VIRY.CZ

Včera při instalaci corelu se mi stáhl do PC Microsoft net framework 4 a od té chvíle nejde používat openoffice. Chtěl jsem tedy nainstalovat nový a to také nejde. Chtěl jsem odinstalovat framework a to také hlásí že inicializace aplikace se nezdařila. Navíc přestal fungovat i PDF. Prosím co mohu udělat??
Díky za radu.

zde je log:

Logfile of random's system information tool 1.06 (written by random/random)
Run by Master at 2014-01-15 15:20:32
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 12 GB (32%) free of 38 GB
Total RAM: 1022 MB (59% free)

HijackThis download failed

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job
C:\WINDOWS\tasks\avast! Emergency Update.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
AcroIEHlprObj Class - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll [2004-12-14 63136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{326E768D-4182-46FD-9C16-1449A49795F4}]
DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll [2013-05-06 194912]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2005-06-21 155648]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2005-06-21 126976]
"KeySpy"=C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe [2007-04-07 217088]
"KONICA MINOLTA PagePro 1350WStatusDisplay"=C:\WINDOWS\system32\MSTMON_Q.EXE [2004-11-26 167936]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-12-05 3568312]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate]
C:\Program Files\DivX\DivX Update\DivXUpdate.exe [2013-02-13 1263952]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ]
C:\Program Files\ICQ7.7\ICQ.exe [2012-03-13 127040]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabídka Start^Programy^Po spuštění^Adobe Reader Speed Launch.lnk]
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE [2004-12-14 29696]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxsrvc.dll [2005-06-21 348160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"
"C:\Program Files\VideoLAN\VLC\vlc.exe"="C:\Program Files\VideoLAN\VLC\vlc.exe:*:Enabled:VLC media player"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\ICQ7.7\ICQ.exe"="C:\Program Files\ICQ7.7\ICQ.exe:*:Enabled:ICQ7.7"

======List of files/folders created in the last 1 months======

2014-01-15 15:20:32 ----D---- C:\rsit
2014-01-14 18:24:44 ----D---- C:\Program Files\Microsoft.NET
2014-01-10 16:14:48 ----D---- C:\5a435b1295847f862e7008
2014-01-10 16:11:35 ----D---- C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6

======List of files/folders modified in the last 1 months======

2014-01-15 15:20:35 ----D---- C:\Program Files\trend micro
2014-01-15 15:10:11 ----SHD---- C:\WINDOWS\Installer
2014-01-15 15:09:04 ----D---- C:\WINDOWS\Temp
2014-01-15 15:08:55 ----D---- C:\WINDOWS\Prefetch
2014-01-15 15:07:44 ----RD---- C:\Program Files
2014-01-15 14:59:09 ----A---- C:\WINDOWS\SchedLgU.Txt
2014-01-15 13:11:31 ----RSD---- C:\WINDOWS\assembly
2014-01-15 13:11:31 ----D---- C:\WINDOWS\Microsoft.NET
2014-01-14 18:47:46 ----D---- C:\WINDOWS
2014-01-14 18:46:05 ----D---- C:\WINDOWS\system32
2014-01-14 18:45:26 ----D---- C:\Program Files\Trell
2014-01-14 18:44:18 ----HD---- C:\WINDOWS\inf
2014-01-14 18:44:17 ----D---- C:\WINDOWS\system32\mui
2014-01-14 18:44:15 ----RSHDC---- C:\WINDOWS\system32\dllcache
2014-01-14 18:42:51 ----D---- C:\WINDOWS\system32\CatRoot2
2014-01-14 18:42:27 ----SHD---- C:\Config.Msi
2014-01-14 18:42:26 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-14 18:41:01 ----D---- C:\WINDOWS\system32\cs-cz
2014-01-14 18:36:53 ----D---- C:\WINDOWS\WinSxS
2014-01-14 18:15:39 ----D---- C:\Program Files\Ztrl
2014-01-14 13:02:39 ----SD---- C:\WINDOWS\Tasks
2014-01-14 13:02:29 ----D---- C:\WINDOWS\system32\drivers
2014-01-14 13:02:25 ----A---- C:\WINDOWS\system32\aswBoot.exe
2014-01-07 18:28:27 ----A---- C:\WINDOWS\MSTMON_Q.INI
2013-12-26 07:32:55 ----D---- C:\Program Files\Mozilla Firefox
2013-12-21 16:18:50 ----D---- C:\WINDOWS\Minidump

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 aswKbd;aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [2013-03-07 21576]
R1 aswRdr;aswRdr; \??\C:\WINDOWS\system32\drivers\aswRdr.sys []
R1 aswSnx;aswSnx; \??\C:\WINDOWS\system32\drivers\aswSnx.sys []
R1 aswSP;aswSP; \??\C:\WINDOWS\system32\drivers\aswSP.sys []
R1 aswTdi;aswTdi; \??\C:\WINDOWS\system32\drivers\aswTdi.sys []
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2004-08-18 12032]
R2 aswMonFlt;aswMonFlt; \??\C:\WINDOWS\system32\drivers\aswMonFlt.sys []
R2 MLPTDR_Q;MLPTDR_Q; \??\C:\WINDOWS\system32\MLPTDR_Q.SYS []
R3 aeaudio;aeaudio; C:\WINDOWS\system32\drivers\aeaudio.sys [2002-04-01 4816]
R3 E100B;Intel(R) PRO Adapter Driver; C:\WINDOWS\system32\DRIVERS\e100b325.sys [2003-03-04 145408]
R3 ialm;ialm; C:\WINDOWS\system32\DRIVERS\ialmnt5.sys [2005-06-21 807998]
R3 smwdm;smwdm; C:\WINDOWS\system32\drivers\smwdm.sys [2003-05-27 578304]
R3 usbehci;Ovladač miniportu rozšířeného radiče hostitele Microsoft USB 2.0; C:\WINDOWS\system32\DRIVERS\usbehci.sys [2009-03-18 30336]
R3 usbhub;Rozbočovač umožnující USB2; C:\WINDOWS\system32\DRIVERS\usbhub.sys [2008-04-14 59520]
R3 usbuhci;Ovladač Microsoft univerzálního hostitelského řadiče USB od společnosti Microsoft; C:\WINDOWS\system32\DRIVERS\usbuhci.sys [2008-04-14 20608]
S3 ALSysIO;ALSysIO; \??\C:\DOCUME~1\Master\LOCALS~1\Temp\ALSysIO.sys []
S3 usbprint;Třída USB Printer; C:\WINDOWS\system32\DRIVERS\usbprint.sys [2008-04-13 25856]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2013-07-03 14976]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-14 26368]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2013-12-05 50344]
R2 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre7\bin\jqs.exe [2013-10-08 182696]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 FontCache3.0.0.0;Windows Presentation Foundation Font Cache 3.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe [2008-07-29 46104]
S3 idsvc;Windows CardSpace; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [2008-07-29 881664]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]
S4 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2008-07-25 69632]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-02 136176]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2012-01-02 136176]
S4 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2012-05-19 129976]
S4 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravím!
V prvé řadě zkuste odinstalovat OpenOffice pomocí Total Uninstall: http://www.stahuj.centrum.cz/utility_a_ ... uninstall/ . Pak zkuste instalaci nové verze.

stará verze je odinst. ale nová nejde nainst. hlásí to interní chyba 2503

ještě jsem se pokusil obnovit systém před pokus instalace corelu. Nic. Jednoduchá řešení nefungují.
Co mám udělat?

asi jsem vyřešil problém: avast mi v PC našel malware-gen. Po přesunutí do truhly se zdá být vše OK a instalace se zdařila bez problémů. Teď jen zjistit jestli tam nemam ještě nějakej bordel....co mam udělat?

Zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=13&t=133100 . OO už jde nainstalovat?

je nainstalováno, zatím to vypadá dobře.

log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 15-01-2014 03
Ran by Master (administrator) on X on 16-01-2014 18:37:06
Running from C:\Documents and Settings\Master\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) ===================

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
() C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
(KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.) C:\WINDOWS\system32\MSTMON_Q.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
() C:\Program Files\Trell\Trell_kasa.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [KeySpy] - C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe [217088 2007-04-07] ()
HKLM\...\Run: [KONICA MINOLTA PagePro 1350WStatusDisplay] - C:\WINDOWS\system32\MSTMON_Q.EXE [167936 2004-11-26] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-16] (AVAST Software)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [5624784 2013-07-25] (Safer-Networking Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxsrvc.dll (Intel Corporation)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
HKU\Administrator\...\RunOnce: [TSClientMSIUninstaller] - C:\Windows\Installer\TSClientMsiTrans\tscuinst.vbs [ 2007-10-30] ()
HKU\Administrator\...\RunOnce: [TSClientAXDisabler] - C:\Windows\Installer\TSClientMsiTrans\tscdsbl.bat [ 2008-01-18] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\Master\Data aplikací\Mozilla\Firefox\Profiles\tuiyim33.default
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Plus Web Player Plug-In,version=1.0.0 - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: 7Go Games - C:\Documents and Settings\Master\Data aplikací\Mozilla\Firefox\Profiles\tuiyim33.default\Extensions\7go@7go.com [2013-08-29]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-02]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2013-08-02]

Chrome:
=======
CHR RestoreOnStartup: "hxxp://www.google.cz/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 7.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (DivX VOD Helper Plug-in) - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
CHR Plugin: (DivX Plus Web Player) - C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
CHR Plugin: (Java(TM) Platform SE 7 U25) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave for Director) - C:\WINDOWS\system32\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
CHR Plugin: (Shockwave Flash) - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\WINDOWS\system32\npDeployJava1.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (avast! Online Security) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\9.0.2011.70_0 [2014-01-16]
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.172_0 [2013-08-08]
CHR Extension: (DivX Browser Bar) - C:\Documents and Settings\Master\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho\10.22.5.510_0 [2013-11-19]
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-05]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2013-05-06]
CHR HKLM\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Documents and Settings\Master\Local Settings\Data aplikací\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]
CHR HKCU\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Documents and Settings\Master\Local Settings\Data aplikací\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-16] (AVAST Software)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-16] (Oracle Corporation)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [3921880 2013-10-15] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1042272 2013-09-20] (Safer-Networking Ltd.)
S2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171416 2013-09-13] (Safer-Networking Ltd.)

==================== Drivers (Whitelisted) ====================

R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-03-07] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-01-14] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-01-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-12-05] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2014-01-14] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410528 2014-01-14] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-01-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-14] ()
R2 MLPTDR_Q; C:\WINDOWS\system32\MLPTDR_Q.SYS [18848 2003-07-22] (KONICA MINOLTA BUSINESS TECHNOLOGIES, INC.)
S3 ALSysIO; \??\C:\DOCUME~1\Master\LOCALS~1\Temp\ALSysIO.sys [x]
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-16 18:37 - 2014-01-16 18:37 - 00012822 _____ C:\Documents and Settings\Master\Plocha\FRST.txt
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D C:\FRST
2014-01-16 18:33 - 2014-01-16 18:33 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe
2014-01-16 18:28 - 2014-01-16 18:28 - 01221120 _____ (Farbar) C:\Documents and Settings\Master\Plocha\FRST.exe
2014-01-16 17:28 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\Master\Dokumenty\ProcAlyzer Dumps
2014-01-16 15:41 - 2014-01-16 15:40 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-16 15:40 - 2014-01-16 15:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-01-16 15:28 - 2014-01-16 15:28 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-16 15:27 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2014-01-16 15:27 - 2014-01-16 15:31 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2014-01-16 15:27 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2014-01-16 15:27 - 2014-01-16 15:27 - 00001842 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00001836 _____ C:\Documents and Settings\All Users\Plocha\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2014-01-16 15:11 - 2014-01-16 15:11 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\OpenOffice
2014-01-16 15:10 - 2014-01-16 15:11 - 00000000 ___SD C:\Documents and Settings\All Users\Nabídka Start\Programy\OpenOffice 4.0.1
2014-01-16 15:10 - 2014-01-16 15:10 - 00000865 _____ C:\Documents and Settings\All Users\Plocha\OpenOffice 4.0.1.lnk
2014-01-16 15:08 - 2014-01-16 15:09 - 00000000 ____D C:\Program Files\OpenOffice 4
2014-01-16 11:13 - 2014-01-16 11:14 - 00000000 ____D C:\Documents and Settings\Master\Plocha\OpenOffice 4.0.1 (cs) Installation Files
2014-01-16 11:06 - 2014-01-16 11:06 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2014-01-16 09:39 - 2014-01-16 09:39 - 00000000 ____D C:\a94da79eae96276da083
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\PosteRazor
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\CasaPortale.de
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\PosteRazor
2014-01-16 09:23 - 2014-01-16 09:23 - 00004670 _____ C:\Documents and Settings\Master\Dokumenty\cc_20140116_092349.reg
2014-01-16 08:30 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-16 08:30 - 2014-01-16 08:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Martau
2014-01-15 15:20 - 2014-01-15 15:20 - 00000000 ____D C:\rsit
2014-01-14 18:42 - 2014-01-16 09:05 - 00180012 _____ C:\WINDOWS\KB942288-v3.log
2014-01-14 18:24 - 2014-01-14 18:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-13 14:37 - 2014-01-13 14:37 - 00634800 _____ C:\Documents and Settings\Master\Plocha\Apophysis-140113-5.svg
2014-01-13 14:37 - 2014-01-13 14:37 - 00002350 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\recently-used.xbel
2014-01-10 16:14 - 2014-01-10 16:14 - 00000000 ____D C:\5a435b1295847f862e7008
2014-01-10 16:11 - 2014-01-10 16:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6
2014-01-09 14:46 - 2014-01-06 14:20 - 00013312 _____ C:\Documents and Settings\Master\Plocha\sudové víno.xls
2014-01-09 10:57 - 2014-01-09 10:57 - 00011612 _____ C:\Documents and Settings\Master\Dokumenty\BLATEL.odt
2014-01-02 10:32 - 2014-01-02 10:32 - 00012823 _____ C:\Documents and Settings\Master\Plocha\PROVOZNIDOBANOVA.odt
2013-12-21 16:18 - 2013-12-21 16:18 - 00090112 _____ C:\WINDOWS\Minidump\Mini122113-01.dmp
2013-12-17 15:03 - 2013-12-17 15:03 - 00010982 _____ C:\Documents and Settings\Master\Dokumenty\cc_20131217_150335.reg
2013-12-17 14:19 - 2014-01-16 10:59 - 00006756 _____ C:\WINDOWS\setupapi.log

==================== One Month Modified Files and Folders =======

2014-01-16 18:37 - 2014-01-16 18:37 - 00012822 _____ C:\Documents and Settings\Master\Plocha\FRST.txt
2014-01-16 18:37 - 2011-12-30 20:00 - 00000000 ____D C:\Documents and Settings\Master\Plocha
2014-01-16 18:36 - 2014-01-16 18:36 - 00000000 ____D C:\FRST
2014-01-16 18:36 - 2011-12-30 20:00 - 00000000 ___HD C:\Documents and Settings\Master\Local Settings\Data aplikací
2014-01-16 18:33 - 2014-01-16 18:33 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Master\Plocha\FRSTLauncher (1).exe
2014-01-16 18:28 - 2014-01-16 18:28 - 01221120 _____ (Farbar) C:\Documents and Settings\Master\Plocha\FRST.exe
2014-01-16 18:13 - 2012-01-02 11:34 - 00000000 ____D C:\Program Files\Ztrl
2014-01-16 17:59 - 2013-03-22 10:01 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-16 17:28 - 2014-01-16 17:28 - 00000000 ____D C:\Documents and Settings\Master\Dokumenty\ProcAlyzer Dumps
2014-01-16 17:28 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Spybot - Search & Destroy
2014-01-16 17:28 - 2011-12-30 20:00 - 00000000 ___RD C:\Documents and Settings\Master\Dokumenty
2014-01-16 17:27 - 2011-12-29 21:57 - 00000360 __RSH C:\boot.ini
2014-01-16 17:25 - 2011-12-29 21:46 - 00000000 ____D C:\Documents and Settings\LocalService\Data aplikací
2014-01-16 17:24 - 2012-02-24 18:31 - 00000000 ____D C:\WINDOWS\Microsoft.NET
2014-01-16 16:22 - 2012-12-29 16:26 - 00000005 _____ C:\Program Files\trl.trl
2014-01-16 15:40 - 2014-01-16 15:41 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-16 15:40 - 2014-01-16 15:40 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-16 15:40 - 2014-01-16 15:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Java
2014-01-16 15:40 - 2013-12-07 17:11 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-16 15:40 - 2011-12-29 21:58 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-16 15:33 - 2012-12-29 16:15 - 00000000 ____D C:\Program Files\Trell
2014-01-16 15:31 - 2014-01-16 15:27 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2014-01-16 15:28 - 2014-01-16 15:28 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-01-16 15:28 - 2014-01-16 15:28 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-01-16 15:27 - 2014-01-16 15:27 - 00065536 _____ C:\WINDOWS\system32\config\SpybotSD.evt
2014-01-16 15:27 - 2014-01-16 15:27 - 00001842 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00001836 _____ C:\Documents and Settings\All Users\Plocha\Spybot-S&D Start Center.lnk
2014-01-16 15:27 - 2014-01-16 15:27 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Spybot - Search & Destroy 2
2014-01-16 15:27 - 2011-12-29 21:58 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-16 15:27 - 2011-12-29 21:58 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2014-01-16 15:11 - 2014-01-16 15:11 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\OpenOffice
2014-01-16 15:11 - 2014-01-16 15:10 - 00000000 ___SD C:\Documents and Settings\All Users\Nabídka Start\Programy\OpenOffice 4.0.1
2014-01-16 15:11 - 2011-12-30 20:00 - 00000000 __RHD C:\Documents and Settings\Master\Data aplikací
2014-01-16 15:10 - 2014-01-16 15:10 - 00000865 _____ C:\Documents and Settings\All Users\Plocha\OpenOffice 4.0.1.lnk
2014-01-16 15:10 - 2011-12-29 21:58 - 00000000 ___HD C:\Documents and Settings\All Users\Šablony
2014-01-16 15:09 - 2014-01-16 15:08 - 00000000 ____D C:\Program Files\OpenOffice 4
2014-01-16 15:07 - 2012-07-10 16:12 - 00000364 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-01-16 15:07 - 2011-12-30 21:17 - 00000000 ____D C:\Program Files\OpenOffice.org 3
2014-01-16 15:05 - 2011-12-29 21:59 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2014-01-16 15:04 - 2004-08-18 13:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-16 15:02 - 2012-03-12 13:04 - 00000157 _____ C:\WINDOWS\wiadebug.log
2014-01-16 15:02 - 2012-03-12 13:04 - 00000049 _____ C:\WINDOWS\wiaservc.log
2014-01-16 15:02 - 2011-12-29 21:46 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-16 14:54 - 2011-12-29 21:46 - 00032492 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-16 14:53 - 2011-12-30 20:00 - 00000178 ___SH C:\Documents and Settings\Master\ntuser.ini
2014-01-16 14:53 - 2011-12-29 21:40 - 01352431 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-16 11:14 - 2014-01-16 11:13 - 00000000 ____D C:\Documents and Settings\Master\Plocha\OpenOffice 4.0.1 (cs) Installation Files
2014-01-16 11:06 - 2014-01-16 11:06 - 00000000 ____D C:\WINDOWS\system32\appmgmt
2014-01-16 10:59 - 2013-12-17 14:19 - 00006756 _____ C:\WINDOWS\setupapi.log
2014-01-16 09:43 - 2013-04-05 14:06 - 00001733 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-16 09:41 - 2011-12-29 21:58 - 00126912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-16 09:40 - 2011-12-30 20:00 - 00000000 ____D C:\Documents and Settings\Master
2014-01-16 09:40 - 2011-12-29 21:46 - 00000000 __SHD C:\Documents and Settings\LocalService
2014-01-16 09:40 - 2011-12-29 21:46 - 00000000 ____D C:\Documents and Settings\Administrator
2014-01-16 09:40 - 2011-12-29 21:45 - 00000000 __SHD C:\Documents and Settings\NetworkService
2014-01-16 09:39 - 2014-01-16 09:39 - 00000000 ____D C:\a94da79eae96276da083
2014-01-16 09:39 - 2011-12-29 21:38 - 00000000 ____D C:\WINDOWS\Registration
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Program Files\PosteRazor
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\Master\Data aplikací\CasaPortale.de
2014-01-16 09:38 - 2014-01-16 09:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\PosteRazor
2014-01-16 09:38 - 2014-01-16 08:30 - 00000000 ____D C:\Program Files\Total Uninstall 6
2014-01-16 09:38 - 2013-08-11 12:04 - 00000000 ____D C:\Program Files\trend micro
2014-01-16 09:37 - 2011-12-29 21:39 - 00000000 ____D C:\WINDOWS\system32\Restore
2014-01-16 09:23 - 2014-01-16 09:23 - 00004670 _____ C:\Documents and Settings\Master\Dokumenty\cc_20140116_092349.reg
2014-01-16 09:05 - 2014-01-14 18:42 - 00180012 _____ C:\WINDOWS\KB942288-v3.log
2014-01-16 08:30 - 2014-01-16 08:30 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Martau
2014-01-16 08:30 - 2011-12-29 21:52 - 00000000 ____D C:\WINDOWS\system
2014-01-15 15:20 - 2014-01-15 15:20 - 00000000 ____D C:\rsit
2014-01-15 12:00 - 2011-12-30 20:00 - 00000000 ___HD C:\Documents and Settings\Master\Okolní síť
2014-01-14 18:44 - 2011-12-29 21:52 - 00000000 ____D C:\WINDOWS\system32\mui
2014-01-14 18:42 - 2011-12-29 21:59 - 01138324 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2014-01-14 18:24 - 2014-01-14 18:24 - 00000000 ____D C:\Program Files\Microsoft.NET
2014-01-14 13:02 - 2013-03-19 13:12 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-14 13:02 - 2013-03-19 13:12 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-14 13:02 - 2012-01-02 13:56 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-01-14 13:02 - 2012-01-02 13:56 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-13 14:56 - 2012-09-04 13:29 - 00012167 _____ C:\Documents and Settings\Master\Plocha\renders.flame
2014-01-13 14:37 - 2014-01-13 14:37 - 00634800 _____ C:\Documents and Settings\Master\Plocha\Apophysis-140113-5.svg
2014-01-13 14:37 - 2014-01-13 14:37 - 00002350 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\recently-used.xbel
2014-01-13 13:56 - 2012-09-04 13:29 - 00009810 _____ C:\Documents and Settings\Master\Plocha\renders.bak
2014-01-10 16:14 - 2014-01-10 16:14 - 00000000 ____D C:\5a435b1295847f862e7008
2014-01-10 16:11 - 2014-01-10 16:11 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\CorelDRAW Graphics Suite X6
2014-01-09 16:21 - 2012-06-15 15:16 - 00000000 ____D C:\Documents and Settings\Master\Plocha\Data
2014-01-09 13:20 - 2013-05-18 15:38 - 00000000 ____D C:\Documents and Settings\Master\Plocha\večerka
2014-01-09 10:57 - 2014-01-09 10:57 - 00011612 _____ C:\Documents and Settings\Master\Dokumenty\BLATEL.odt
2014-01-07 18:28 - 2004-08-31 01:31 - 00014877 _____ C:\WINDOWS\MSTMON_Q.INI
2014-01-06 14:20 - 2014-01-09 14:46 - 00013312 _____ C:\Documents and Settings\Master\Plocha\sudové víno.xls
2014-01-02 14:49 - 2011-12-30 20:13 - 00037376 _____ C:\Documents and Settings\Master\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-02 10:32 - 2014-01-02 10:32 - 00012823 _____ C:\Documents and Settings\Master\Plocha\PROVOZNIDOBANOVA.odt
2013-12-26 07:32 - 2011-12-30 18:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-21 16:18 - 2013-12-21 16:18 - 00090112 _____ C:\WINDOWS\Minidump\Mini122113-01.dmp
2013-12-21 16:18 - 2012-02-07 15:23 - 00000000 ____D C:\WINDOWS\Minidump
2013-12-17 15:03 - 2013-12-17 15:03 - 00010982 _____ C:\Documents and Settings\Master\Dokumenty\cc_20131217_150335.reg

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1

C:\Windows\System32\winlogon.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea

C:\Windows\System32\svchost.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93

C:\Windows\System32\services.exe
[2004-08-18 13:00] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7

C:\Windows\System32\User32.dll
[2004-08-18 13:00] - [2008-04-14 08:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53

C:\Windows\System32\userinit.exe
[2004-08-18 13:00] - [2008-04-14 08:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239

C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-18 13:00] - [2008-04-14 07:42] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1





===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:37.26 GB) (Free:13.2 GB) NTFS ==>[Drive with boot components (Windows XP)]

Available physical RAM: 454.66 MB
Total physical RAM: 1021.98 MB
Percentage of memory in use: 55%

==================== MBR and Partition Table ==================

Disk: 0 (Size: 37 GB) (Disk ID: 96BF96BF)
Partition 1: (Active) - (Size=37 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Documents and Settings\Master\Plocha" je 3578 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DivXUpdate
"C:\Program Files\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ
"C:\Program Files\ICQ7.7\ICQ.exe" silent loginmode=4 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nabdka Start^Programy^Po sputn^Adobe Reader Speed Launch.lnk
C:\PROGRA~1\Adobe\ACROBA~1.0\Reader\READER~1.EXE


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\ICQ7.7\\ICQ.exe"="C:\\Program Files\\ICQ7.7\\ICQ.exe:*:Enabled:ICQ7.7"


[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\ICQ7.7\\ICQ.exe"="C:\\Program Files\\ICQ7.7\\ICQ.exe:*:Enabled:ICQ7.7"
"C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
"139:TCP"="139:TCP:*:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:*:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:*:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:*:Enabled:@xpsp2res.dll,-22002"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP"="139:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22004"
"445:TCP"="445:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22005"
"137:UDP"="137:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22001"
"138:UDP"="138:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22002"


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000


==================== End Of Log ==============================

Otevřte poznámkový blok a zkopírujte do něj:

Start
C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 15-01-2014 03
Ran by Master at 2014-01-17 10:30:22 Run:1
Running from C:\Documents and Settings\Master\Plocha
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\Administrator\...\Run: [Akamai NetSession Interface] - "C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Akamai\netsession_win.exe"
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {711290F8-6FF5-4FEF-910A-C15CCC1637B0} URL = http://search.conduit.com/ResultsExt.as ... 40227&UM=2
CHR HKLM\...\Chrome\Extension: [gjajpkikblccgefaibcafkfbanllpefi] - C:\Documents and Settings\Master\Data aplikací\7go\7go.crx [2013-07-30]
End
*****************

C:\Documents and Settings\Master\Dokumenty\Downloads\Keymaster\KeySpy.exe => Moved successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKU\Administrator\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{711290F8-6FF5-4FEF-910A-C15CCC1637B0} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{711290F8-6FF5-4FEF-910A-C15CCC1637B0} => Key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\gjajpkikblccgefaibcafkfbanllpefi => Key deleted successfully.
C:\Documents and Settings\Master\Data aplikací\7go\7go.crx => Moved successfully.


The system needs a manual reboot.

==== End of Fixlog ====

Vše smazáno.

Moc děkuji za pomoc

Nemáte zač!