMzEusGFIN89Vvwam/zVtMYpwPwBLoOPsEQJb/XRgJmGf5nAz0HA5Yjf4k6eNu+900ffTMwRny1LisbrNJfQZqL5LH5S8dZeJjKdq13AktB5Hhybw==
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-10_user.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-10.exe /rawdata=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
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-11.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-11.exe /rawdata=f+WkO7vtjPnz6PpV0nif0Edf99QpWl11fZGADZy3ikKaHOoU8seqW5Cy9i6DMrmj1heZYiSM6Vpr134ELipfxJoVA0V1KEQfwc6SP7Ke+iZ1uIeY1VkfR+JetN8TzBry5ARcOYBMPMShij42s1g8TACWJz1ADgfqTBjQN/F6rmkbivASvGg8ii9Ig56QCEPhHDsFvVv1UTOYeXV2Lb+EdMOClBKk1ZJe001/XBVfXBoXC8tvhCMGF5zdmOZFTEtkQN7osEIWVc6j2JCCqwFBeRM361ruOx9traSFSh090mF9zVO2norT6PBYDGI/JeXaFo//NzK1rrXs3YizsUAAOgQAX9P2ZNhL/b3azf8Gj8Yy7lHxTOZPWQSSFYI2Pqr++TdlKEpKFu7X6/7CJsuyMVjAtzXmcWaM+R3HAakhe6luMg70N1MswPU9aVKLweYxZ4v9hiJLsU6gaZ/mFvdKc3NJjSbg5NJHknl71WAcZA1NETt2OFuc4C1rV89Sc2ZdPbnH8pazBXPF9StNLD+ahHjhs2ETsOPcab2nMoiMCk9tpNJz5LOMzRBca+61w1y6BbCjB7WiUDd0/lby1c27/lWA65pxo3SXbVQcvSH1MWc6/Yq4+Zg++iRQmvL8dgurjFkgCxPr6wJF0LewMkgWVXYSIRA+bExHbgk/Q52ukvi0ao5rXZ16AGxMja73INKZSIkC8lHyZJbdeIV8AqTLToFqWEupmT1IbGqBiUIShXZXs6oYZwx6rSC3Mc+E0vFYXl5F05+UCj38rAkpUH1P7Qltman8h+5H8v2+fdfNIo+MRKa2KWfBxboxjf+B8rf4AJsmui1GuWhby/oJfhtmOGLQlshhMFiS3/h3S6+aq3G5LUDMLev2M6KGauwZi1CHJ7jqR2Hlh23EnjCULT8vtxg2a58nL28mr3fB8DvPG4ipxe5QeZ06nXVFHiLT7uHzQDPG3JtWUz0aE1yRwKG/D366fP2lQ3YafmLFSAHPtgfzcQWY+hAlItz4Q1UYrteOHgTK9YfiIJFo5lY6ifZcHDjRGJtkxBbU04bvtZvd7AKjF1D+AWiZYkL+gtoJsn5z+jID+Ku+RO1ssXsZpfisPTuDoX+CrdI9ttW70xK96FYKGHoc4dvn69+ljU5nhNwwGhXgSsGIjxbQLocc0ETfXNpMLpdNvp/kl5JJ6TlrFpJT2U8IsFJwIjgDrKKtEvfPl7fQ7XKQqnNdRe+46wAa3BCjuRoF8SUN+4Bl1nYk8SmuQ0lHAUzY9tDliBVDtUAHYJCh0q2Nnqh9dgNWW7Y6W9dnVQ6bpeb9/W8/zfRz0eTe9MhAr366HrNTH+jsqPbzWvPTWguX252fbYggvXNYHEZdWG7gRxiuaGtlZawrTWiYR6v26PHZDrSxl7Cprz2Mfz/IRE8Kj4rXtaTWLfeL59CWS9jfuYeJyVfwcLXtehOhIgEQ/OMAx7iAqvqVDtTJxwOffKnkvuyrPkNBDJGd8aVlLlhtWRCMlEtTy2UK6N+D8YQ+zTrpLMzc8eG3Hu9MDyo8ektzo8UWqyYF0bB01xL1cAICod4PGHWM1aiiEhi5FAxKRk5ykxBOt4srq12f3neETTGaokRG66KUQrqSfJy1pIFLFjrjePa30D3RqVjC+w8jUM1SJqOWBwG1pJRNP82yL6uV0/nl9pY6o3WL9bYroktF6u4q5rpjewDTNdMSAhC/onmpIoGr6RAIAc8mPM3busrRsu/h+X8dwuNSpVeIZkRLj0CwznazRrMYhIuxnUwApD3Y40fTfn9B8cjGlBXt/B7k6drp492GT+8zoVq6V6seQlcRdjjYxiEyeUZSEdvNaDWzUWjKEF27+Th95vlLDQmqZSJzA9Wsk+dDBcaJOFevjDNF1uY/S+CVZk++lwkoZqd9Ri9wniOBKFFZUA16bhuPYUzGXj2CpxNIjuzTSCTSf/qr+qkI9Asoj10nHRkfaDoAFvcj9QShOtD4Z4AY6Sqm79sDPhxKtIR7cVx3UzNJ3cqbzUHsssc7B9mDQu/UlJXUs/daIaycBkvaq1TfggGPGzamHKu+YDibQsoMPPwPwt9cDKEv9cokR1752CKqfztYYL9Ml64f7MSuLq0JQ6DkmjiszjfZacdcfovSV2wzYAV9SrYan9ilPPRvklYKjcWn/z/LuMdCMHHADbI6zB2aRYHX7uuIqPiZJVEbYUUJc8cQuM9ErZEmIPgIpWNz/m4i0ekmTj9njrtWYsTIh2qAjdMS+i1lhnOaUO+Fq5Ze8QOZS7C+Vfe0Lj3VUTbND6p8+pEfrmrbWUZ721c4A4Q97uA5emgGqtWaWTPy5h9l1eOzfGilv8R3y975iQgDMSo7Zfk7TuZLyi60U3EqoycwMZpgBqbh53cjVg==
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-3.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-3.exe /rawdata=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
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-4.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-4.exe /rawdata=fFM3iqQ0lNklFFC+zgBKrdof+Ty9ZRPoRVfeLH5WBdkvKkCbBdT0BZyHGuvS+cKH5mFN88a6eNElzBSY4Iu3TXdbJwG7teTE/GC4adpplcTHINMOTqu5NJwEjLfaKyY8M/kVlSsEEiZasHouqz5qw2CsnBjfOl4gQ4CUSL6oyfdxiAkzCmLHhc+jUyD1UDDdG1I6o8ObkNZLDCanFUyf+mUZ2Tgbg84G8MeXhzvxD29HfAUHxVM1Zhex892eDD5L/hdcEss+8RslJT6o4g3+mNQXF53AYu54jxuZ13787/GGIsK+Cs6Yq3AD1uMkwhfxLZ7ncBY2i/nB9PZ9bcuLKGsbfQjq8pyk1OXSOdqMtrDCHE8ZfDgHISmucml4fmhD3VbtbdynyWrxKEJqzh+EB5gvlZ2B8WniXllO9aP4l1EW/gNWGOsrpfR71ZGvEnviJ+QbsuoGGUzNxNhublwmjLYMkd99TpZABvNPMUbQB/cYwU3WL5u/zTPELcOWT561w390QKP1GDlYOB0NO5yWcNjI7W87bQiV7wIxfojwuSg7F4aUvpTJ0KIsF8YW+/OqkTUp6fWr+/EC5zcWUTZ79Equ+5k/Wazs+RzK6PfgyIvADln7xvY6C/yYDyYNfy2Yl8N6KA/9f39RSIyyfnGnkPoeidFKm/9dOgTQ7l+wIx9rO7/qly+gziZnawwaC5D3sU0KjsnG2bMP3kZp8shXoXWh2/XD7lxsnbIjgkLLTEPxRp3EUh5apKj+VHKnxwdJFqM547PnNBrzGZCaH8yO0VgNSgT+hLnR2qiBIh96NBjw/BOiMq4FjRzUIzhzPPzdI6eonoio2OUrFA6bkEuHMLFE2NsB2HMnctkrQoxBtn7jz1NZeFxjthrauSJ0in4FrKpJPhJY+qgYaGRIYca75q4WrgBDDTKTzHtgfAiSZdRdXVYO5fn+jI/LyPgizzmM9VGoM+DO3eUxGExu1rvIevLFbb5qQIHdWEH6Y9AqnISxZ7eM0Xl/O/HR7Ywz06zzfMegI5iqTY1WBYzTpi1IvRDHWSKJ8VCR3WmuBRtBzvtd0ASPIdIGiUeMZT9dR8Gq70s0JIKEWJclhCHsRSFC5PIrYEGAA0wXcd/J7I9YoMedhmtdF7YmJt+foN04WbCC8mPzSm2yBIOwVVsOjiQEiMTg05+3iHJn+fS2FDgbc3Ol1V3t/W2AebJjHxe4+ONxdX6LR/58++7h09T/BrDHfId75WeWSkpj9BQAh4ARGRGntmtnns02zOoNoB0I291m1IbRNRkeBqOeGukKts2CbaeLR4Q+beoLvUWlWGkQUJIpFt3rq9yrVtrhEVlFejDj/2x4fOqsd0iDINw1Z2oi5QUiHQ3kDP9Oa634sfDD3VE7e7BjiRnz8hHovuR2exT8x355sqEqJVvW/HyLBsM2PufvJUmi9R3TiCF0/tQCTPwgUltTaHKKqwy9nROj5s615wxGONTZXnHXMrEfHI3+qqHDh7PXpjBswIW3bGO5LiWzTQU/+/qtGe+UUCOjg8zvcQADqd8Y4CKy+YayiZ+vC9TmNAaUxW/jBGQEWcmVYOsuCdVJcufWvNI2EQlOs9lnEsLsQ6uxZoxFbAh+xdTBd2JnMQjeYyMisN0loBsRHbelxK2lgD2vZiSzbU9crOh1vMsy1Ynvt75AeHFmLk71R6Zj0oZ+o7vyCqjb/CJip8oABDOSC0NySIT0DsZIzf/iXevNfNRCXzUISN7G8H4N/HDqBrJa9lNnx4Dax/kvx51TAHRJ7nQe32VO7qiunDbGDgXLKzgHV88xwbMWlr5OL3ELM8QuocGgsvEjYWI/Pk88LfSuQqGYpgLxYrOZRA0Ar4DMGhUvJuyLEHfWpQVJWQ==
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-5.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-5.exe /rawdata=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
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-6.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-6.exe /rawdata=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
C:\WINDOWS\tasks\db19b84b-399f-41ad-82dc-bf22860366da-7.job - C:\Program Files\CinemaP-1.9cV23.07\db19b84b-399f-41ad-82dc-bf22860366da-7.exe /rawdata=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

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default

prefs.js - "browser.search.useDBForOrder" - true

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"FFPDFArchitectConverter@pdfarchitect.com"=C:\Program Files\PDF Architect\FFPDFArchitectExt


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class

C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default\extensions\
artur.dubovoy@gmail.com
AVJYFVOD75109374@HCDE39471360.com
{34878998-c8be-40bc-bc13-9243a2844976}(2)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-07 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-27 17567744]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-02-26 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-02-26 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-02-26 142360]
"MediaKey"=C:\PROGRA~1\MediaKey\MediaKey.EXE [2001-01-15 135168]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe [2003-03-11 172032]
"DeviceDiscovery"=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-02 40960]
"PivotSoftware"=C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [2010-05-13 110192]
"DT PLP"=C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe [2010-05-17 121456]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2014-10-02 421888]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]
"KernelFaultCheck"=C:\WINDOWS\system32\dumprep 0 -k []

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"20150107"=C:\Program Files\AVAST Software\Avast\setup\emupdate\3aee20eb-dc6d-4f03-a98b-3fc52e243ad2.exe [2015-07-24 183232]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-04-23 6278424]
"GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83"=C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe [2015-05-12 637440]

C:\Documents and Settings\lenka\Nabídka Start\Programy\Po spuštění
crossbrowse.lnk - C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-02-20 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\TRANSLAT\WEBTRANS.EXE"="C:\TRANSLAT\WEBTRANS.EXE:*:Enabled:WebTrans"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe"="C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe:*:Enabled:Firebird SQL Server"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"
"C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe"="C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe:*:Enabled:Crossbrowse"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.VIFP"=VFCodec.dll

======List of files/folders created in the last 1 month======

2015-07-24 20:20:39 ----D---- C:\rsit
2015-07-24 07:22:06 ----D---- C:\Program Files\Crossbrowse
2015-07-23 18:58:09 ----D---- C:\Program Files\Prompt Downloader
2015-07-23 18:54:11 ----D---- C:\Program Files\8be744fd-4616-4fe9-aea9-47d21532432f
2015-07-23 18:53:58 ----D---- C:\Program Files\CinemaP-1.9cV23.07
2015-07-23 18:53:08 ----D---- C:\Documents and Settings\lenka\Data aplikací\Opera Software
2015-07-23 18:51:23 ----D---- C:\Program Files\Opera

======List of files/folders modified in the last 1 month======

2015-07-24 20:30:40 ----D---- C:\Program Files\trend micro
2015-07-24 20:15:34 ----D---- C:\Documents and Settings\lenka\Data aplikací\BitTorrent
2015-07-24 16:54:00 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-24 15:49:14 ----D---- C:\WINDOWS\Temp
2015-07-24 15:49:13 ----D---- C:\WINDOWS\Prefetch
2015-07-24 07:24:52 ----D---- C:\Documents and Settings\lenka\Data aplikací\Seznam.cz
2015-07-24 07:23:33 ----SD---- C:\WINDOWS\Tasks
2015-07-24 07:22:06 ----D---- C:\Program Files
2015-07-23 18:54:01 ----D---- C:\WINDOWS\system32
2015-07-23 12:21:42 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-23 11:25:45 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 19:31:03 ----SHD---- C:\WINDOWS\Installer
2015-07-14 19:31:03 ----D---- C:\Config.Msi
2015-07-13 19:16:12 ----D---- C:\Documents and Settings\lenka\Data aplikací\Canon
2015-07-07 22:25:12 ----D---- C:\WINDOWS\Minidump
2015-07-07 22:25:12 ----AD---- C:\WINDOWS
2015-06-27 08:16:15 ----D---- C:\WINDOWS\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-05-07 49904]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-05-07 209048]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-01-14 170080]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2015-05-07 55200]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-05-07 787760]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-06-26 428120]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2015-05-07 57888]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-05-07 24144]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-05-07 74976]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-02-20 6312864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-30 5063168]
R3 KBFiltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\KBFiltr.sys [2000-04-08 13620]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-09-23 38400]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2010-04-16 17136]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2010-05-13 17465]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-14 20352]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\System32\drivers\pivotmou.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2014-08-15 45056]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 60744]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-07 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2010-05-17 121456]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-23 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 540968]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-22 148080]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2015-04-27 79360]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2010-04-16 109168]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119675
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#2 Příspěvek od Rudy »

Zdravím!
Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
joj
Návštěvník
Návštěvník
Příspěvky: 151
Registrován: 10 říj 2013 13:01

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#3 Příspěvek od joj »

Dobrý večer. Děkuji za vaši pomoc.

# AdwCleaner v4.208 - Log vytvořen 24/07/2015 v 21:06:25
# Aktualizováno 09/07/2015 by Xplode
# Databáze : 2015-07-15.1 [Server]
# Operační system : Microsoft Windows XP Service Pack 3 (x86)
# Uživatelské jméno : lenka - FERDA
# Spuštěno z : C:\Documents and Settings\lenka\Plocha\adwcleaner_4.208.exe
# Nastavení : Čištění

***** [ Služby ] *****


***** [ Soubory / Složky ] *****

Složka Smazáno : C:\Documents and Settings\All Users\Nabídka Start\Programy\Crossbrowse
Složka Smazáno : C:\Program Files\Crossbrowse
Složka Smazáno : C:\Program Files\Prompt Downloader
Složka Smazáno : C:\Program Files\CinemaP-1.9cV23.07
Složka Smazáno : C:\Documents and Settings\lenka\Local Settings\Data aplikací\iac
Složka Smazáno : C:\Documents and Settings\lenka\Local Settings\Data aplikací\Crossbrowse
Složka Smazáno : C:\Documents and Settings\lenka\Local Settings\Data aplikací\Prompt Downloader
Složka Smazáno : C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default\Extensions\AVJYFVOD75109374@HCDE39471360.com
Soubor Smazáno : C:\Documents and Settings\All Users\Plocha\crossbrowse.lnk
Soubor Smazáno : C:\Documents and Settings\lenka\Data aplikací\Microsoft\Internet Explorer\Quick Launch\crossbrowse.lnk
Soubor Smazáno : C:\Documents and Settings\lenka\Nabídka Start\Programy\Po spuštění\crossbrowse.lnk

***** [ Naplánované úlohy ] *****

Úloha Smazáno : Crossbrowse
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-1-6
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-1-7
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-10_user
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-11
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-3
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-4
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-5
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-6
Úloha Smazáno : db19b84b-399f-41ad-82dc-bf22860366da-7

***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ioloToolService.exe
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
Klíč Smazáno : HKLM\SOFTWARE\Clients\StartMenuInternet\crossbrowse.exe
Klíč Smazáno : HKLM\SOFTWARE\Classes\CRSBRWSHTML
Klíč Smazáno : HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
Hodnota Smazáno : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
Hodnota Smazáno : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
Hodnota Smazáno : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse]
Hodnota Smazáno : HKLM\SOFTWARE\Classes\.xht\OpenWithProgIDs [CRSBRWSHTML]
Hodnota Smazáno : HKLM\SOFTWARE\Classes\.webp\OpenWithProgIDs [CRSBRWSHTML]
Hodnota Smazáno : HKLM\SOFTWARE\Classes\.shtml\OpenWithProgIDs [CRSBRWSHTML]
Klíč Smazáno : HKLM\SOFTWARE\Classes\SafePCRepair_89.PseudoTransparentPlugin
Klíč Smazáno : HKLM\SOFTWARE\Classes\SafePCRepair_89.PseudoTransparentPlugin.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\SafePCRepair_89.SettingsPlugin
Klíč Smazáno : HKLM\SOFTWARE\Classes\SafePCRepair_89.SettingsPlugin.1
Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\{CFBE264C-912E-4DA5-B67B-790B27D6D338}
Hodnota Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List [C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe]
Klíč Smazáno : HKCU\Software\Crossrider
Klíč Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíč Smazáno : HKCU\Software\CrossBrowser
Klíč Smazáno : HKCU\Software\Crossbrowse
Klíč Smazáno : HKCU\Software\YorkNewCin
Klíč Smazáno : HKCU\Software\HighDefAction
Klíč Smazáno : HKCU\Software\ArenaHD
Klíč Smazáno : HKCU\Software\CinemaP-1.9cV23.07
Klíč Smazáno : HKCU\Software\CinemaP-1.9cV23.07-nv
Klíč Smazáno : HKLM\SOFTWARE\Crossrider
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíč Smazáno : HKLM\SOFTWARE\Crossbrowse
Klíč Smazáno : HKLM\SOFTWARE\YorkNewCin
Klíč Smazáno : HKLM\SOFTWARE\HighDefAction
Klíč Smazáno : HKLM\SOFTWARE\ArenaHD
Klíč Smazáno : HKLM\SOFTWARE\CinemaP-1.9cV23.07
Klíč Smazáno : HKLM\SOFTWARE\CinemaP-1.9cV23.07-nv
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.9cV23.07

***** [ Prohlížeče ] *****

-\\ Internet Explorer v8.0.6001.18702


-\\ Mozilla Firefox v38.0.1 (x86 cs)


-\\ Google Chrome v42.0.2311.135

[C:\Documents and Settings\lenka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://www.mysearchresults.com/search?c=3523&t ... earchTerms}
[C:\Documents and Settings\lenka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Documents and Settings\lenka\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Homepage] : hxxp://www.mysearchresults.com/?c=3523&t=01

*************************

AdwCleaner[R0].txt - [5408 bytů] - [24/07/2015 21:05:14]
AdwCleaner[S0].txt - [5271 bytů] - [24/07/2015 21:06:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5329 bytů] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119675
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#4 Příspěvek od Rudy »

Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
joj
Návštěvník
Návštěvník
Příspěvky: 151
Registrován: 10 říj 2013 13:01

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#5 Příspěvek od joj »

Logfile of random's system information tool 1.10 (written by random/random)
Run by lenka at 2015-07-24 21:47:09
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 49 GB (49%) free of 100 GB
Total RAM: 3549 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:47:12, on 24.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\PDF Architect\HelperService.exe
C:\Program Files\PDF Architect\ConversionService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\PROGRA~1\MediaKey\MediaKey.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Philips Display\SmartControl\DTHtml.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdiSdkHelper.exe
C:\WINDOWS\system32\igfxext.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\lenka\Plocha\RSIT.exe
C:\Program Files\trend micro\lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MediaKey.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
O4 - HKLM\..\Run: [DT PLP] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -PLP
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83] "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
O8 - Extra context menu item: Copy to &Lightning Note - C:\Program Files\Corel\WordPerfect Office X6\Programs\WPLightningCopyToNote.hta
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - c:\Program Files\Corel\WordPerfect Office X6\Programs\WPLauncher.hta
O8 - Extra context menu item: Otevřít obrázek v aplikaci &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1029\phdintl.dll/phdContext.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{76BC75D0-CB1A-489A-A9A9-BC91C891C314}: NameServer = 8.8.8.8,8.8.4.4
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files\PDF Architect\ConversionService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe

--
End of file - 8380 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default

prefs.js - "browser.search.useDBForOrder" - true

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"FFPDFArchitectConverter@pdfarchitect.com"=C:\Program Files\PDF Architect\FFPDFArchitectExt


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class

C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default\extensions\
artur.dubovoy@gmail.com
{34878998-c8be-40bc-bc13-9243a2844976}(2)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-07 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-27 17567744]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-02-26 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-02-26 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-02-26 142360]
"MediaKey"=C:\PROGRA~1\MediaKey\MediaKey.EXE [2001-01-15 135168]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe [2003-03-11 172032]
"DeviceDiscovery"=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-02 40960]
"PivotSoftware"=C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [2010-05-13 110192]
"DT PLP"=C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe [2010-05-17 121456]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2014-10-02 421888]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-04-23 6278424]
"GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83"=C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-02-20 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\TRANSLAT\WEBTRANS.EXE"="C:\TRANSLAT\WEBTRANS.EXE:*:Enabled:WebTrans"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe"="C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe:*:Enabled:Firebird SQL Server"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.VIFP"=VFCodec.dll

======List of files/folders created in the last 1 month======

2015-07-24 21:05:07 ----D---- C:\AdwCleaner
2015-07-24 20:20:39 ----D---- C:\rsit
2015-07-23 18:54:11 ----D---- C:\Program Files\8be744fd-4616-4fe9-aea9-47d21532432f
2015-07-23 18:53:08 ----D---- C:\Documents and Settings\lenka\Data aplikací\Opera Software
2015-07-23 18:51:23 ----D---- C:\Program Files\Opera

======List of files/folders modified in the last 1 month======

2015-07-24 21:47:10 ----D---- C:\Program Files\trend micro
2015-07-24 21:08:08 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-24 21:07:30 ----D---- C:\WINDOWS\Temp
2015-07-24 21:06:28 ----SD---- C:\WINDOWS\Tasks
2015-07-24 21:06:26 ----D---- C:\Program Files
2015-07-24 20:15:34 ----D---- C:\Documents and Settings\lenka\Data aplikací\BitTorrent
2015-07-24 15:49:13 ----D---- C:\WINDOWS\Prefetch
2015-07-24 07:24:52 ----D---- C:\Documents and Settings\lenka\Data aplikací\Seznam.cz
2015-07-23 18:54:01 ----D---- C:\WINDOWS\system32
2015-07-23 12:21:42 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-23 11:25:45 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 19:31:03 ----SHD---- C:\WINDOWS\Installer
2015-07-14 19:31:03 ----D---- C:\Config.Msi
2015-07-13 19:16:12 ----D---- C:\Documents and Settings\lenka\Data aplikací\Canon
2015-07-07 22:25:12 ----D---- C:\WINDOWS\Minidump
2015-07-07 22:25:12 ----AD---- C:\WINDOWS
2015-06-27 08:16:15 ----D---- C:\WINDOWS\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-05-07 49904]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-05-07 209048]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-01-14 170080]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2015-05-07 55200]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-05-07 787760]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-06-26 428120]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2015-05-07 57888]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-05-07 24144]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-05-07 74976]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-02-20 6312864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-30 5063168]
R3 KBFiltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\KBFiltr.sys [2000-04-08 13620]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-09-23 38400]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2010-04-16 17136]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2010-05-13 17465]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-14 20352]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\System32\drivers\pivotmou.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2014-08-15 45056]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 60744]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-07 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2010-05-17 121456]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-23 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 540968]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-22 148080]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2015-04-27 79360]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2010-04-16 109168]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119675
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#6 Příspěvek od Rudy »

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:commands
Purity
Emptytemp
Emptyflash
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
joj
Návštěvník
Návštěvník
Příspěvky: 151
Registrován: 10 říj 2013 13:01

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#7 Příspěvek od joj »

Logfile of random's system information tool 1.10 (written by random/random)
Run by lenka at 2015-07-24 22:06:22
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 49 GB (49%) free of 100 GB
Total RAM: 3549 MB (84% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:06:24, on 24.7.2015
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\PROGRA~1\MediaKey\MediaKey.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\CCleaner\CCleaner.exe
C:\Program Files\Philips Display\SmartControl\DTHtml.exe
C:\Program Files\Common Files\Portrait Displays\Shared\HookManager.exe
C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\PDF Architect\HelperService.exe
C:\Program Files\PDF Architect\ConversionService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Common Files\Portrait Displays\Drivers\pdiSdkHelper.exe
C:\WINDOWS\system32\wbem\unsecapp.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\Common Files\Portrait Displays\Plugins\DP\DPHelper.exe
C:\Documents and Settings\lenka\Plocha\RSIT.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\trend micro\lenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [MediaKey] C:\PROGRA~1\MediaKey\MediaKey.EXE
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [PivotSoftware] "C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe" -delay=10
O4 - HKLM\..\Run: [DT PLP] C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe -PLP
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [CCleaner Monitoring] "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR
O4 - HKCU\..\Run: [GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83] "C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe" --no-startup-window
O8 - Extra context menu item: Copy to &Lightning Note - C:\Program Files\Corel\WordPerfect Office X6\Programs\WPLightningCopyToNote.hta
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open with WordPerfect - c:\Program Files\Corel\WordPerfect Office X6\Programs\WPLauncher.hta
O8 - Extra context menu item: Otevřít obrázek v aplikaci &Microsoft PhotoDraw - res://C:\PROGRA~1\MICROS~2\Office\1029\phdintl.dll/phdContext.htm
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pub/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{76BC75D0-CB1A-489A-A9A9-BC91C891C314}: NameServer = 8.8.8.8,8.8.4.4
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: 602Updater (602XML Updater) - Software602 a.s. - C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Avast Antivirus (avast! Antivirus) - Avast Software s.r.o. - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files\PDF Architect\ConversionService.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SolidWorks Licensing Service - SolidWorks - C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe

--
End of file - 8172 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\avast! Emergency Update.job - C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe

=========Mozilla firefox=========

ProfilePath - C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default

prefs.js - "browser.search.useDBForOrder" - true

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF
"{20a82645-c095-46ed-80e3-08825760534b}"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
"bkmrksync@nokia.com"=C:\Program Files\Nokia\Nokia PC Suite 7\bkmrksync\
"FFPDFArchitectConverter@pdfarchitect.com"=C:\Program Files\PDF Architect\FFPDFArchitectExt


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 18.0.0.209 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=]
"Description"=iTunes Detector Plug-in
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0]
"Description"=
"Path"=C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.25.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\WINDOWS\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.25.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WPF,version=3.5]
"Description"=Windows Presentation Foundation plug-in for Mozilla browsers
"Path"=c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nokia.com/EnablerPlugin]
"Description"=Nokia Suite Enabler Plugin
"Path"=C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@software602.cz/602XML Filler]
"Description"=Software602 Form Filler Plugin
"Path"=C:\Program Files\Software602\602XML\Filler\npfiller.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.6]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


C:\Program Files\Mozilla Firefox\components\
nsIQTScriptablePlugin.xpt

C:\Program Files\Mozilla Firefox\plugins\
NPOFFICE.DLL
nppdf32.dll
npqtplugin.dll
npqtplugin2.dll
npqtplugin3.dll
npqtplugin4.dll
npqtplugin5.dll
QuickTimePlugin.class

C:\Documents and Settings\lenka\Data aplikací\Mozilla\Firefox\Profiles\2eoj0vf2.default\extensions\
artur.dubovoy@gmail.com
{34878998-c8be-40bc-bc13-9243a2844976}(2)

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-07 565304]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"=C:\WINDOWS\RTHDCPL.EXE [2009-03-27 17567744]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2009-02-26 141336]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2009-02-26 173592]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2009-02-26 142360]
"MediaKey"=C:\PROGRA~1\MediaKey\MediaKey.EXE [2001-01-15 135168]
"HPDJ Taskbar Utility"=C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb08.exe [2003-03-11 172032]
"DeviceDiscovery"=C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe [2002-12-02 40960]
"PivotSoftware"=C:\Program Files\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [2010-05-13 110192]
"DT PLP"=C:\Program Files\Common Files\Portrait Displays\Shared\DT_startup.exe [2010-05-17 121456]
"Omnipage"=C:\Program Files\ScanSoft\OmniPageSE\opware32.exe [2002-06-03 49152]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2015-01-20 60712]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-05-11 5515496]
"QuickTime Task"=C:\Program Files\QuickTime\qttask.exe [2014-10-02 421888]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07 998104]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2008-04-14 15360]
"MSMSGS"=C:\Program Files\Messenger\msmsgs.exe [2008-04-14 1695232]
"CCleaner Monitoring"=C:\Program Files\CCleaner\CCleaner.exe [2015-04-23 6278424]
"GoogleChromeAutoLaunch_C6F687D2C9034FB1DE2637A4E50A9F83"=C:\Program Files\Crossbrowse\Crossbrowse\Application\crossbrowse.exe --no-startup-window []

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2009-02-20 206848]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-10-18 133632]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\WudfSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=67108863
"NoDriveTypeAutoRun"=323
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\TRANSLAT\WEBTRANS.EXE"="C:\TRANSLAT\WEBTRANS.EXE:*:Enabled:WebTrans"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Common Files\soft602\langserv.exe"="C:\Program Files\Common Files\soft602\langserv.exe:*:Enabled:Software602 Spell Checker"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour Service"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe"="C:\Program Files\HeluzKominy\Firebird\bin\fbserver.exe:*:Enabled:Firebird SQL Server"
"C:\Program Files\Google\Chrome\Application\chrome.exe"="C:\Program Files\Google\Chrome\Application\chrome.exe:*:Enabled:Google Chrome"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Mozilla Firefox\firefox.exe"="C:\Program Files\Mozilla Firefox\firefox.exe:*:Enabled:Firefox (C:\Program Files\Mozilla Firefox)"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"vidc.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"vidc.iyuv"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvu9"=tsbyuv.dll
"vidc.yvyu"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=l3codecp.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.XVID"=xvidvfw.dll
"VIDC.HFYU"=huffyuv.dll
"VIDC.VIFP"=VFCodec.dll

======List of files/folders created in the last 1 month======

2015-07-24 22:05:34 ----D---- C:\_OTM
2015-07-24 21:05:07 ----D---- C:\AdwCleaner
2015-07-24 20:20:39 ----D---- C:\rsit
2015-07-23 18:54:11 ----D---- C:\Program Files\8be744fd-4616-4fe9-aea9-47d21532432f
2015-07-23 18:53:08 ----D---- C:\Documents and Settings\lenka\Data aplikací\Opera Software
2015-07-23 18:51:23 ----D---- C:\Program Files\Opera

======List of files/folders modified in the last 1 month======

2015-07-24 22:06:23 ----D---- C:\Program Files\trend micro
2015-07-24 22:06:23 ----A---- C:\WINDOWS\SchedLgU.Txt
2015-07-24 22:04:55 ----D---- C:\WINDOWS\Temp
2015-07-24 21:06:28 ----SD---- C:\WINDOWS\Tasks
2015-07-24 21:06:26 ----D---- C:\Program Files
2015-07-24 20:15:34 ----D---- C:\Documents and Settings\lenka\Data aplikací\BitTorrent
2015-07-24 15:49:13 ----D---- C:\WINDOWS\Prefetch
2015-07-24 07:24:52 ----D---- C:\Documents and Settings\lenka\Data aplikací\Seznam.cz
2015-07-23 18:54:01 ----D---- C:\WINDOWS\system32
2015-07-23 12:21:42 ----D---- C:\WINDOWS\system32\CatRoot2
2015-07-23 11:25:45 ----A---- C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-14 19:31:03 ----SHD---- C:\WINDOWS\Installer
2015-07-14 19:31:03 ----D---- C:\Config.Msi
2015-07-13 19:16:12 ----D---- C:\Documents and Settings\lenka\Data aplikací\Canon
2015-07-07 22:25:12 ----D---- C:\WINDOWS\Minidump
2015-07-07 22:25:12 ----AD---- C:\WINDOWS
2015-06-27 08:16:15 ----D---- C:\WINDOWS\system32\drivers

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2015-05-07 49904]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2015-05-07 209048]
R0 snapman;Acronis Snapshots Manager; C:\WINDOWS\system32\DRIVERS\snapman.sys [2012-01-14 170080]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [2015-05-07 55200]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2015-05-07 787760]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2015-06-26 428120]
R1 aswTdi;aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [2015-05-07 57888]
R1 ElbyCDIO;ElbyCDIO Driver; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [2010-12-17 31088]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2006-03-02 12032]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2015-05-07 24144]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2015-05-07 74976]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-14 10368]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\igxpmp32.sys [2009-02-20 6312864]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2009-03-30 5063168]
R3 KBFiltr;Dritek HotKey Keyboard Filter Driver; C:\WINDOWS\System32\Drivers\KBFiltr.sys [2000-04-08 13620]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller; C:\WINDOWS\system32\DRIVERS\l1e51x86.sys [2008-09-23 38400]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-24 12160]
R3 MTsensor;ATK0110 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ASACPI.sys [2004-08-13 5810]
R3 PdiPorts;Portrait Displays low level device driver; C:\WINDOWS\System32\Drivers\PdiPorts.sys [2010-04-16 17136]
R3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-14 25856]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
R3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2009-07-13 91904]
S1 Pivot;Pivot; C:\WINDOWS\System32\drivers\pivot.sys [2010-05-13 17465]
S3 Ambfilt;Ambfilt; C:\WINDOWS\system32\drivers\Ambfilt.sys [2008-08-05 1684736]
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 HidBatt;Ovladač baterie zdroje UPS standardu HID; C:\WINDOWS\system32\DRIVERS\HidBatt.sys [2008-04-14 20352]
S3 Monfilt;Monfilt; C:\WINDOWS\system32\drivers\Monfilt.sys [2006-01-04 1389056]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\WINDOWS\system32\drivers\ccdcmb.sys [2012-01-09 18176]
S3 nmwcdc;Nokia USB Communication Driver; C:\WINDOWS\system32\drivers\ccdcmbo.sys [2012-01-09 23168]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys [2012-06-11 19072]
S3 pivotmou;Pivot Mouse/Pointers Filter Driver; \??\C:\WINDOWS\System32\drivers\pivotmou.sys []
S3 upperdev;upperdev; C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys [2012-01-09 8192]
S3 USBAAPL;Apple Mobile USB Driver; C:\WINDOWS\System32\Drivers\usbaapl.sys [2014-08-15 45056]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 usbser;USB Modem Driver; C:\WINDOWS\system32\DRIVERS\usbser.sys [2013-08-29 26240]
S3 UsbserFilt;UsbserFilt; C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys [2012-01-09 8192]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]
S3 Wdf01000;Kernel Mode Driver Frameworks service; C:\WINDOWS\System32\Drivers\wdf01000.sys [2009-07-14 444136]
S3 WpdUsb;WpdUsb; C:\WINDOWS\system32\DRIVERS\wpdusb.sys [2006-10-18 38528]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2009-07-13 132224]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 602XML Updater;602Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [2011-10-10 85344]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2015-01-20 60744]
R2 avast! Antivirus;Avast Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2015-05-07 343336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 390504]
R2 DTSRVC;Portrait Displays Display Tune Service; C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe [2010-05-17 121456]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 Správce výběru OS;Aktivátor Správce výběru OS Acronis; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2010-07-07 2156952]
R2 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-23 268976]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Služba Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2015-01-27 540968]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-05-22 148080]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 ServiceLayer;ServiceLayer; C:\Program Files\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 SolidWorks Licensing Service;SolidWorks Licensing Service; C:\Program Files\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [2015-04-27 79360]
S3 WMPNetworkSvc;Služba Windows Media Player Network Sharing; C:\Program Files\Windows Media Player\WMPNetwk.exe [2007-01-05 913920]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2013-07-20 754856]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; c:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 PdiService;Portrait Displays SDK Service; C:\Program Files\Common Files\Portrait Displays\Drivers\pdisrvc.exe [2010-04-16 109168]

-----------------EOF-----------------
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119675
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#8 Příspěvek od Rudy »

Smazáno. Znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
joj
Návštěvník
Návštěvník
Příspěvky: 151
Registrován: 10 říj 2013 13:01

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#9 Příspěvek od joj »

Dobré ráno. Zdá se, že je to v pořádku. Crossbrowse zmizel. Moc děkuji.
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119675
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Prosím o kontrolu logu - nelze odinstalovat Crossbrowse

#10 Příspěvek od Rudy »

Tak to jsem rád. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“