Nekorektní otevírání .exe souborů či jejich zástupců

[fcsaa]

Dobrý den,
prosím o kontrolu níže zkopírovaného logu. Počítač funguje bezproblémově a svižně, jediný menší problém který registruji je to, že některé programy (instalačky i portable verze) se po spuštění otevírají v internetovém prohlížeči (dříve IE, nyní Mozilla). Zde je to například ve spojení s aplikací CrystalDiskMark.

Našel jsem na tento problém po fórech hodně diskuzí a tipů na vyřešení (úpravy přimo v registrech, nahrání originálních .reg souborů pro defaultní asociaci atd.), ale stále se mi to nedaří vyřešit.

Děkuji za váš čas.




Logfile of random's system information tool 1.10 (written by random/random)
Run by Vuester at 2016-03-11 08:23:48
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 23 GB (59%) free of 39 GB
Total RAM: 2873 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 8:23:52, on
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Unable to get Internet Explorer version!
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Users\Vuester\AppData\Local\FluxSoftware\Flux\flux.exe
C:\Program Files\Mozilla Firefox\firefox.exe
G:\Downloads\RSIT.exe
C:\Program Files\trend micro\Vuester.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O4 - Startup: Flux.lnk = C:\Users\Vuester\AppData\Local\FluxSoftware\Flux\flux.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe

--
End of file - 1408 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000Core.job - C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe /c
C:\Windows\tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000UA.job - C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.com/"

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 19.0.0.245 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll


C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\extensions\
trash

C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\searchplugins\
zbocz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dropbox Update]
C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-07-25 134512]

C:\Users\Vuester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Flux.lnk - C:\Users\Vuester\AppData\Local\FluxSoftware\Flux\flux.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-02-11 228864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\procexp90.Sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\PEVSystemStart]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\procexp90.Sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2016-03-11 08:53:29 ----A---- C:\Windows\system32\FNTCACHE.DAT
2016-03-11 08:23:48 ----D---- C:\rsit
2016-03-11 08:23:48 ----D---- C:\Program Files\trend micro

======List of files/folders modified in the last 1 month======

2016-03-11 08:53:36 ----D---- C:\Windows
2016-03-11 08:53:23 ----SHD---- C:\Config.Msi
2016-03-11 08:51:17 ----D---- C:\Windows\system32\Tasks
2016-03-11 08:43:46 ----D---- C:\ProgramData
2016-03-11 08:40:53 ----D---- C:\Program Files\Common Files
2016-03-11 08:33:34 ----SHD---- C:\Windows\Installer
2016-03-11 08:32:50 ----D---- C:\Windows\system32\drivers
2016-03-11 08:32:48 ----D---- C:\Windows\system32\DriverStore
2016-03-11 08:32:48 ----D---- C:\Windows\system32\catroot
2016-03-11 08:30:55 ----SD---- C:\Users\Vuester\AppData\Roaming\Microsoft
2016-03-11 08:28:45 ----D---- C:\Program Files\Common Files\XCPCSync.OEM
2016-03-11 08:28:15 ----D---- C:\ProgramData\boost_interprocess
2016-03-11 08:28:01 ----D---- C:\Windows\Tasks
2016-03-11 08:27:11 ----D---- C:\Windows\SoftwareDistribution
2016-03-11 08:23:49 ----D---- C:\Windows\temp
2016-03-11 08:23:48 ----RD---- C:\Program Files
2016-03-11 08:14:55 ----D---- C:\Windows\System32
2016-03-11 08:14:55 ----D---- C:\Windows\inf
2016-03-11 08:14:55 ----A---- C:\Windows\system32\PerfStringBackup.INI
2016-03-11 08:10:32 ----D---- C:\Windows\system32\config

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 fltsrv;Acronis Storage Filter Management; C:\Windows\system32\DRIVERS\fltsrv.sys [2014-09-11 76768]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 Thpevm;TOSHIBA HDD Protection - Shock Sensor Driver; C:\Windows\system32\DRIVERS\Thpevm.SYS [2009-06-29 13120]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 ATSwpWDF;AuthenTec TruePrint WBF Driver; C:\Windows\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 971752]
R3 AX88772;ASIX AX88772 USB2.0 to Fast Ethernet Adapter; C:\Windows\system32\DRIVERS\ax88772.sys [2013-12-03 69632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2011-02-11 9036800]
R3 NETw5s32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows 7 - 32 Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 84992]
R3 TPM;TPM; C:\Windows\system32\drivers\tpm.sys [2009-07-14 30720]
S0 inxtton;inxtton; C:\Windows\System32\drivers\oqfyp.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 blackberryncm;BlackBerryNCM Service; C:\Windows\system32\DRIVERS\blackberryncm6.sys [2014-04-15 20992]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 catchme;catchme; \??\C:\Users\Vuester\AppData\Local\Temp\catchme.sys []
S3 e1yexpress;Intel(R) Gigabit Network Connections Driver; C:\Windows\system32\DRIVERS\e1y6232.sys [2011-10-20 232664]
S3 eapihdrv;eapihdrv; \??\C:\Users\Vuester\AppData\Local\Temp\ehdrv.sys []
S3 GenericMount;Generic Mount Driver; C:\Windows\system32\DRIVERS\GenericMount.sys [2009-09-21 46192]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 RimUsb;BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb.sys []
S3 rimvndis;BlackBerry Virtual Private Network; C:\Windows\System32\Drivers\rimvndis6.sys [2015-05-26 14848]
S3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial.sys [2012-12-10 35840]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 8192]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2015-06-10 45056]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]
S3 xnacc;XBOX 360 Controller For Windows Driver Service; C:\Windows\system32\DRIVERS\xnacc.sys [2009-07-14 465408]
S3 xusb21;Xbox 360 Wireless Receiver Driver Service 21; C:\Windows\system32\DRIVERS\xusb21.sys [2009-08-13 60160]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-11 103608]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-11-11 269000]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2014-04-11 45744]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2015-11-07 147624]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2014-04-11 139944]

-----------------EOF-----------------

[JaRon]

ahoj,
vloz oba logy od FRST

[fcsaa]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Vuester (administrator) on TOSHIBA_R600_PO (11-03-2016 12:43:41)
Running from C:\Users\Vuester\Desktop
Loaded Profiles: Vuester (Available Profiles: Vuester)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Flux Software LLC) C:\Users\Vuester\AppData\Local\FluxSoftware\Flux\flux.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Vuester\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKU\S-1-5-21-3156756932-3315989445-1405767802-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil32_19_0_0_245_Plugin.exe [1158856 2015-11-11] (Adobe Systems Incorporated)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Vuester\AppData\Roaming\Dropbox\bin\DropboxExt.28.dll [2015-11-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => No File
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => No File
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => No File
Startup: C:\Users\Vuester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Flux.lnk [2014-10-09]
ShortcutTarget: Flux.lnk -> C:\Users\Vuester\AppData\Local\FluxSoftware\Flux\flux.exe (Flux Software LLC)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8E0236EB-E622-40A7-AE80-4C8E21C19A3A}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-3156756932-3315989445-1405767802-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-3156756932-3315989445-1405767802-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FireFox:
========
FF ProfilePath: C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-11] ()
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF SearchPlugin: C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\searchplugins\zbocz.xml [2015-08-22]
FF Extension: Open in Browser - C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\extensions\openinbrowser@www.spasche.net.xpi [2016-03-11]
FF Extension: MEGA - C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\Extensions\firefox@mega.co.nz.xpi [2016-03-11]
FF Extension: translator - C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\Extensions\translator@dontfollowme.net.xpi [2015-08-23]
FF Extension: Adblock Plus - C:\Users\Vuester\AppData\Roaming\Mozilla\Firefox\Profiles\ks02f8sn.default-1437855575670\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-03-11]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 AX88772; C:\Windows\System32\DRIVERS\ax88772.sys [69632 2013-12-03] (ASIX Electronics Corp.)
S3 blackberryncm; C:\Windows\System32\DRIVERS\blackberryncm6.sys [20992 2014-04-15] (BlackBerry) [File not signed]
S3 GenericMount; C:\Windows\System32\DRIVERS\GenericMount.sys [46192 2009-09-21] (Symantec Corporation)
S3 rimvndis; C:\Windows\System32\Drivers\rimvndis6.sys [14848 2015-05-26] (BlackBerry Limited) [File not signed]
S3 USBAAPL; C:\Windows\System32\Drivers\usbaapl.sys [45056 2015-06-10] (Apple, Inc.) [File not signed]
S3 xnacc; C:\Windows\System32\DRIVERS\xnacc.sys [465408 2009-07-14] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Vuester\AppData\Local\Temp\catchme.sys [X]
S3 eapihdrv; \??\C:\Users\Vuester\AppData\Local\Temp\ehdrv.sys [X]
S0 inxtton; System32\drivers\oqfyp.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
U2 V2iMount; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-11 12:43 - 2016-03-11 12:43 - 00008367 _____ C:\Users\Vuester\Desktop\FRST.txt
2016-03-11 12:43 - 2016-03-11 12:43 - 00000000 ____D C:\FRST
2016-03-11 12:42 - 2016-03-11 12:42 - 00112640 _____ (forum.viry.cz) C:\Users\Vuester\Desktop\FRSTLauncher.exe
2016-03-11 12:41 - 2016-03-11 12:41 - 01725440 _____ (Farbar) C:\Users\Vuester\Desktop\FRST.exe
2016-03-11 09:18 - 2016-03-11 12:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-03-11 09:10 - 2016-03-11 09:10 - 00000000 ____D C:\Program Files\trend micro
2016-03-11 09:09 - 2016-03-11 09:09 - 00286840 _____ C:\Windows\system32\FNTCACHE.DAT
2016-03-11 08:23 - 2016-03-11 08:23 - 00000000 ____D C:\rsit

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-03-11 12:39 - 2014-09-11 18:32 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-03-11 09:17 - 2009-07-14 05:34 - 00022576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-11 09:17 - 2009-07-14 05:34 - 00022576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-11 09:15 - 2015-07-29 18:37 - 00651540 _____ C:\Windows\system32\perfh005.dat
2016-03-11 09:15 - 2015-07-29 18:37 - 00134790 _____ C:\Windows\system32\perfc005.dat
2016-03-11 09:15 - 2014-08-22 07:27 - 01546760 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-11 09:15 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\inf
2016-03-11 09:09 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-11 08:53 - 2015-07-25 20:45 - 00000926 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000UA.job
2016-03-11 08:53 - 2015-07-25 20:45 - 00000874 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000Core.job
2016-03-11 08:53 - 2015-01-18 09:14 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-11 08:53 - 2014-08-22 08:38 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-11 08:53 - 2014-08-22 08:38 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-11 08:28 - 2015-08-05 11:48 - 00000000 ____D C:\ProgramData\boost_interprocess
2016-03-11 08:28 - 2014-10-17 05:35 - 00000000 ____D C:\Program Files\Common Files\XCPCSync.OEM

==================== Files in the root of some directories =======

2014-09-12 09:33 - 2014-09-12 09:33 - 0000026 _____ () C:\Users\Vuester\AppData\Local\isoworkshop.ini
2014-09-12 14:46 - 2014-09-12 14:46 - 0007605 _____ () C:\Users\Vuester\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-11-10 09:47

==================== End of FRST.txt ============================



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:38.08 GB) (Free:22.28 GB) NTFS
Drive d: (Data) (Fixed) (Total:70.88 GB) (Free:51.81 GB) NTFS
Drive g: (External Disk) (Fixed) (Total:91.36 GB) (Free:72.82 GB) NTFS
Drive x: (XP) (Fixed) (Total:10.18 GB) (Free:6.21 GB) NTFS

Available physical RAM: 1498.6 MB
Total physical RAM: 2873.18 MB
Percentage of memory in use: 47%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 119.2 GB) (Disk ID: C9DD3F8D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=38.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=70.9 GB) - (Type=05)
Partition 4: (Not Active) - (Size=10.2 GB) - (Type=07 NTFS)
Disk: 1 (Size: 149.1 GB) (Disk ID: DB340B10)
Partition 2: (Active) - (Size=149 GB) - (Type=05)

==================== Scheduled Tasks (whitelisted) ==================

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000Core.job => C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-3156756932-3315989445-1405767802-1000UA.job => C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [258]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [148]

==================== Security Center ==================

AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Vuester\Desktop" je 1 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dropbox Update
"C:\Users\Vuester\AppData\Local\Dropbox\Update\DropboxUpdate.exe" /c [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[JaRon]

citat:
Tvorba fixlistu pro FRST
•Spustte poznamkovy blok (Start-spustit-notepad)
•Zkopirujte skript >>

Kód: Vybrat vše

Start

2014-09-12 09:33 - 2014-09-12 09:33 - 0000026 _____ () C:\Users\Vuester\AppData\Local\isoworkshop.ini
AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [258]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [148]
S3 eapihdrv; \??\C:\Users\Vuester\AppData\Local\Temp\ehdrv.sys [X]
S0 inxtton; System32\drivers\oqfyp.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 




EmptyTemp:
Reboot:
End

•Ulozte vytvoreny TXT jako fixlist.txt
•Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe
•Kliknete na Fix
•Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[fcsaa]

Moc děkuji za ochotu a strávený čas.

Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Vuester (2016-03-11 14:06:59) Run:1
Running from C:\Users\Vuester\Desktop
Loaded Profiles: Vuester (Available Profiles: Vuester)
Boot Mode: Normal

==============================================

fixlist content:
*****************
Start

2014-09-12 09:33 - 2014-09-12 09:33 - 0000026 _____ () C:\Users\Vuester\AppData\Local\isoworkshop.ini
AlternateDataStreams: C:\ProgramData\TEMP:4FC01C57 [258]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [148]
S3 eapihdrv; \??\C:\Users\Vuester\AppData\Local\Temp\ehdrv.sys [X]
S0 inxtton; System32\drivers\oqfyp.sys [X]
S3 RimUsb; System32\Drivers\RimUsb.sys [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =




EmptyTemp:
Reboot:
End
*****************

C:\Users\Vuester\AppData\Local\isoworkshop.ini => moved successfully
C:\ProgramData\TEMP => ":4FC01C57" ADS removed successfully..
C:\ProgramData\TEMP => ":CB0AACC9" ADS removed successfully..
eapihdrv => service removed successfully.
inxtton => service removed successfully.
RimUsb => service removed successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
EmptyTemp: => 130.4 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 14:07:27 ====

[JaRon]

zmenilo sa nieco ? prip. pozri toto: http://www.sevenforums.com/tutorials/19 ... store.html

[fcsaa]

Bohužel nezměnilo, jinak asociovat ty typy souborů s pomocí složky výše jsem už několikrát zkoušel předtím, ale neúspěšně.

Nicméně po delším čase jsem se zkusil připojit na XP v letitém počítači a zjistil jsem, že to tam dělá to samé. Takže problém bude v nějakém nastavení Mozilly, jelikož i na XP a pod Windows 7 jsem přihlášený pod stejným uživatelem a nastavení se tak sesynchronizovalo a chová se to stejně pod oběma OS. Zkusím si s tím pohrát.
Ještě jednou děkuji za pomoc.

Jinak mohu se zeptat, co v tom počítači bylo za nepořádek, který jsme uklidili?

[JaRon]

Bola to taka drobna skodna
Doporucujem v tom w7 doinstalovat MSIE 11 + antivir
Nemas zac ☺

[fcsaa]

Tak nakonec jsem to vyřešil trochu razantněji a to instalací Windows 10, na která jsem se stejně už dlouho chystal. V novém OS vše funguje v pořádku a překvapivě vše začalo fungovat i ve starých XP, takže se to čisté nastavení Firefoxu evidentně přeneslo i tam a problém byl tedy v prohlížeči, resp. v nějakém jeho nastavení nebo po stažení něčeho nežádoucího.

[JaRon]

Diiik za info