Ahoj , díky jednalo sa o tú novšiu verziu s prezidentom
Najprv ma to nechelo pustiť ani do safe mode , no potom ma to na x krat pustilo ,stiahol som a spustil ten hitman with kickstarter ,našlo mi to nejaké veci , vymazal som a od vtedy je pc v pohode, no neviem či niečo po tom víre v PC neostalo , tak posielam log.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Martin (administrator) on MARTIN-PC on 04-10-2013 08:02:43
Running from C:\Users\Martin\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(CANON INC.) C:\Program Files\Canon\MyPrinter\BJMYPRT.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\ComUpdatus.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_168.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7233640 2011-06-24] (Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] - C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2185032 2009-10-19] (CANON INC.)
HKLM\...\Run: [CanonSolutionMenu] - C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [767312 2009-09-04] (CANON INC.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [499608 2011-03-15] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe [1028896 2013-07-27] (NVIDIA Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKCU\...\Run: [Google Update] - C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-05-13] (Google Inc.)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\StartSuperCharger.exe [303104 2011-01-25] (TODO: <Company name>)
HKLM-x32\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5.5ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS5.5ServiceManager\CS5.5ServiceManager.exe [1523360 2011-01-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2013-09-17] (Apple Inc.)
AppInit_DLLs: C:\PROGRA~1\NVIDIA~1\NVSTRE~1\rxinput.dll [653600 2013-07-27] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\PROGRA~2\NVIDIA~1\NVSTRE~1\rxinput.dll [593696 2013-07-27] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP =
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
BHO: avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 85.237.225.250 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436
FF NetworkProxy: "backup.ftp", ""
FF NetworkProxy: "backup.ftp_port", 0
FF NetworkProxy: "backup.socks", ""
FF NetworkProxy: "backup.socks_port", 1
FF NetworkProxy: "backup.ssl", ""
FF NetworkProxy: "backup.ssl_port", 0
FF NetworkProxy: "ftp", "194.30.144.10"
FF NetworkProxy: "ftp_port", 80
FF NetworkProxy: "gopher", "194.30.144.10"
FF NetworkProxy: "gopher_port", 80
FF NetworkProxy: "http", "194.30.144.10"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "share_proxy_settings", true
FF NetworkProxy: "socks", "194.30.144.10"
FF NetworkProxy: "socks_port", 80
FF NetworkProxy: "ssl", "194.30.144.10"
FF NetworkProxy: "ssl_port", 80
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_168.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1200112.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @canon.com/EPPEX - C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @live.heroesandgenerals.com/npretox - C:\Program Files (x86)\Heroes & Generals\live\npretoxlive.dll (Reto-Moto ApS)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.4 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Martin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Martin\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Martin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Games\trials\datapack\orbit\npuplaypc.dll (Ubisoft)
FF Plugin HKCU:
http://www.floatingminds.com/Tunnelers - C:\Games\Tunnelers\npTunnelers.dll No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: google - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\
google@hitachi.com.xpi
FF Extension: olddefaultimagestyle - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\
olddefaultimagestyle@dagger2-addons.mozilla.org.xpi
FF Extension: No Name - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi
FF Extension: No Name - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\{c0c9a2c7-2e5c-4447-bc53-97718bc91e1b}.xpi
FF Extension: No Name - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: No Name - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\dsn6dm7q.default-1340042378436\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM-x32\...\Firefox\Extensions: [
wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S4 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-01-14] ()
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [14984480 2013-07-27] (NVIDIA Corporation)
R2 OMSI download service; C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Suite\SupServ.exe [90112 2009-04-30] ()
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-04-13] ()
==================== Drivers (Whitelisted) ====================
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-06-28] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-04-12] (DT Soft Ltd)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [32512 2013-10-03] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39712 2013-05-14] (NVIDIA Corporation)
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2012-01-01] ()
S3 RivaTuner64; C:\Program Files (x86)\RivaTuner v2.24 MSI Master Overclocking Arena 2009 edition\RivaTuner64.sys [19952 2012-01-01] ()
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2010-03-15] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2010-03-15] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2010-03-15] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2010-03-15] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2010-03-15] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2010-03-15] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2010-03-15] (MCCI Corporation)
R1 VD_FileDisk; C:\Windows\System32\Drivers\VD_FileDisk.sys [30312 2011-01-26] (CaptainFlint Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-04 08:02 - 2013-10-04 08:02 - 00000000 ____D C:\FRST
2013-10-04 08:01 - 2013-10-04 08:01 - 00112128 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2013-10-04 07:53 - 2013-10-04 07:53 - 01954124 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-10-04 07:10 - 2013-10-04 07:54 - 133921577 _____ C:\Users\Martin\Downloads\8081.rar
2013-10-03 21:00 - 2013-10-03 21:00 - 48130994 _____ C:\Users\Martin\Desktop\t-55 in serbian service article.rar
2013-10-03 20:59 - 2013-10-03 21:00 - 14934677 _____ C:\Users\Martin\Desktop\Type 2 Ka Mi article.rar
2013-10-03 20:59 - 2013-10-03 20:59 - 21472646 _____ C:\Users\Martin\Desktop\Tiger I initial article.rar
2013-10-03 17:34 - 2013-10-03 17:34 - 00448512 _____ (OldTimer Tools) C:\Users\Martin\Downloads\TFC.exe
2013-10-03 17:15 - 2013-10-03 17:15 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-03 17:14 - 2013-10-03 17:14 - 04369632 _____ (Piriform Ltd) C:\Users\Martin\Downloads\ccsetup406.exe
2013-10-03 16:08 - 2013-10-03 16:08 - 00003440 _____ C:\Windows\system32\.crusader
2013-10-03 16:02 - 2013-10-03 16:10 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-10-03 15:59 - 2013-10-03 16:08 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-03 15:58 - 2013-10-03 15:59 - 09879648 _____ (SurfRight B.V.) C:\Users\Martin\Downloads\HitmanPro_x64.exe
2013-10-03 15:22 - 2013-10-03 15:22 - 00016196 ____T C:\ProgramData\gbq.exe
2013-10-03 15:02 - 2013-10-03 15:54 - 95025368 ____T C:\ProgramData\retr2mq.pff
2013-10-03 15:02 - 2013-10-03 15:46 - 00000000 _____ C:\ProgramData\retr2mq.ctrl
2013-10-01 07:49 - 2013-10-01 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-29 08:14 - 2013-10-03 21:07 - 00000000 ____D C:\Users\Martin\Desktop\Type 2 Ka Mi article
2013-09-29 08:13 - 2013-10-03 21:14 - 00000000 ____D C:\Users\Martin\Desktop\Tiger I initial article
2013-09-29 08:10 - 2013-10-03 21:08 - 00000000 ____D C:\Users\Martin\Desktop\t-55 in serbian service article
2013-09-27 17:07 - 2013-09-27 17:08 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-27 17:07 - 2013-09-27 17:08 - 00000000 ____D C:\Program Files\iTunes
2013-09-27 17:07 - 2013-09-27 17:08 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-27 17:07 - 2013-09-27 17:07 - 00000000 ____D C:\Program Files\iPod
2013-09-27 17:04 - 2013-09-27 17:04 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-09-22 07:13 - 2013-09-22 07:48 - 00000000 ____D C:\Users\Martin\Desktop\Death Sentence - Soundtrack - 2007
2013-09-22 07:10 - 2013-09-22 07:10 - 00020996 _____ C:\Users\Martin\Downloads\[torrent.cd].[OST]_Death_Sentence_(2007).torrent
2013-09-22 07:10 - 2013-09-22 07:10 - 00015751 _____ C:\Users\Martin\Downloads\[kickass.to]death.sentence.soundtrack.torrent
2013-09-22 07:01 - 2013-09-22 07:04 - 59468473 _____ C:\Users\Martin\Downloads\OST-Death-Sentence---Soundtrack.rar
2013-09-15 19:46 - 2013-09-15 19:50 - 1801151653 _____ C:\Users\Martin\Documents\Firefox 23.0.1 (sk) - 2013-09-15.pcv
2013-09-15 19:36 - 2013-10-01 12:48 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-15 19:35 - 2013-09-15 19:35 - 22948136 _____ (Mozilla) C:\Users\Martin\Desktop\Firefox Setup 23.0.1.exe
2013-09-15 06:54 - 2013-09-15 06:54 - 00000000 ____D C:\Users\Martin\Desktop\hummwv
2013-09-13 11:04 - 2013-09-13 11:04 - 00001233 _____ C:\Users\Martin\Desktop\WorldOfWarplanes - odkaz.lnk
2013-09-10 13:54 - 2013-09-10 13:54 - 00000000 ____D C:\Users\Martin\Desktop\2013_09_10
2013-09-09 20:39 - 2013-09-11 09:40 - 00000000 ____D C:\Users\Martin\Desktop\T 90
2013-09-09 07:29 - 2013-09-09 07:29 - 00000905 _____ C:\Users\Public\Desktop\AIMP3.lnk
2013-09-07 06:39 - 2013-09-07 06:39 - 00000000 ____D C:\Users\Martin\Desktop\Modely predane na ebay
2013-09-04 08:53 - 2013-09-04 08:53 - 00001414 _____ C:\Users\Martin\Desktop\Rome2 - odkaz.lnk
2013-09-04 07:36 - 2013-09-04 07:53 - 00000000 ____D C:\Users\Martin\Downloads\Total War Rome II
2013-09-04 07:35 - 2013-09-04 07:35 - 00020138 _____ C:\Users\Martin\Downloads\[CzT]Total_War_Rome_II_DLC_2013_CZ_.torrent
2013-09-04 07:31 - 2013-09-04 07:31 - 00000000 ____D C:\Users\Martin\Downloads\Total.War.ROME.II-RELOADED
==================== One Month Modified Files and Folders =======
2013-10-04 08:02 - 2013-10-04 08:02 - 00000000 ____D C:\FRST
2013-10-04 08:02 - 2013-05-20 12:47 - 00000950 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3230957621-2435849253-962487880-1000UA.job
2013-10-04 08:01 - 2013-10-04 08:01 - 00112128 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2013-10-04 07:54 - 2013-10-04 07:10 - 133921577 _____ C:\Users\Martin\Downloads\8081.rar
2013-10-04 07:53 - 2013-10-04 07:53 - 01954124 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2013-10-04 07:43 - 2013-05-13 12:28 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-04 07:43 - 2013-05-13 12:28 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-04 07:38 - 2011-12-22 09:59 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-04 07:38 - 2011-12-22 09:59 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-04 07:18 - 2013-04-14 09:03 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-04 07:08 - 2009-07-14 06:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-04 07:08 - 2009-07-14 06:45 - 00017136 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-04 07:05 - 2009-07-14 07:13 - 00779034 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-04 07:04 - 2011-12-17 18:26 - 01953120 _____ C:\Windows\WindowsUpdate.log
2013-10-04 07:01 - 2013-03-03 09:31 - 00029472 _____ C:\Windows\setupact.log
2013-10-04 07:00 - 2011-12-17 18:37 - 00000000 ____D C:\ProgramData\NVIDIA
2013-10-04 07:00 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-03 21:14 - 2013-09-29 08:13 - 00000000 ____D C:\Users\Martin\Desktop\Tiger I initial article
2013-10-03 21:08 - 2013-09-29 08:10 - 00000000 ____D C:\Users\Martin\Desktop\t-55 in serbian service article
2013-10-03 21:07 - 2013-09-29 08:14 - 00000000 ____D C:\Users\Martin\Desktop\Type 2 Ka Mi article
2013-10-03 21:00 - 2013-10-03 21:00 - 48130994 _____ C:\Users\Martin\Desktop\t-55 in serbian service article.rar
2013-10-03 21:00 - 2013-10-03 20:59 - 14934677 _____ C:\Users\Martin\Desktop\Type 2 Ka Mi article.rar
2013-10-03 20:59 - 2013-10-03 20:59 - 21472646 _____ C:\Users\Martin\Desktop\Tiger I initial article.rar
2013-10-03 17:47 - 2013-03-18 14:22 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2013-10-03 17:34 - 2013-10-03 17:34 - 00448512 _____ (OldTimer Tools) C:\Users\Martin\Downloads\TFC.exe
2013-10-03 17:31 - 2009-07-14 07:08 - 00032596 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-03 17:15 - 2013-10-03 17:15 - 00000822 _____ C:\Users\Public\Desktop\CCleaner.lnk
2013-10-03 17:15 - 2011-12-28 09:45 - 00000000 ____D C:\Program Files\CCleaner
2013-10-03 17:14 - 2013-10-03 17:14 - 04369632 _____ (Piriform Ltd) C:\Users\Martin\Downloads\ccsetup406.exe
2013-10-03 16:28 - 2013-03-08 09:03 - 00009014 _____ C:\Windows\PFRO.log
2013-10-03 16:10 - 2013-10-03 16:02 - 00032512 _____ C:\Windows\system32\Drivers\hitmanpro37.sys
2013-10-03 16:08 - 2013-10-03 16:08 - 00003440 _____ C:\Windows\system32\.crusader
2013-10-03 16:08 - 2013-10-03 15:59 - 00000000 ____D C:\ProgramData\HitmanPro
2013-10-03 16:08 - 2013-08-10 12:14 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rise Of The Reds Beta 1.8
2013-10-03 16:08 - 2013-04-20 15:50 - 00000000 ____D C:\Users\Martin\Downloads\Pressure R
2013-10-03 16:08 - 2011-12-17 18:28 - 00000000 ___RD C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-10-03 15:59 - 2013-10-03 15:58 - 09879648 _____ (SurfRight B.V.) C:\Users\Martin\Downloads\HitmanPro_x64.exe
2013-10-03 15:54 - 2013-10-03 15:02 - 95025368 ____T C:\ProgramData\retr2mq.pff
2013-10-03 15:46 - 2013-10-03 15:02 - 00000000 _____ C:\ProgramData\retr2mq.ctrl
2013-10-03 15:22 - 2013-10-03 15:22 - 00016196 ____T C:\ProgramData\gbq.exe
2013-10-03 15:18 - 2013-03-11 20:49 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2013-10-02 09:02 - 2013-05-20 12:47 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3230957621-2435849253-962487880-1000Core.job
2013-10-01 12:48 - 2013-09-15 19:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-01 07:50 - 2011-12-17 19:27 - 00000000 ____D C:\Users\Martin\AppData\Local\Mozilla
2013-10-01 07:49 - 2013-10-01 07:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 15:13 - 2013-08-15 18:40 - 00000000 ____D C:\Users\Martin\Desktop\m 22 locust
2013-09-27 19:17 - 2011-12-17 19:37 - 00000000 ___RD C:\Users\Martin\Desktop\modely
2013-09-27 17:11 - 2013-04-26 16:52 - 00000000 ____D C:\Program Files\Common Files\Apple
2013-09-27 17:10 - 2013-04-26 16:54 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Apple Computer
2013-09-27 17:08 - 2013-09-27 17:07 - 00000000 ____D C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2013-09-27 17:08 - 2013-09-27 17:07 - 00000000 ____D C:\Program Files\iTunes
2013-09-27 17:08 - 2013-09-27 17:07 - 00000000 ____D C:\Program Files (x86)\iTunes
2013-09-27 17:08 - 2013-04-26 16:53 - 00001783 _____ C:\Users\Public\Desktop\iTunes.lnk
2013-09-27 17:07 - 2013-09-27 17:07 - 00000000 ____D C:\Program Files\iPod
2013-09-27 17:06 - 2011-12-17 18:44 - 00000000 ___RD C:\Users\Martin\Desktop\Programy
2013-09-27 17:04 - 2013-09-27 17:04 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-09-26 18:03 - 2011-12-17 19:27 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Mozilla
2013-09-26 15:22 - 2012-05-03 17:50 - 00000000 ___RD C:\Users\Martin\Desktop\Hry
2013-09-22 07:55 - 2013-02-25 14:24 - 00000000 ____D C:\Users\Martin\AppData\Roaming\AIMP3
2013-09-22 07:51 - 2011-12-17 19:29 - 00000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2013-09-22 07:48 - 2013-09-22 07:13 - 00000000 ____D C:\Users\Martin\Desktop\Death Sentence - Soundtrack - 2007
2013-09-22 07:10 - 2013-09-22 07:10 - 00020996 _____ C:\Users\Martin\Downloads\[torrent.cd].[OST]_Death_Sentence_(2007).torrent
2013-09-22 07:10 - 2013-09-22 07:10 - 00015751 _____ C:\Users\Martin\Downloads\[kickass.to]death.sentence.soundtrack.torrent
2013-09-22 07:04 - 2013-09-22 07:01 - 59468473 _____ C:\Users\Martin\Downloads\OST-Death-Sentence---Soundtrack.rar
2013-09-19 05:34 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-15 19:50 - 2013-09-15 19:46 - 1801151653 _____ C:\Users\Martin\Documents\Firefox 23.0.1 (sk) - 2013-09-15.pcv
2013-09-15 19:35 - 2013-09-15 19:35 - 22948136 _____ (Mozilla) C:\Users\Martin\Desktop\Firefox Setup 23.0.1.exe
2013-09-15 06:54 - 2013-09-15 06:54 - 00000000 ____D C:\Users\Martin\Desktop\hummwv
2013-09-13 18:08 - 2011-12-18 11:41 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-09-13 11:04 - 2013-09-13 11:04 - 00001233 _____ C:\Users\Martin\Desktop\WorldOfWarplanes - odkaz.lnk
2013-09-11 09:40 - 2013-09-09 20:39 - 00000000 ____D C:\Users\Martin\Desktop\T 90
2013-09-11 09:18 - 2013-03-07 21:00 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-09-11 09:18 - 2013-03-07 21:00 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-09-11 09:18 - 2013-02-23 17:05 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-09-10 13:55 - 2013-08-16 20:29 - 00000000 ____D C:\Users\Martin\Desktop\Colné konanie
2013-09-10 13:54 - 2013-09-10 13:54 - 00000000 ____D C:\Users\Martin\Desktop\2013_09_10
2013-09-10 13:52 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-09-09 07:29 - 2013-09-09 07:29 - 00000905 _____ C:\Users\Public\Desktop\AIMP3.lnk
2013-09-09 07:29 - 2013-02-25 14:24 - 00000000 ____D C:\Program Files (x86)\AIMP3
2013-09-07 06:39 - 2013-09-07 06:39 - 00000000 ____D C:\Users\Martin\Desktop\Modely predane na ebay
2013-09-04 08:53 - 2013-09-04 08:53 - 00001414 _____ C:\Users\Martin\Desktop\Rome2 - odkaz.lnk
2013-09-04 08:38 - 2011-12-17 22:44 - 00000000 ____D C:\Games
2013-09-04 07:53 - 2013-09-04 07:36 - 00000000 ____D C:\Users\Martin\Downloads\Total War Rome II
2013-09-04 07:35 - 2013-09-04 07:35 - 00020138 _____ C:\Users\Martin\Downloads\[CzT]Total_War_Rome_II_DLC_2013_CZ_.torrent
2013-09-04 07:31 - 2013-09-04 07:31 - 00000000 ____D C:\Users\Martin\Downloads\Total.War.ROME.II-RELOADED
Files to move or delete:
====================
C:\ProgramData\gbq.exe
C:\ProgramData\retr2mq.ctrl
C:\ProgramData\retr2mq.pff
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-10-03 12:35
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:109.49 GB) NTFS
Drive e: (RAYMAN_LEGENDS) (CDROM) (Total:5.65 GB) (Free:0 GB) CDFS
Available physical RAM: 5915.59 MB
Total physical RAM: 8162.05 MB
Percentage of memory in use: 27%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: F8EB21A7)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3230957621-2435849253-962487880-1000Core.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3230957621-2435849253-962487880-1000UA.job => C:\Users\Martin\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Enabled - Up to date) {2B2D1395-420B-D5C9-657E-930FE358FC3C}
AS: avast! Antivirus (Enabled - Up to date) {904CF271-6431-DA47-5FCE-A87D98DFB681}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Martin\Desktop" je 37545 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Tvorba fixlistu pro FRST
Zase nekdy 
