VIRY.CZ

Pomáháme v boji s počítačovou havěti!
https://forum.viry.cz:443/

Prosím okontrolu logu

https://forum.viry.cz:443/viewtopic.php?t=133349

Stránka 1 z 1

Prosím okontrolu logu

Napsal: 12 říj 2013 15:44
od elzad
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:40:21, on 12.10.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\RocketDock\RocketDock.exe
C:\Program Files (x86)\Fractalis Software\Display Stix 2.1.1\dstix.exe
C:\Users\Jan\Local Settings\Apps\F.lux\flux.exe
C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Hijackthis\hijackthis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: RoboForm BHO - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [AVG_UI] "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
O4 - HKLM\..\Run: [msncxsSrv] C:\Windows\inf\msncxs.vbe
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [msoccmlSrv] C:\Windows\inf\msoccml.vbe
O4 - HKLM\..\Run: [NtVdmSrv] C:\Windows\inf\ntvdm.vbe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files (x86)\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [Nezapomen] C:\Program Files (x86)\Nezapomen\nezapomen.exe 41559
O4 - HKCU\..\Run: [Display Stix - System tray] C:\Program Files (x86)\Fractalis Software\Display Stix 2.1.1\dstix.exe
O4 - HKCU\..\Run: [F.lux] "C:\Users\Jan\Local Settings\Apps\F.lux\flux.exe" /noshow
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [ISUSPM Startup] c:\progra~2\common~1\instal~1\update~1\isuspm.exe -startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [RoboForm] "C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe" (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IsMyWinLockerReboot] msiexec.exe /qn /x{voidguid} (User 'Default user')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Převést cíl vazby do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Převést do Adobe PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Připojit cíl vazby k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Připojit k existujícímu PDF - res://C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Přizpůsobit Menu - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Nástrojová lišta - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Stáhnout FDM - file://C:\Program Files (x86)\Free Download Manager\dllink.htm
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM obsažené FLV video - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Stáhnout video FDM - file://C:\Program Files (x86)\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Uložit formuláře - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O8 - Extra context menu item: Vyplnit formulář - file://C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Vyplnit formulář - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Uložit - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: Uložit formuláře - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra button: Show Toolbar - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O9 - Extra 'Tools' menuitem: RF Nástrojová lišta - {724d43aa-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O17 - HKLM\System\CCS\Services\Tcpip\..\{44BB3BD4-AFCE-49BE-82BE-3ED2C532F40E}: NameServer = 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) - ABBYY - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
O23 - Service: Služba Acronis Scheduler2 (AcrSch2Svc) - Acronis - C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Služba Acronis Nonstop Backup (afcdpsrv) - Acronis - C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AVGIDSAgent - Unknown owner - C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe (file missing)
O23 - Service: AVG WatchDog (avgwd) - Unknown owner - C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe (file missing)
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: EPSON V5 Service4(04) (EPSON_EB_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
O23 - Service: EPSON V3 Service4(04) (EPSON_PM_RPCV4_04) - SEIKO EPSON CORPORATION - C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: GREGService - Acer Incorporated - C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: MySQL - Unknown owner - C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NitroPDFReaderDriverCreatorReadSpool3 (NitroReaderDriverReadSpool3) - Nitro PDF Software - C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
O23 - Service: Printer Control - Unknown owner - C:\Windows\system32\PrintCtrl.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Cyberlink RichVideo64 Service(CRVS) (RichVideo64) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo64.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Aktivátor Správce výběru OS Acronis (Správce výběru OS) - Unknown owner - C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: AVG PC TuneUp Service (TuneUp.UtilitiesSvc) - Unknown owner - C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 13778 bytes

Re: Prosím okontrolu logu

Napsal: 12 říj 2013 16:51
od Rudy
Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

Re: Prosím okontrolu logu

Napsal: 12 říj 2013 21:20
od elzad
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by Jan (administrator) on JAN-PC on 12-10-2013 22:11:51
Running from C:\Users\Jan\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acronis) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GREGsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
() C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\RocketDock\RocketDock.exe
(ActMask Co.,Ltd - HTTP://WWW.ALL2PDF.COM) C:\Windows\system32\PrintCtrl.exe
() C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Fractalis Software) C:\Program Files (x86)\Fractalis Software\Display Stix 2.1.1\dstix.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
() C:\Users\Jan\Local Settings\Apps\F.lux\flux.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Siber Systems) C:\Program Files (x86)\Siber Systems\AI RoboForm\robotaskbaricon.exe
() C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(forum.viry.cz) C:\Users\Jan\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13632216 2013-07-09] (Realtek Semiconductor)
HKLM\...\Run: [HotKeysCmds] - "C:\Windows\system32\hkcmd.exe"
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [RocketDock] - C:\Program Files (x86)\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKCU\...\Run: [Nezapomen] - C:\Program Files (x86)\Nezapomen\nezapomen.exe [457216 2001-06-30] (JBC)
HKCU\...\Run: [Display Stix - System tray] - C:\Program Files (x86)\Fractalis Software\Display Stix 2.1.1\dstix.exe [241664 2004-01-12] (Fractalis Software)
HKCU\...\Run: [F.lux] - C:\Users\Jan\Local Settings\Apps\F.lux\flux.exe [966656 2009-08-29] ()
HKCU\...\Run: [RoboForm] - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [108624 2013-07-15] (Siber Systems)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [ISUSPM Startup] - c:\progra~2\common~1\instal~1\update~1\isuspm.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AVG_UI] - "C:\Program Files (x86)\AVG\AVG2014\avgui.exe" /TRAYONLY
HKLM-x32\...\Run: [msncxsSrv] - C:\Windows\inf\msncxs.vbe
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [msoccmlSrv] - C:\Windows\inf\msoccml.vbe [1558 2013-08-27] ()
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
HKU\Default\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
HKU\Default User\...\RunOnce: [ScrSav] - C:\Program Files (x86)\Acer\Screensaver\run_Acer.exe [154144 2010-07-29] ()
BootExecute: autocheck autochk * sh4native Sh4Removal

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0719FF94-AC75-4967-95BF-A0761CCA3ED5} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... ckSearch_5
SearchScopes: HKCU - {0D852EEF-2A98-458B-88B6-5E53C0C4F4BA} URL = http://encyklopedie.seznam.cz/search?q= ... ckSearch_5
SearchScopes: HKCU - {1682D117-4D53-4C2F-B917-422AB691364A} URL = http://www.mysearchresults.com/search?& ... earchTerms}
SearchScopes: HKCU - {1A0A1ECB-EC62-450A-9B47-2FA94E64DF35} URL = http://www.novinky.cz/hledej?w={searchT ... ckSearch_5
SearchScopes: HKCU - {2CCF68F9-2595-4339-B958-61F9A57FAEF6} URL = http://tv.seznam.cz/hledej?w={searchTer ... ckSearch_5
SearchScopes: HKCU - {2CED1683-4134-4A15-81D3-27D5AA472C90} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {500ECF61-8C44-4A38-93F4-4E06334D75BB} URL = http://slovnik.seznam.cz/?q={searchTerm ... ckSearch_5
SearchScopes: HKCU - {76DAF9D5-F423-4039-B798-B75ECF5D0E17} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {C02C53C9-5262-4A68-A680-3CAD42F261DD} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_5
SearchScopes: HKCU - {C307D95E-C3C5-4DF9-9426-18593751904C} URL = http://www.firmy.cz/?q={searchTerms}&so ... ckSearch_5
SearchScopes: HKCU - {C7E9202E-194D-4893-8720-EC35EE61E849} URL = http://www.mapy.cz/?query={searchTerms} ... ckSearch_5
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll No File
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll No File
BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: RoboForm Toolbar Helper - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Free Download Manager - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files (x86)\Free Download Manager\iefdm2.dll (FreeDownloadManager.ORG)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboForm-x64.dll (Siber Systems Inc.)
Toolbar: HKLM-x32 - &RoboForm Toolbar - {724d43a0-0d85-11d4-9908-00400523e39a} - C:\Program Files (x86)\Siber Systems\AI RoboForm\roboform.dll (Siber Systems Inc.)
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 10.0.0.10
Tcpip\..\Interfaces\{44BB3BD4-AFCE-49BE-82BE-3ED2C532F40E}: [NameServer]8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

FireFox:
========
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default
FF SearchEngineOrder.user_pref("browser.search.order.1", "");: user_pref("browser.search.order.1", "");
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "");: user_pref("browser.search.order.1,S", "");
FF Homepage: hxxp://www.centrum.cz/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/AuthorwarePlayer - C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1203133.dll No File
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll No File
FF Plugin-x32: @nitropdf.com/NitroPDF - C:\Program Files (x86)\Nitro\Reader 3\npnitromozilla.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\googletranslate.xml
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\hledejcenycz.xml
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\inbox-hledat.xml
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\inbox-hledn.xml
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\porovnn-cen---cenekcz.xml
FF SearchPlugin: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\searchplugins\yqs-barff-yandex.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: startup.service - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\startup.service@mozilla.com
FF Extension: Forecastfox - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
FF Extension: IE Tab 2 (FF 3.6+) - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{1BC9BA34-1EED-42ca-A505-6D2F1A935BBB}
FF Extension: Google Toolbar for Firefox - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
FF Extension: Flashblock - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
FF Extension: EPUBReader - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{5384767E-00D9-40E9-B72F-9CC39D655D6F}
FF Extension: ReminderFox - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{ada4b710-8346-4b82-8199-5de2b400a6ae}
FF Extension: elemhidehelper - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\elemhidehelper@adblockplus.org.xpi
FF Extension: fdm_ffext - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\fdm_ffext@freedownloadmanager.org
FF Extension: flvmoviesdownloader - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\flvmoviesdownloader@rzll.xpi
FF Extension: Office2007Black - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\Office2007Black@JBBS.xpi
FF Extension: status4evar - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\status4evar@caligonstudios.com.xpi
FF Extension: uriloader - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\uriloader@pdf.js.xpi
FF Extension: No Name - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi
FF Extension: No Name - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{FFB96CC1-7EB3-449D-B827-DB661701C6BB}] - C:\Program Files\CheckPoint\ZAForceField\WOW64\TrustChecker
FF HKLM-x32\...\Firefox\Extensions: [{22119944-ED35-4ab1-910B-E619EA06A115}] - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF Extension: RoboForm Toolbar for Firefox - C:\Program Files (x86)\Siber Systems\AI RoboForm\Firefox
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Jan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Jan\AppData\Roaming\IDM\idmmzcc5
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Jan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Jan\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: () - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bjmpablglpmjkiggelahannpjgpoihnj\1
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: () - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bockhjiklcbibohibfhfepgipdgajhml\1
CHR Extension: (Google Search) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: () - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnpicgdnjfnbkibnicdnnpkkpklkjkki\2.0.0.4_0
CHR Extension: (saovvenusshaRe ) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\doehmcgilknmoglajajoejbejgolpdpm\1
CHR Extension: () - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\edobblihanhofnmgbckkfellnppdhljm\1
CHR Extension: (EyboOkBurowse) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hjailmdidghkajcmhoejlhfkblmdgabd\1
CHR Extension: (Installer) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijgflnaodjoadfpbnojecgdbjooffndj\1.0_0
CHR Extension: (contiNuetoSaVE) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlflljejpdfdbapalbnjfkofhcapnfln\1
CHR Extension: (BurrowsEE2siave) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhmkhmaemmolappcdengjfjacnihiloe\1
CHR Extension: (saovvenusshaRe ) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lomhboeifndincghakllngafemolkklb\1
CHR Extension: (Gmail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [jmolcgpienlcieaajfkkdamlngancncm] - C:\Program Files\Internet Download Manager\IDMGCExt.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation)
R2 MySQL; C:\Program Files\MySQL\MySQL Server 5.1\bin\mysqld.exe [7599616 2009-08-18] ()
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation)
R2 NitroReaderDriverReadSpool3; C:\Program Files\Common Files\Nitro\Reader\3.0\NitroPDFReaderDriverService3x64.exe [230416 2012-10-30] (Nitro PDF Software)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390632 2012-04-24] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
R2 Správce výběru OS; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2010-07-07] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-09-09] (AVG)
S2 AVGIDSAgent; "C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe" [x]
S2 avgwd; "C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe" [x]
S2 TuneUp.UtilitiesSvc; "C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe" [x]

==================== Drivers (Whitelisted) ====================

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [147768 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [241464 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [192824 2013-08-22] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-08-22] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [58368 2011-11-04] (http://www.winchiphead.com)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-08-09] (DT Soft Ltd)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-07-10] (Intel Corporation)
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [35256 2011-08-26] ()
S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [35256 2011-08-26] ()
S3 IT9135BDA; C:\Windows\System32\Drivers\IT9135BDA.sys [164864 2012-02-15] (ITE )
R0 Lbd; C:\Windows\System32\DRIVERS\Lbd.sys [69376 2011-12-23] (Lavasoft AB)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
R1 SBRE; C:\Windows\system32\drivers\SBREdrv.sys [55384 2012-05-10] (Sunbelt Software)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-08-07] (Duplex Secure Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [106256 2013-07-04] (Oracle Corporation)
S3 esgiguard; \??\C:\Program Files (x86)\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 Lavasoft Kernexplorer; \??\C:\Program Files (x86)\Lavasoft\Ad-Aware\KernExplorer64.sys [x]
S3 PQAWRwa; \??\C:\Windows\SysWOW64\PQAWDrv.sys [x]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [x]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-12 22:11 - 2013-10-12 22:11 - 00000000 ____D C:\FRST
2013-10-12 22:10 - 2013-10-12 22:10 - 01954124 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2013-10-12 22:08 - 2013-10-12 22:08 - 00112128 _____ (forum.viry.cz) C:\Users\Jan\Desktop\FRSTLauncher.exe
2013-10-12 16:36 - 2013-10-12 16:37 - 00000000 ____D C:\AdwCleaner
2013-10-11 10:38 - 2013-10-11 10:38 - 00000924 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2013-10-09 19:22 - 2013-10-09 19:22 - 00000000 ____D C:\Users\Public\Documents\sun
2013-10-09 19:17 - 2013-10-09 19:18 - 00000132 _____ C:\Users\Jan\AppData\Roaming\Adobe Formát BMP CS5 – předvolby
2013-10-09 16:14 - 2013-10-09 16:14 - 00000000 ____D C:\Users\Jan\AppData\Roaming\driveridentifier
2013-10-09 14:47 - 2013-10-09 15:56 - 00000000 ____D C:\WCH.CN
2013-10-09 14:47 - 2013-10-09 14:47 - 00003050 _____ C:\Windows\System32\Tasks\{3DCBFD25-0785-4B19-9A8A-77367E852720}
2013-10-09 14:33 - 2013-10-12 22:01 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-09 14:33 - 2013-10-12 18:38 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-09 12:14 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 12:14 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 12:14 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 12:14 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 12:14 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 12:14 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 12:14 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 12:14 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 12:14 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 12:14 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 12:14 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 12:14 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 12:13 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 09:53 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 09:53 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 09:53 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 09:53 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 09:53 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 09:53 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 09:53 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 09:53 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 09:53 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 09:53 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 09:53 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 09:53 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 09:53 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 09:53 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 09:53 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 09:53 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 09:53 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 09:53 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 09:53 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 09:53 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 09:53 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 09:53 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 09:53 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 09:53 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 09:53 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 09:53 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 09:53 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 09:53 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 09:53 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 09:53 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 09:53 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 09:53 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 09:53 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 09:53 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 09:53 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 09:53 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 09:53 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 09:53 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 09:53 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 09:53 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 09:53 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 09:53 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 09:53 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 09:53 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 09:53 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 09:53 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 09:53 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 09:53 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 09:53 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-04 22:37 - 2013-10-04 22:41 - 00000000 ____D C:\Users\Jan\.rs
2013-10-04 22:37 - 2013-10-04 22:37 - 00000000 ____D C:\Users\Jan\.appwork
2013-09-24 18:55 - 2013-09-24 18:55 - 00000997 _____ C:\WinRAR.lnk
2013-09-24 15:49 - 2013-10-11 18:57 - 00001912 _____ C:\Windows\epplauncher.mif
2013-09-24 15:48 - 2013-10-11 18:56 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-09-24 15:48 - 2013-10-11 18:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-09-23 13:39 - 2013-10-12 13:06 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Free Download Manager
2013-09-18 22:30 - 2013-10-11 14:41 - 00000000 ____D C:\Users\Jan\Downloads\Compressed
2013-09-18 22:30 - 2013-10-06 23:25 - 00000000 ____D C:\Users\Jan\AppData\Roaming\IDM
2013-09-18 22:30 - 2013-10-02 18:26 - 00000000 ____D C:\Users\Jan\Downloads\Video
2013-09-18 22:30 - 2013-09-18 22:30 - 00000000 ____D C:\Program Files\Internet Download Manager
2013-09-18 22:30 - 2012-11-22 06:13 - 00165112 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2013-09-18 17:24 - 2013-09-24 22:10 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-09-18 17:20 - 2013-09-18 17:21 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 10:38 - 2013-09-18 10:38 - 00000000 ___HD C:\ProgramData\CanonBJ
2013-09-18 10:38 - 2012-03-26 05:00 - 00389120 _____ (CANON INC.) C:\Windows\system32\CNMLMB8.DLL
2013-09-16 18:59 - 2013-09-16 18:59 - 00000000 ____D C:\Program Files (x86)\PANDORA.TV
2013-09-16 14:47 - 2013-09-16 14:47 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-09-16 14:46 - 2013-09-30 23:08 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-09-16 12:54 - 2013-09-12 16:58 - 00450731 _____ C:\Windows\system32\Drivers\etc\hosts.20130916-125427.backup
2013-09-16 11:09 - 2013-10-11 14:36 - 00016036 _____ C:\Windows\PFRO.log
2013-09-16 11:04 - 2013-09-17 18:19 - 00000000 ____D C:\Program Files\ESET
2013-09-16 10:21 - 2013-09-16 10:21 - 00000000 ____D C:\Users\Jan\AppData\Roaming\AVG2014
2013-09-14 00:54 - 2013-10-12 22:01 - 00006430 _____ C:\Windows\setupact.log
2013-09-13 15:07 - 2013-09-13 15:07 - 00003182 _____ C:\Windows\System32\Tasks\{CC3B077C-89C2-459C-B5F7-6A2C04828AAB}
2013-09-13 10:45 - 2013-09-13 10:45 - 00000000 ____D C:\ProgramData\IDM
2013-09-12 20:56 - 2013-09-12 20:56 - 00000172 _____ C:\spyhunter.fix
2013-09-12 20:56 - 2010-05-13 18:34 - 00014232 _____ C:\Windows\SysWOW64\sh4native.exe
2013-09-12 18:53 - 2013-09-12 18:53 - 00000000 _____ C:\autoexec.bat
2013-09-12 18:52 - 2013-09-12 20:03 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-09-12 18:52 - 2013-09-12 19:59 - 00000000 ____D C:\Windows\DDABC66756B3412282B02F5782EA2F9A.TMP
2013-09-12 13:50 - 2013-09-12 20:03 - 00000000 ____D C:\Program Files\trend micro
2013-09-12 13:50 - 2013-09-12 19:36 - 00000000 ____D C:\rsit
2013-09-12 13:29 - 2013-10-12 16:40 - 00013780 _____ C:\Users\Jan\Documents\hijackthis.log
2013-09-12 13:18 - 2013-09-12 19:45 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-12 13:18 - 2013-09-12 13:18 - 00000000 ___HD C:\$AVG
2013-09-12 13:15 - 2013-09-12 16:37 - 00000000 ____D C:\Users\Jan\AppData\Local\Avg2014
2013-09-12 10:30 - 2013-09-12 10:30 - 00003164 _____ C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2013-09-12 10:30 - 2013-09-12 10:30 - 00003094 _____ C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2013-09-12 10:29 - 2013-09-12 10:37 - 00000000 ____D C:\Program Files (x86)\Vtools
2013-09-12 10:29 - 2013-09-12 10:29 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Vtools

==================== One Month Modified Files and Folders =======

2013-10-12 22:12 - 2011-10-12 07:59 - 01338591 _____ C:\Windows\WindowsUpdate.log
2013-10-12 22:11 - 2013-10-12 22:11 - 00000000 ____D C:\FRST
2013-10-12 22:10 - 2013-10-12 22:10 - 01954124 _____ (Farbar) C:\Users\Jan\Desktop\FRST64.exe
2013-10-12 22:09 - 2009-07-14 06:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-12 22:09 - 2009-07-14 06:45 - 00016976 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-12 22:08 - 2013-10-12 22:08 - 00112128 _____ (forum.viry.cz) C:\Users\Jan\Desktop\FRSTLauncher.exe
2013-10-12 22:06 - 2011-10-12 08:48 - 00666422 _____ C:\Windows\system32\perfh005.dat
2013-10-12 22:06 - 2011-10-12 08:48 - 00140118 _____ C:\Windows\system32\perfc005.dat
2013-10-12 22:06 - 2009-07-14 07:13 - 01577482 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-12 22:02 - 2012-04-02 23:43 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-12 22:01 - 2013-10-09 14:33 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-12 22:01 - 2013-09-14 00:54 - 00006430 _____ C:\Windows\setupact.log
2013-10-12 22:01 - 2013-04-10 19:09 - 00000433 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-10-12 22:01 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-12 18:38 - 2013-10-09 14:33 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-12 16:40 - 2013-09-12 13:29 - 00013780 _____ C:\Users\Jan\Documents\hijackthis.log
2013-10-12 16:39 - 2012-11-05 19:52 - 00000000 ____D C:\Hijackthis
2013-10-12 16:37 - 2013-10-12 16:36 - 00000000 ____D C:\AdwCleaner
2013-10-12 13:06 - 2013-09-23 13:39 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Free Download Manager
2013-10-11 22:47 - 2012-08-19 16:39 - 00003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BED4089C-2BFB-4471-9FA5-9A0D9C0A2622}
2013-10-11 19:27 - 2012-01-19 17:39 - 00000000 ____D C:\Users\Jan\AppData\Roaming\DMCache
2013-10-11 18:57 - 2013-09-24 15:49 - 00001912 _____ C:\Windows\epplauncher.mif
2013-10-11 18:56 - 2013-09-24 15:48 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-10-11 18:56 - 2013-09-24 15:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-10-11 14:41 - 2013-09-18 22:30 - 00000000 ____D C:\Users\Jan\Downloads\Compressed
2013-10-11 14:36 - 2013-09-16 11:09 - 00016036 _____ C:\Windows\PFRO.log
2013-10-11 10:38 - 2013-10-11 10:38 - 00000924 _____ C:\Users\Public\Desktop\calibre - E-book management.lnk
2013-10-11 10:38 - 2012-07-19 18:00 - 00000000 ____D C:\Program Files (x86)\Calibre2
2013-10-09 19:22 - 2013-10-09 19:22 - 00000000 ____D C:\Users\Public\Documents\sun
2013-10-09 19:20 - 2009-07-14 06:45 - 05060200 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 19:18 - 2013-10-09 19:17 - 00000132 _____ C:\Users\Jan\AppData\Roaming\Adobe Formát BMP CS5 – předvolby
2013-10-09 19:11 - 2012-01-19 13:53 - 00131856 _____ C:\Users\Jan\AppData\Local\GDIPFONTCACHEV1.DAT
2013-10-09 18:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2013-10-09 17:43 - 2013-07-26 13:35 - 00000000 ____D C:\Program Files (x86)\OpenOffice 4
2013-10-09 17:22 - 2012-01-20 11:37 - 00001266 _____ C:\Users\Jan\Desktop\Řešení.txt
2013-10-09 16:44 - 2011-07-09 09:12 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-09 16:14 - 2013-10-09 16:14 - 00000000 ____D C:\Users\Jan\AppData\Roaming\driveridentifier
2013-10-09 15:56 - 2013-10-09 14:47 - 00000000 ____D C:\WCH.CN
2013-10-09 14:47 - 2013-10-09 14:47 - 00003050 _____ C:\Windows\System32\Tasks\{3DCBFD25-0785-4B19-9A8A-77367E852720}
2013-10-09 14:33 - 2012-02-03 16:19 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-09 14:33 - 2012-02-03 16:19 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-09 12:33 - 2012-05-09 17:15 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-09 12:33 - 2012-05-09 17:15 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2013-10-09 12:11 - 2012-01-19 17:55 - 01555768 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 12:10 - 2012-04-02 23:43 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 12:09 - 2012-04-02 23:43 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 12:09 - 2011-07-09 10:17 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 12:07 - 2013-08-15 13:24 - 00000000 ____D C:\Windows\system32\MRT
2013-10-09 12:04 - 2012-01-19 23:08 - 80541720 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-10-07 23:46 - 2013-08-27 13:16 - 00000000 ____D C:\Users\Jan\AppData\Local\calibre-cache
2013-10-06 23:25 - 2013-09-18 22:30 - 00000000 ____D C:\Users\Jan\AppData\Roaming\IDM
2013-10-05 23:55 - 2012-01-20 12:21 - 00000000 ____D C:\Program Files (x86)\SpywareBlaster
2013-10-05 23:51 - 2012-11-15 19:49 - 00000000 ____D C:\My E-Books
2013-10-05 22:46 - 2009-07-14 07:08 - 00032530 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-10-05 00:44 - 2011-07-09 09:43 - 00000000 ____D C:\Program Files (x86)\CyberLink
2013-10-04 22:50 - 2012-01-21 16:45 - 00001104 _____ C:\Users\Jan\AppData\Local\SRDownloader.nast
2013-10-04 22:41 - 2013-10-04 22:37 - 00000000 ____D C:\Users\Jan\.rs
2013-10-04 22:37 - 2013-10-04 22:37 - 00000000 ____D C:\Users\Jan\.appwork
2013-10-04 22:37 - 2012-01-19 13:53 - 00000000 ____D C:\Users\Jan
2013-10-04 22:31 - 2012-01-21 16:46 - 00042567 _____ C:\Users\Jan\AppData\Local\SRDownloader.err
2013-10-02 18:26 - 2013-09-18 22:30 - 00000000 ____D C:\Users\Jan\Downloads\Video
2013-09-30 23:08 - 2013-09-16 14:46 - 00000000 ____D C:\Program Files (x86)\Free Download Manager
2013-09-29 12:08 - 2009-07-14 04:34 - 00450731 ____R C:\Windows\system32\Drivers\etc\hosts.20131005-235646.backup
2013-09-29 12:07 - 2009-07-14 04:34 - 00450731 ____R C:\Windows\system32\Drivers\etc\hosts.20130929-120826.backup
2013-09-26 17:38 - 2013-05-28 17:32 - 00000000 ____D C:\Users\Jan\TapinRadio
2013-09-25 06:08 - 2012-04-24 17:50 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-09-24 22:10 - 2013-09-18 17:24 - 00000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2013-09-24 22:10 - 2012-01-19 18:47 - 00000000 ____D C:\Users\Jan\AppData\Local\Thunderbird
2013-09-24 18:55 - 2013-09-24 18:55 - 00000997 _____ C:\WinRAR.lnk
2013-09-24 18:54 - 2013-04-02 23:12 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2013-09-24 18:54 - 2012-01-20 23:46 - 00000000 ____D C:\Program Files\WinRAR
2013-09-23 09:37 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-23 01:28 - 2013-10-09 12:14 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-09 12:14 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-09 12:14 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 01:27 - 2013-10-09 12:13 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 00:55 - 2013-10-09 12:14 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-09 12:14 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-09 12:14 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-09 12:14 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-09 12:14 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-21 18:49 - 2013-05-20 15:51 - 00000000 ____D C:\ProgramData\MySQL
2013-09-21 18:49 - 2013-02-04 04:56 - 00000000 ____D C:\ProgramData\InstallShield
2013-09-21 18:49 - 2012-01-20 11:29 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2013-09-21 18:49 - 2012-01-20 00:14 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Feedreader
2013-09-21 18:49 - 2012-01-19 20:23 - 00000000 ____D C:\Program Files (x86)\Nezapomen
2013-09-21 18:49 - 2012-01-19 18:30 - 00000000 ____D C:\Program Files (x86)\RocketDock
2013-09-21 18:49 - 2011-07-09 10:17 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2013-09-21 18:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-21 18:49 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-21 05:38 - 2013-10-09 12:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-09 12:14 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-09 12:14 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-09 12:14 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-18 22:30 - 2013-09-18 22:30 - 00000000 ____D C:\Program Files\Internet Download Manager
2013-09-18 17:21 - 2013-09-18 17:20 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-18 17:21 - 2012-01-19 16:37 - 00000000 ____D C:\Users\Jan\AppData\Local\Mozilla
2013-09-18 14:44 - 2009-07-14 04:34 - 00450731 ____R C:\Windows\system32\Drivers\etc\hosts.20130929-120705.backup
2013-09-18 10:38 - 2013-09-18 10:38 - 00000000 ___HD C:\ProgramData\CanonBJ
2013-09-17 18:19 - 2013-09-16 11:04 - 00000000 ____D C:\Program Files\ESET
2013-09-17 16:40 - 2013-06-21 03:18 - 00000000 ____D C:\ProgramData\COMODO
2013-09-16 19:07 - 2012-01-19 13:59 - 00000000 ___RD C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-16 18:59 - 2013-09-16 18:59 - 00000000 ____D C:\Program Files (x86)\PANDORA.TV
2013-09-16 18:59 - 2013-05-24 23:41 - 00000999 _____ C:\Users\Jan\Desktop\KMPlayer.lnk
2013-09-16 14:47 - 2013-09-16 14:47 - 00000000 ____D C:\ProgramData\Free Download Manager
2013-09-16 12:54 - 2009-07-14 04:34 - 00450731 ____R C:\Windows\system32\Drivers\etc\hosts.20130918-144424.backup
2013-09-16 10:21 - 2013-09-16 10:21 - 00000000 ____D C:\Users\Jan\AppData\Roaming\AVG2014
2013-09-16 09:49 - 2013-04-02 19:01 - 00000000 ____D C:\ProgramData\MFAData
2013-09-14 03:10 - 2013-10-09 09:53 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-09-13 15:16 - 2013-04-24 10:25 - 00000000 ____D C:\Windows\Minidump
2013-09-13 15:07 - 2013-09-13 15:07 - 00003182 _____ C:\Windows\System32\Tasks\{CC3B077C-89C2-459C-B5F7-6A2C04828AAB}
2013-09-13 10:45 - 2013-09-13 10:45 - 00000000 ____D C:\ProgramData\IDM
2013-09-12 20:56 - 2013-09-12 20:56 - 00000172 _____ C:\spyhunter.fix
2013-09-12 20:56 - 2012-11-02 00:55 - 00000000 ____D C:\ProgramData\Freemake
2013-09-12 20:56 - 2012-11-02 00:55 - 00000000 ____D C:\Program Files (x86)\Freemake
2013-09-12 20:03 - 2013-09-12 18:52 - 00000000 ____D C:\Program Files (x86)\Enigma Software Group
2013-09-12 20:03 - 2013-09-12 13:50 - 00000000 ____D C:\Program Files\trend micro
2013-09-12 19:59 - 2013-09-12 18:52 - 00000000 ____D C:\Windows\DDABC66756B3412282B02F5782EA2F9A.TMP
2013-09-12 19:45 - 2013-09-12 13:18 - 00000000 ____D C:\ProgramData\AVG2014
2013-09-12 19:36 - 2013-09-12 13:50 - 00000000 ____D C:\rsit
2013-09-12 19:36 - 2013-08-11 19:30 - 00000000 ____D C:\ProgramData\IObit
2013-09-12 19:36 - 2013-05-23 17:00 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2013-09-12 19:36 - 2013-03-04 13:54 - 00000000 ____D C:\ProgramData\Licenses
2013-09-12 19:36 - 2012-01-20 23:33 - 00000000 ____D C:\Program Files (x86)\7-Zip
2013-09-12 19:36 - 2012-01-20 00:41 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-09-12 19:36 - 2009-07-14 07:32 - 00000000 ____D C:\Program Files (x86)\Windows Sidebar
2013-09-12 18:53 - 2013-09-12 18:53 - 00000000 _____ C:\autoexec.bat
2013-09-12 16:58 - 2013-09-16 12:54 - 00450731 _____ C:\Windows\system32\Drivers\etc\hosts.20130916-125427.backup
2013-09-12 16:37 - 2013-09-12 13:15 - 00000000 ____D C:\Users\Jan\AppData\Local\Avg2014
2013-09-12 13:18 - 2013-09-12 13:18 - 00000000 ___HD C:\$AVG
2013-09-12 11:03 - 2012-02-18 12:59 - 00000000 ____D C:\Windows\system32\Macromed
2013-09-12 11:03 - 2012-01-19 17:33 - 00000000 ____D C:\Users\Jan\AppData\Roaming\GHISLER
2013-09-12 11:03 - 2012-01-19 13:59 - 00000000 ___RD C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-12 11:03 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-09-12 10:37 - 2013-09-12 10:29 - 00000000 ____D C:\Program Files (x86)\Vtools
2013-09-12 10:30 - 2013-09-12 10:30 - 00003164 _____ C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2013-09-12 10:30 - 2013-09-12 10:30 - 00003094 _____ C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2013-09-12 10:29 - 2013-09-12 10:29 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Vtools
2013-09-12 10:27 - 2012-05-17 11:46 - 00000000 ____D C:\Users\Jan\AppData\Roaming\IObit
2013-09-12 10:14 - 2013-07-16 11:30 - 00000000 ____D C:\Users\Jan\AppData\Roaming\Common
2013-09-12 00:25 - 2013-08-29 23:05 - 00000000 ____D C:\ProgramData\InstallMate

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$536e685a1523acfd84fc2ab32126af36

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$536e685a1523acfd84fc2ab32126af36

ZeroAccess:
C:\$Recycle.Bin\S-1-5-21-3371989906-421553980-335095200-1000\$536e685a1523acfd84fc2ab32126af36

ZeroAccess:
C:\$Recycle.Bin\S-1-5-18\$536e685a1523acfd84fc2ab32126af36

Some content of TEMP:
====================
C:\Users\Jan\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
C:\Program Files\Windows Defender\cs-CZ => ATTENTION: ZeroAccess. Use DeleteJunctionsIndirectory: C:\Program Files\Windows Defender


LastRegBack: 2013-10-11 12:16




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (Acer) (Fixed) (Total:455.94 GB) (Free:397.99 GB) NTFS
Drive d: (Data) (Fixed) (Total:455.94 GB) (Free:441.03 GB) NTFS

Available physical RAM: 1851.24 MB
Total physical RAM: 4008.04 MB
Percentage of memory in use: 53%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 2126F88B)
Partition 1: (Not Active) - (Size=20 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=456 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=456 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:5C321E34

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jan\Desktop" je 2 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\gbrspcontrol
"C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe" -controlservice -slave [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files (x86)\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: Prosím okontrolu logu

Napsal: 12 říj 2013 21:51
od Rudy
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [msncxsSrv] - C:\Windows\inf\msncxs.vbe [1558 2013-08-27] ()
C:\Windows\inf\msncxs.vbe
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
C:\Windows\inf\ntvdm.vbe
SearchScopes: HKCU - {1682D117-4D53-4C2F-B917-422AB691364A} URL = http://www.mysearchresults.com/search?& ... earchTerms}
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Extension: Google Toolbar for Firefox - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
CHR Extension: (saovvenusshaRe ) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lomhboeifndincghakllngafemolkklb\1
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Re: Prosím okontrolu logu

Napsal: 12 říj 2013 22:12
od elzad
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by Jan at 2013-10-12 23:09:28 Run:1
Running from C:\Users\Jan\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM-x32\...\Run: [msncxsSrv] - C:\Windows\inf\msncxs.vbe [1558 2013-08-27] ()
C:\Windows\inf\msncxs.vbe
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
C:\Windows\inf\ntvdm.vbe
SearchScopes: HKCU - {1682D117-4D53-4C2F-B917-422AB691364A} URL = http://www.mysearchresults.com/search?& ... earchTerms}
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Extension: Google Toolbar for Firefox - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c}
CHR Extension: (saovvenusshaRe ) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lomhboeifndincghakllngafemolkklb\1
AlternateDataStreams: C:\ProgramData\Temp:373E1720
AlternateDataStreams: C:\ProgramData\Temp:5C321E34
End
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\msncxsSrv => Value deleted successfully.
"C:\Windows\inf\msncxs.vbe" => File/Directory not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv => Value deleted successfully.
C:\Windows\inf\ntvdm.vbe => Moved successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{1682D117-4D53-4C2F-B917-422AB691364A} => Key deleted successfully.
HKCR\CLSID\{1682D117-4D53-4C2F-B917-422AB691364A} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Value deleted successfully.
HKCR\CLSID\{47833539-D0C5-4125-9FA8-0819E2EAAC93} => Key not found.
C:\Windows\inf\ntvdm.vbe => Should not be moved.
HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File => Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\diyx8kvd.default\Extensions\{3112ca9c-de6d-4884-a869-9855de68056c} => Moved successfully.
C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lomhboeifndincghakllngafemolkklb => Moved successfully.
C:\ProgramData\Temp => ":373E1720" ADS removed successfully.
C:\ProgramData\Temp => ":5C321E34" ADS removed successfully.

==== End of Fixlog ====

Re: Prosím okontrolu logu

Napsal: 13 říj 2013 10:21
od Rudy
Vše smazáno, PC by již měl být čistý.
Všechny časy jsou v UTC+01:00
Stránka 1 z 1

Založeno na phpBB® Forum Software © phpBB Limited

Český překlad – phpBB.cz