VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

vir policie log FRST

https://forum.viry.cz:443/viewtopic.php?t=132440

Stránka 1 z 1

vir policie log FRST

Napsal: 30 srp 2013 09:20
od čmaja
Log FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-08-2013
Ran by hulk (administrator) on 30-08-2013 10:13:34
Running from F:\
Windows 7 Home Premium (X64) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Safe Mode (minimal)

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\cmd.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10775584 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] - C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2040352 2010-05-31] (Realtek Semiconductor)
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint\Apoint.exe [212480 2010-05-31] (Alps Electric Co., Ltd.)
HKCU\...\Run: [Elbserver] - C:\Program Files (x86)\Sony\Media Gallery\ElbServer.exe [81264 2010-06-22] (Sony Corporation)
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\hulk\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKLM-x32\...\Run: [IAStorIcon] - C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2010-03-04] (Intel Corporation)
HKLM-x32\...\Run: [ISBMgr.exe] - C:\Program Files (x86)\Sony\ISB Utility\ISBMgr.exe [673136 2010-05-31] (Sony Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PMBVolumeWatcher] - C:\Program Files (x86)\Sony\PMB\PMBVolumeWatcher.exe [600928 2010-06-01] (Sony Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [SHTtray.exe] - C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SHTtray.exe [99696 2010-06-20] (Sony Corporation)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4297136 2012-10-31] (AVAST Software)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2314416 2013-08-15] ()
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll [2691536 2013-07-26] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\hulk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nckkskgmrctkyxaearc.lnk
ShortcutTarget: nckkskgmrctkyxaearc.lnk -> C:\Users\hulk\AppData\Local\Temp\craeaxyktcrmgkskkcn.bfg (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1222 ... 0F6EFC6F6C
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 0F6EFC6F6C
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {036C7DE5-2FB1-4195-9D61-C3B5FE7E3F9A} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 0F6EFC6F6C
SearchScopes: HKCU - {348F5A39-6070-451A-8335-4D1EA2B37DDA} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKCU - {5195AEFA-1EB5-4B70-A797-0E01AA7AAA94} URL = http://rover.ebay.com/rover/1//4?satitle={searchTerms}
SearchScopes: HKCU - {5528CF9B-86CE-4559-870B-CB009E0BAD05} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {6A8C1F8F-F805-4F31-8AB8-E61E369287E0} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={12B ... 2013-08-14 00:26:05&v=15.4.0.5&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
SearchScopes: HKCU - {99E30C48-F442-4466-B5DA-DAAE291A2B3C} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKCU - {AC2A35B0-1E4E-409C-8244-D7FC9CBB7892} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKCU - {B69F3F52-741F-4482-B64D-B650C63A4F84} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKCU - {C01EBAFF-C19A-418D-B928-020C5CB8A8A2} URL = http://services.zinio.com/search?s={sea ... sonyslices
SearchScopes: HKCU - {CF70E258-F4E2-46FA-8084-F946415CA6FC} URL = http://www.search.ask.com/web?p2=%5EB36 ... erms}&psv=
SearchScopes: HKCU - {D94A420B-DE92-46B0-B3E5-923CB009D1D7} URL = http://search.seznam.cz/?q={searchTerms ... arch_12454
SearchScopes: HKCU - {E6C5F63E-8422-41BB-9E77-FA888A1D4210} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.8313.1002\swg64.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO-x32: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files (x86)\Google\GoogleToolbarNotifier\5.7.8313.1002\swg.dll (Google Inc.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKLM-x32 - No Name - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - No File
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
Toolbar: HKCU - No Name - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No File
Toolbar: HKCU - No Name - {4B4D5056-3700-A76A-76A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM {67DABFBF-D0AB-41FA-9C46-CC0F21721616} http://download.divx.com/player/DivXBrowserPlugin.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt

FireFox:
========
FF ProfilePath: C:\Users\hulk\AppData\Roaming\Mozilla\Firefox\Profiles\76mfy5c7.default
FF NewTab: hxxp://www.delta-search.com/?affID=122254&tt=3 ... 0F6EFC6F6C
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://mysearch.avg.com/?cid={12B95D55-3240-405F-BFB2-8A7400D60636}&mid=73184d83cb4247d3935821f6d1eb8d50-b1674a7219aa7571a1fbe862ba02c459bb0f2046&lang=en&ds=co011&pr=sa&d=2013-08-14 00:26:05&v=15.4.0.5&pid=safeguard&sg=0&sap=hp
FF Keyword.URL: user_pref("keyword.URL", "");
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_0_1.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin - C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\15.5.0\\npsitesafety.dll (AVG Technologies)
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @funwebproducts.com/Plugin - C:\Program Files (x86)\FunWebProducts\Installr\2.bin\NPFunWeb.dll No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\hulk\AppData\Roaming\Mozilla\Firefox\Profiles\76mfy5c7.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\hulk\AppData\Roaming\Mozilla\Firefox\Profiles\76mfy5c7.default\searchplugins\BrowserDefender.xml
FF Extension: Seznam lištička - C:\Users\hulk\AppData\Roaming\Mozilla\Firefox\Profiles\76mfy5c7.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! WebRep - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2

Chrome:
=======
CHR Extension: (DivX Plus Web Player HTML5 <video>) - C:\Users\hulk\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126
CHR HKLM-x32\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\15.5.0.2\avg.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx

==================== Services (Whitelisted) =================

S3 ACDaemon; C:\Program Files (x86)\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [113152 2010-03-18] (ArcSoft Inc.)
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [44808 2012-10-31] (AVAST Software)
S2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2847696 2013-07-26] ()
S2 SampleCollector; C:\Program Files\Sony\VAIO Care\VCPerfService.exe [252416 2010-05-25] (Sony Corporation)
S2 ssinstall; C:\Windows\SysWOW64\ssins.exe [2322560 2013-08-09] (PS Media s.r.o.)
S2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe [2402080 2013-01-31] (TuneUp Software)
S2 uCamMonitor; C:\Program Files (x86)\ArcSoft\Magic-i Visual Effects 2\uCamMonitor.exe [104960 2008-09-18] (ArcSoft, Inc.)
S2 VCFw; C:\Program Files (x86)\Common Files\Sony Shared\VAIO Content Folder Watcher\VCFw.exe [851824 2010-06-17] (Sony Corporation)
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-15] (AVG Secure Search)
S3 VUAgent; C:\Program Files\Sony\VAIO Update 5\VUAgent.exe [1250160 2010-05-31] (Sony Corporation)

==================== Drivers (Whitelisted) ====================

S3 ArcSoftKsUFilter; C:\Windows\System32\DRIVERS\ArcSoftKsUFilter.sys [19968 2009-05-26] (ArcSoft, Inc.)
S2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [25232 2012-10-31] (AVAST Software)
S2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [71600 2012-10-31] (AVAST Software)
S1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [54072 2012-10-15] (AVAST Software)
S1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [984144 2012-10-31] (AVAST Software)
S1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [370288 2012-10-31] (AVAST Software)
S1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [59728 2012-10-31] (AVAST Software)
R1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-08-15] (AVG Technologies)
S3 TuneUpUtilitiesDrv; C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [11880 2012-09-19] (TuneUp Software)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S0 qxuaja; No ImagePath

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-30 10:05 - 2013-08-30 10:05 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-28 18:48 - 2013-08-28 18:48 - 00003288 ____N C:\bootsqm.dat
2013-08-28 18:35 - 2013-08-30 09:47 - 00002748 _____ C:\Windows\PFRO.log
2013-08-28 18:26 - 2013-08-28 18:27 - 408761740 _____ C:\Users\hulk\Desktop\Lidska-stonozka-2-CZ-TITULKY.avi
2013-08-28 18:24 - 2013-08-28 18:24 - 00000165 _____ C:\ProgramData\nckkskgmrctkyxaearc.reg
2013-08-28 18:24 - 2013-08-28 18:24 - 00000070 _____ C:\ProgramData\nckkskgmrctkyxaearc.bat
2013-08-28 16:35 - 2013-08-30 09:57 - 00000392 _____ C:\Windows\setupact.log
2013-08-28 16:35 - 2013-08-28 16:35 - 00000000 _____ C:\Windows\setuperr.log
2013-08-20 16:54 - 2013-08-20 16:54 - 731508800 _____ C:\Users\hulk\Desktop\Jonah-Hex-Cz.avi
2013-08-18 15:00 - 2013-08-18 15:01 - 923609172 _____ C:\Users\hulk\Desktop\Nejhledanější-v-Malibu---CZ-Super-komedie.avi
2013-08-18 00:24 - 2013-08-18 00:24 - 733704192 _____ C:\Users\hulk\Desktop\Popravci-cz-AVI---Historicky-film---Daemon70.avi
2013-08-15 23:38 - 2013-08-15 23:38 - 00001295 _____ C:\Users\hulk\Desktop\Media Player Classic.lnk
2013-08-15 23:37 - 2013-08-15 23:37 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-08-15 23:37 - 2013-03-07 20:00 - 00112640 _____ C:\Windows\SysWOW64\ff_vfw.dll
2013-08-15 23:37 - 2012-07-02 01:15 - 04102656 _____ (x264vfw project) C:\Windows\SysWOW64\x264vfw.dll
2013-08-15 23:37 - 2011-12-21 20:14 - 00151552 _____ (fccHandler) C:\Windows\SysWOW64\ac3acm.acm
2013-08-15 23:37 - 2011-12-07 20:32 - 00216064 _____ ( ) C:\Windows\SysWOW64\lagarith.dll
2013-08-15 23:37 - 2011-06-24 17:44 - 00243200 _____ C:\Windows\SysWOW64\xvidvfw.dll
2013-08-15 23:36 - 2013-08-15 23:36 - 31893619 _____ C:\Users\hulk\Downloads\K-Lite_Codec_Pack_Mega.exe
2013-08-14 00:32 - 2013-08-30 10:06 - 00361424 _____ C:\Windows\WindowsUpdate.log
2013-08-14 00:32 - 2013-08-28 17:37 - 00000000 ____D C:\Users\hulk\AppData\Roaming\Media Player Classic
2013-08-14 00:26 - 2013-08-15 09:34 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-14 00:26 - 2013-08-14 00:26 - 00000000 ____D C:\Users\hulk\AppData\Local\AVG SafeGuard toolbar
2013-08-14 00:25 - 2013-08-15 09:34 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2013-08-14 00:25 - 2013-08-14 00:56 - 00000000 ____D C:\ProgramData\AVG SafeGuard toolbar
2013-08-11 21:45 - 2013-08-11 21:46 - 1519605760 _____ C:\Users\hulk\Desktop\Mučedníci.CZ-Dabing-SUPER-FILM!!!.avi
2013-08-02 20:29 - 2013-08-02 20:30 - 1469902848 _____ C:\Users\hulk\Desktop\Sherlock-Holmes-(2009)-cz.avi
2013-08-02 16:18 - 2013-08-02 16:19 - 734113792 _____ C:\Users\hulk\Desktop\FANTOM-PAŘÍŽE--vidocq--krimi-thriller-cz..avi

==================== One Month Modified Files and Folders =======

2013-08-30 10:13 - 2013-08-30 10:13 - 00000000 ____D C:\FRST
2013-08-30 10:06 - 2013-08-14 00:32 - 00361424 _____ C:\Windows\WindowsUpdate.log
2013-08-30 10:05 - 2013-08-30 10:05 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-30 10:04 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-30 10:04 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-30 10:00 - 2011-05-01 13:15 - 00003970 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C9CE68FC-2A6D-415D-8579-46C97ACEE271}
2013-08-30 09:57 - 2013-08-28 16:35 - 00000392 _____ C:\Windows\setupact.log
2013-08-30 09:57 - 2012-11-10 16:44 - 00000000 _____ C:\Windows\SysWOW64\sinstall.log
2013-08-30 09:57 - 2010-11-19 11:03 - 00000908 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-30 09:57 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-30 09:54 - 2010-10-14 22:36 - 00636440 _____ C:\Windows\system32\perfh005.dat
2013-08-30 09:54 - 2010-10-14 22:36 - 00126612 _____ C:\Windows\system32\perfc005.dat
2013-08-30 09:54 - 2009-07-14 07:13 - 01471850 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-30 09:47 - 2013-08-28 18:35 - 00002748 _____ C:\Windows\PFRO.log
2013-08-28 18:48 - 2013-08-28 18:48 - 00003288 ____N C:\bootsqm.dat
2013-08-28 18:31 - 2010-11-19 11:03 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-28 18:27 - 2013-08-28 18:26 - 408761740 _____ C:\Users\hulk\Desktop\Lidska-stonozka-2-CZ-TITULKY.avi
2013-08-28 18:24 - 2013-08-28 18:24 - 00000165 _____ C:\ProgramData\nckkskgmrctkyxaearc.reg
2013-08-28 18:24 - 2013-08-28 18:24 - 00000070 _____ C:\ProgramData\nckkskgmrctkyxaearc.bat
2013-08-28 18:24 - 2011-05-01 02:08 - 00000000 ____D C:\Users\hulk\AppData\Local\Google
2013-08-28 18:24 - 2011-05-01 02:04 - 00000000 ___RD C:\Users\hulk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-28 17:37 - 2013-08-14 00:32 - 00000000 ____D C:\Users\hulk\AppData\Roaming\Media Player Classic
2013-08-28 16:35 - 2013-08-28 16:35 - 00000000 _____ C:\Windows\setuperr.log
2013-08-26 22:14 - 2012-11-20 09:44 - 00000000 ____D C:\Users\hulk\AppData\Local\CrashDumps
2013-08-20 16:54 - 2013-08-20 16:54 - 731508800 _____ C:\Users\hulk\Desktop\Jonah-Hex-Cz.avi
2013-08-18 15:01 - 2013-08-18 15:00 - 923609172 _____ C:\Users\hulk\Desktop\Nejhledanější-v-Malibu---CZ-Super-komedie.avi
2013-08-18 14:40 - 2011-05-31 01:14 - 00854473 _____ C:\test.xml
2013-08-18 00:24 - 2013-08-18 00:24 - 733704192 _____ C:\Users\hulk\Desktop\Popravci-cz-AVI---Historicky-film---Daemon70.avi
2013-08-15 23:38 - 2013-08-15 23:38 - 00001295 _____ C:\Users\hulk\Desktop\Media Player Classic.lnk
2013-08-15 23:37 - 2013-08-15 23:37 - 00000000 ____D C:\Program Files (x86)\K-Lite Codec Pack
2013-08-15 23:37 - 2012-11-10 16:45 - 00000000 ____D C:\Users\hulk\AppData\Roaming\Seznam.cz
2013-08-15 23:36 - 2013-08-15 23:36 - 31893619 _____ C:\Users\hulk\Downloads\K-Lite_Codec_Pack_Mega.exe
2013-08-15 23:32 - 2009-07-14 04:34 - 00003645 _____ C:\Windows\system.ini
2013-08-15 12:31 - 2012-11-10 16:45 - 00000000 ____D C:\Users\hulk\AppData\Roaming\vlc
2013-08-15 09:34 - 2013-08-14 00:26 - 00045856 _____ (AVG Technologies) C:\Windows\system32\Drivers\avgtpx64.sys
2013-08-15 09:34 - 2013-08-14 00:25 - 00000000 ____D C:\Program Files (x86)\AVG SafeGuard toolbar
2013-08-14 23:27 - 2012-11-20 09:55 - 00000000 ____D C:\Users\hulk\AppData\Local\Windows Live
2013-08-14 11:48 - 2013-07-30 00:47 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 11:48 - 2012-11-21 11:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-08-14 11:46 - 2012-11-20 10:04 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 00:56 - 2013-08-14 00:25 - 00000000 ____D C:\ProgramData\AVG SafeGuard toolbar
2013-08-14 00:26 - 2013-08-14 00:26 - 00000000 ____D C:\Users\hulk\AppData\Local\AVG SafeGuard toolbar
2013-08-13 10:15 - 2013-06-25 13:04 - 00737280 _____ (Indigo Rose Corporation) C:\Windows\iun6002.exe
2013-08-11 21:46 - 2013-08-11 21:45 - 1519605760 _____ C:\Users\hulk\Desktop\Mučedníci.CZ-Dabing-SUPER-FILM!!!.avi
2013-08-09 20:53 - 2012-11-10 16:44 - 02322560 _____ (PS Media s.r.o.) C:\Windows\SysWOW64\ssins.exe
2013-08-03 09:40 - 2013-06-01 00:06 - 00000000 ____D C:\ProgramData\BrowserDefender
2013-08-02 20:30 - 2013-08-02 20:29 - 1469902848 _____ C:\Users\hulk\Desktop\Sherlock-Holmes-(2009)-cz.avi
2013-08-02 16:19 - 2013-08-02 16:18 - 734113792 _____ C:\Users\hulk\Desktop\FANTOM-PAŘÍŽE--vidocq--krimi-thriller-cz..avi

Files to move or delete:
====================
c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll
C:\ProgramData\nckkskgmrctkyxaearc.bat
C:\ProgramData\nckkskgmrctkyxaearc.reg
C:\Users\hulk\AppData\Local\Temp\ACE2.dir\InstallFlashPlayer.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-23 20:33

==================== End Of Log ============================

Re: vir policie log FRST

Napsal: 30 srp 2013 09:21
od čmaja
Addition:
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-08-2013
Ran by hulk at 2013-08-30 10:14:16
Running from F:\
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Installed Programs =======================


Adobe AIR (x32 Version: 1.5.3.9130)
Adobe Flash Player 11 Plugin 64-bit (Version: 11.0.1.60)
Adobe Photoshop 7.0 CE (x32 Version: 7.0 CE)
Adobe Photoshop Elements 8.0 (x32 Version: 8.0)
Adobe Premiere Elements 8.0 (x32 Version: 8.0)
Adobe Reader 9.5.2 (x32 Version: 9.5.2)
Alps Pointing-device for VAIO
ArcSoft Magic-i Visual Effects 2 (x32 Version: 2.0.1.115)
ArcSoft WebCam Companion 3 (x32 Version: 3.0.21.390)
ATI Catalyst Install Manager (Version: 3.0.750.0)
avast! Free Antivirus (x32 Version: 7.0.1474.0)
AVG SafeGuard toolbar (x32 Version: 15.5.0.2)
be Flash Player 11 ActiveX 64-bit (Version: 11.0.1.60)
BrowserDefender (x32)
Bundled software uninstaller (x32)
Catalyst Control Center Core Implementation (x32 Version: 2010.0209.16.306)
Catalyst Control Center Graphics Full Existing (x32 Version: 2010.0209.16.306)
Catalyst Control Center Graphics Full New (x32 Version: 2010.0209.16.306)
Catalyst Control Center Graphics Light (x32 Version: 2010.0209.16.306)
Catalyst Control Center Graphics Previews Common (x32 Version: 2010.0209.16.306)
Catalyst Control Center Graphics Previews Vista (x32 Version: 2010.0209.16.306)
Catalyst Control Center InstallProxy (x32 Version: 2010.0209.16.306)
Catalyst Control Center Localization All (x32 Version: 2010.0209.16.306)
CCC Help Chinese Standard (x32 Version: 2010.0209.0015.306)
CCC Help Chinese Traditional (x32 Version: 2010.0209.0015.306)
CCC Help Czech (x32 Version: 2010.0209.0015.306)
CCC Help Danish (x32 Version: 2010.0209.0015.306)
CCC Help Dutch (x32 Version: 2010.0209.0015.306)
CCC Help English (x32 Version: 2010.0209.0015.306)
CCC Help Finnish (x32 Version: 2010.0209.0015.306)
CCC Help French (x32 Version: 2010.0209.0015.306)
CCC Help German (x32 Version: 2010.0209.0015.306)
CCC Help Greek (x32 Version: 2010.0209.0015.306)
CCC Help Hungarian (x32 Version: 2010.0209.0015.306)
CCC Help Italian (x32 Version: 2010.0209.0015.306)
CCC Help Japanese (x32 Version: 2010.0209.0015.306)
CCC Help Korean (x32 Version: 2010.0209.0015.306)
CCC Help Norwegian (x32 Version: 2010.0209.0015.306)
CCC Help Polish (x32 Version: 2010.0209.0015.306)
CCC Help Portuguese (x32 Version: 2010.0209.0015.306)
CCC Help Russian (x32 Version: 2010.0209.0015.306)
CCC Help Spanish (x32 Version: 2010.0209.0015.306)
CCC Help Swedish (x32 Version: 2010.0209.0015.306)
CCC Help Thai (x32 Version: 2010.0209.0015.306)
CCC Help Turkish (x32 Version: 2010.0209.0015.306)
ccc-core-static (x32 Version: 2010.0209.16.306)
ccc-utility64 (Version: 2010.0209.16.306)
CCleaner (Version: 3.22)
D3DX10 (x32 Version: 15.4.2368.0902)
DivX Setup (x32 Version: 2.6.0.34)
DVD Shrink 3.2 (x32)
Evernote (x32 Version: 3.5.4.2224)
FlatOut2 (x32 Version: 1.0)
Google Chrome (x32 Version: 4.1.249.1064)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0)
Google Toolbar for Internet Explorer (x32 Version: 7.5.4413.1752)
Google Update Helper (x32 Version: 1.3.21.153)
Hitman: Contracts demo (x32)
Intel(R) Control Center (x32 Version: 1.2.1.1007)
Intel(R) Management Engine Components (x32 Version: 6.0.0.1179)
Intel(R) Rapid Storage Technology (x32 Version: 9.6.0.1014)
Intel(R) Turbo Boost Technology Driver (x32 Version: 01.02.00.1002)
IrfanView (remove only) (x32 Version: 4.32)
Java Auto Updater (x32 Version: 2.0.2.1)
Java(TM) 6 Update 20 (64-bit) (Version: 6.0.200)
Java(TM) 6 Update 20 (x32 Version: 6.0.200)
Junk Mail filter update (x32 Version: 15.4.3502.0922)
K-Lite Mega Codec Pack 9.8.0 (x32 Version: 9.8.0)
Media Gallery (Version: 1.3.0)
Media Gallery (x32 Version: 1.3.0.06230)
Mesh Runtime (x32 Version: 15.4.5722.2)
Messenger Companion (x32 Version: 15.4.3502.0922)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
Microsoft Application Error Reporting (Version: 12.0.6015.5000)
Microsoft Office 2010 (x32 Version: 14.0.4763.1000)
Microsoft Office Klikni a spusť 2010 (Version: 14.0.4763.1011)
Microsoft Office Klikni a spusť 2010 (x32 Version: 14.0.4763.1011)
Microsoft Office Starter 2010 - čeština (x32 Version: 14.0.4763.1011)
Microsoft Silverlight (Version: 5.1.20513.0)
Microsoft SQL Server 2005 Compact Edition [ENU] (x32 Version: 3.1.0000)
Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.56336)
Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
MSVCRT (x32 Version: 15.4.2862.0708)
MSVCRT_amd64 (x32 Version: 15.4.2862.0708)
MSXML 4.0 SP3 Parser (KB2721691) (x32 Version: 4.30.2114.0)
MSXML 4.0 SP3 Parser (KB2758694) (x32 Version: 4.30.2117.0)
MSXML 4.0 SP3 Parser (KB973685) (x32 Version: 4.30.2107.0)
MSXML 4.0 SP3 Parser (x32 Version: 4.30.2100.0)
OpenAL (x32)
Ovládací prvek ActiveX platformy Windows Live Mesh pro vzdálená připojení (x32 Version: 15.4.5722.2)
PMB (x32 Version: 5.3.00.06040)
PMB VAIO Edition plug-in (Click to Disc) (Version: 3.3.00)
PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00)
PMB VAIO Edition plug-in (VAIO Movie Story) (Version: 2.3.00)
PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00)
Realtek HDMI Audio Driver for ATI (x32 Version: 6.0.1.6034)
Realtek High Definition Audio Driver (x32 Version: 6.0.1.6098)
Remote Keyboard with PlayStation 3 (x32 Version: 1.0.2.06170)
Remote Play with PlayStation 3 (x32 Version: 1.0.2.06210)
Remote Play with PlayStation®3 (x32 Version: 1.0.2.06210)
Seznam Instalátor (x32)
Seznam Software (HKCU)
Skype™ 5.10 (x32 Version: 5.10.116)
TuneUp Utilities 2013 (x32 Version: 13.0.3020.6)
TuneUp Utilities Language Pack (cs-CZ) (x32 Version: 13.0.3020.6)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
VAIO - Media Gallery (x32 Version: 1.3.0.06230)
VAIO - PMB VAIO Edition Guide (x32 Version: 1.3.00.06040)
VAIO - PMB VAIO Edition plug-in (Click to Disc) (x32 Version: 3.3.00.06180)
VAIO - PMB VAIO Edition plug-in (VAIO Image Optimizer) (x32 Version: 1.3.00.06110)
VAIO - PMB VAIO Edition plug-in (VAIO Movie Story) (x32 Version: 2.3.00.06180)
VAIO Care (x32 Version: 6.2.2.07150)
VAIO Control Center (x32 Version: 4.3.0.05310)
VAIO Data Restore Tool (x32 Version: 1.4.0.05240)
VAIO DVD Menu Data (x32 Version: 2.2.00.05120)
VAIO Gate (x32 Version: 2.2.0.06080)
VAIO Gate Default (x32 Version: 2.2.0.07020)
VAIO Hardware Diagnostics (x32 Version: 4.0.0.06230)
VAIO Manual (x32 Version: 1.1.0.05280)
VAIO Media plus (Version: 2.1.0)
VAIO Media plus (x32 Version: 2.1.0.18210)
VAIO Media plus Opening Movie (x32 Version: 2.1.0.13220)
VAIO Movie Story Template Data (x32 Version: 2.3.00.06040)
VAIO Quick Web Access (x32 Version: 1.3.4.2)
VAIO Sample Contents (x32 Version: 1.3.0.06041)
VAIO screensaver (x32 Version: 1.0.0.0)
VAIO Smart Network (x32 Version: 3.3.0.06080)
VAIO Transfer Support (x32 Version: 1.2.0.06230)
VAIO Update (x32 Version: 5.2.0.05310)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0)
VLC media player 2.0.2 (Version: 2.0.2)
WIDCOMM Bluetooth Software (Version: 6.3.0.5600)
Windows Live Communications Platform (x32 Version: 15.4.3502.0922)
Windows Live Essentials (x32 Version: 15.4.3502.0922)
Windows Live Family Safety (Version: 15.4.3502.0922)
Windows Live Fotogalerie (x32 Version: 15.4.3502.0922)
Windows Live ID Sign-in Assistant (Version: 7.250.4225.0)
Windows Live Installer (x32 Version: 15.4.3502.0922)
Windows Live Language Selector (Version: 15.4.3502.0922)
Windows Live Mail (x32 Version: 15.4.3502.0922)
Windows Live Mesh (x32 Version: 15.4.3502.0922)
Windows Live Messenger (x32 Version: 15.4.3502.0922)
Windows Live Messenger Companion Core (x32 Version: 15.4.3502.0922)
Windows Live MIME IFilter (Version: 15.4.3502.0922)
Windows Live Movie Maker (x32 Version: 15.4.3502.0922)
Windows Live Photo Common (x32 Version: 15.4.3502.0922)
Windows Live Photo Gallery (x32 Version: 15.4.3502.0922)
Windows Live PIMT Platform (x32 Version: 15.4.3502.0922)
Windows Live Remote Client (Version: 15.4.5722.2)
Windows Live Remote Client Resources (Version: 15.4.5722.2)
Windows Live Remote Service (Version: 15.4.5722.2)
Windows Live Remote Service Resources (Version: 15.4.5722.2)
Windows Live SOXE (x32 Version: 15.4.3502.0922)
Windows Live SOXE Definitions (x32 Version: 15.4.3502.0922)
Windows Live Sync (x32 Version: 14.0.8117.416)
Windows Live UX Platform (x32 Version: 15.4.3502.0922)
Windows Live UX Platform Language Pack (x32 Version: 15.4.3502.0922)
Windows Live Writer (x32 Version: 15.4.3502.0922)
Windows Live Writer Resources (x32 Version: 15.4.3502.0922)
WinZip 17.5 (Version: 17.5.10480)
ZTE Drivers 1.2059.0.12 (x32)

==================== Restore Points =========================

02-08-2013 12:49:21 Windows Update
06-08-2013 18:15:15 Windows Update
09-08-2013 18:59:17 Windows Update
14-08-2013 08:09:14 Windows Update
14-08-2013 09:46:03 Windows Update
20-08-2013 11:42:14 Windows Update
23-08-2013 12:16:24 Windows Update
27-08-2013 17:20:40 Windows Update

==================== Hosts content: ==========================

2009-07-14 04:34 - 2012-11-19 17:49 - 00422512 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com

There are 1000 more lines.


==================== Scheduled Tasks (whitelisted) =============

Task: {074D4E70-4D8D-40C8-814A-92C00002D7CE} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-23] (Microsoft Corporation)
Task: {088482FA-65B8-4E17-9ABF-1DCD48E8D373} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict1 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {09F06BFE-A3C8-40E3-846A-6E6F4000C238} - System32\Tasks\Microsoft\Windows\Tcpip\IpAddressConflict2 => C:\Windows\System32\ndfapi.dll [2009-07-14] (Microsoft Corporation)
Task: {16CC6AE1-A26C-406F-853A-AEF881366F65} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {21A4900D-8EE2-466D-A75A-037C2E1E6FB6} - System32\Tasks\VAIO Care Support => C:\Program Files\Sony\VAIO Care\VCSpt.exe [2010-05-26] (Sony Corporation)
Task: {3BB60907-13B9-4BFB-8E7F-F0591A0B5DBB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-19] (Google Inc.)
Task: {4E11F61D-5516-4E8D-9DC1-E041F0C48E13} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2010-11-19] (Google Inc.)
Task: {5B35D814-8EA5-4D3F-A40C-9B774FB8112D} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe [2010-08-04] (Microsoft Corporation)
Task: {5D74BE59-3302-4614-86D4-1BF7CAC7383C} - System32\Tasks\SONY\Remote Keyboard with PlayStation 3\Remote Keyboard with PlayStation 3 => C:\Program Files\Sony\Remote Keyboard with PlayStation 3\VBTKBUtil.exe [2010-06-17] (Sony Corporation)
Task: {6671A759-5F8B-4D8F-AFC3-5D01717D1D6F} - System32\Tasks\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector => C:\Windows\System32\dfdts.dll [2009-07-14] (Microsoft Corporation)
Task: {71A2CE1E-9DE5-42AE-9FD0-6A669408EF00} - System32\Tasks\Sony Corporation\VAIO Personalization Manager\VpmLM Task Music hulk => C:\Program Files\Sony\VAIO Personalization Manager\VpmLM.exe [2010-01-20] (Sony Corporation)
Task: {77163C4B-3015-4120-BF56-7E614196D783} - System32\Tasks\SONY\VAIO Power Management\VPM Session Change => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {8BF4EC39-695E-44A8-9428-8E54E212065A} - System32\Tasks\BrowserDefendert => C:\Windows\system32\sc.exe [2009-07-14] (Microsoft Corporation)
Task: {994C86AD-A929-4B2C-88A0-4E25A107A029} - System32\Tasks\Microsoft\Windows\SystemRestore\SR => C:\Windows\System32\srrstr.dll [2009-07-14] (Microsoft Corporation)
Task: {A28E4910-3198-47EE-89F6-06A777F1D33B} - System32\Tasks\SONY\VAIO Gate\VAIO Gate => C:\Program Files\Sony\VAIO Gate\VAIO Gate.exe [2010-06-08] (Sony Corporation)
Task: {A3D9AE11-DF6F-4047-81F8-685ACD97EE75} - System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013 => C:\Program Files (x86)\TuneUp Utilities 2013\OneClick.exe [2013-01-31] (TuneUp Software)
Task: {A7C73732-9F11-4281-8D19-764D4EC9D94D} - System32\Tasks\Microsoft\Windows\Application Experience\ProgramDataUpdater => C:\Windows\System32\aepdu.dll [2009-07-14] (Microsoft Corporation)
Task: {A9675CD8-B88B-4E4B-A16E-25712BE6E39A} - System32\Tasks\WPD\SqmUpload_S-1-5-21-3727415927-1088637271-3808356246-1000 => C:\Windows\System32\portabledeviceapi.dll [2009-09-11] (Microsoft Corporation)
Task: {B8C463A2-B002-418D-91AF-6782A3443690} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {BA397000-B461-4495-A4E0-028DDA6F23DD} - System32\Tasks\SONY\VAIO Update\VAIO Update 5 => C:\Program Files\Sony\VAIO Update 5\VAIOUpdt.exe [2010-05-31] (Sony Corporation)
Task: {D1A00923-F56E-42FA-B5E7-0BCDBB64056B} - System32\Tasks\VAIO Care => C:\Program Files\Sony\VAIO Care\VCsystray.exe [2010-07-15] (Sony Corporation)
Task: {D450ED8C-71F3-4BB1-9486-41D444A9171E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-08-22] (Piriform Ltd)
Task: {D7B6E81D-3CF4-432C-84D2-24213F4316E6} - System32\Tasks\Microsoft\Windows\Autochk\Proxy => C:\Windows\System32\acproxy.dll [2009-07-14] (Microsoft Corporation)
Task: {DC67E91A-C238-4831-BD9D-521D1622282C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2012-10-31] (AVAST Software)
Task: {E22A8667-F75B-4BA9-BA46-067ED4429DE8} - System32\Tasks\Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange => C:\Windows\System32\bfe.dll [2009-07-14] (Microsoft Corporation)
Task: {E3E552E8-14B2-4D9A-B312-5786F8B0432C} - System32\Tasks\SONY\VAIO Power Management\VPM Unlock => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {E4FFC4B6-E186-4018-8B9F-9095D78B3763} - System32\Tasks\User_Feed_Synchronization-{C9CE68FC-2A6D-415D-8579-46C97ACEE271} => C:\Windows\system32\msfeedssync.exe [2013-03-02] (Microsoft Corporation)
Task: {EBCA227E-CDBA-4AC6-965E-E49D4578D1D6} - System32\Tasks\SONY\VAIO Gate\StartExecuteProxy => C:\Program Files\Sony\VAIO Gate\ExecutionProxy.exe [2010-06-08] (Sony Corporation)
Task: {EC6D3220-610E-4F52-AFFE-4EC4093A41FE} - System32\Tasks\SONY\VAIO Wallpaper Setting Tool\VAIO Wallpaper Setting Tool => C:\Program Files (x86)\Sony\VAIO Wallpaper Setting Tool\VWSet.exe No File
Task: {F1BA6ACD-6794-4D4D-A077-639EED15874E} - System32\Tasks\SONY\SUS-BCF\Level4Daily => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: {F71C42C8-2C08-4355-8EE1-50D8EB858F48} - System32\Tasks\SONY\VAIO Power Management\VPM Logon Start => C:\Program Files\Sony\VAIO Power Management\SPMgr.exe [2010-06-21] (Sony Corporation)
Task: {F909C5B6-8945-4C48-AA6B-F24114E48A21} - System32\Tasks\SONY\SUS-BCF\Level4Month => C:\Program Files (x86)\Sony\Setting Utility Series\WBCBatteryCare.exe [2010-05-31] (Sony Corporation)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==========

AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/28/2013 06:50:12 PM) (Source: ssinstall) (User: )
Description: Service failed on start: ''28/08/2013'' is not a valid date

Error: (08/28/2013 06:28:00 PM) (Source: Application Hang) (User: )
Description: Program rundll32.exe verze 6.1.7600.16385 přestal spolupracovat se systémem Windows a byl ukončen. Chcete-li zjistit, zda je k dispozici více informací o tomto problému, vyhledejte historii problému v ovládacím panelu Centrum akcí.

ID procesu: 1f44

Čas spuštění: 01cea40b1cd29f7b

Čas ukončení: 8

Cesta k aplikaci: C:\Windows\SysWOW64\rundll32.exe

ID hlášení: c42f9540-0ffe-11e3-ba79-f0bf970f64a3

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service) (User: )
Description: Index nebyl inicializován.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service) (User: )
Description: Aplikace nebyla inicializována.

Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service) (User: )
Description: Objekt indexování nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service) (User: )
Description: Modul plug-in v <Search.TripoliIndexer> nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Prvek nebyl nalezen. (HRESULT : 0x80070490) (0x80070490)

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service) (User: )
Description: Modul plug-in v <Search.JetPropStore> nebyl inicializován.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service) (User: )
Description: Služba Windows Search nenačetla informace o úložišti vlastností.

Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Databáze indexu obsahu je poškozená. (HRESULT : 0xc0041800) (0xc0041800)

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service) (User: )
Description: Služba Windows Search byla zastavena, protože došlo k problému s indexovacím modulem The catalog is corrupt.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service) (User: )
Description: Vyhledávací služby zjistila, že index {id=4700} obsahuje poškozené datové soubory. Služba se pokusí tyto potíže automaticky odstranit vytvořením nového indexu.

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)


System errors:
=============
Error: (08/30/2013 10:11:16 AM) (Source: DCOM) (User: )
Description: 1084WSearch{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (08/30/2013 10:06:52 AM) (Source: Service Control Manager) (User: )
Description: Zavedení následujícího ovladače pro spouštění počítače nebo systému se nezdařilo:
AFD
aswRdr
aswSnx
aswSP
aswTdi
DfsC
discache
NetBIOS
NetBT
nsiproxy
Psched
qxuaja
rdbss
spldr
tdx
vwififlt
Wanarpv6
WfpLwf
ws2ifsl

Error: (08/30/2013 10:06:45 AM) (Source: Service Control Manager) (User: )
Description: Služba Client Virtualization Handler závisí na službě Application Virtualization Client, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Sledování umístění v síti (NLA) závisí na službě Služba rozhraní síťového úložiště, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Mini-přesměrovač SMB 2.0 závisí na službě Obálka a jádro minipřesměrovačů SMB, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Mini-přesměrovač SMB 1.x závisí na službě Obálka a jádro minipřesměrovačů SMB, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Obálka a jádro minipřesměrovačů SMB závisí na službě Podsystém přesměrovaného ukládání do vyrovnávací paměti, která neuspěla při spuštění v důsledku následující chyby:
%%31

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Pomocná služba protokolu IP závisí na službě Služba rozhraní síťového úložiště, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Pracovní stanice závisí na službě Služba rozhraní síťového úložiště, která neuspěla při spuštění v důsledku následující chyby:
%%1068

Error: (08/30/2013 10:06:44 AM) (Source: Service Control Manager) (User: )
Description: Služba Služba rozhraní síťového úložiště závisí na službě NSI proxy service driver., která neuspěla při spuštění v důsledku následující chyby:
%%31


Microsoft Office Sessions:
=========================
Error: (08/28/2013 06:50:12 PM) (Source: ssinstall)(User: )
Description: Service failed on start: ''28/08/2013'' is not a valid date

Error: (08/28/2013 06:28:00 PM) (Source: Application Hang)(User: )
Description: rundll32.exe6.1.7600.163851f4401cea40b1cd29f7b8C:\Windows\SysWOW64\rundll32.exec42f9540-0ffe-11e3-ba79-f0bf970f64a3

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service)(User: )
Description: Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service)(User: )
Description: Kontext: aplikace Windows

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service)(User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)

Error: (08/28/2013 04:36:22 PM) (Source: Windows Search Service)(User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Prvek nebyl nalezen. (HRESULT : 0x80070490) (0x80070490)
Search.TripoliIndexer

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service)(User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
Search.JetPropStore

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service)(User: )
Description: Kontext: aplikace Windows, katalog SystemIndex

Podrobnosti:
Databáze indexu obsahu je poškozená. (HRESULT : 0xc0041800) (0xc0041800)

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service)(User: )
Description: Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
The catalog is corrupt

Error: (08/28/2013 04:36:21 PM) (Source: Windows Search Service)(User: )
Description: Podrobnosti:
Katalog indexu obsahu je poškozený. (HRESULT : 0xc0041801) (0xc0041801)
4700


CodeIntegrity Errors:
===================================
Date: 2012-11-19 13:53:02.600
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2012-11-19 13:53:02.538
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ComboFix\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Percentage of memory in use: 14%
Total physical RAM: 3950.1 MB
Available physical RAM: 3379.41 MB
Total Pagefile: 7898.33 MB
Available Pagefile: 7344.24 MB
Total Virtual: 8192 MB
Available Virtual: 8191.84 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:450.56 GB) (Free:385.46 GB) NTFS
Drive d: () (Fixed) (Total:465.76 GB) (Free:465.08 GB) NTFS
Drive f: () (Removable) (Total:3.76 GB) (Free:1.88 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E1CEC562)
Partition 1: (Not Active) - (Size=15 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=451 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: E59DCC5E)
Partition 1: (Not Active) - (Size=466 GB) - (Type=OF Extended)

========================================================
Disk: 2 (Size: 4 GB) (Disk ID: 01D115CC)
Partition 1: (Active) - (Size=4 GB) - (Type=0C)

==================== End Of Log ============================

Re: vir policie log FRST

Napsal: 30 srp 2013 09:28
od vyosek
Zdravim :)

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [248040 2010-02-18] (Sun Microsystems, Inc.)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] - C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [38872 2012-07-31] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [919008 2012-07-11] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [vProt] - C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe [2314416 2013-08-15] ()
AppInit_DLLs-x32: c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll [2691536 2013-07-26] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\hulk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\nckkskgmrctkyxaearc.lnk
ShortcutTarget: nckkskgmrctkyxaearc.lnk -> C:\Users\hulk\AppData\Local\Temp\craeaxyktcrmgkskkcn.bfg (Microsoft Corporation)
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1222 ... 0F6EFC6F6C
URLSearchHook: (No Name) - {D8278076-BC68-4484-9233-6E7F1628B56C} - No File
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=122254&tt=300513_new&babsrc=SP_ss&mntrId=6EB94A0F6EFC6F6C
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=122254&tt=300513_new&babsrc=SP_ss&mntrId=6EB94A0F6EFC6F6C
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={12B95D55-3240-405F-BFB2-8A7400D60636}&mid=73184d83cb4247d3935821f6d1eb8d50-b1674a7219aa7571a1fbe862ba02c459bb0f2046&lang=en&ds=co011&pr=sa&d=2013-08-14 00:26:05&v=15.4.0.5&pid=safeguard&sg=0&sap=dsp&q={searchTerms}
BHO-x32: AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKLM-x32 - No Name - {1EA00BE1-6E54-4E2A-8099-680300BF23E1} - No File
Toolbar: HKLM-x32 - AVG SafeGuard toolbar - {95B7759C-8C7F-4BF1-B163-73684A933233} - C:\Program Files (x86)\AVG SafeGuard toolbar\15.5.0.2\AVG SafeGuard toolbar_toolbar.dll (AVG Secure Search)
Toolbar: HKCU - No Name - {34AB3C4C-DA1A-4067-96F4-31452C7CFE65} - No File
Toolbar: HKCU - No Name - {4B4D5056-3700-A76A-76A7-7A786E7484D7} - No File
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler-x32: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\15.5.0\ViProtocol.dll (AVG Secure Search)
FF Plugin-x32: @funwebproducts.com/Plugin - C:\Program Files (x86)\FunWebProducts\Installr\2.bin\NPFunWeb.dll No File
FF NewTab: hxxp://www.delta-search.com/?affID=1222 ... 0F6EFC6F6C
FF SelectedSearchEngine: AVG Secure Search
FF Homepage: hxxp://mysearch.avg.com/?cid={12B95D55-3240-405F-BFB2-8A7400D60636}&m
FF HKLM-x32\...\Firefox\Extensions: [avg@toolbar] C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2
FF Extension: AVG SafeGuard toolbar - C:\ProgramData\AVG SafeGuard toolbar\FireFoxExt\15.5.0.2
CHR HKLM-x32\...\Chrome\Extension: [ndibdjnfmopecpmkdieinmbadjfpblof] - C:\ProgramData\AVG SafeGuard toolbar\ChromeExt\15.5.0.2\avg.crx
S2 BrowserDefendert; C:\ProgramData\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2847696 2013-07-26] ()
S2 vToolbarUpdater15.5.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\15.5.0\ToolbarUpdater.exe [1643184 2013-08-15] (AVG Secure Search)
S0 qxuaja; No ImagePath
2013-08-30 10:05 - 2013-08-30 10:05 - 00003436 _____ C:\Windows\System32\Tasks\BrowserDefendert
2013-08-28 18:24 - 2013-08-28 18:24 - 00000165 _____ C:\ProgramData\nckkskgmrctkyxaearc.reg
2013-08-28 18:24 - 2013-08-28 18:24 - 00000070 _____ C:\ProgramData\nckkskgmrctkyxaearc.bat
c:\progra~3\browse~1\261519~1.190\{c16c1~1\browse~1.dll
AlternateDataStreams: C:\ProgramData\TEMP:D1B5B4F1
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
C:\ProgramData\BrowserDefender
C:\Program Files (x86)\AVG SafeGuard toolbar
C:\Program Files (x86)\Common Files\AVG Secure Search
Hosts:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny log na flashku k FRST
:arrow: Spustte znovu FRST.exe na tom poskozenem PC
  • Kliknete na Fix
  • Probehne oprava a na flash disku se vytvori log Fixlog.txt
:arrow: Pokuste se nastartovat do bezneho rezimu

Re: vir policie log FRST

Napsal: 30 srp 2013 12:03
od čmaja
Děkuji už to funguje

Re: vir policie log FRST

Napsal: 30 srp 2013 15:34
od vyosek
Fajn, ale jeste se na to podivame...

:arrow: Dejte mi sem fixlog.txt, ktery je na flash disku

:arrow: Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=24&t=130784
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz