Zpomalený PC (otevírání složek, psaní, internet,...)
Napsal: 31 říj 2013 14:56
Zdravím. Kamarád má zcela zpomalený PC, už jsem odinstaloavl McAfee,norton a nechal sem tam jen avast protoze nechapu proc tam mel 3 ochrany ruzne..ale i tak to jede pomalu.
PC: win XP profesional (SP3), AMD athlon 3200+ 2,01GHz, 1 GB RAM,
Prosím o kontrolu a předem díky.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2013
Ran by doma (administrator) on FERA on 31-10-2013 14:49:42
Running from C:\Documents and Settings\doma\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 7
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Prolific Technology Inc.) C:\WINDOWS\system32\IoctlSvc.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ali) C:\WINDOWS\UMStor\Res.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SkyTel] - C:\WINDOWS\SkyTel.exe [2879488 2006-05-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16062464 2006-12-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] - nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [USB Storage Toolbox] - C:\WINDOWS\UMStor\Res.exe [65536 2005-09-14] (ali)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Run: [] - [x]
HKU\Administrator\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.000\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.001\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.002\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.003\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
Lsa: [Authentication Packages] msv1_0 nwprovau
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchT ... f8&oe=utf8
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM - (No Name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - No File
SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = http://search.babylon.com/?babsrc=SP_ss ... ffID=19949
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... 093&lng=cs
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Winamp Toolbar - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No File
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Ask Toolbar - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default
FF DefaultSearchEngine: ICQ Search
FF SelectedSearchEngine: ICQ Search
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.3&q=
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Babylon - C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\Extensions\ffxtlbr@babylon.com
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Click to call with Skype - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files\MyWebSearch\bar\3.bin
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR Extension: (Webcam Toy) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade\1.5_0
CHR Extension: (Click to call with Skype) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [ocphobfcfafpclibolpjdafgaffkaoci] - C:\Documents and Settings\doma\Local Settings\Data aplikací\GamePlayLabs Plugin\gplplugin.crx
CHR StartMenuInternet: Google Chrome - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CLHNServiceForPowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-08-24] ()
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-08-26] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-08-26] (CyberLink)
S2 gupdate1c9b3a9c069e18; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-04-02] (Google Inc.)
R2 NWCWorkstation; C:\Windows\System32\nwwks.dll [65536 2008-04-14] (Microsoft Corporation)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2009-05-17] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
==================== Drivers (Whitelisted) ====================
R1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [43008 2006-07-01] (Advanced Micro Devices)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdXP3.sys [101392 2011-03-30] (Advanced Micro Devices)
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\mbamswissarmy.sys [40776 2013-02-02] (Malwarebytes Corporation)
R2 ntk_PowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [71664 2011-08-24] (Cyberlink Corp.)
R0 nvata; C:\Windows\System32\DRIVERS\nvata.sys [105344 2006-08-14] (NVIDIA Corporation)
R3 NVENETFD; C:\Windows\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
R3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
R2 NwlnkIpx; C:\Windows\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-13] (Microsoft Corporation)
R2 NwlnkNb; C:\Windows\System32\DRIVERS\nwlnknb.sys [63232 2001-10-25] (Microsoft Corporation)
R2 NwlnkSpx; C:\Windows\System32\DRIVERS\nwlnkspx.sys [55936 2001-10-25] (Microsoft Corporation)
R3 NWRDR; C:\Windows\System32\DRIVERS\nwrdr.sys [163584 2008-04-13] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-04-15] ()
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [77296 2011-08-26] (CyberLink Corp.)
U3 acqduatk; C:\Windows\System32\Drivers\acqduatk.sys [0 ] (Microsoft Corporation)
S3 GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS [x]
S4 IntelIde; No ImagePath
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-31 14:49 - 2013-10-31 14:49 - 00000000 ____D C:\FRST
2013-10-31 14:39 - 2013-10-31 14:40 - 01089275 _____ (Farbar) C:\Documents and Settings\doma\Plocha\FRST.exe
2013-10-31 14:39 - 2013-10-31 14:39 - 00112128 _____ (forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
2013-10-30 15:40 - 2013-10-30 15:49 - 00000000 ____D C:\Documents and Settings\doma\Plocha\NOVÉ PÍSNIČKY
2013-10-22 19:55 - 2013-10-22 19:55 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\hasicstvo
2013-10-12 08:06 - 2013-10-12 08:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-12 08:05 - 2013-10-12 08:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-12 08:04 - 2013-10-12 08:05 - 00131242 _____ C:\WINDOWS\KB2862335.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00004824 _____ C:\WINDOWS\KB2884256.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-12 07:48 - 2013-10-12 07:49 - 00005374 _____ C:\WINDOWS\KB2868038.log
2013-10-12 07:48 - 2013-10-12 07:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-11 14:23 - 2013-10-12 08:06 - 00134147 _____ C:\WINDOWS\KB2847311.log
2013-10-11 14:22 - 2013-07-03 03:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-10-11 14:22 - 2013-07-03 02:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00046848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-10-11 14:19 - 2009-03-18 12:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-10-11 14:17 - 2013-10-12 07:49 - 00106040 _____ C:\WINDOWS\KB2879017-IE7.log
2013-10-10 09:58 - 2013-10-10 11:29 - 803153920 _____ C:\Documents and Settings\doma\Plocha\The-Words-2012-cz-dabing.avi
==================== One Month Modified Files and Folders =======
2013-10-31 14:49 - 2013-10-31 14:49 - 00000000 ____D C:\FRST
2013-10-31 14:49 - 2009-03-14 13:07 - 00000000 ___HD C:\Documents and Settings\doma\Local Settings\Data aplikací
2013-10-31 14:49 - 2009-03-14 13:07 - 00000000 ____D C:\Documents and Settings\doma\Plocha
2013-10-31 14:40 - 2013-10-31 14:39 - 01089275 _____ (Farbar) C:\Documents and Settings\doma\Plocha\FRST.exe
2013-10-31 14:39 - 2013-10-31 14:39 - 00112128 _____ (forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
2013-10-31 14:36 - 2012-07-14 05:17 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-10-31 14:33 - 2009-03-14 13:02 - 01737662 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-31 14:31 - 2009-03-15 12:13 - 00000000 ____D C:\Documents and Settings\doma\Data aplikací\Skype
2013-10-31 14:30 - 2012-07-16 14:25 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-31 14:30 - 2012-02-06 16:40 - 00000262 _____ C:\WINDOWS\Tasks\RegistryBooster.job
2013-10-31 14:30 - 2009-03-14 13:56 - 00000300 _____ C:\WINDOWS\wiadebug.log
2013-10-31 14:30 - 2009-03-14 13:56 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-10-31 14:30 - 2009-03-14 13:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-31 14:30 - 2001-10-25 15:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-31 14:29 - 2009-03-14 13:07 - 00032514 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-31 14:29 - 2009-03-14 13:07 - 00000272 ___SH C:\Documents and Settings\doma\ntuser.ini
2013-10-31 14:28 - 2013-08-19 10:51 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-10-31 14:28 - 2009-03-14 13:54 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-10-31 14:28 - 2009-03-14 13:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-10-31 14:27 - 2009-03-14 13:54 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2013-10-31 14:27 - 2009-03-14 13:52 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-10-31 14:25 - 2011-07-30 08:41 - 00000000 ____D C:\WINDOWS\pss
2013-10-31 14:25 - 2009-03-14 13:51 - 00000343 __RSH C:\boot.ini
2013-10-31 14:25 - 2009-03-14 13:07 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\Programy\Po spuštění
2013-10-31 14:25 - 2001-10-25 15:00 - 00001054 _____ C:\WINDOWS\win.ini
2013-10-31 14:25 - 2001-10-25 15:00 - 00000296 _____ C:\WINDOWS\system.ini
2013-10-31 14:23 - 2011-08-12 09:32 - 00002347 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader X.lnk
2013-10-31 14:10 - 2013-03-26 16:28 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-31 14:07 - 2012-07-16 14:25 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-31 14:02 - 2013-08-11 21:35 - 00000000 ____D C:\Documents and Settings\doma\Plocha\HANY-škola
2013-10-31 14:01 - 2012-11-14 19:31 - 00001022 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job
2013-10-31 13:50 - 2012-07-24 09:54 - 00208737 _____ C:\WINDOWS\setupapi.log
2013-10-30 22:01 - 2012-11-14 19:31 - 00000970 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job
2013-10-30 19:37 - 2012-10-12 14:41 - 00000988 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job
2013-10-30 18:22 - 2009-05-12 14:25 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2013-10-30 15:49 - 2013-10-30 15:40 - 00000000 ____D C:\Documents and Settings\doma\Plocha\NOVÉ PÍSNIČKY
2013-10-30 10:37 - 2012-10-12 14:41 - 00000966 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job
2013-10-28 18:54 - 2012-01-10 18:41 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-10-27 08:08 - 2009-03-14 13:54 - 01057130 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-25 13:32 - 2011-07-30 12:01 - 00000000 ____D C:\Documents and Settings\doma\Data aplikací\vlc
2013-10-24 10:41 - 2009-05-14 15:12 - 00000149 _____ C:\Documents and Settings\doma\Data aplikací\default.pls
2013-10-24 10:41 - 2009-03-14 13:07 - 00000000 __RHD C:\Documents and Settings\doma\Data aplikací
2013-10-22 19:55 - 2013-10-22 19:55 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\hasicstvo
2013-10-22 19:55 - 2009-03-14 13:07 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start
2013-10-20 12:19 - 2009-03-15 12:31 - 00216576 _____ C:\Documents and Settings\doma\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-20 12:14 - 2013-08-26 16:29 - 00000000 ____D C:\Documents and Settings\doma\Plocha\Nová složka (3)
2013-10-18 23:08 - 2009-10-06 14:27 - 00002250 _____ C:\Documents and Settings\doma\Plocha\Google Chrome.lnk
2013-10-16 20:19 - 2013-07-26 08:48 - 00000000 ___RD C:\Documents and Settings\doma\Dokumenty\Obrázky
2013-10-15 13:48 - 2010-01-29 16:31 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-10-13 19:58 - 2009-03-14 13:07 - 00000000 ____D C:\Documents and Settings\doma
2013-10-12 10:10 - 2011-01-16 18:23 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-12 10:10 - 2009-03-14 13:51 - 00360136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-12 08:10 - 2011-04-10 17:43 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-10-12 08:06 - 2013-10-12 08:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-12 08:06 - 2013-10-11 14:23 - 00134147 _____ C:\WINDOWS\KB2847311.log
2013-10-12 08:06 - 2011-10-12 20:36 - 00223188 _____ C:\WINDOWS\msmqinst.log
2013-10-12 08:06 - 2009-04-13 06:50 - 00330820 _____ C:\WINDOWS\updspapi.log
2013-10-12 08:06 - 2009-03-14 13:54 - 02591647 _____ C:\WINDOWS\FaxSetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 01308607 _____ C:\WINDOWS\ocgen.log
2013-10-12 08:06 - 2009-03-14 13:54 - 01221837 _____ C:\WINDOWS\tsoc.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00858055 _____ C:\WINDOWS\iis6.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00721398 _____ C:\WINDOWS\comsetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00462869 _____ C:\WINDOWS\netfxocm.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00442985 _____ C:\WINDOWS\ntdtcsetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00185933 _____ C:\WINDOWS\MedCtrOC.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00133304 _____ C:\WINDOWS\ocmsn.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00133043 _____ C:\WINDOWS\msgsocm.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00130162 _____ C:\WINDOWS\tabletoc.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00001393 _____ C:\WINDOWS\imsins.log
2013-10-12 08:05 - 2013-10-12 08:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-12 08:05 - 2013-10-12 08:04 - 00131242 _____ C:\WINDOWS\KB2862335.log
2013-10-12 08:05 - 2009-03-14 13:54 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-10-12 08:04 - 2013-07-27 06:55 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-12 07:53 - 2009-06-24 19:19 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-12 07:52 - 2011-01-29 19:10 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Silverlight
2013-10-12 07:49 - 2013-10-12 07:49 - 00004824 _____ C:\WINDOWS\KB2884256.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-12 07:49 - 2013-10-12 07:48 - 00005374 _____ C:\WINDOWS\KB2868038.log
2013-10-12 07:49 - 2013-10-11 14:17 - 00106040 _____ C:\WINDOWS\KB2879017-IE7.log
2013-10-12 07:49 - 2011-07-30 08:57 - 00000000 ____D C:\WINDOWS\ie7updates
2013-10-12 07:48 - 2013-10-12 07:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-11 14:17 - 2013-08-11 14:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-10 11:29 - 2013-10-10 09:58 - 803153920 _____ C:\Documents and Settings\doma\Plocha\The-Words-2012-cz-dabing.avi
2013-10-09 20:10 - 2009-03-28 13:57 - 00417280 ___SH C:\Documents and Settings\doma\Plocha\Thumbs.db
2013-10-09 15:10 - 2013-03-26 16:28 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-09 15:10 - 2012-01-15 11:21 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
Some content of TEMP:
====================
C:\Documents and Settings\doma\Local Settings\temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\doma\Local Settings\temp\IcqUpdater.exe
C:\Documents and Settings\doma\Local Settings\temp\NEventMessages.dll
C:\Documents and Settings\doma\Local Settings\temp\NOSEventMessages.dll
C:\Documents and Settings\doma\Local Settings\temp\vlc-2.0.4-win32.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1
C:\Windows\System32\winlogon.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0507904 ____N (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea
C:\Windows\System32\svchost.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0014336 ____N (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\Windows\System32\services.exe
[2004-08-17 14:49] - [2009-02-09 12:25] - 0111104 ____N (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\Windows\System32\User32.dll
[2004-08-17 14:49] - [2008-04-14 04:22] - 0578560 ____N (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53
C:\Windows\System32\userinit.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0026112 ____N (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-17 14:44] - [2008-04-14 03:12] - 0052480 ____N (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Available physical RAM: 237.75 MB
Total physical RAM: 1023.36 MB
Percentage of memory in use: 76%
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\RegistryBooster.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:63238B95
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Documents and Settings\doma\Plocha" je 5186 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount
"C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Driver Updater
"C:\Program Files\Carambis\Driver Updater\dupdater.exe" /minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update
"C:\Documents and Settings\doma\Local Settings\Data aplikac\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Documents and Settings\doma\Local Settings\Data aplikac\Google\Update\GoogleUpdate.exe" /c [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
"C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS
"C:\Program Files\Messenger\msmsgs.exe" /background [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
"C:\Program Files\QuickTime\QTTask.exe" -atboottime [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl11
C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent
"C:\Program Files\Winamp\winampa.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^doma^Nabdka Start^Programy^Po sputn^Facebook Messenger.lnk
C:\DOCUME~1\doma\LOCALS~1\DATAAP~1\Facebook\MESSEN~1\214814~1.0\FACEBO~1.EXE
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\ICQ7.1\\ICQ.exe"="C:\\Program Files\\ICQ7.1\\ICQ.exe:*:Enabled:ICQ7.1"
"C:\\Program Files\\ICQ7.1\\aolload.exe"="C:\\Program Files\\ICQ7.1\\aolload.exe:*:Enabled:aolload.exe"
"C:\\Program Files\\ICQ7.2\\ICQ.exe"="C:\\Program Files\\ICQ7.2\\ICQ.exe:*:Enabled:ICQ7.2"
"C:\\Program Files\\ICQ7.2\\aolload.exe"="C:\\Program Files\\ICQ7.2\\aolload.exe:*:Enabled:aolload.exe"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe:*:Enabled:CyberLink PowerDVD 11.0"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe:*:Enabled:CyberLink PowerDVD 11.0 RC Service"
"C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe:*:Enabled:CyberLink Media Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Kerio\\Personal Firewall 4\\kpf4gui.exe"="C:\\Program Files\\Kerio\\Personal Firewall 4\\kpf4gui.exe:*:Enabled:Kerio Personal Firewall 4 - GUI"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"="C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\\Program Files\\ICQ7.2\\ICQ.exe"="C:\\Program Files\\ICQ7.2\\ICQ.exe:*:Enabled:ICQ7.2"
"C:\\Program Files\\ICQ7.2\\aolload.exe"="C:\\Program Files\\ICQ7.2\\aolload.exe:*:Enabled:aolload.exe"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe:*:Enabled:Render Manager"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe:*:Enabled:Studio"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe:*:Enabled:umi"
"C:\\Program Files\\QIP\\qip.exe"="C:\\Program Files\\QIP\\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"="C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe:*:Enabled:Google Earth"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe:*:Enabled:CyberLink PowerDVD 11.0"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe:*:Enabled:CyberLink PowerDVD 11.0 RC Service"
"C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe:*:Enabled:CyberLink Media Server"
"C:\\Programme\\iTNC530\\340494\\sys\\bin\\geo.EXE"="C:\\Programme\\iTNC530\\340494\\sys\\bin\\geo.EXE:*:Enabled:geo"
"C:\\Documents and Settings\\doma\\Local Settings\\Data aplikac\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"="C:\\Documents and Settings\\doma\\Local Settings\\Data aplikac\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"="C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\\totalcmd\\TOTALCMD.EXE"="C:\\totalcmd\\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
==================== End Of Log ==============================
PC: win XP profesional (SP3), AMD athlon 3200+ 2,01GHz, 1 GB RAM,
Prosím o kontrolu a předem díky.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 30-10-2013
Ran by doma (administrator) on FERA on 31-10-2013 14:49:42
Running from C:\Documents and Settings\doma\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 7
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\Ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe
(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe
(Nero AG) C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Prolific Technology Inc.) C:\WINDOWS\system32\IoctlSvc.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(Rocket Division Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Uniblue Systems Limited) C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(ali) C:\WINDOWS\UMStor\Res.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastUI.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SkyTel] - C:\WINDOWS\SkyTel.exe [2879488 2006-05-16] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [16062464 2006-12-19] (Realtek Semiconductor Corp.)
HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] - nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] - RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [USB Storage Toolbox] - C:\WINDOWS\UMStor\Res.exe [65536 2005-09-14] (ali)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
Winlogon\Notify\AtiExtEvent: C:\Windows\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [18706176 2013-01-08] (Skype Technologies S.A.)
HKCU\...\Run: [] - [x]
HKU\Administrator\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.000\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.001\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.002\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Administrator.FERA.003\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
HKU\Default User\...\RunOnce: [NeroHomeFirstStart] - C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe [ 2008-06-24] (Nero AG)
Lsa: [Authentication Packages] msv1_0 nwprovau
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchT ... f8&oe=utf8
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.com/ie
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
URLSearchHook: HKLM - Default Value = {855F3B16-6D32-4fe6-8A56-BBB695989046}
URLSearchHook: HKLM - (No Name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - No File
URLSearchHook: HKLM - (No Name) - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - No File
SearchScopes: HKCU - {1F096B29-E9DA-4D64-8D63-936BE7762CC5} URL = http://search.babylon.com/?babsrc=SP_ss ... ffID=19949
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://toolbar.inbox.com/search/dispatc ... 093&lng=cs
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
Toolbar: HKLM - avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Winamp Toolbar - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - No File
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - Ask Toolbar - {FE063DB9-4EC0-403E-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL No File
DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://go.microsoft.com/fwlink/?linkid=39204
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com/pub/shoc ... wflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default
FF DefaultSearchEngine: ICQ Search
FF SelectedSearchEngine: ICQ Search
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxp://search.icq.com/search/afe_results.php?ch_id=afex&tb_ver=1.4.3&q=
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1204144.dll (Adobe Systems, Inc.)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @nokia.com/EnablerPlugin - C:\Program Files\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin: @real.com/nppl3260;version=6.0.11.2852 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nppl3260;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.1662 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.46 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.4 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: facebook.com/fbDesktopPlugin - C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Messenger\2.1.4814.0\npFbDesktopPlugin.dll (Facebook, Inc.)
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icq-search.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-1.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-10.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-11.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-2.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-3.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-4.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-5.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-6.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-7.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-8.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin-9.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\icqplugin.xml
FF SearchPlugin: C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Babylon - C:\Documents and Settings\doma\Data aplikací\Mozilla\Firefox\Profiles\3aaxtqx6.default\Extensions\ffxtlbr@babylon.com
FF Extension: ICQ Toolbar - C:\Program Files\Mozilla Firefox\extensions\{800b5000-a755-47e1-992b-48a1c1357f07}
FF Extension: Click to call with Skype - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files\MyWebSearch\bar\3.bin
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF
Chrome:
=======
CHR Extension: (Webcam Toy) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\lfbgimoladefibpklnfmkpknadbklade\1.5_0
CHR Extension: (Click to call with Skype) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.6.0.8153_0
CHR Extension: (Chrome In-App Payments service) - C:\DOCUME~1\doma\LOCALS~1\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR HKLM\...\Chrome\Extension: [dhkplhfnhceodhffomolpfigojocbpcb] - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbar.crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM\...\Chrome\Extension: [ocphobfcfafpclibolpjdafgaffkaoci] - C:\Documents and Settings\doma\Local Settings\Data aplikací\GamePlayLabs Plugin\gplplugin.crx
CHR StartMenuInternet: Google Chrome - C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Chrome\Application\chrome.exe
========================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 CLHNServiceForPowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-08-24] ()
R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [75048 2011-08-26] (CyberLink)
R2 CyberLink PowerDVD 11.0 Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServerForPDVD11.exe [292136 2011-08-26] (CyberLink)
S2 gupdate1c9b3a9c069e18; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-04-02] (Google Inc.)
R2 NWCWorkstation; C:\Windows\System32\nwwks.dll [65536 2008-04-14] (Microsoft Corporation)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [66872 2009-05-17] ()
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software)
==================== Drivers (Whitelisted) ====================
R1 AmdK8; C:\Windows\System32\DRIVERS\AmdK8.sys [43008 2006-07-01] (Advanced Micro Devices)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-27] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-27] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-27] ()
R3 AtiHDAudioService; C:\Windows\System32\drivers\AtihdXP3.sys [101392 2011-03-30] (Advanced Micro Devices)
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
S3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\mbamswissarmy.sys [40776 2013-02-02] (Malwarebytes Corporation)
R2 ntk_PowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [71664 2011-08-24] (Cyberlink Corp.)
R0 nvata; C:\Windows\System32\DRIVERS\nvata.sys [105344 2006-08-14] (NVIDIA Corporation)
R3 NVENETFD; C:\Windows\System32\DRIVERS\NVENETFD.sys [57856 2006-07-11] (NVIDIA Corporation)
R3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [20480 2006-07-11] (NVIDIA Corporation)
R2 NwlnkIpx; C:\Windows\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-13] (Microsoft Corporation)
R2 NwlnkNb; C:\Windows\System32\DRIVERS\nwlnknb.sys [63232 2001-10-25] (Microsoft Corporation)
R2 NwlnkSpx; C:\Windows\System32\DRIVERS\nwlnkspx.sys [55936 2001-10-25] (Microsoft Corporation)
R3 NWRDR; C:\Windows\System32\DRIVERS\nwrdr.sys [163584 2008-04-13] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-04-15] ()
R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [77296 2011-08-26] (CyberLink Corp.)
U3 acqduatk; C:\Windows\System32\Drivers\acqduatk.sys [0 ] (Microsoft Corporation)
S3 GMSIPCI; \??\I:\INSTALL\GMSIPCI.SYS [x]
S4 IntelIde; No ImagePath
S3 Lavasoft Kernexplorer; \??\C:\Program Files\Lavasoft\Ad-Aware\KernExplorer.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-10-31 14:49 - 2013-10-31 14:49 - 00000000 ____D C:\FRST
2013-10-31 14:39 - 2013-10-31 14:40 - 01089275 _____ (Farbar) C:\Documents and Settings\doma\Plocha\FRST.exe
2013-10-31 14:39 - 2013-10-31 14:39 - 00112128 _____ (forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
2013-10-30 15:40 - 2013-10-30 15:49 - 00000000 ____D C:\Documents and Settings\doma\Plocha\NOVÉ PÍSNIČKY
2013-10-22 19:55 - 2013-10-22 19:55 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\hasicstvo
2013-10-12 08:06 - 2013-10-12 08:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-12 08:05 - 2013-10-12 08:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-12 08:04 - 2013-10-12 08:05 - 00131242 _____ C:\WINDOWS\KB2862335.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00004824 _____ C:\WINDOWS\KB2884256.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-12 07:48 - 2013-10-12 07:49 - 00005374 _____ C:\WINDOWS\KB2868038.log
2013-10-12 07:48 - 2013-10-12 07:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-11 14:23 - 2013-10-12 08:06 - 00134147 _____ C:\WINDOWS\KB2847311.log
2013-10-11 14:22 - 2013-07-03 03:12 - 00025088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\hidparse.sys
2013-10-11 14:22 - 2013-07-03 02:59 - 00014976 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbscan.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00123008 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbvideo.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00060160 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbaudio.sys
2013-10-11 14:20 - 2013-07-17 01:58 - 00046848 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\irbus.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00144128 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbport.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00032384 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbccgp.sys
2013-10-11 14:19 - 2013-08-09 01:55 - 00005376 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbd.sys
2013-10-11 14:19 - 2009-03-18 12:02 - 00030336 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\usbehci.sys
2013-10-11 14:17 - 2013-10-12 07:49 - 00106040 _____ C:\WINDOWS\KB2879017-IE7.log
2013-10-10 09:58 - 2013-10-10 11:29 - 803153920 _____ C:\Documents and Settings\doma\Plocha\The-Words-2012-cz-dabing.avi
==================== One Month Modified Files and Folders =======
2013-10-31 14:49 - 2013-10-31 14:49 - 00000000 ____D C:\FRST
2013-10-31 14:49 - 2009-03-14 13:07 - 00000000 ___HD C:\Documents and Settings\doma\Local Settings\Data aplikací
2013-10-31 14:49 - 2009-03-14 13:07 - 00000000 ____D C:\Documents and Settings\doma\Plocha
2013-10-31 14:40 - 2013-10-31 14:39 - 01089275 _____ (Farbar) C:\Documents and Settings\doma\Plocha\FRST.exe
2013-10-31 14:39 - 2013-10-31 14:39 - 00112128 _____ (forum.viry.cz) C:\Documents and Settings\doma\Plocha\FRSTLauncher.exe
2013-10-31 14:36 - 2012-07-14 05:17 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-10-31 14:33 - 2009-03-14 13:02 - 01737662 _____ C:\WINDOWS\WindowsUpdate.log
2013-10-31 14:31 - 2009-03-15 12:13 - 00000000 ____D C:\Documents and Settings\doma\Data aplikací\Skype
2013-10-31 14:30 - 2012-07-16 14:25 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-31 14:30 - 2012-02-06 16:40 - 00000262 _____ C:\WINDOWS\Tasks\RegistryBooster.job
2013-10-31 14:30 - 2009-03-14 13:56 - 00000300 _____ C:\WINDOWS\wiadebug.log
2013-10-31 14:30 - 2009-03-14 13:56 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-10-31 14:30 - 2009-03-14 13:07 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-10-31 14:30 - 2001-10-25 15:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-10-31 14:29 - 2009-03-14 13:07 - 00032514 _____ C:\WINDOWS\SchedLgU.Txt
2013-10-31 14:29 - 2009-03-14 13:07 - 00000272 ___SH C:\Documents and Settings\doma\ntuser.ini
2013-10-31 14:28 - 2013-08-19 10:51 - 00000000 ____D C:\Program Files\Common Files\Symantec Shared
2013-10-31 14:28 - 2009-03-14 13:54 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-10-31 14:28 - 2009-03-14 13:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-10-31 14:27 - 2009-03-14 13:54 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2013-10-31 14:27 - 2009-03-14 13:52 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2013-10-31 14:25 - 2011-07-30 08:41 - 00000000 ____D C:\WINDOWS\pss
2013-10-31 14:25 - 2009-03-14 13:51 - 00000343 __RSH C:\boot.ini
2013-10-31 14:25 - 2009-03-14 13:07 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\Programy\Po spuštění
2013-10-31 14:25 - 2001-10-25 15:00 - 00001054 _____ C:\WINDOWS\win.ini
2013-10-31 14:25 - 2001-10-25 15:00 - 00000296 _____ C:\WINDOWS\system.ini
2013-10-31 14:23 - 2011-08-12 09:32 - 00002347 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader X.lnk
2013-10-31 14:10 - 2013-03-26 16:28 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-10-31 14:07 - 2012-07-16 14:25 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-31 14:02 - 2013-08-11 21:35 - 00000000 ____D C:\Documents and Settings\doma\Plocha\HANY-škola
2013-10-31 14:01 - 2012-11-14 19:31 - 00001022 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job
2013-10-31 13:50 - 2012-07-24 09:54 - 00208737 _____ C:\WINDOWS\setupapi.log
2013-10-30 22:01 - 2012-11-14 19:31 - 00000970 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job
2013-10-30 19:37 - 2012-10-12 14:41 - 00000988 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job
2013-10-30 18:22 - 2009-05-12 14:25 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2013-10-30 15:49 - 2013-10-30 15:40 - 00000000 ____D C:\Documents and Settings\doma\Plocha\NOVÉ PÍSNIČKY
2013-10-30 10:37 - 2012-10-12 14:41 - 00000966 _____ C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job
2013-10-28 18:54 - 2012-01-10 18:41 - 00000284 _____ C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
2013-10-27 08:08 - 2009-03-14 13:54 - 01057130 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2013-10-25 13:32 - 2011-07-30 12:01 - 00000000 ____D C:\Documents and Settings\doma\Data aplikací\vlc
2013-10-24 10:41 - 2009-05-14 15:12 - 00000149 _____ C:\Documents and Settings\doma\Data aplikací\default.pls
2013-10-24 10:41 - 2009-03-14 13:07 - 00000000 __RHD C:\Documents and Settings\doma\Data aplikací
2013-10-22 19:55 - 2013-10-22 19:55 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start\hasicstvo
2013-10-22 19:55 - 2009-03-14 13:07 - 00000000 ___RD C:\Documents and Settings\doma\Nabídka Start
2013-10-20 12:19 - 2009-03-15 12:31 - 00216576 _____ C:\Documents and Settings\doma\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-10-20 12:14 - 2013-08-26 16:29 - 00000000 ____D C:\Documents and Settings\doma\Plocha\Nová složka (3)
2013-10-18 23:08 - 2009-10-06 14:27 - 00002250 _____ C:\Documents and Settings\doma\Plocha\Google Chrome.lnk
2013-10-16 20:19 - 2013-07-26 08:48 - 00000000 ___RD C:\Documents and Settings\doma\Dokumenty\Obrázky
2013-10-15 13:48 - 2010-01-29 16:31 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2013-10-13 19:58 - 2009-03-14 13:07 - 00000000 ____D C:\Documents and Settings\doma
2013-10-12 10:10 - 2011-01-16 18:23 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-12 10:10 - 2009-03-14 13:51 - 00360136 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2013-10-12 08:10 - 2011-04-10 17:43 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Microsoft Help
2013-10-12 08:06 - 2013-10-12 08:06 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2847311$
2013-10-12 08:06 - 2013-10-11 14:23 - 00134147 _____ C:\WINDOWS\KB2847311.log
2013-10-12 08:06 - 2011-10-12 20:36 - 00223188 _____ C:\WINDOWS\msmqinst.log
2013-10-12 08:06 - 2009-04-13 06:50 - 00330820 _____ C:\WINDOWS\updspapi.log
2013-10-12 08:06 - 2009-03-14 13:54 - 02591647 _____ C:\WINDOWS\FaxSetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 01308607 _____ C:\WINDOWS\ocgen.log
2013-10-12 08:06 - 2009-03-14 13:54 - 01221837 _____ C:\WINDOWS\tsoc.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00858055 _____ C:\WINDOWS\iis6.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00721398 _____ C:\WINDOWS\comsetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00462869 _____ C:\WINDOWS\netfxocm.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00442985 _____ C:\WINDOWS\ntdtcsetup.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00185933 _____ C:\WINDOWS\MedCtrOC.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00133304 _____ C:\WINDOWS\ocmsn.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00133043 _____ C:\WINDOWS\msgsocm.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00130162 _____ C:\WINDOWS\tabletoc.log
2013-10-12 08:06 - 2009-03-14 13:54 - 00001393 _____ C:\WINDOWS\imsins.log
2013-10-12 08:05 - 2013-10-12 08:05 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862335$
2013-10-12 08:05 - 2013-10-12 08:04 - 00131242 _____ C:\WINDOWS\KB2862335.log
2013-10-12 08:05 - 2009-03-14 13:54 - 00001393 _____ C:\WINDOWS\imsins.BAK
2013-10-12 08:04 - 2013-07-27 06:55 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-10-12 07:53 - 2009-06-24 19:19 - 78106760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-10-12 07:52 - 2011-01-29 19:10 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Silverlight
2013-10-12 07:49 - 2013-10-12 07:49 - 00004824 _____ C:\WINDOWS\KB2884256.log
2013-10-12 07:49 - 2013-10-12 07:49 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2884256$
2013-10-12 07:49 - 2013-10-12 07:48 - 00005374 _____ C:\WINDOWS\KB2868038.log
2013-10-12 07:49 - 2013-10-11 14:17 - 00106040 _____ C:\WINDOWS\KB2879017-IE7.log
2013-10-12 07:49 - 2011-07-30 08:57 - 00000000 ____D C:\WINDOWS\ie7updates
2013-10-12 07:48 - 2013-10-12 07:48 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868038$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2883150$
2013-10-12 07:47 - 2013-10-12 07:47 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862330$
2013-10-11 14:17 - 2013-08-11 14:22 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-10 11:29 - 2013-10-10 09:58 - 803153920 _____ C:\Documents and Settings\doma\Plocha\The-Words-2012-cz-dabing.avi
2013-10-09 20:10 - 2009-03-28 13:57 - 00417280 ___SH C:\Documents and Settings\doma\Plocha\Thumbs.db
2013-10-09 15:10 - 2013-03-26 16:28 - 00692616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2013-10-09 15:10 - 2012-01-15 11:21 - 00071048 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
Some content of TEMP:
====================
C:\Documents and Settings\doma\Local Settings\temp\0a50e25a83046228c11dcaa7eeed09bb.exe
C:\Documents and Settings\doma\Local Settings\temp\IcqUpdater.exe
C:\Documents and Settings\doma\Local Settings\temp\NEventMessages.dll
C:\Documents and Settings\doma\Local Settings\temp\NOSEventMessages.dll
C:\Documents and Settings\doma\Local Settings\temp\vlc-2.0.4-win32.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1
C:\Windows\System32\winlogon.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0507904 ____N (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea
C:\Windows\System32\svchost.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0014336 ____N (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\Windows\System32\services.exe
[2004-08-17 14:49] - [2009-02-09 12:25] - 0111104 ____N (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\Windows\System32\User32.dll
[2004-08-17 14:49] - [2008-04-14 04:22] - 0578560 ____N (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53
C:\Windows\System32\userinit.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0026112 ____N (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-17 14:44] - [2008-04-14 03:12] - 0052480 ____N (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Available physical RAM: 237.75 MB
Total physical RAM: 1023.36 MB
Percentage of memory in use: 76%
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\AppleSoftwareUpdate.job => C:\Program Files\Apple Software Update\SoftwareUpdate.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Facebook\Update\FacebookUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003Core.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2025429265-725345543-1003UA.job => C:\Documents and Settings\doma\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\RegistryBooster.job => C:\Program Files\Uniblue\RegistryBooster\rbmonitor.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Documents and Settings\All Users\Data aplikací\TEMP:63238B95
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Documents and Settings\doma\Plocha" je 5186 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AlcoholAutomount
"C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" /automount [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Driver Updater
"C:\Program Files\Carambis\Driver Updater\dupdater.exe" /minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Facebook Update
"C:\Documents and Settings\doma\Local Settings\Data aplikac\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Documents and Settings\doma\Local Settings\Data aplikac\Google\Update\GoogleUpdate.exe" /c [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IndxStoreSvr_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}
"C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe" ASO-616B5711-6DAE-4795-A05F-39A1E5104020 [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS
"C:\Program Files\Messenger\msmsgs.exe" /background [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBKeyScan
"C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck
C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task
"C:\Program Files\QuickTime\QTTask.exe" -atboottime [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl11
C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
"C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent
"C:\Program Files\Winamp\winampa.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^doma^Nabdka Start^Programy^Po sputn^Facebook Messenger.lnk
C:\DOCUME~1\doma\LOCALS~1\DATAAP~1\Facebook\MESSEN~1\214814~1.0\FACEBO~1.EXE
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\ICQ7.1\\ICQ.exe"="C:\\Program Files\\ICQ7.1\\ICQ.exe:*:Enabled:ICQ7.1"
"C:\\Program Files\\ICQ7.1\\aolload.exe"="C:\\Program Files\\ICQ7.1\\aolload.exe:*:Enabled:aolload.exe"
"C:\\Program Files\\ICQ7.2\\ICQ.exe"="C:\\Program Files\\ICQ7.2\\ICQ.exe:*:Enabled:ICQ7.2"
"C:\\Program Files\\ICQ7.2\\aolload.exe"="C:\\Program Files\\ICQ7.2\\aolload.exe:*:Enabled:aolload.exe"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe:*:Enabled:CyberLink PowerDVD 11.0"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe:*:Enabled:CyberLink PowerDVD 11.0 RC Service"
"C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe:*:Enabled:CyberLink Media Server"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Kerio\\Personal Firewall 4\\kpf4gui.exe"="C:\\Program Files\\Kerio\\Personal Firewall 4\\kpf4gui.exe:*:Enabled:Kerio Personal Firewall 4 - GUI"
"C:\\WINDOWS\\system32\\PnkBstrA.exe"="C:\\WINDOWS\\system32\\PnkBstrA.exe:*:Enabled:PnkBstrA"
"C:\\WINDOWS\\system32\\PnkBstrB.exe"="C:\\WINDOWS\\system32\\PnkBstrB.exe:*:Enabled:PnkBstrB"
"C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe"="C:\\Program Files\\Skype\\Plugin Manager\\skypePM.exe:*:Enabled:Skype Extras Manager"
"C:\\Program Files\\ICQ7.2\\ICQ.exe"="C:\\Program Files\\ICQ7.2\\ICQ.exe:*:Enabled:ICQ7.2"
"C:\\Program Files\\ICQ7.2\\aolload.exe"="C:\\Program Files\\ICQ7.2\\aolload.exe:*:Enabled:aolload.exe"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\RM.exe:*:Enabled:Render Manager"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\Studio.exe:*:Enabled:Studio"
"C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe"="C:\\Program Files\\Pinnacle\\Studio 12\\Programs\\umi.exe:*:Enabled:umi"
"C:\\Program Files\\QIP\\qip.exe"="C:\\Program Files\\QIP\\qip.exe:*:Enabled:Quiet Internet Pager"
"C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe"="C:\\Program Files\\Google\\Google Earth\\client\\googleearth.exe:*:Enabled:Google Earth"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PowerDVD11.exe:*:Enabled:CyberLink PowerDVD 11.0"
"C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\PDVD11Serv.exe:*:Enabled:CyberLink PowerDVD 11.0 RC Service"
"C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe"="C:\\Program Files\\CyberLink\\PowerDVD11\\Common\\MediaServer\\CLMSServerForPDVD11.exe:*:Enabled:CyberLink Media Server"
"C:\\Programme\\iTNC530\\340494\\sys\\bin\\geo.EXE"="C:\\Programme\\iTNC530\\340494\\sys\\bin\\geo.EXE:*:Enabled:geo"
"C:\\Documents and Settings\\doma\\Local Settings\\Data aplikac\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"="C:\\Documents and Settings\\doma\\Local Settings\\Data aplikac\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe:*:Enabled:Facebook Video Calling Plugin"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe"="C:\\Program Files\\Common Files\\Apple\\Apple Application Support\\WebKit2WebProcess.exe:*:Enabled:WebKit"
"C:\\totalcmd\\TOTALCMD.EXE"="C:\\totalcmd\\TOTALCMD.EXE:*:Enabled:Total Commander 32 bit international version, file manager replacement for Windows"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008"
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
==================== End Of Log ==============================
..po restartu jsem chtěl spustit chrome a pocitac zatuhl (sla jenom mys) ,,nesel spustit ani spravce uloh ..->tvrdy restart,...stale na chvilku zamrza( prave tlacitko na plose = 10 sekund nez vyjede nabidka),,celkove se mi nezda ze by se zrychlil.
...vkladam log z RSIT: