VIRY.CZ

Ahoj lidi,
mohl bych poprosit o preventivni kontrolu logu?

Pocitac se chova normalne, jen mi pred chvilkou naskocila webova stranka s hlaskou o policii ceske republiky ze mam zaplatit 2litry apod., uz jsem nekdy videl u kamose a tak ted bych nerad aby se mi tam neco usidlilo. Jinak samozrejme ze chodim na adult stranky, ale jen na verohodny .

Diky, Petr

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 24-11-2013
Ran by Petr Sedlak (administrator) on PETRSEDLAK-HP on 25-11-2013 09:38:29
Running from C:\Users\Petr Sedlak\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_1fb74af29935fce6\stacsv.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Software602 a.s.) C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_1fb74af29935fce6\AEstSrv.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
() C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Software602) C:\Program Files\Software602\Print2PDF\Print2PDF.exe
(Hewlett-Packard Co.) C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe
(Dropbox, Inc.) C:\Users\Petr Sedlak\AppData\Roaming\Dropbox\bin\Dropbox.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
() C:\Program Files\Launchy\Launchy.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe [287800 2009-11-12] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2010-04-05] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2009-11-20] (Hewlett-Packard)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2009-11-18] (IDT, Inc.)
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nView\nwiz.exe [1753192 2010-11-04] ()
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [948440 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Print2PDF Print Monitor] - C:\Program Files\Software602\Print2PDF\Print2PDF.exe [222776 2011-04-12] (Software602)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2013-11-05] (Hewlett-Packard)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKCU\...\Run: [HP Photosmart 5510 series (NET)] - C:\Program Files\HP\HP Photosmart 5510 series\Bin\ScanToPCActivationApp.exe [1804648 2011-09-16] (Hewlett-Packard Co.)
HKCU\...\Run: [Google Update] - C:\Users\Petr Sedlak\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-08-21] (Google Inc.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\Petr Sedlak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Petr Sedlak\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Petr Sedlak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Launchy.lnk
ShortcutTarget: Launchy.lnk -> C:\Program Files\Launchy\Launchy.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default
FF user.js: detected! => C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\user.js
FF Homepage: www.google.com
FF NetworkProxy: "http", "201.242.327.176"
FF NetworkProxy: "http_port", 8080
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin: @java.com/DTPlugin,version=10.7.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.9.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Petr Sedlak\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Petr Sedlak\AppData\Local\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Petr Sedlak\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Default Manager - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\DefaultManager@Microsoft
FF Extension: Fast Dial - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\fastdial@telega.phpnet.us
FF Extension: stefanvandamme - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\stefanvandamme@stefanvd.net.xpi
FF Extension: aios - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\{097d3191-e6fa-4728-9826-b533d755359d}.xpi
FF Extension: No Name - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\{c0c588b6-b11d-4898-af00-079fed05aa32}.xpi
FF Extension: fasterfox - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\{c36177c0-224a-11da-8cd6-0800200c9a91}.xpi
FF Extension: Adblock Plus - C:\Users\Petr Sedlak\AppData\Roaming\Mozilla\Firefox\Profiles\ypo79j6x.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\

========================== Services (Whitelisted) =================

R2 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-08-03] (LSI Corporation)
R2 AMPPALR3; C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe [948736 2011-08-31] (Intel Corporation)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 BTHSSecurityMgr; C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe [102672 2011-06-03] (Intel(R) Corporation)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [300808 2010-01-22] (DigitalPersona, Inc.)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2012-02-03] (Flexera Software, Inc.)
R2 HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [102968 2009-11-20] (Hewlett-Packard)
R2 HP ProtectTools Service; c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2010-01-12] (Hewlett-Packard Development Company, L.P)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [102968 2009-11-20] (Hewlett-Packard)
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe [90112 2010-06-14] (Hewlett-Packard Company)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-10-23] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [280288 2013-10-23] (Microsoft Corporation)
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_1fb74af29935fce6\STacSV.exe [229458 2009-11-18] (IDT, Inc.)
S2 vcsFPService; C:\windows\system32\vcsFPService.exe [1664304 2010-02-18] (Validity Sensors, Inc.)

==================== Drivers (Whitelisted) ====================

R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [243712 2011-08-08] (Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [243712 2011-08-08] (Windows (R) Win 7 DDK provider)
S3 Andbus; C:\Windows\System32\DRIVERS\lgandbus.sys [14336 2012-03-02] (LG Electronics Inc.)
S3 AndDiag; C:\Windows\System32\DRIVERS\lganddiag.sys [20736 2012-03-02] (LG Electronics Inc.)
S3 AndGps; C:\Windows\System32\DRIVERS\lgandgps.sys [20096 2012-03-02] (LG Electronics Inc.)
S3 ANDModem; C:\Windows\System32\DRIVERS\lgandmodem.sys [25088 2012-03-02] (LG Electronics Inc.)
S3 androidusb; C:\Windows\System32\Drivers\lgandadb.sys [25728 2012-03-02] (Google Inc)
S3 CMIUSB; C:\Windows\System32\Drivers\MC1001200130012001B\cmiusb.sys [10373 2006-03-02] (Motic China Gruop Co., Ltd.)
R1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [31088 2010-12-16] (Elaborate Bytes AG)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [214696 2013-09-27] (Microsoft Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7517696 2013-11-11] (Intel Corporation)
S2 risdpcie; C:\Windows\system32\DRIVERS\risdpe86.sys [47616 2009-10-29] (REDC)
R3 rismc32; C:\Windows\System32\DRIVERS\rismc32.sys [49152 2009-07-21] (RICOH Company, Ltd.)
S2 rixdpcie; C:\Windows\system32\DRIVERS\rixdpe86.sys [38912 2009-09-28] (REDC)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1765168 2009-09-18] ()
R3 vpcbus; C:\Windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\Windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\Windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\Windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
S3 zghsmdm; C:\Windows\System32\DRIVERS\zghsmdm.sys [106752 2011-01-13] (ZTE Incorporated)
S3 catchme; \??\C:\Users\PETRSE~1\AppData\Local\Temp\catchme.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-11-25 09:38 - 2013-11-25 09:38 - 00016231 _____ C:\Users\Petr Sedlak\Desktop\FRST.txt
2013-11-25 09:38 - 2013-11-25 09:38 - 00000000 ____D C:\FRST
2013-11-25 09:37 - 2013-11-25 09:37 - 01091583 _____ (Farbar) C:\Users\Petr Sedlak\Desktop\FRST.exe
2013-11-25 09:37 - 2013-11-25 09:37 - 00112128 _____ (forum.viry.cz) C:\Users\Petr Sedlak\Desktop\FRSTLauncher.exe
2013-11-25 09:34 - 2013-11-25 09:34 - 00000374 _____ C:\windows\PFRO.log
2013-11-20 08:14 - 2013-11-25 09:34 - 00001294 _____ C:\windows\setupact.log
2013-11-20 08:14 - 2013-11-20 08:14 - 00000000 _____ C:\windows\setuperr.log
2013-11-19 20:58 - 2013-11-20 08:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-13 16:59 - 2013-10-12 08:04 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-11-13 16:59 - 2013-10-12 08:03 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-11-13 16:59 - 2013-10-12 08:03 - 01138176 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 14355968 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 02877952 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 02049024 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-11-13 16:59 - 2013-10-12 08:02 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-11-13 16:59 - 2013-10-12 07:08 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-11-13 16:59 - 2013-10-12 06:15 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-11-13 16:53 - 2013-10-12 03:03 - 00656896 _____ (Microsoft Corporation) C:\windows\system32\nshwfp.dll
2013-11-13 16:53 - 2013-10-12 03:01 - 00679424 _____ (Microsoft Corporation) C:\windows\system32\IKEEXT.DLL
2013-11-13 16:53 - 2013-10-12 03:01 - 00216576 _____ (Microsoft Corporation) C:\windows\system32\FWPUCLNT.DLL
2013-11-13 16:53 - 2013-10-05 20:57 - 01168384 _____ (Microsoft Corporation) C:\windows\system32\crypt32.dll
2013-11-13 16:53 - 2013-10-04 02:58 - 00152576 _____ (Microsoft Corporation) C:\windows\system32\SmartcardCredentialProvider.dll
2013-11-13 16:53 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\windows\system32\authui.dll
2013-11-13 16:53 - 2013-10-04 02:56 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\credui.dll
2013-11-13 16:53 - 2013-10-03 02:58 - 00305152 _____ (Microsoft Corporation) C:\windows\system32\gdi32.dll
2013-11-13 16:53 - 2013-09-25 03:01 - 00136640 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecpkg.sys
2013-11-13 16:53 - 2013-09-25 03:01 - 00067520 _____ (Microsoft Corporation) C:\windows\system32\Drivers\ksecdd.sys
2013-11-13 16:53 - 2013-09-25 02:57 - 00247808 _____ (Microsoft Corporation) C:\windows\system32\schannel.dll
2013-11-13 16:53 - 2013-09-25 02:57 - 00099840 _____ (Microsoft Corporation) C:\windows\system32\sspicli.dll
2013-11-13 16:53 - 2013-09-25 02:57 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\secur32.dll
2013-11-13 16:53 - 2013-09-25 02:56 - 01038848 _____ (Microsoft Corporation) C:\windows\system32\lsasrv.dll
2013-11-13 16:53 - 2013-09-25 02:56 - 00220160 _____ (Microsoft Corporation) C:\windows\system32\ncrypt.dll
2013-11-13 16:53 - 2013-09-25 01:49 - 00022016 _____ (Microsoft Corporation) C:\windows\system32\lsass.exe
2013-11-13 16:53 - 2013-09-25 01:49 - 00015872 _____ (Microsoft Corporation) C:\windows\system32\sspisrv.dll
2013-11-13 16:53 - 2013-07-04 13:16 - 00369848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\cng.sys
2013-11-11 16:43 - 2013-11-11 16:43 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2013-11-11 16:42 - 2013-11-11 16:42 - 07517696 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwNs32.sys
2013-11-11 16:42 - 2013-11-11 16:42 - 02760704 _____ (Intel Corporation) C:\windows\system32\NETwNr32.dll
2013-11-11 16:42 - 2013-11-11 16:42 - 00684032 _____ (Intel Corporation) C:\windows\system32\NETwNc32.dll
2013-10-27 18:15 - 2013-10-27 18:15 - 00000000 ____D C:\Program Files\Convert MOV to AVI

==================== One Month Modified Files and Folders =======

2013-11-25 09:38 - 2013-11-25 09:38 - 00016231 _____ C:\Users\Petr Sedlak\Desktop\FRST.txt
2013-11-25 09:38 - 2013-11-25 09:38 - 00000000 ____D C:\FRST
2013-11-25 09:38 - 2012-11-01 15:01 - 01253316 _____ C:\windows\WindowsUpdate.log
2013-11-25 09:37 - 2013-11-25 09:37 - 01091583 _____ (Farbar) C:\Users\Petr Sedlak\Desktop\FRST.exe
2013-11-25 09:37 - 2013-11-25 09:37 - 00112128 _____ (forum.viry.cz) C:\Users\Petr Sedlak\Desktop\FRSTLauncher.exe
2013-11-25 09:36 - 2011-12-25 19:59 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\Dropbox
2013-11-25 09:35 - 2013-09-01 16:12 - 00000946 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-25 09:35 - 2011-11-08 23:30 - 00000000 ____D C:\ProgramData\HPQLOG
2013-11-25 09:35 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-11-25 09:34 - 2013-11-25 09:34 - 00000374 _____ C:\windows\PFRO.log
2013-11-25 09:34 - 2013-11-20 08:14 - 00001294 _____ C:\windows\setupact.log
2013-11-25 09:33 - 2011-12-23 22:37 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\AIMP3
2013-11-25 09:23 - 2013-09-01 16:12 - 00000950 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-25 09:16 - 2011-11-08 23:21 - 01576554 _____ C:\windows\system32\PerfStringBackup.INI
2013-11-25 09:12 - 2012-04-15 20:48 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-11-25 08:59 - 2013-09-19 09:10 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PDF Scrissors
2013-11-25 08:55 - 2013-08-21 18:55 - 00000986 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1763521863-3665766618-3982771026-1000UA.job
2013-11-25 08:55 - 2013-08-21 18:55 - 00000934 _____ C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1763521863-3665766618-3982771026-1000Core.job
2013-11-25 08:53 - 2009-07-14 05:34 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-25 08:53 - 2009-07-14 05:34 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-25 08:50 - 2012-02-03 18:05 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Local\cache
2013-11-24 17:25 - 2011-12-29 16:10 - 00000344 _____ C:\windows\Tasks\HPCeeScheduleForPetr Sedlak.job
2013-11-20 19:50 - 2012-05-03 16:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-11-20 08:19 - 2011-12-29 16:04 - 00000052 _____ C:\windows\system32\DOErrors.log
2013-11-20 08:16 - 2013-11-19 20:58 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-11-20 08:14 - 2013-11-20 08:14 - 00000000 _____ C:\windows\setuperr.log
2013-11-20 00:01 - 2011-12-27 18:33 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\vlc
2013-11-19 21:48 - 2012-01-07 12:16 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\BitTorrent
2013-11-19 21:27 - 2010-04-25 09:41 - 00000000 ____D C:\windows\Panther
2013-11-19 11:21 - 2011-12-23 21:39 - 00230048 ____N (Microsoft Corporation) C:\windows\system32\MpSigStub.exe
2013-11-14 23:03 - 2012-02-04 19:16 - 00001912 _____ C:\windows\epplauncher.mif
2013-11-14 23:02 - 2012-02-04 19:16 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-14 16:52 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-11-13 17:01 - 2012-04-23 10:08 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-13 16:59 - 2013-07-16 07:50 - 00000000 ____D C:\windows\system32\MRT
2013-11-13 16:57 - 2011-12-26 10:55 - 80340640 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-11-11 16:43 - 2013-11-11 16:43 - 00000000 ____H C:\windows\system32\Drivers\Msft_Kernel_AMPPAL_01009.Wdf
2013-11-11 16:43 - 2011-11-08 23:10 - 00000000 ____D C:\Program Files\Intel
2013-11-11 16:42 - 2013-11-11 16:42 - 07517696 _____ (Intel Corporation) C:\windows\system32\Drivers\NETwNs32.sys
2013-11-11 16:42 - 2013-11-11 16:42 - 02760704 _____ (Intel Corporation) C:\windows\system32\NETwNr32.dll
2013-11-11 16:42 - 2013-11-11 16:42 - 00684032 _____ (Intel Corporation) C:\windows\system32\NETwNc32.dll
2013-11-10 16:54 - 2012-01-07 12:10 - 00000000 _____ C:\windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-10 16:50 - 2011-12-23 21:27 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\Mozilla
2013-11-10 16:41 - 2009-07-14 03:37 - 00000000 ____D C:\windows\system32\NDF
2013-11-04 09:29 - 2011-12-25 19:59 - 00000000 ____D C:\Users\Petr Sedlak\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2013-10-27 18:15 - 2013-10-27 18:15 - 00000000 ____D C:\Program Files\Convert MOV to AVI

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-11-20 20:08

==================== End Of Log ============================

Jinak samozrejme ze chodim na adult stranky, ale jen na verohodny .

ahoj,
prescanuj PC s MBAM - log vypada OK

Jasne, adult jen z osvedcenych a bezpecnych zdroju - prece nebudu rikat ze nic takovyho nedelam, to by mi stejne nikdo neveril .

BTW tady je log z MBAMu.

Malwarebytes Anti-Malware 1.75.0.1300
www.malwarebytes.org

Verze: v2013.11.25.02

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16736
Petr Sedlak :: PETRSEDLAK-HP [administrátor]

27.11.2013 18:40:11
MBAM-log-2013-11-27 (20-31-14).txt

Typ: Kompletní kontrola (C:\|D:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 475295
Uplynulý čas: 1 hodin, 50 minut, 38 sekund

Nalezené procesy v paměti: 1
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe (PUP.Optional.DefaultTab.A) -> 2376 -> Nebyla provedena žádná instrukce.

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 25
HKLM\SYSTEM\CurrentControlSet\Services\DefaultTabUpdate (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCR\DefaultTabBHO.DefaultTabBrowser.1 (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCR\DefaultTabBHO.DefaultTabBrowser (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01} (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
HKCR\AppID\{38495740-0035-4471-851E-F5BBB86AB085} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\CLSID\{A1E28287-1A31-4b0f-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\DefaultTabBHO.DefaultTabBrowserActiveX.1 (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\DefaultTabBHO.DefaultTabBrowserActiveX (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B2D33ED6-EBBD-467C-BF6F-F175D9B51363} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77} (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCR\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} (PUP.Optional.Smart) -> Nebyla provedena žádná instrukce.
HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} (PUP.Optional.Smart) -> Nebyla provedena žádná instrukce.
HKCR\AppID\DefaultTabBHO.DLL (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCU\SOFTWARE\DEFAULT TAB (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKCU\Software\AppDataLow\Software\DefaultTab (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\DEFAULT TAB (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Speedchecker Limited\PC Speed Up (PUP.Optional.PCSpeedUp.A) -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DefaultTab (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.

Nalezené hodnoty v registru: 2
HKCU\SOFTWARE\Default Tab|Version (PUP.Optional.DefaultTab.A) -> Data: 2.2.3.0 -> Nebyla provedena žádná instrukce.
HKLM\SOFTWARE\Default Tab|Version (PUP.Optional.DefaultTab.A) -> Data: 2.2.3.0 -> Nebyla provedena žádná instrukce.

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 7
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI\defaulttab (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI\defaulttab\components (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI\defaulttab\locale (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI\defaulttab\locale\en-US (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.

Nalezené soubory: 21
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3FGPGH48\DefaultTabSetup[1].exe (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\KDUKWUXN\LuckyLeap2[1].exe (PUP.Optional.LuckyLeap.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\LuckyLeap.exe (PUP.Optional.LuckyLeap.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\6iFwN7mI.exe.part (PUP.Optional.Smart) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\DownloadManager.exe (PUP.Optional.Smart) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart.exe (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabStart64.exe (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap.dll (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabWrap64.dll (PUP.Optional.DefaultTab) -> Nebyla provedena žádná instrukce.
C:\$RECYCLE.BIN\S-1-5-21-1763521863-3665766618-3982771026-1000\$RYOWKEZ.exe (PUP.Optional.Smart) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\DefaultTab.xpi (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Local\temp\installdt.tmp\XPI\defaulttab\locale\en-US\defaulttab.properties (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\addon.ico (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.cfg (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabUninstaller.exe (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\DT.ico (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\searchhere.ico (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\uninstalldt.exe (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.
C:\Users\Petr Sedlak\AppData\Roaming\DefaultTab\DefaultTab\update.exe (PUP.Optional.DefaultTab.A) -> Nebyla provedena žádná instrukce.

(konec)


Danke, Petr

kazdy zdravy muz si pozrie nieco mile
najdene nechaj odstranit v MBAM a mame hotovo

Diky moc.

Posilam nejakou tu kacku .

P

vdaka
j++