teraz som si vsimol ze nefunguje niektore kombinacie napr Left shift+ m ale funguje Right shift+m alebo este napr right shift +p ale zaroven left shift + p funguje
log z MBAN
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-02-2015 01
Ran by anitka (administrator) on MINILAPTOP on 24-02-2015 15:14:05
Running from C:\Documents and Settings\anitka\Plocha
Loaded Profiles: anitka (Available profiles: anitka)
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Sonic Solutions) C:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
() C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe
(ESET) C:\Program Files\Eset\ESET Smart Security\ekrn.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Andrea Electronics Corporation) C:\WINDOWS\system32\AESTFltr.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
(Cyberlink Corp.) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Elaborate Bytes AG) C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
(ESET) C:\Program Files\Eset\ESET Smart Security\egui.exe
(Power Software Ltd) C:\Program Files\PowerISO\PWRISOVM.EXE
(Singer's Creations) C:\Program Files\Weather Watcher\ww.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\WINDOWS\system32\ntvdm.exe
(Lingea) C:\Program Files\Common Files\Lingea Shared\luc.exe
() C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
() C:\Documents and Settings\anitka\Plocha\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [483428 2009-03-30] (IDT, Inc.)
HKLM\...\Run: [AESTFltr] => C:\WINDOWS\system32\AESTFltr.exe [737280 2009-02-18] (Andrea Electronics Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1418536 2009-01-16] (Synaptics, Inc.)
HKLM\...\Run: [hpWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe [488752 2008-04-15] (Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [RemoteControl] => C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [32768 2004-11-02] (Cyberlink Corp.)
HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [2145000 2010-04-07] (ESET)
HKLM\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [312376 2011-11-15] (Power Software Ltd)
HKU\S-1-5-21-2632247924-638629528-3096988594-1006\...\Run: [WeatherWatcher] => C:\Program Files\Weather Watcher\ww.exe [1024000 2007-09-23] (Singer's Creations)
HKU\S-1-5-21-2632247924-638629528-3096988594-1006\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [30520936 2014-11-18] (Skype Technologies S.A.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Meniny.exe ()
Startup: C:\Documents and Settings\anitka\Nabídka Start\Programy\Po spuštění\Lingea Update Center.lnk
ShortcutTarget: Lingea Update Center.lnk -> C:\Program Files\Common Files\Lingea Shared\luc.exe (Lingea)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKU\S-1-5-21-2632247924-638629528-3096988594-1006\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKU\S-1-5-21-2632247924-638629528-3096988594-1006\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.google.sk/
SearchScopes: HKU\S-1-5-21-2632247924-638629528-3096988594-1006 -> {76F100B9-A023-466A-B63B-AAD0388C3F9B} URL =
http://www.google.co.uk/search?hl=en&q= ... rms}&meta=
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> C:\TRANSLAT\WebIE.dll ()
BHO: RealPlayer Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: No Name -> {53707962-6F74-2D53-2644-206D7942484F} -> No File
BHO: Skype Browser Helper -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\TRANSLAT\WebIE.dll ()
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
FireFox:
========
FF ProfilePath: C:\Documents and Settings\anitka\Data aplikací\Mozilla\Firefox\Profiles\wl5ei3z9.default
FF Homepage:
www.google.sk
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\2.0.31005.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=15.0.1.13 -> C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.1.13 -> C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.1.13 -> C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.1.13 -> C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.1.13 -> C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Extension: LexFox - C:\Documents and Settings\anitka\Data aplikací\Mozilla\Firefox\Profiles\wl5ei3z9.default\Extensions\
info@lingea.com [2010-12-01]
FF Extension: WebTran - C:\Documents and Settings\anitka\Data aplikací\Mozilla\Firefox\Profiles\wl5ei3z9.default\Extensions\{003D3EDC-99B9-4a34-9C20-60CB94F7E829} [2010-12-11]
FF Extension: Microsoft .NET Framework Assistant - C:\Documents and Settings\anitka\Data aplikací\Mozilla\Firefox\Profiles\wl5ei3z9.default\Extensions\{20a82645-c095-46ed-80e3-08825760534b}.xpi [2012-03-02]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-01-26]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2009-09-25]
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012-01-15]
FF HKLM\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2011-11-13]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [jfmjfhklogoienhpfnppmbcbjfjnkonk] - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Chrome\Ext\rphtml5video.crx [2012-01-15]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-01-31]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 9734BF6A-2DCD-40f0-BAB0-5AAFEEBE1269; C:\Program Files\Roxio\BackOnTrack\Disaster Recovery\SaibSVC.exe [125424 2008-12-11] ()
R2 BOTService; C:\Program Files\Roxio\BackOnTrack\Instant Restore\BOTService.exe [203248 2009-03-19] (Sonic Solutions)
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [33560 2010-04-07] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [810120 2010-04-07] (ESET)
S3 IDriverT; c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3289208 2013-01-31] (Skype Technologies S.A.)
R2 STacSV; c:\program files\idt\wdm\STacSV.exe [254042 2009-03-30] (IDT, Inc.)
S3 usnjsvc; C:\Program Files\MSN Messenger\usnsvc.exe [97136 2007-01-19] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S4 abp480n5; C:\WINDOWS\system32\DRIVERS\ABP480N5.SYS [23552 2001-08-18] (Microsoft Corporation)
R3 AESTAud; C:\WINDOWS\System32\drivers\AESTAud.sys [113664 2009-03-19] (Andrea Electronics Corporation)
R3 BCM43XX; C:\WINDOWS\System32\DRIVERS\bcmwl5.sys [1735040 2009-06-10] (Broadcom Corporation)
R3 btkrnl; C:\WINDOWS\System32\DRIVERS\btkrnl.sys [991400 2008-06-24] (Broadcom Corporation.)
S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [47272 2008-07-25] (Broadcom Corporation.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 DrvAgent32; C:\WINDOWS\system32\Drivers\DrvAgent32.sys [23456 2012-07-30] (Phoenix Technologies) [File not signed]
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [139192 2010-04-07] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [114984 2010-04-07] (ESET)
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG)
R2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [134488 2010-04-07] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [32584 2010-04-07] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [55232 2010-04-07] (ESET)
R3 L1c; C:\WINDOWS\System32\DRIVERS\l1c51x86.sys [38912 2009-03-02] (Atheros Communications, Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 RSUSBSTOR; C:\WINDOWS\System32\Drivers\RTS5121.sys [160256 2008-11-22] (Realtek Semiconductor Corp.)
R1 SCDEmu; C:\WINDOWS\system32\Drivers\SCDEmu.sys [112096 2011-11-15] (Power Software Ltd)
R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1550891 2009-03-30] (IDT, Inc.)
R0 SysCow; C:\WINDOWS\System32\drivers\syscow32x.sys [103792 2008-09-24] (Sonic Solutions)
R3 VClone; C:\WINDOWS\System32\DRIVERS\VClone.sys [29696 2009-08-09] (Elaborate Bytes AG) [File not signed]
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
U4 RemoteRegistry; No ImagePath
S3 Rts516xIR; system32\DRIVERS\Rts516xIR.sys [X]
U3 TlntSvr; No ImagePath
S3 USBCCID; system32\DRIVERS\Rts5161ccid.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-24 15:14 - 2015-02-24 15:14 - 00013874 _____ () C:\Documents and Settings\anitka\Plocha\FRST.txt
2015-02-24 15:13 - 2015-02-24 15:13 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\FRST-OlderVersion
2015-02-24 14:27 - 2015-02-24 14:28 - 04197016 _____ (Kaspersky Lab ZAO) C:\Documents and Settings\anitka\Plocha\tdsskiller.exe
2015-02-24 09:52 - 2015-02-24 09:52 - 00025786 _____ () C:\Documents and Settings\anitka\Plocha\MbrScan.log
2015-02-24 09:51 - 2015-02-24 09:52 - 00000512 _____ () C:\Documents and Settings\anitka\Plocha\Dump_Hdd0_DR0.mbr
2015-02-24 09:50 - 2015-02-24 09:50 - 00147456 _____ (Eric_71) C:\Documents and Settings\anitka\Plocha\MbrScan.exe
2015-02-24 00:24 - 2015-02-24 00:24 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\PCHunter_free
2015-02-24 00:20 - 2015-02-24 00:23 - 06739485 _____ () C:\Documents and Settings\anitka\Plocha\PCHunter_free.zip
2015-02-23 23:14 - 2015-02-24 00:01 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes' Anti-Malware (portable)
2015-02-23 23:10 - 2015-02-23 23:10 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-23 23:07 - 2015-02-23 23:08 - 16502728 _____ (Malwarebytes Corp.) C:\Documents and Settings\anitka\Plocha\mbar-1.09.1.1004.exe
2015-02-23 23:06 - 2015-02-24 00:01 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\mbar
2015-02-23 23:02 - 2015-02-23 23:05 - 16466552 _____ (Malwarebytes Corp.) C:\Documents and Settings\anitka\Plocha\mbar-1.08.3.1004.exe
2015-02-23 22:06 - 2015-02-23 22:06 - 00000000 ____D () C:\_OTM
2015-02-23 22:02 - 2015-02-23 22:02 - 00522240 _____ (OldTimer Tools) C:\Documents and Settings\anitka\Plocha\OTM.exe
2015-02-23 22:02 - 2015-02-23 22:02 - 00000000 ____D () C:\Documents and Settings\anitka\Data aplikací\Sun
2015-02-23 21:27 - 2015-02-23 21:27 - 00007766 _____ () C:\Documents and Settings\anitka\Plocha\Addition.rar
2015-02-23 21:18 - 2015-02-24 15:14 - 00000000 ____D () C:\FRST
2015-02-23 21:17 - 2015-02-24 15:13 - 01127424 _____ (Farbar) C:\Documents and Settings\anitka\Plocha\FRST.exe
2015-02-23 09:37 - 2015-02-23 09:37 - 00010476 _____ () C:\ComboFix.txt
2015-02-23 09:37 - 2015-02-23 09:37 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\temp
2015-02-23 09:32 - 2015-02-23 09:32 - 00000435 _____ () C:\WINDOWS\system.ini
2015-02-23 09:22 - 2015-02-24 15:14 - 00000000 ____D () C:\Documents and Settings\anitka\Local Settings\temp
2015-02-23 08:54 - 2015-02-23 08:55 - 00000000 _RSHD () C:\cmdcons
2015-02-22 17:44 - 2015-02-22 17:44 - 00000327 _____ () C:\Boot.bak
2015-02-22 17:44 - 2004-08-03 23:00 - 00261312 __RSH () C:\cmldr
2015-02-22 17:36 - 2015-02-23 22:55 - 00000000 ____D () C:\WINDOWS\erdnt
2015-02-22 17:25 - 2015-02-24 09:56 - 00002664 _____ () C:\Documents and Settings\anitka\Plocha\Rkill.txt
2015-02-22 17:23 - 2015-02-22 17:24 - 01943800 _____ (Bleeping Computer, LLC) C:\Documents and Settings\anitka\Plocha\rkill.exe
2015-02-16 10:00 - 2015-02-16 09:59 - 00090112 _____ () C:\WINDOWS\Minidump\Mini021615-01.dmp
2015-02-15 20:08 - 2015-02-15 20:08 - 00000541 _____ () C:\Documents and Settings\anitka\Plocha\GoogleEarthPluginSetup.lnk
2015-02-15 20:08 - 2015-02-15 20:08 - 00000367 _____ () C:\Documents and Settings\anitka\Plocha\__MACOSX.lnk
2015-01-29 16:41 - 2015-01-29 16:41 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\McAfee
2015-01-26 20:31 - 2015-01-26 20:32 - 00000000 ____D () C:\Program Files\Mozilla Firefox
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-02-24 15:14 - 2009-09-26 10:44 - 00000000 ____D () C:\Program Files\Weather Watcher
2015-02-24 15:14 - 2009-09-21 18:37 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha
2015-02-24 15:13 - 2009-09-21 18:37 - 00000000 ___HD () C:\Documents and Settings\anitka\Local Settings\Data aplikací
2015-02-24 15:09 - 2014-12-01 17:56 - 00000282 _____ () C:\WINDOWS\Tasks\BackOnTrack Instant Restore Idle.job
2015-02-24 14:55 - 2012-05-29 21:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-02-24 14:25 - 2008-12-01 23:03 - 01056954 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-02-24 14:22 - 2008-12-01 23:22 - 02046826 _____ () C:\WINDOWS\WindowsUpdate.log
2015-02-24 14:22 - 2008-12-01 23:01 - 00000626 _____ () C:\WINDOWS\win.ini
2015-02-24 14:21 - 2008-12-01 23:46 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-02-24 14:21 - 2008-12-01 23:46 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2015-02-24 14:21 - 2008-12-01 23:22 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-02-24 14:20 - 2009-09-21 18:37 - 00000272 ___SH () C:\Documents and Settings\anitka\ntuser.ini
2015-02-24 14:20 - 2008-12-01 23:22 - 00032514 _____ () C:\WINDOWS\SchedLgU.Txt
2015-02-24 14:19 - 2012-03-14 23:19 - 00004511 _____ () C:\WINDOWS\setupact.log
2015-02-24 14:19 - 2012-03-05 20:49 - 00319540 _____ () C:\WINDOWS\setupapi.log
2015-02-23 23:14 - 2009-09-22 18:43 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2015-02-23 23:14 - 2009-09-22 02:20 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2015-02-23 22:55 - 2009-09-22 02:21 - 00000000 ____D () C:\WINDOWS\system32\Restore
2015-02-23 22:10 - 2009-09-22 02:20 - 00000000 ____D () C:\Documents and Settings\Default User\Local Settings\Temp
2015-02-23 22:02 - 2009-09-21 18:37 - 00000000 __RHD () C:\Documents and Settings\anitka\Data aplikací
2015-02-23 14:14 - 2009-09-23 14:27 - 00002935 _____ () C:\WINDOWS\wincmd.ini
2015-02-23 12:02 - 2009-09-22 02:20 - 00000000 __SHD () C:\Documents and Settings\LocalService
2015-02-23 08:55 - 2008-12-01 22:46 - 00000327 __RSH () C:\boot.ini
2015-02-22 18:09 - 2009-09-22 02:21 - 00000000 ____D () C:\Program Files\HP
2015-02-22 18:09 - 2009-09-21 18:37 - 00000000 ____D () C:\Documents and Settings\anitka
2015-02-18 18:06 - 2009-09-22 02:21 - 00000000 ____D () C:\WINDOWS\Registration
2015-02-18 17:50 - 2009-09-26 10:09 - 00000000 ____D () C:\Documents and Settings\anitka\Data aplikací\Skype
2015-02-18 17:50 - 2009-09-22 02:20 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2015-02-18 17:50 - 2009-09-22 02:20 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-02-18 17:50 - 2009-09-22 02:20 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-02-18 17:46 - 2008-12-01 23:22 - 00001158 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-16 10:00 - 2011-11-13 12:06 - 00000000 ____D () C:\WINDOWS\Minidump
2015-02-15 18:59 - 2013-10-22 16:20 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\DIA SKOLA
2015-02-15 13:58 - 2013-08-23 17:10 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-02-15 13:32 - 2009-10-02 22:24 - 113756392 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-02-10 21:15 - 2014-09-02 19:34 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\TURECKO
2015-02-06 10:55 - 2012-05-29 21:43 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-06 10:55 - 2012-02-24 10:57 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2015-02-02 21:54 - 2014-04-23 18:20 - 00000000 ____D () C:\Documents and Settings\anitka\Plocha\SMSNG APRIL
2015-01-29 16:41 - 2009-09-22 02:20 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací
2015-01-28 16:06 - 2012-04-30 17:19 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
==================== Files in the root of some directories =======
2011-06-20 21:52 - 2008-03-09 06:25 - 0000236 _____ () C:\Program Files\Common Files\dx.reg
2009-09-21 18:51 - 2009-09-21 18:51 - 0000000 _____ () C:\Documents and Settings\anitka\Data aplikací\wklnhst.dat
2009-09-25 11:49 - 2014-10-29 13:52 - 0130048 _____ () C:\Documents and Settings\anitka\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2009-09-21 18:37 - 2009-09-21 18:45 - 0000126 _____ () C:\Documents and Settings\anitka\Local Settings\Data aplikací\fusioncache.dat
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\BackOnTrack Instant Restore Idle.job => C:\Program Files\Roxio\BackOnTrack\Instant Restore\RstIdle.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 4.2 (Enabled - Up to date) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET personal firewall (Disabled) {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Documents and Settings\anitka\Plocha" je 18938 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
"C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
"C:\\Program Files\\Outlook Express\\wab.exe"="C:\\Program Files\\Outlook Express\\wab.exe:*:Enabled:Adres systmu Windows"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype. Take a deep breath "
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Firefox (C:\\Program Files\\Mozilla Firefox)"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000001
==================== End Of Log ==============================
Postup kolegy Naughtyho:
Přispějete na provoz fóra?