kontrola logu

[zog0011]

Dobrý den, posílám zde svůj log na kontrolu, mám pocit, že se mi v poslední době začal počítač nezvykle sekat. děkuji za kontrolu



Logfile of random's system information tool 1.09 (written by random/random)
Run by Standa at 2013-12-25 20:14:37
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 175 GB (76%) free of 228 GB
Total RAM: 1976 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:15:46, on 25.12.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Norton 360\Engine\4.4.0.12\ccSvcHst.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Webteh\BSplayer\bsplayer.exe
C:\Users\Standa\Desktop\RSIT.exe
C:\Program Files\trend micro\Standa.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.qip.ru/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.qip.ru
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.delta-search.com/?affID=1192 ... 22FA4C477F
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.qip.ru/ie
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.4.0.12\coIEPlg.dll
O2 - BHO: SMART Notebook Download Plugin - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.4.0.12\IPSBHO.DLL
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll
O3 - Toolbar: BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_P.dll
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.4.0.12\coIEPlg.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Standa\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\Windows\system32\Hpservice.exe
O23 - Service: Norton 360 (N360) - Symantec Corporation - C:\Program Files\Norton 360\Engine\4.4.0.12\ccSvcHst.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: WebCake Desktop Updater - WebCake LLC - C:\Program Files\WebCake\WebCakeDesktop.Updater.exe

--
End of file - 7837 bytes

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{602ADB0E-4AFF-4217-8AA1-95DAC4DFA408}]
Symantec NCO BHO - C:\Program Files\Norton 360\Engine\4.4.0.12\coIEPlg.dll [2011-07-13 419768]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{67BCF957-85FC-4036-8DC4-D4D80E00A77B}]
CIEDownload Object - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll [2008-07-31 558376]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6D53EC84-6AAE-4787-AEEE-F4628F01010C}]
Symantec Intrusion Prevention - C:\Program Files\Norton 360\Engine\4.4.0.12\IPSBHO.DLL [2010-02-04 79224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-03-02 461216]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-03-02 170912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}]
BS Player Toolbar - C:\Program Files\BS_Player\tbBS_P.dll [2010-11-29 3908192]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - BS Player Toolbar - C:\Program Files\BS_Player\tbBS_P.dll [2010-11-29 3908192]
{30F9B915-B755-4826-820B-08FBA6BD249D} - Conduit Engine - C:\Program Files\ConduitEngine\ConduitEngine.dll [2010-11-29 3908192]
{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Norton Toolbar - C:\Program Files\Norton 360\Engine\4.4.0.12\coIEPlg.dll [2011-07-13 419768]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-11-11 287800]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2012-07-03 252848]
"seznam-listicka-distribuce"=C:\Program Files\Seznam.cz\distribution\szninstall.exe [2013-03-21 1061960]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\Standa\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145
"NofolderOptions"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"msacm.siren"=sirenacm.dll
"vidc.tscc"=tsccvid.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-12-25 20:14:44 ----D---- C:\Program Files\trend micro
2013-12-25 20:14:37 ----D---- C:\rsit
2013-12-21 14:42:13 ----D---- C:\Program Files\WebexpEnhancedV1
2013-12-15 21:31:30 ----A---- C:\Windows\system32\ie4uinit.exe
2013-12-15 21:31:29 ----A---- C:\Windows\system32\jsproxy.dll
2013-12-15 21:31:28 ----A---- C:\Windows\system32\ieui.dll
2013-12-15 21:31:28 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 21:31:28 ----A---- C:\Windows\system32\ieapfltr.dll
2013-12-15 21:31:27 ----A---- C:\Windows\system32\jscript9diag.dll
2013-12-15 21:31:27 ----A---- C:\Windows\system32\iesetup.dll
2013-12-15 21:31:27 ----A---- C:\Windows\system32\iernonce.dll
2013-12-15 21:31:26 ----A---- C:\Windows\system32\ieUnatt.exe
2013-12-15 21:31:26 ----A---- C:\Windows\system32\ieetwproxystub.dll
2013-12-15 21:31:26 ----A---- C:\Windows\system32\ieetwcollector.exe
2013-12-15 21:31:25 ----A---- C:\Windows\system32\wininet.dll
2013-12-15 21:31:24 ----A---- C:\Windows\system32\urlmon.dll
2013-12-15 21:31:24 ----A---- C:\Windows\system32\iertutil.dll
2013-12-15 21:31:23 ----A---- C:\Windows\system32\ieframe.dll
2013-12-15 21:31:22 ----A---- C:\Windows\system32\mshtml.dll
2013-12-15 21:31:22 ----A---- C:\Windows\system32\jscript9.dll
2013-12-13 22:06:49 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-13 22:06:49 ----A---- C:\Windows\system32\elshyph.dll
2013-12-13 22:06:48 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 22:06:48 ----A---- C:\Windows\system32\msrating.dll
2013-12-13 22:06:48 ----A---- C:\Windows\system32\msls31.dll
2013-12-13 22:06:48 ----A---- C:\Windows\system32\jsIntl.dll
2013-12-13 22:06:48 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\wextract.exe
2013-12-13 22:06:47 ----A---- C:\Windows\system32\webcheck.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\vbscript.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\url.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\mshtmlmedia.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\mshtmled.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\msfeeds.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\licmgr10.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\inseng.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\iexpress.exe
2013-12-13 22:06:47 ----A---- C:\Windows\system32\iedkcs32.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\ieapfltr.dat
2013-12-13 22:06:47 ----A---- C:\Windows\system32\icardie.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\dxtrans.dll
2013-12-13 22:06:47 ----A---- C:\Windows\system32\dxtmsft.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\pngfilt.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\occache.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\MshtmlDac.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\mshta.exe
2013-12-13 22:06:46 ----A---- C:\Windows\system32\msfeedssync.exe
2013-12-13 22:06:46 ----A---- C:\Windows\system32\msfeedsbs.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\jscript.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\imgutil.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\iepeers.dll
2013-12-13 22:06:46 ----A---- C:\Windows\system32\IEAdvpack.dll
2013-12-13 22:06:45 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 22:06:45 ----A---- C:\Windows\system32\mshtmler.dll
2013-12-13 22:06:45 ----A---- C:\Windows\system32\iesysprep.dll
2013-12-13 09:53:16 ----A---- C:\Windows\system32\wmp.dll
2013-12-13 09:53:15 ----A---- C:\Windows\system32\wmploc.DLL
2013-12-12 22:24:35 ----A---- C:\Windows\system32\msieftp.dll
2013-12-12 22:24:34 ----A---- C:\Windows\system32\imagehlp.dll
2013-12-12 22:24:33 ----A---- C:\Windows\system32\wscript.exe
2013-12-12 22:24:33 ----A---- C:\Windows\system32\scrrun.dll
2013-12-12 22:24:33 ----A---- C:\Windows\system32\cscript.exe
2013-12-12 22:24:32 ----A---- C:\Windows\system32\WMPhoto.dll
2013-12-12 22:24:31 ----A---- C:\Windows\system32\tzres.dll
2013-12-12 22:24:25 ----A---- C:\Windows\system32\win32k.sys
2013-12-12 22:24:24 ----A---- C:\Windows\system32\drivers\portcls.sys
2013-12-12 22:24:24 ----A---- C:\Windows\system32\drivers\drmk.sys
2013-12-09 21:01:36 ----A---- C:\extensions.ini
2013-11-26 10:13:09 ----D---- C:\Program Files\Better-Surf

======List of files/folders modified in the last 1 month======

2013-12-25 20:15:44 ----D---- C:\Windows\Temp
2013-12-25 20:14:44 ----RD---- C:\Program Files
2013-12-25 20:13:18 ----D---- C:\Windows
2013-12-25 19:25:35 ----SHD---- C:\Windows\Installer
2013-12-25 19:24:35 ----SHD---- C:\System Volume Information
2013-12-25 19:20:44 ----D---- C:\Windows\system32\Tasks
2013-12-25 19:20:36 ----D---- C:\Windows\Tasks
2013-12-25 19:19:43 ----D---- C:\Users\Standa\AppData\Roaming\Seznam.cz
2013-12-25 19:19:17 ----D---- C:\Program Files\QIP
2013-12-25 19:18:42 ----D---- C:\Windows\system32\appmgmt
2013-12-25 19:13:57 ----D---- C:\Program Files\GoforFiles
2013-12-25 19:13:19 ----D---- C:\Windows\Prefetch
2013-12-25 19:12:56 ----D---- C:\Program Files\BetterSurf
2013-12-25 19:11:56 ----D---- C:\Users\Standa\AppData\Roaming\uTorrent
2013-12-25 19:09:21 ----D---- C:\Windows\system32\LogFiles
2013-12-25 19:09:21 ----D---- C:\Windows\debug
2013-12-25 10:37:44 ----D---- C:\Windows\system32\config
2013-12-23 22:03:00 ----D---- C:\Users\Standa\AppData\Roaming\Skype
2013-12-21 14:42:51 ----D---- C:\Windows\System32
2013-12-21 14:42:51 ----D---- C:\Windows\inf
2013-12-21 14:42:51 ----A---- C:\Windows\system32\PerfStringBackup.INI
2013-12-16 07:21:36 ----D---- C:\Windows\winsxs
2013-12-16 07:20:42 ----D---- C:\Program Files\Internet Explorer
2013-12-15 21:31:47 ----D---- C:\Windows\system32\catroot2
2013-12-15 21:31:45 ----D---- C:\Windows\system32\catroot
2013-12-15 19:48:11 ----D---- C:\Program Files\Opera
2013-12-14 09:34:53 ----D---- C:\Windows\rescache
2013-12-14 08:45:07 ----D---- C:\Windows\system32\cs-CZ
2013-12-14 08:45:06 ----D---- C:\Windows\system32\migration
2013-12-14 08:45:06 ----D---- C:\Windows\system32\en-US
2013-12-14 08:45:06 ----D---- C:\Windows\PolicyDefinitions
2013-12-13 22:09:44 ----D---- C:\Windows\Logs
2013-12-13 11:38:41 ----D---- C:\Windows\system32\MRT
2013-12-13 11:21:09 ----D---- C:\Program Files\Windows Media Player
2013-12-13 11:21:07 ----D---- C:\Windows\system32\DriverStore
2013-12-13 11:21:06 ----D---- C:\Windows\system32\drivers
2013-12-13 10:02:38 ----D---- C:\ProgramData\Microsoft Help
2013-12-13 09:56:23 ----HD---- C:\ProgramData
2013-12-13 09:53:46 ----A---- C:\Windows\system32\MRT.exe
2013-11-27 08:44:19 ----D---- C:\Windows\system32\drivers\N360

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 nhcDriverDevice;Notebook Hardware Control Driver; C:\Windows\system32\drivers\nhcDriver.sys [2012-06-19 71680]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\N360\0404000.00C\SYMDS.SYS [2010-02-04 328752]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\N360\0404000.00C\SYMEFA.SYS [2011-08-22 173176]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 BHDrvx86;BHDrvx86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [2013-12-03 1098968]
R1 ccHP;Symantec Hash Provider; C:\Windows\system32\drivers\N360\0404000.00C\ccHPx86.sys [2011-08-04 485512]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [2013-11-21 376920]
R1 IDSVix86;IDSVix86; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\IPSDefs\20131224.001\IDSvix86.sys [2013-12-12 394456]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL); C:\Windows\system32\drivers\N360\0404000.00C\SRTSPX.SYS [2010-04-22 43696]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\N360\0404000.00C\Ironx86.SYS [2010-04-29 116784]
R1 SYMTDIv;Symantec Vista Network Dispatch Driver; C:\Windows\System32\Drivers\N360\0404000.00C\SYMTDIV.SYS [2011-08-22 340088]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\Windows\system32\DRIVERS\AGRSM.sys [2009-07-13 1035776]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 EraserUtilRebootDrv;EraserUtilRebootDrv; \??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [2013-11-21 108120]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2009-05-18 26600]
R3 HBtnKey;HP Hotkey Device; C:\Windows\system32\DRIVERS\cpqbttn.sys [2010-02-25 15544]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\Windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
R3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20131224.025\NAVENG.SYS [2013-11-19 93272]
R3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20131224.025\NAVEX15.SYS [2013-11-19 1612376]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\Windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SRTSP;Symantec Real Time Storage Protection; C:\Windows\System32\Drivers\N360\0404000.00C\SRTSP.SYS [2010-04-22 325680]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT.SYS [2013-11-19 124976]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 adfs;adfs; C:\Windows\system32\drivers\adfs.sys []
S2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 Andbus;LGE Android Platform Composite USB Device; C:\Windows\system32\DRIVERS\lgandbus.sys []
S3 AndDiag;LGE Android Platform USB Serial Port; C:\Windows\system32\DRIVERS\lganddiag.sys []
S3 AndGps;LGE Android Platform USB GPS NMEA Port; C:\Windows\system32\DRIVERS\lgandgps.sys []
S3 ANDModem;LGE Android Platform USB Modem; C:\Windows\system32\DRIVERS\lgandmodem.sys []
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-09-12 49664]
S3 LgBttPort;LGE Bluetooth TransPort; C:\Windows\system32\DRIVERS\lgbtport.sys []
S3 lgbusenum;LG Bluetooth Bus Enumerator; C:\Windows\system32\DRIVERS\lgbtbus.sys []
S3 LGVMODEM;LGE Virtual Modem; C:\Windows\system32\DRIVERS\lgvmodem.sys []
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series – ovladač adaptéru pro 32bitový systém Windows Vista; C:\Windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 36352]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 35968]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-04-04 63928]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 26168]
R2 N360;Norton 360; C:\Program Files\Norton 360\Engine\4.4.0.12\ccSvcHst.exe [2011-08-04 126400]
R2 WebCake Desktop Updater;WebCake Desktop Updater; C:\Program Files\WebCake\WebCakeDesktop.Updater.exe [2013-05-31 23552]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2012-07-17 1713904]
R3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2010-01-12 227896]
R3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-02-07 161384]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2012-09-12 1512448]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2013-11-26 108032]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2011-11-01 1343400]

-----------------EOF-----------------

[vyosek]

Zdravim a pekny vecer preji

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

[zog0011]

Zde posílám log z Junkware Removal Tool, a log z AdwCleaner pošlu za chvilku


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.8 (11.05.2013:1)
OS: Windows 7 Professional x86
Ran by Standa on st 25.12.2013 at 20:35:36,12
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{30F9B915-B755-4826-820B-08FBA6BD249D}
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-1956992170-240997563-3636375736-1001\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\AboutURLs\\Tabs
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Bar
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Search Page
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Search\\SearchAssistant



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.api
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.api.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.layers
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\webcakeieclient.layers.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{7169BBB3-3289-4696-B35D-4A88BCF6FB12}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\webcakeieclient.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{BB975E58-E769-4E5A-BA12-B765BC559FF3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{F511AFDB-726E-4458-90E7-1ECB97406544}
Failed to delete: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{0AFD55C8-ADF8-4A33-A6E1-DEDB7A36AEB4}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{DF84E609-C3A4-49CB-A160-61767DAF8899}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{EFDF368C-8DD9-4E05-87CD-16AA5CB03CB8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babsolution
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\babylontoolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitengine
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\toolbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-1956992170-240997563-3636375736-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\conduitengine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\tarma installer
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\conduit.engine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\webcakedesktop_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\conduitengine
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{c4ed781c-7394-4906-aaff-d6ab64ff7c38}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Toolbar.CT1750559
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskPIP_FF__RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskPIP_FF__RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{D6BBF20A-DF99-4341-96D1-7012B1D13E81}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"
Successfully deleted: [Registry Key] "hkey_current_user\software\pip"



~~~ Files

Successfully deleted: [File] C:\Windows\System32\Tasks\browserprotect
Successfully deleted: [File] C:\Windows\System32\Tasks\goforfilesupdate
Successfully deleted: [File] "C:\Users\Standa\appdata\local\google\chrome\user data\default\bprotector web data"
Successfully deleted: [File] "C:\Users\Standa\appdata\local\google\chrome\user data\default\bprotectorpreferences"



~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\tarma installer"
Successfully deleted: [Folder] "C:\Users\Standa\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Standa\AppData\Roaming\goforfiles"
Successfully deleted: [Folder] "C:\Users\Standa\AppData\Roaming\webcake"
Successfully deleted: [Folder] "C:\Users\Standa\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\Standa\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Standa\appdata\locallow\conduitengine"
Successfully deleted: [Folder] "C:\Program Files\conduit"
Successfully deleted: [Folder] "C:\Program Files\conduitengine"
Successfully deleted: [Folder] "C:\Program Files\goforfiles"
Successfully deleted: [Folder] "C:\Program Files\webcake"
Successfully deleted: [Folder] "C:\Users\Standa\AppData\Roaming\microsoft\windows\start menu\programs\browserprotect"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on st 25.12.2013 at 20:39:37,45

[zog0011]

# AdwCleaner v3.016 - Report created 25/12/2013 at 20:43:48
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Standa - STANDA-PC
# Running from : C:\Users\Standa\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : WebCake Desktop Updater

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\BetterSurf
Folder Deleted : C:\Program Files\Better-Surf
Folder Deleted : C:\Program Files\BS_Player
Folder Deleted : C:\Users\Standa\AppData\LocalLow\BS_Player

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dedmngkbaffkenlfdcbganndoghblmap
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fjoijdanhaiflhibkljeklcghcmmfffh
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B1302AFC-7F02-4994-AC80-B52DB6E44455}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B1302AFC-7F02-4994-AC80-B52DB6E44455}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C32E1D61-3E9C-43EA-B50E-8A431FAACE62}
[#] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C32E1D61-3E9C-43EA-B50E-8A431FAACE62}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\GoforFiles_RASMANCS
Key Deleted : HKLM\SOFTWARE\BS_Player
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BS_Player Toolbar
Key Deleted : HKCU\Software\908addb23eba43
Key Deleted : HKLM\SOFTWARE\908addb23eba43
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{A2773ED4-83BD-488A-A186-73590706C916}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AFA38D9C-6AE3-4A69-80CE-465331953A2A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D346D67D-7984-4892-9DD3-8DF78E7AF62A}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{462862BE-9A5C-49A5-9CBD-A649EAC63645}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{0113A098-06EA-4776-A011-D75590778F1E}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{BEAA0C04-ED15-4C17-800B-28716025A4E4}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AFA38D9C-6AE3-4A69-80CE-465331953A2A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{AF6B0594-6008-4327-93E5-608AD710A6FA}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D346D67D-7984-4892-9DD3-8DF78E7AF62A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BB611970-26FE-4F6F-B063-94883D62816B}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]
Key Deleted : HKCU\Software\GoforFiles
Key Deleted : HKCU\Software\AppDataLow\Software\BS_Player
Key Deleted : HKLM\Software\GoforFiles
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428
A zde AdwCleaner:


Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]

-\\ Google Chrome v

[ File : C:\Users\Standa\AppData\Local\Google\Chrome\User Data\Default\preferences ]


*************************

AdwCleaner[R0].txt - [5278 octets] - [25/12/2013 20:41:40]
AdwCleaner[S0].txt - [5215 octets] - [25/12/2013 20:43:48]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [5275 octets] ##########

[vyosek]

Poprosim o log dle tohoto navodu http://forum.viry.cz/viewtopic.php?f=13&t=133100

[zog0011]

zde přikládám logy ( addition v příloze)

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-12-2013
Ran by Standa (administrator) on STANDA-PC on 25-12-2013 20:57:18
Running from C:\Users\Standa\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Symantec Corporation) C:\Program Files\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Symantec Corporation) C:\Program Files\Norton 360\Engine\4.4.0.12\ccsvchst.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jusched.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
() C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Opera Software) C:\Program Files\Opera\opera.exe
(Sun Microsystems, Inc.) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe [287800 2009-11-11] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [seznam-listicka-distribuce] - C:\Program Files\Seznam.cz\distribution\szninstall.exe [1061960 2013-03-21] ()
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Standa\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKCU\...\Policies\Explorer: [NofolderOptions] 0

==================== Internet (Whitelisted) ====================

URLSearchHook: HKCU - Default Value = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0E963A8A-4E3F-4246-81D3-40A8E3463BAE} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_16194
SearchScopes: HKCU - {1AB1E520-29A4-46D7-9C57-C6D2971DB422} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_16194
SearchScopes: HKCU - {1DD92D69-9B1E-4C73-BF46-F38C0F25B99B} URL = http://www.mapy.cz/?query={searchTerms} ... arch_16194
SearchScopes: HKCU - {5747ECE4-E5AD-4B7C-A5E0-A7060D1095D4} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_16194
SearchScopes: HKCU - {9A83C71C-D9E2-4C7A-8227-7B50C5C64558} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_16194
SearchScopes: HKCU - {A488383A-737B-462B-8E31-350C68BCB7E3} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_16194
SearchScopes: HKCU - {F2BB7614-E1FC-41E4-97A7-5A98483183A5} URL = http://www.novinky.cz/hledej?w={searchT ... arch_16194
SearchScopes: HKCU - {FB821F74-430B-4E43-AA12-58BD7F316F4F} URL = http://encyklopedie.seznam.cz/search?q= ... arch_16194
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton 360\Engine\4.4.0.12\coieplg.dll (Symantec Corporation)
BHO: CIEDownload Object - {67BCF957-85FC-4036-8DC4-D4D80E00A77B} - C:\Program Files\SMART Technologies\Notebook Software\NotebookPlugin.dll (SMART Technologies ULC.)
BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton 360\Engine\4.4.0.12\ipsbho.dll (Symantec Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton 360\Engine\4.4.0.12\coieplg.dll (Symantec Corporation)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.254 192.168.1.1

Chrome:
=======
CHR HomePage:
CHR Extension: (RealPlayer HTML5Video Downloader Extension) - C:\Users\Standa\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0
CHR HKLM\...\Chrome\Extension: [epedbpnfkcomedlfhacolbaidhlccfng] - C:\Program Files\WebexpEnhancedV1\WebexpEnhancedV1alpha747\ch\WebexpEnhancedV1alpha747.crx

========================== Services (Whitelisted) =================

R2 N360; C:\Program Files\Norton 360\Engine\4.4.0.12\diMaster.dll [135032 2010-04-30] (Symantec Corporation)

==================== Drivers (Whitelisted) ====================

R1 BHDrvx86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\BASHDefs\20131203.001\BHDrvx86.sys [1098968 2013-12-03] (Symantec Corporation)
R1 ccHP; C:\Windows\system32\drivers\N360\0404000.00C\ccHPx86.sys [485512 2011-08-04] (Symantec Corporation)
R1 eeCtrl; C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys [376920 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [108120 2013-11-21] (Symantec Corporation)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] ()
R1 IDSVix86; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\IPSDefs\20131224.001\IDSvix86.sys [394456 2013-12-12] (Symantec Corporation)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20131224.025\NAVENG.SYS [93272 2013-11-19] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\N360_4.1.0.32\Definitions\VirusDefs\20131224.025\NAVEX15.SYS [1612376 2013-11-19] (Symantec Corporation)
R0 nhcDriverDevice; C:\Windows\System32\drivers\nhcDriver.sys [71680 2012-06-19] (Notebook Hardware Control)
R3 SRTSP; C:\Windows\System32\Drivers\N360\0404000.00C\SRTSP.SYS [325680 2010-04-22] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\N360\0404000.00C\SRTSPX.SYS [43696 2010-04-22] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\N360\0404000.00C\SYMDS.SYS [328752 2010-02-04] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\N360\0404000.00C\SYMEFA.SYS [173176 2011-08-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT.SYS [124976 2013-11-19] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\N360\0404000.00C\Ironx86.SYS [116784 2010-04-29] (Symantec Corporation)
R1 SYMTDIv; C:\Windows\System32\Drivers\N360\0404000.00C\SYMTDIV.SYS [340088 2011-08-22] (Symantec Corporation)
S2 adfs; No ImagePath
S3 Andbus; system32\DRIVERS\lgandbus.sys [x]
S3 AndDiag; system32\DRIVERS\lganddiag.sys [x]
S3 AndGps; system32\DRIVERS\lgandgps.sys [x]
S3 ANDModem; system32\DRIVERS\lgandmodem.sys [x]
S3 LgBttPort; system32\DRIVERS\lgbtport.sys [x]
S3 lgbusenum; system32\DRIVERS\lgbtbus.sys [x]
S3 LGVMODEM; system32\DRIVERS\lgvmodem.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-25 20:57 - 2013-12-25 20:57 - 00009021 _____ C:\Users\Standa\Desktop\FRST.txt
2013-12-25 20:57 - 2013-12-25 20:57 - 00000000 ____D C:\FRST
2013-12-25 20:53 - 2013-12-25 20:53 - 00112640 _____ (forum.viry.cz) C:\Users\Standa\Desktop\FRSTLauncher.exe
2013-12-25 20:53 - 2013-12-25 20:53 - 00029696 _____ C:\Users\Standa\AppData\Local\MSGBOX.EXE
2013-12-25 20:53 - 2013-12-25 20:53 - 00015327 _____ C:\Users\Standa\Desktop\LM.bat
2013-12-25 20:52 - 2013-12-25 20:52 - 01061649 _____ (Farbar) C:\Users\Standa\Desktop\FRST.exe
2013-12-25 20:45 - 2013-12-25 20:45 - 00023314 _____ C:\Windows\PFRO.log
2013-12-25 20:41 - 2013-12-25 20:43 - 00000000 ____D C:\AdwCleaner
2013-12-25 20:39 - 2013-12-25 20:39 - 00008682 _____ C:\Users\Standa\Desktop\JRT.txt
2013-12-25 20:37 - 2013-12-25 20:37 - 01233962 _____ C:\Users\Standa\Desktop\adwcleaner.exe
2013-12-25 20:35 - 2013-12-25 20:35 - 00000000 ____D C:\Windows\ERUNT
2013-12-25 20:34 - 2013-12-25 20:34 - 01034531 _____ (Thisisu) C:\Users\Standa\Desktop\JRT.exe
2013-12-25 20:14 - 2013-12-25 20:16 - 00000000 ____D C:\rsit
2013-12-25 20:14 - 2013-12-25 20:15 - 00000000 ____D C:\Program Files\trend micro
2013-12-25 20:14 - 2013-12-25 20:14 - 00781383 _____ C:\Users\Standa\Desktop\RSIT.exe
2013-12-25 20:13 - 2013-12-25 20:45 - 00000056 _____ C:\Windows\setupact.log
2013-12-25 20:13 - 2013-12-25 20:13 - 00000000 _____ C:\Windows\setuperr.log
2013-12-25 19:00 - 2013-12-25 19:08 - 00000000 ____D C:\Users\Standa\Desktop\filmy
2013-12-25 18:59 - 2013-12-25 19:00 - 00000000 ____D C:\Users\Standa\Desktop\gnostici
2013-12-21 14:42 - 2013-12-21 14:42 - 00000000 ____D C:\Program Files\WebexpEnhancedV1
2013-12-15 21:31 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-15 21:31 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-15 21:31 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-15 21:31 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-15 21:31 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-15 21:31 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-15 21:31 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-15 21:31 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-15 21:31 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-15 21:31 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-15 21:31 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-15 21:31 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-15 21:31 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-15 21:31 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-15 21:31 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-15 21:31 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-15 21:31 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-15 21:31 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-15 21:31 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-13 22:06 - 2013-12-13 22:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-13 22:06 - 2013-12-13 22:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-13 22:06 - 2013-12-13 22:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-13 09:53 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-13 09:53 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 22:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 22:24 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 22:24 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 22:24 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 22:24 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 22:24 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 22:24 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 22:24 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 22:24 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 22:24 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 22:24 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 21:01 - 2013-12-21 14:42 - 00000149 _____ C:\extensions.ini
2013-12-02 19:02 - 2013-12-02 19:03 - 04860033 _____ C:\Users\Standa\Documents\Nedotknutelní-CZ-dabing-TOP-(2011).avi

==================== One Month Modified Files and Folders =======

2013-12-25 20:57 - 2013-12-25 20:57 - 00009021 _____ C:\Users\Standa\Desktop\FRST.txt
2013-12-25 20:57 - 2013-12-25 20:57 - 00000000 ____D C:\FRST
2013-12-25 20:53 - 2013-12-25 20:53 - 00112640 _____ (forum.viry.cz) C:\Users\Standa\Desktop\FRSTLauncher.exe
2013-12-25 20:53 - 2013-12-25 20:53 - 00029696 _____ C:\Users\Standa\AppData\Local\MSGBOX.EXE
2013-12-25 20:53 - 2013-12-25 20:53 - 00015327 _____ C:\Users\Standa\Desktop\LM.bat
2013-12-25 20:52 - 2013-12-25 20:52 - 01061649 _____ (Farbar) C:\Users\Standa\Desktop\FRST.exe
2013-12-25 20:52 - 2009-07-14 05:34 - 00014448 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-25 20:52 - 2009-07-14 05:34 - 00014448 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-25 20:50 - 2013-05-14 15:31 - 00000000 ____D C:\Users\Standa\AppData\Roaming\Seznam.cz
2013-12-25 20:49 - 2013-05-23 12:14 - 01104830 _____ C:\Windows\WindowsUpdate.log
2013-12-25 20:49 - 2011-11-01 11:14 - 01478822 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-25 20:45 - 2013-12-25 20:45 - 00023314 _____ C:\Windows\PFRO.log
2013-12-25 20:45 - 2013-12-25 20:13 - 00000056 _____ C:\Windows\setupact.log
2013-12-25 20:45 - 2013-10-02 12:27 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2013-12-25 20:45 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-25 20:43 - 2013-12-25 20:41 - 00000000 ____D C:\AdwCleaner
2013-12-25 20:39 - 2013-12-25 20:39 - 00008682 _____ C:\Users\Standa\Desktop\JRT.txt
2013-12-25 20:37 - 2013-12-25 20:37 - 01233962 _____ C:\Users\Standa\Desktop\adwcleaner.exe
2013-12-25 20:35 - 2013-12-25 20:35 - 00000000 ____D C:\Windows\ERUNT
2013-12-25 20:34 - 2013-12-25 20:34 - 01034531 _____ (Thisisu) C:\Users\Standa\Desktop\JRT.exe
2013-12-25 20:16 - 2013-12-25 20:14 - 00000000 ____D C:\rsit
2013-12-25 20:15 - 2013-12-25 20:14 - 00000000 ____D C:\Program Files\trend micro
2013-12-25 20:14 - 2013-12-25 20:14 - 00781383 _____ C:\Users\Standa\Desktop\RSIT.exe
2013-12-25 20:13 - 2013-12-25 20:13 - 00000000 _____ C:\Windows\setuperr.log
2013-12-25 19:20 - 2012-01-01 16:02 - 00000000 ____D C:\Users\Standa\AppData\Local\CrashDumps
2013-12-25 19:19 - 2011-11-01 20:18 - 00000000 ____D C:\Program Files\QIP
2013-12-25 19:18 - 2012-05-28 17:37 - 00000000 ____D C:\Windows\system32\appmgmt
2013-12-25 19:11 - 2013-05-28 14:01 - 00000000 ____D C:\Users\Standa\AppData\Roaming\uTorrent
2013-12-25 19:09 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-12-25 19:08 - 2013-12-25 19:00 - 00000000 ____D C:\Users\Standa\Desktop\filmy
2013-12-25 19:00 - 2013-12-25 18:59 - 00000000 ____D C:\Users\Standa\Desktop\gnostici
2013-12-25 18:51 - 2012-01-25 17:02 - 00000000 ____D C:\Users\Standa\Desktop\hudba
2013-12-23 22:03 - 2012-01-06 21:16 - 00000000 ____D C:\Users\Standa\AppData\Roaming\Skype
2013-12-21 14:42 - 2013-12-21 14:42 - 00000000 ____D C:\Program Files\WebexpEnhancedV1
2013-12-21 14:42 - 2013-12-09 21:01 - 00000149 _____ C:\extensions.ini
2013-12-16 21:31 - 2011-11-01 11:29 - 00000000 ____D C:\Users\Standa\Desktop\stanislav
2013-12-16 15:26 - 2013-10-10 11:27 - 00000000 ____D C:\Users\Standa\Desktop\vyška
2013-12-15 19:48 - 2011-11-01 19:52 - 00000000 ____D C:\Program Files\Opera
2013-12-14 09:34 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-13 22:06 - 2013-12-13 22:06 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-12-13 22:06 - 2013-12-13 22:06 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-12-13 22:06 - 2013-12-13 22:06 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-12-13 22:06 - 2013-12-13 22:06 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-12-13 22:06 - 2013-12-13 22:06 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-12-13 22:06 - 2013-12-13 22:06 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-12-13 11:38 - 2013-07-19 16:29 - 00000000 ____D C:\Windows\system32\MRT
2013-12-13 11:23 - 2009-07-14 05:33 - 02339400 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-13 10:02 - 2011-11-01 11:22 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-13 09:53 - 2011-11-01 12:42 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-02 19:03 - 2013-12-02 19:02 - 04860033 _____ C:\Users\Standa\Documents\Nedotknutelní-CZ-dabing-TOP-(2011).avi
2013-11-27 08:44 - 2013-11-19 15:08 - 00002322 _____ C:\Users\Public\Desktop\Norton 360.lnk
2013-11-27 08:44 - 2013-11-19 15:07 - 00000000 ____D C:\Windows\system32\Drivers\N360
2013-11-26 11:11 - 2013-12-15 21:31 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-15 21:31 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-15 21:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-15 21:31 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-15 21:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-15 21:31 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-15 21:31 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-15 21:31 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-15 21:31 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-15 21:31 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-15 21:31 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-15 21:31 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-15 21:31 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-15 21:31 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-15 21:31 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-15 21:31 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-15 21:31 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-15 21:31 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-15 21:31 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

Some content of TEMP:
====================
C:\Users\Standa\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-20 10:43

==================== End Of Log ============================

[zog0011]

Dobrý den přeju, nezapoměl jste na mě ?:)

[vyosek]

Nezapomnel, ale taky s dovolenim uzivam vanocnich svatku a rodiny

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
  HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
  HKLM\...\Run: [seznam-listicka-distribuce] - C:\Program Files\Seznam.cz\distribution\szninstall.exe [1061960 2013-03-21] ()
  HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Standa\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKCU\...\Policies\Explorer: [NofolderOptions] 0
  
  URLSearchHook: HKCU - Default Value = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
  SearchScopes: HKLM - DefaultScope value is missing.
  Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
  
  S2 adfs; No ImagePath
  S3 Andbus; system32\DRIVERS\lgandbus.sys [x]
  S3 AndDiag; system32\DRIVERS\lganddiag.sys [x]
  S3 AndGps; system32\DRIVERS\lgandgps.sys [x]
  S3 ANDModem; system32\DRIVERS\lgandmodem.sys [x]
  S3 LgBttPort; system32\DRIVERS\lgbtport.sys [x]
  S3 lgbusenum; system32\DRIVERS\lgbtbus.sys [x]
  S3 LGVMODEM; system32\DRIVERS\lgvmodem.sys [x]
  
  2013-12-25 20:53 - 2013-12-25 20:53 - 00112640 _____ (forum.viry.cz) C:\Users\Standa\Desktop\FRSTLauncher.exe
  2013-12-25 20:53 - 2013-12-25 20:53 - 00029696 _____ C:\Users\Standa\AppData\Local\MSGBOX.EXE
  2013-12-25 20:53 - 2013-12-25 20:53 - 00015327 _____ C:\Users\Standa\Desktop\LM.bat
  C:\Users\Standa\AppData\Local\Temp\Quarantine.exe
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[zog0011]

Hezký den, posílám fixlog a za nedočkavost se omlouvám

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 25-12-2013
Ran by Standa at 2013-12-27 11:10:12 Run:1
Running from C:\Users\Standa\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [252848 2012-07-03] (Sun Microsystems, Inc.)
HKLM\...\Run: [seznam-listicka-distribuce] - C:\Program Files\Seznam.cz\distribution\szninstall.exe [1061960 2013-03-21] ()
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Standa\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Standa\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKCU\...\Policies\Explorer: [NofolderOptions] 0

URLSearchHook: HKCU - Default Value = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
SearchScopes: HKLM - DefaultScope value is missing.
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File

S2 adfs; No ImagePath
S3 Andbus; system32\DRIVERS\lgandbus.sys [x]
S3 AndDiag; system32\DRIVERS\lganddiag.sys [x]
S3 AndGps; system32\DRIVERS\lgandgps.sys [x]
S3 ANDModem; system32\DRIVERS\lgandmodem.sys [x]
S3 LgBttPort; system32\DRIVERS\lgbtport.sys [x]
S3 lgbusenum; system32\DRIVERS\lgbtbus.sys [x]
S3 LGVMODEM; system32\DRIVERS\lgvmodem.sys [x]

2013-12-25 20:53 - 2013-12-25 20:53 - 00112640 _____ (forum.viry.cz) C:\Users\Standa\Desktop\FRSTLauncher.exe
2013-12-25 20:53 - 2013-12-25 20:53 - 00029696 _____ C:\Users\Standa\AppData\Local\MSGBOX.EXE
2013-12-25 20:53 - 2013-12-25 20:53 - 00015327 _____ C:\Users\Standa\Desktop\LM.bat
C:\Users\Standa\AppData\Local\Temp\Quarantine.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NofolderOptions => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\ => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Value deleted successfully.
HKCR\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F} => Key not found.
adfs => Service deleted successfully.
Andbus => Service deleted successfully.
AndDiag => Service deleted successfully.
AndGps => Service deleted successfully.
ANDModem => Service deleted successfully.
LgBttPort => Service deleted successfully.
lgbusenum => Service deleted successfully.
LGVMODEM => Service deleted successfully.
C:\Users\Standa\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Standa\AppData\Local\MSGBOX.EXE => Moved successfully.
C:\Users\Standa\Desktop\LM.bat => Moved successfully.
C:\Users\Standa\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

[vyosek]

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse