VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím o kontrolu logu

https://forum.viry.cz:443/viewtopic.php?t=127858

Stránka 1 z 2

Prosím o kontrolu logu

Napsal: 03 úno 2013 12:07
od rakato11
Dobrý den, PC mi začal nabíhat za podstatně delší čas než tomu bylo doposud.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Otakar Vavrečka at 2013-02-03 12:06:05
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 66 GB (42%) free of 158 GB
Total RAM: 3066 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:06:26, on 3.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16438)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Windows\System32\MSTMON_N.EXE
C:\SCANJET\PrecisionScanLT\hppwrsav.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Users\Otakar Vavrečka\Desktop\Gmail Notifier Plus.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_5_502_146.exe
C:\Users\Otakar Vavrečka\Desktop\RSIT.exe
C:\Program Files\trend micro\Otakar Vavrečka.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.internet-explorer.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\listicka.dll
O3 - Toolbar: Nástroje Lištičky - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - C:\Program Files\Seznam.cz\bin\toolbar\toolbar.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1300WStatusDisplay] C:\Windows\system32\MSTMON_N.EXE
O4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - Global Startup: Update Scheduler for Proteus Professional 7.lnk = ?
O8 - Extra context menu item: Free YouTube Download - C:\Users\Otakar Vavrečka\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Otakar Vavrečka\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 6142 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job
C:\Windows\tasks\ParetoLogic Update Version3.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, wrc@avast.com:20110101, {ea614400-e918-4741-9a97-7a972ff7c30b}:2.1.14, {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"{ACAA314B-EEBA-48e4-AD47-84E31C44796C}"=C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.13.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
butterscotch_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default\searchplugins\
badoo.xml
hledejcenycz.xml
icq-search.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-17.xml
icqplugin-18.xml
icqplugin-19.xml
icqplugin-20.xml
icqplugin-21.xml
icqplugin-22.xml
icqplugin-23.xml
icqplugin-24.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-02-02 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-02-02 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\bin\listicka.dll [2012-04-16 1508376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{1EA00BE1-6E54-4E2A-8099-680300BF23E1} - Nástroje Lištičky - C:\Program Files\Seznam.cz\bin\toolbar\toolbar.dll [2012-04-16 188952]
{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-10-30 4297136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"KONICA MINOLTA PagePro 1300WStatusDisplay"=C:\Windows\system32\MSTMON_N.EXE [2004-11-25 151552]
"hppwrsav"=C:\SCANJET\PrecisionScanLT\hppwrsav.exe [1999-06-07 23552]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Seznam Postak"=C:\Program Files\Seznam.cz\bin\postak.exe [2012-01-10 491040]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Update Scheduler for Proteus Professional 7.lnk - C:\Program Files\Labcenter Electronics\Proteus 7 Professional\BIN\UDSCHED.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-02-03 12:06:05 ----D---- C:\Program Files\trend micro
2013-02-02 16:25:53 ----A---- C:\Windows\system32\javaws.exe
2013-02-02 16:25:42 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-02-02 16:25:42 ----A---- C:\Windows\system32\javaw.exe
2013-02-02 16:25:40 ----A---- C:\Windows\system32\java.exe
2013-02-02 14:48:45 ----D---- C:\Program Files\TeamViewer
2013-02-02 14:14:01 ----A---- C:\Windows\system32\SER9PL.sys
2013-02-02 14:14:01 ----A---- C:\Windows\system32\drivers\ser2pl.sys
2013-02-01 23:19:01 ----D---- C:\Windows\system32\XPSViewer
2013-02-01 23:19:00 ----D---- C:\Program Files\Reference Assemblies
2013-02-01 23:19:00 ----D---- C:\Program Files\MSBuild
2013-02-01 19:12:55 ----D---- C:\Windows\pss
2013-01-29 19:43:44 ----A---- C:\Windows\system32\MUINST_N.EXE
2013-01-28 17:28:42 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Seznam.cz
2013-01-21 16:16:33 ----SHD---- C:\$RECYCLE.BIN
2013-01-21 16:10:26 ----D---- C:\Uninstall
2013-01-20 09:30:04 ----A---- C:\Windows\system32\mshtml.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\wininet.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\wextract.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\webcheck.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\vbscript.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\urlmon.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\url.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\pngfilt.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\occache.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msrating.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msls31.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmler.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmled.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshta.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeedssync.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeeds.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\licmgr10.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jsproxy.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jscript9.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jscript.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\inseng.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\imgutil.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iexpress.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieUnatt.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieui.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iesysprep.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iesetup.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iertutil.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iernonce.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iepeers.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieframe.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iedkcs32.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieapfltr.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieapfltr.dat
2013-01-19 20:02:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ie4uinit.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\icardie.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\elshyph.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\dxtrans.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\dxtmsft.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\XpsPrint.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WMPhoto.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\UIAnimation.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\FntCache.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\dxgi.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\DWrite.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d11.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10warp.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10level9.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10core.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10_1.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d2d1.dll
2013-01-19 17:46:50 ----D---- C:\Windows\temp
2013-01-19 12:50:58 ----A---- C:\AdwCleaner[S5].txt
2013-01-19 12:47:22 ----A---- C:\AdwCleaner[S4].txt
2013-01-19 12:46:59 ----A---- C:\AdwCleaner[R6].txt
2013-01-19 12:17:53 ----A---- C:\AdwCleaner[R5].txt
2013-01-18 22:49:34 ----D---- C:\rsit
2013-01-18 21:17:48 ----D---- C:\Program Files\MSXML 4.0
2013-01-17 12:26:19 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Sweetpacks
2013-01-17 10:36:44 ----D---- C:\Config.Msi
2013-01-17 06:29:52 ----D---- C:\Program Files\Uniblue
2013-01-17 05:47:07 ----D---- C:\Windows\WM Capture 6
2013-01-17 05:46:43 ----A---- C:\WM Capture 6 Setup Log.txt
2013-01-16 19:39:05 ----D---- C:\Program Files\Real
2013-01-16 19:38:42 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Real
2013-01-16 19:36:29 ----D---- C:\ProgramData\Real
2013-01-10 20:51:30 ----D---- C:\Program Files\Mozilla Firefox
2013-01-10 06:54:05 ----A---- C:\Windows\system32\win32k.sys
2013-01-10 06:54:03 ----A---- C:\Windows\system32\win32spl.dll
2013-01-10 06:53:52 ----A---- C:\Windows\system32\msxml6.dll
2013-01-10 06:53:37 ----A---- C:\Windows\system32\taskhost.exe
2013-01-10 06:53:37 ----A---- C:\Windows\system32\ncrypt.dll

======List of files/folders modified in the last 1 month======

2013-02-03 12:06:05 ----RD---- C:\Program Files
2013-02-03 12:01:03 ----D---- C:\Windows\inf
2013-02-03 12:01:03 ----D---- C:\Windows
2013-02-03 11:51:27 ----D---- C:\Windows\system32\config
2013-02-02 17:25:31 ----SHD---- C:\System Volume Information
2013-02-02 16:26:13 ----SHD---- C:\Windows\Installer
2013-02-02 16:25:53 ----AD---- C:\Windows\System32
2013-02-02 16:25:34 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-02-02 16:25:34 ----A---- C:\Windows\system32\deployJava1.dll
2013-02-02 16:25:32 ----D---- C:\Program Files\Java
2013-02-02 15:36:57 ----D---- C:\Windows\system32\Tasks
2013-02-02 15:02:46 ----HD---- C:\Program Files\InstallShield Installation Information
2013-02-02 14:48:54 ----RSD---- C:\Windows\Fonts
2013-02-02 14:32:19 ----D---- C:\Windows\system32\drivers
2013-02-02 14:14:04 ----D---- C:\Windows\system32\DriverStore
2013-02-02 14:14:04 ----D---- C:\Windows\system32\catroot
2013-02-02 13:46:23 ----D---- C:\Windows\system32\catroot2
2013-02-02 10:30:42 ----D---- C:\Windows\Microsoft.NET
2013-02-01 23:20:20 ----D---- C:\Windows\winsxs
2013-02-01 23:19:01 ----D---- C:\Windows\system32\wbem
2013-02-01 23:19:01 ----D---- C:\Windows\system32\cs-CZ
2013-02-01 11:41:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-30 20:14:45 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Skype
2013-01-29 09:52:19 ----D---- C:\Program Files\Google
2013-01-29 09:30:00 ----D---- C:\Windows\system32\NDF
2013-01-29 09:25:01 ----D---- C:\Windows\SoftwareDistribution
2013-01-28 20:17:49 ----D---- C:\Windows\Tasks
2013-01-28 20:17:49 ----D---- C:\Windows\system32\wfp
2013-01-28 20:16:42 ----D---- C:\Windows\system32\migration
2013-01-28 20:16:42 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-01-28 20:16:41 ----D---- C:\Windows\AppPatch
2013-01-28 20:16:38 ----D---- C:\Windows\system32\CodeIntegrity
2013-01-28 20:16:31 ----RSD---- C:\Windows\assembly
2013-01-28 20:16:31 ----D---- C:\Windows\AppCompat
2013-01-28 20:16:30 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\IrfanView
2013-01-28 20:16:30 ----D---- C:\Program Files\Seznam.cz
2013-01-28 20:16:23 ----D---- C:\Windows\registration
2013-01-28 20:15:52 ----D---- C:\Windows\PolicyDefinitions
2013-01-28 19:54:40 ----D---- C:\Program Files\Microsoft Silverlight
2013-01-28 15:27:53 ----D---- C:\Windows\Prefetch
2013-01-21 16:15:51 ----D---- C:\Windows\erdnt
2013-01-20 16:47:38 ----D---- C:\Windows\Panther
2013-01-20 16:47:38 ----D---- C:\Windows\Logs
2013-01-20 10:14:14 ----D---- C:\Windows\rescache
2013-01-19 20:05:29 ----D---- C:\Windows\system32\en-US
2013-01-19 20:05:29 ----D---- C:\Program Files\Internet Explorer
2013-01-19 17:44:29 ----A---- C:\Windows\system.ini
2013-01-19 17:44:20 ----D---- C:\Windows\system32\drivers\etc
2013-01-19 17:24:51 ----D---- C:\Program Files\Common Files
2013-01-19 08:19:27 ----D---- C:\TapinRadio - Radio 7
2013-01-19 08:19:27 ----D---- C:\ProgramData\YTD Video Downloader
2013-01-19 08:16:16 ----D---- C:\ProgramData
2013-01-18 21:39:49 ----D---- C:\Windows\debug
2013-01-17 11:43:06 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Ignite
2013-01-17 01:28:58 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-16 19:39:15 ----A---- C:\Windows\system32\pncrt.dll
2013-01-16 19:39:08 ----A---- C:\Windows\system32\msvcr71.dll
2013-01-10 09:00:24 ----A---- C:\Windows\system32\MRT.exe
2013-01-09 16:31:32 ----A---- C:\Windows\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-30 20624]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 44784]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 58680]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-07 2506232]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 MLPTDR_N;MLPTDR_N; \??\C:\Windows\system32\MLPTDR_N.SYS [2003-07-18 18848]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S2 PPSCAN;PPSCAN; C:\Windows\system32\drivers\PPSCAN.sys [2002-03-29 91520]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 catchme;catchme; \??\C:\Users\OTAKAR~1\AppData\Local\Temp\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2012-07-26 132608]
S3 Ser2plx86;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2012-07-26 132608]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2011-08-11 12984]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-09 251400]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22 136176]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-23 1343400]

-----------------EOF-----------------

Re: Prosím o kontrolu logu

Napsal: 03 úno 2013 12:34
od Rudy
Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:
:files
C:\Program Files\Seznam.cz\bin\toolbar\toolbar.dll

:reg
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"=-

:commands
[Purity]
[Emptytemp]
[Emptyflash]
a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC. Dejte nový log RSIT.

Re: Prosím o kontrolu logu

Napsal: 03 úno 2013 13:03
od rakato11
Logfile of random's system information tool 1.09 (written by random/random)
Run by Otakar Vavrečka at 2013-02-03 13:01:04
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 66 GB (42%) free of 158 GB
Total RAM: 3066 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:01:47, on 3.2.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16438)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskhost.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Windows\System32\MSTMON_N.EXE
C:\SCANJET\PrecisionScanLT\hppwrsav.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Seznam.cz\bin\postak.exe
C:\Users\Otakar Vavrečka\Desktop\RSIT.exe
C:\Program Files\trend micro\Otakar Vavrečka.exe
C:\Windows\system32\DllHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.internet-explorer.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Ukazatel S-Rank - {EA837F48-5AD1-443E-AE34-FFE03CBF3099} - C:\Program Files\Seznam.cz\bin\listicka.dll
O4 - HKLM\..\Run: [avast] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [KONICA MINOLTA PagePro 1300WStatusDisplay] C:\Windows\system32\MSTMON_N.EXE
O4 - HKLM\..\Run: [hppwrsav] C:\SCANJET\PrecisionScanLT\hppwrsav.exe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Seznam Postak] "C:\Program Files\Seznam.cz\bin\postak.exe" -s
O4 - Global Startup: Update Scheduler for Proteus Professional 7.lnk = ?
O8 - Extra context menu item: Free YouTube Download - C:\Users\Otakar Vavrečka\AppData\Roaming\DVDVideoSoftIEHelpers\freeytvdownloader.htm
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Users\Otakar Vavrečka\AppData\Roaming\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm
O9 - Extra button: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Nastavení Lištičky ... - {0E46D7B6-887D-4F81-B4CA-FCC92AF73610} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra button: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra 'Tools' menuitem: Zvýrazňovač slov Lištičky - {4E6D6F90-31CA-4878-A7A3-1CD50F115A69} - C:\Program Files\Seznam.cz\bin\listicka.dll
O9 - Extra button: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.6 - {7644E42D-B096-457F-8B5B-901238FC81AE} - C:\Program Files\ICQ7.6\ICQ.exe
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TeamViewer 8 (TeamViewer8) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe

--
End of file - 5452 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\ParetoLogic Update Version3 Startup Task.job
C:\Windows\tasks\ParetoLogic Update Version3.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.google.cz/"
prefs.js - "extensions.enabledItems" - "{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}:6.0.24, wrc@avast.com:20110101, {ea614400-e918-4741-9a97-7a972ff7c30b}:2.1.14, {ACAA314B-EEBA-48e4-AD47-84E31C44796C}:1.0.1, {972ce4c6-7e08-4474-a285-3208198ce6fd}:3.6.17"

"wrc@avast.com"=C:\Program Files\Alwil Software\Avast5\WebRep\FF
"{ACAA314B-EEBA-48e4-AD47-84E31C44796C}"=C:\Program Files\Common Files\DVDVideoSoft\plugins\ff\


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.5.502.146 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_146.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.13.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.13.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.123\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

C:\Program Files\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}

C:\Program Files\Mozilla Firefox\components\
binary.manifest
browsercomps.dll

C:\Program Files\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files\Mozilla Firefox\searchplugins\
butterscotch_igeared.xml
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml

C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default\extensions\
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\Otakar Vavrečka\AppData\Roaming\Mozilla\Firefox\Profiles\fslv0uhv.default\searchplugins\
badoo.xml
hledejcenycz.xml
icq-search.xml
icqplugin-10.xml
icqplugin-11.xml
icqplugin-12.xml
icqplugin-13.xml
icqplugin-14.xml
icqplugin-15.xml
icqplugin-16.xml
icqplugin-17.xml
icqplugin-18.xml
icqplugin-19.xml
icqplugin-20.xml
icqplugin-21.xml
icqplugin-22.xml
icqplugin-23.xml
icqplugin-24.xml
icqplugin-4.xml
icqplugin-5.xml
icqplugin-6.xml
icqplugin-7.xml
icqplugin-8.xml
icqplugin-9.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-12-18 66280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-02-02 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! WebRep - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll [2012-10-30 1227736]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-02-02 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EA837F48-5AD1-443E-AE34-FFE03CBF3099}]
Lištička - C:\Program Files\Seznam.cz\bin\listicka.dll [2012-04-16 1508376]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"avast"=C:\Program Files\Alwil Software\Avast5\avastUI.exe [2012-10-30 4297136]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"KONICA MINOLTA PagePro 1300WStatusDisplay"=C:\Windows\system32\MSTMON_N.EXE [2004-11-25 151552]
"hppwrsav"=C:\SCANJET\PrecisionScanLT\hppwrsav.exe [1999-06-07 23552]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-12-03 946352]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"Seznam Postak"=C:\Program Files\Seznam.cz\bin\postak.exe [2012-01-10 491040]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Update Scheduler for Proteus Professional 7.lnk - C:\Program Files\Labcenter Electronics\Proteus 7 Professional\BIN\UDSCHED.EXE

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1

======List of files/folders created in the last 1 month======

2013-02-03 12:50:06 ----D---- C:\_OTM
2013-02-03 12:06:05 ----D---- C:\Program Files\trend micro
2013-02-02 16:25:53 ----A---- C:\Windows\system32\javaws.exe
2013-02-02 16:25:42 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2013-02-02 16:25:42 ----A---- C:\Windows\system32\javaw.exe
2013-02-02 16:25:40 ----A---- C:\Windows\system32\java.exe
2013-02-02 14:48:45 ----D---- C:\Program Files\TeamViewer
2013-02-02 14:14:01 ----A---- C:\Windows\system32\SER9PL.sys
2013-02-02 14:14:01 ----A---- C:\Windows\system32\drivers\ser2pl.sys
2013-02-01 23:19:01 ----D---- C:\Windows\system32\XPSViewer
2013-02-01 23:19:00 ----D---- C:\Program Files\Reference Assemblies
2013-02-01 23:19:00 ----D---- C:\Program Files\MSBuild
2013-02-01 19:12:55 ----D---- C:\Windows\pss
2013-01-29 19:43:44 ----A---- C:\Windows\system32\MUINST_N.EXE
2013-01-28 17:28:42 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Seznam.cz
2013-01-21 16:16:33 ----SHD---- C:\$RECYCLE.BIN
2013-01-21 16:10:26 ----D---- C:\Uninstall
2013-01-20 09:30:04 ----A---- C:\Windows\system32\mshtml.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\wininet.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\wextract.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\webcheck.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\vbscript.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\urlmon.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\url.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\pngfilt.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\occache.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msrating.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msls31.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmler.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshtmled.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\mshta.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeedssync.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\msfeeds.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\licmgr10.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jsproxy.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jscript9.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\jscript.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\inseng.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\imgutil.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iexpress.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieUnatt.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieui.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iesysprep.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iesetup.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iertutil.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iernonce.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iepeers.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieframe.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\iedkcs32.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieapfltr.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ieapfltr.dat
2013-01-19 20:02:13 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\ie4uinit.exe
2013-01-19 20:02:13 ----A---- C:\Windows\system32\icardie.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\elshyph.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\dxtrans.dll
2013-01-19 20:02:13 ----A---- C:\Windows\system32\dxtmsft.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-01-19 20:01:09 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\XpsPrint.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WMPhoto.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\WindowsCodecs.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\UIAnimation.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\FntCache.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\dxgi.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\DWrite.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d11.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10warp.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10level9.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10core.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10_1core.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10_1.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d3d10.dll
2013-01-19 20:01:09 ----A---- C:\Windows\system32\d2d1.dll
2013-01-19 17:46:50 ----D---- C:\Windows\temp
2013-01-19 12:50:58 ----A---- C:\AdwCleaner[S5].txt
2013-01-19 12:47:22 ----A---- C:\AdwCleaner[S4].txt
2013-01-19 12:46:59 ----A---- C:\AdwCleaner[R6].txt
2013-01-19 12:17:53 ----A---- C:\AdwCleaner[R5].txt
2013-01-18 22:49:34 ----D---- C:\rsit
2013-01-18 21:17:48 ----D---- C:\Program Files\MSXML 4.0
2013-01-17 12:26:19 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Sweetpacks
2013-01-17 10:36:44 ----D---- C:\Config.Msi
2013-01-17 06:29:52 ----D---- C:\Program Files\Uniblue
2013-01-17 05:47:07 ----D---- C:\Windows\WM Capture 6
2013-01-17 05:46:43 ----A---- C:\WM Capture 6 Setup Log.txt
2013-01-16 19:39:05 ----D---- C:\Program Files\Real
2013-01-16 19:38:42 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Real
2013-01-16 19:36:29 ----D---- C:\ProgramData\Real
2013-01-10 20:51:30 ----D---- C:\Program Files\Mozilla Firefox
2013-01-10 06:54:05 ----A---- C:\Windows\system32\win32k.sys
2013-01-10 06:54:03 ----A---- C:\Windows\system32\win32spl.dll
2013-01-10 06:53:52 ----A---- C:\Windows\system32\msxml6.dll
2013-01-10 06:53:37 ----A---- C:\Windows\system32\taskhost.exe
2013-01-10 06:53:37 ----A---- C:\Windows\system32\ncrypt.dll

======List of files/folders modified in the last 1 month======

2013-02-03 12:59:10 ----D---- C:\Windows\system32\config
2013-02-03 12:52:30 ----D---- C:\Windows\inf
2013-02-03 12:52:04 ----D---- C:\Windows
2013-02-03 12:06:05 ----RD---- C:\Program Files
2013-02-02 17:25:31 ----SHD---- C:\System Volume Information
2013-02-02 16:26:13 ----SHD---- C:\Windows\Installer
2013-02-02 16:25:53 ----AD---- C:\Windows\System32
2013-02-02 16:25:34 ----A---- C:\Windows\system32\npDeployJava1.dll
2013-02-02 16:25:34 ----A---- C:\Windows\system32\deployJava1.dll
2013-02-02 16:25:32 ----D---- C:\Program Files\Java
2013-02-02 15:36:57 ----D---- C:\Windows\system32\Tasks
2013-02-02 15:02:46 ----HD---- C:\Program Files\InstallShield Installation Information
2013-02-02 14:48:54 ----RSD---- C:\Windows\Fonts
2013-02-02 14:32:19 ----D---- C:\Windows\system32\drivers
2013-02-02 14:14:04 ----D---- C:\Windows\system32\DriverStore
2013-02-02 14:14:04 ----D---- C:\Windows\system32\catroot
2013-02-02 13:46:23 ----D---- C:\Windows\system32\catroot2
2013-02-02 10:30:42 ----D---- C:\Windows\Microsoft.NET
2013-02-01 23:20:20 ----D---- C:\Windows\winsxs
2013-02-01 23:19:01 ----D---- C:\Windows\system32\wbem
2013-02-01 23:19:01 ----D---- C:\Windows\system32\cs-CZ
2013-02-01 11:41:46 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-01-30 20:14:45 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Skype
2013-01-29 09:52:19 ----D---- C:\Program Files\Google
2013-01-29 09:30:00 ----D---- C:\Windows\system32\NDF
2013-01-29 09:25:01 ----D---- C:\Windows\SoftwareDistribution
2013-01-28 20:17:49 ----D---- C:\Windows\Tasks
2013-01-28 20:17:49 ----D---- C:\Windows\system32\wfp
2013-01-28 20:16:42 ----D---- C:\Windows\system32\migration
2013-01-28 20:16:42 ----D---- C:\Windows\system32\drivers\cs-CZ
2013-01-28 20:16:41 ----D---- C:\Windows\AppPatch
2013-01-28 20:16:38 ----D---- C:\Windows\system32\CodeIntegrity
2013-01-28 20:16:31 ----RSD---- C:\Windows\assembly
2013-01-28 20:16:31 ----D---- C:\Windows\AppCompat
2013-01-28 20:16:30 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\IrfanView
2013-01-28 20:16:30 ----D---- C:\Program Files\Seznam.cz
2013-01-28 20:16:23 ----D---- C:\Windows\registration
2013-01-28 20:15:52 ----D---- C:\Windows\PolicyDefinitions
2013-01-28 19:54:40 ----D---- C:\Program Files\Microsoft Silverlight
2013-01-28 15:27:53 ----D---- C:\Windows\Prefetch
2013-01-21 16:15:51 ----D---- C:\Windows\erdnt
2013-01-20 16:47:38 ----D---- C:\Windows\Panther
2013-01-20 16:47:38 ----D---- C:\Windows\Logs
2013-01-20 10:14:14 ----D---- C:\Windows\rescache
2013-01-19 20:05:29 ----D---- C:\Windows\system32\en-US
2013-01-19 20:05:29 ----D---- C:\Program Files\Internet Explorer
2013-01-19 17:44:29 ----A---- C:\Windows\system.ini
2013-01-19 17:44:20 ----D---- C:\Windows\system32\drivers\etc
2013-01-19 17:24:51 ----D---- C:\Program Files\Common Files
2013-01-19 08:19:27 ----D---- C:\TapinRadio - Radio 7
2013-01-19 08:19:27 ----D---- C:\ProgramData\YTD Video Downloader
2013-01-19 08:16:16 ----D---- C:\ProgramData
2013-01-18 21:39:49 ----D---- C:\Windows\debug
2013-01-17 11:43:06 ----D---- C:\Users\Otakar Vavrečka\AppData\Roaming\Ignite
2013-01-17 01:28:58 ----N---- C:\Windows\system32\MpSigStub.exe
2013-01-16 19:39:15 ----A---- C:\Windows\system32\pncrt.dll
2013-01-16 19:39:08 ----A---- C:\Windows\system32\msvcr71.dll
2013-01-10 09:00:24 ----A---- C:\Windows\system32\MRT.exe
2013-01-09 16:31:32 ----A---- C:\Windows\system32\FlashPlayerApp.exe

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswKbd;aswKbd; C:\Windows\system32\drivers\aswKbd.sys [2012-10-30 20624]
R1 aswRdr;aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [2012-10-15 44784]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2012-10-30 738504]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2012-10-30 361032]
R1 aswTdi;avast! Network Shield Support; C:\Windows\system32\drivers\aswTdi.sys [2012-10-30 54232]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswFsBlk;aswFsBlk; C:\Windows\system32\drivers\aswFsBlk.sys [2012-10-30 21256]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2012-10-30 58680]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2009-08-18 4994560]
R3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl6.sys [2009-07-07 2506232]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 MLPTDR_N;MLPTDR_N; \??\C:\Windows\system32\MLPTDR_N.SYS [2003-07-18 18848]
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S2 PPSCAN;PPSCAN; C:\Windows\system32\drivers\PPSCAN.sys [2002-03-29 91520]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 393728]
S3 catchme;catchme; \??\C:\Users\OTAKAR~1\AppData\Local\Temp\catchme.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 27192]
S3 Ser2pl;Prolific Serial port driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2012-07-26 132608]
S3 Ser2plx86;Prolific Serial port WDF driver; C:\Windows\system32\DRIVERS\ser2pl.sys [2012-07-26 132608]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys [2005-08-17 58352]
S3 sscdmdfl;SAMSUNG CDMA Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys [2005-08-17 8272]
S3 sscdmdm;SAMSUNG CDMA Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys [2005-08-17 93872]
S3 StarOpen;StarOpen; C:\Windows\system32\drivers\StarOpen.sys []
S3 SWDUMon;SWDUMon; C:\Windows\system32\DRIVERS\SWDUMon.sys [2011-08-11 12984]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2009-07-14 35840]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-12-18 65192]
R2 AEADIFilters;Andrea ADI Filters Service; C:\Windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2009-08-18 176128]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [2012-10-30 44808]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
R2 TeamViewer8;TeamViewer 8; C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe [2012-12-14 3467768]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22 136176]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2012-11-09 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-01-09 251400]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2011-02-22 136176]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-02-23 1343400]

-----------------EOF-----------------

Re: Prosím o kontrolu logu

Napsal: 03 úno 2013 17:43
od rakato11
Stále mi po spuštění PC vyskakuje toto-viz příloha.

Re: Prosím o kontrolu logu

Napsal: 03 úno 2013 18:28
od Rudy
Dvouklikem na soubor C:\Program Files\trend micro\Otakar Vavrečka.exe spusťte HijackThis. Klikněte na "Do a system scan only" a v otevřeném okně vlevo ve čtverečcích zaškrtněte:
R3 - URLSearchHook: (no name) - - (no file)
Klikněte na >FixChecked<. Pak znovu spusťte OTM a klikněte na >CleanUp!<. OTM po sobě uklidí. Nakonec restartujte PC.

Zde máte řešení: http://support.microsoft.com/kb/822521 .

Re: Prosím o kontrolu logu

Napsal: 03 úno 2013 22:37
od rakato11
Šel jsem na odkaz který jste mi dal: http://support.microsoft.com/kb/822521 , vše jsem dělal podle pokynů (manuální i automatické obnovení), tabulka si vesele vyskakuje dál. Tak to asi nechám tak jak to je, používám Google ale když je něco co by nemělo být, tak mě to štve.
Ještě bych se chtěl zeptat, od minula mám na ploše ikonu adwcleaner, jde jí dát jednoduše do koše, nemusí se nějakým jiným způsobem odstraňovat?

Re: Prosím o kontrolu logu

Napsal: 04 úno 2013 18:53
od Rudy
1. Zkuste přeinstalovat IE.
2. Spusťte ADWCleaner a klikněte na >Uninstall<. Utilita se odinstaluje. Někdy je třeba pak vyhodit ikonu do koše.

Re: Prosím o kontrolu logu

Napsal: 04 úno 2013 20:20
od rakato11
Zkusil jsem podle Vaší rady přeinstalovat IE, vypisovalo mi, že už je nainstalován, tak jsem IE odinstaloval a znovu nainstaloval, ale "oznam" vyskakuje stále po spuštěni.
Ten AdwCleaner odinstalovat nešel, tak jsem jej přesunul do koše.

Re: Prosím o kontrolu logu

Napsal: 04 úno 2013 21:10
od Rudy
Zkuste v IE zakázat ladění skriptů.

Re: Prosím o kontrolu logu

Napsal: 04 úno 2013 21:28
od rakato11
Zkontroloval jsem to a je tam ve čtverečku "fajfka", čili zakázané.

Re: Prosím o kontrolu logu

Napsal: 04 úno 2013 21:37
od Rudy
Ještě se podíváme, zda není systém zavirován: Udělejte kompletní sken MBAM: http://www.malwarebytes.org/mbam.php a dejte log. Předem nic nemažte.

Re: Prosím o kontrolu logu

Napsal: 05 úno 2013 08:15
od rakato11
Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.05.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Otakar Vavrečka :: PC-OTAKAR [administrátor]

Ochrana: Povolena

5.2.2013 6:30:49
MBAM-log-2013-02-05 (08-10-39).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|G:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 464441
Uplynulý čas: 1 hodin, 30 minut, 22 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 2
D:\Advanced System Care 3.7.2\asc.Keygen.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
D:\Programy-1\amaterske_radio_2009_full.torrent_mediaget.exe (PUP.Adware.MediaGet) -> Nebyla provedena žádná instrukce.

(konec)

Re: Prosím o kontrolu logu

Napsal: 07 úno 2013 20:40
od Rudy
Nalezené položky smažte.

Re: Prosím o kontrolu logu

Napsal: 08 úno 2013 08:50
od rakato11
Dnes jsem udělal novou kontrolu, neboť jsem nemohl najít jeden soubor z minula, ten ale dnes MBAM nenašel, ale našel jiný. Ten co nemohu najít je tento: D:\Advanced System Care 3.7.2\asc.Keygen.exe (RiskWare.Tool.CK) -> Nebyla provedena žádná instrukce.
Ten druhý jsem dal do koše, neboť vaše forum bylo nefunkční a program MBAM jsem zavřel a nevím zda se tam dájí najít nalezené soubory.

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.70.0.1100
www.malwarebytes.org

Verze: v2013.02.08.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Otakar Vavrečka :: PC-OTAKAR [administrátor]

Ochrana: Povolena

8.2.2013 6:57:55
MBAM-log-2013-02-08 (08-40-49).txt

Typ: Kompletní kontrola (C:\|D:\|E:\|G:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 460666
Uplynulý čas: 1 hodin, 30 minut, 7 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 1
D:\$RECYCLE.BIN\S-1-5-21-505298747-3480647553-2469496864-1000\$RPRU80P.exe (PUP.Adware.MediaGet) -> Nebyla provedena žádná instrukce.

(konec)

Re: Prosím o kontrolu logu

Napsal: 08 úno 2013 20:00
od Rudy
Vše nalezené smažte.
Všechny časy jsou v UTC+01:00
Stránka 1 z 2

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz