na potřetí se povedlo:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-01-2014 01
Ran by petr (administrator) on PETR-D455EAF4C9 on 27-01-2014 20:28:57
Running from C:\Documents and Settings\petr\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 7
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version:
http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version:
http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Apple Computer, Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
() C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
(Logitech Inc.) C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Documents and Settings\petr\Plocha\FRSTLauncher (1).exe
(Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
(Microsoft Corporation) C:\WINDOWS\system32\ping.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [KeySpy] - C:\Documents and Settings\petr\Plocha\finest group\KeySpy\KeySpy.exe [217088 2007-04-07] ()
HKLM\...\Run: [NvCplDaemon] - C:\WINDOWS\system32\NvCpl.dll [13529088 2008-05-16] (NVIDIA Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\Alwil Software\Avast5\AvastUI.exe [3764024 2014-01-12] (AVAST Software)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\WgaLogon: WgaLogon.dll [X]
HKLM\...\Policies\Explorer: [NoSecurityTab] 1
HKCU\...\Policies\Explorer: [NoSecurityTab] 1
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Speed Launcher.lnk
ShortcutTarget: Adobe Acrobat Speed Launcher.lnk -> C:\WINDOWS\Installer\{AC76BA86-1029-0000-7760-000000000003}\_SC_Acrobat.exe ()
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Acrobat Synchronizer.lnk
ShortcutTarget: Adobe Acrobat Synchronizer.lnk -> C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AdobeCollabSync.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: 127.0.0.1:3128
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.msn.com/?pc=UP21&ocid=UP21DHP&dt=122512
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - search13 URL =
http://search13.net/search.php?q={searchTerms}
BHO: Podpora odkazu pro Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - No File
Toolbar: HKCU - EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll (SEIKO EPSON CORPORATION)
Toolbar: HKCU - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
DPF: {31435657-9980-0010-8000-00AA00389B71}
http://download.microsoft.com/download/ ... vc1dmo.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0015-0000-0011-ABCDEFFEDCBA}
http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
http://download.macromedia.com/pub/shoc ... wflash.cab
Handler: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (Logitech Inc.)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 178.77.254.254 77.48.100.254
FireFox:
========
FF ProfilePath: C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default
FF Homepage: hxxp://
www.google.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.775 - C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nppl3260.dll No File
FF Plugin: @real.com/nprjplug;version=1.0.3.775 - C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprjplug.dll No File
FF Plugin: @real.com/nprphtml5videoshim;version=1.0.0.0 - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.775 - C:\Documents and Settings\petr\Plocha\Jarda\Netscape6\nprpjplug.dll No File
FF Plugin: @software602.cz/602XML Filler - C:\Program Files\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Documents and Settings\petr\Local Settings\Data aplikací\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprjplug.dll (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: Feedback module - C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\Extensions\{8675f4b3-2f19-11ed-2d6b-0800600c0a19} [2011-11-09]
FF Extension: Stylish Profile - C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\Extensions\{6236BA26-C117-4007-928C-DE0716C7FA80}.xpi [2011-06-09]
FF Extension: Usage Stat - C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\Extensions\{6236BA26-C117-4007-928C-DE0716C7FA96}.xpi [2011-06-09]
FF Extension: VFT Flv - C:\Documents and Settings\petr\Data aplikací\Mozilla\Firefox\Profiles\0nzyy65t.default\Extensions\{8675f4b3-2f19-11ed-2d6b-1823600c0a19}.xpi [2012-07-16]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012-12-25]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} [2007-04-28]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} [2007-09-30]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} [2007-11-26]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} [2008-03-27]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} [2008-12-20]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} [2010-09-12]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-04-30]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: RealPlayer Browser Record Plugin - C:\Documents and Settings\All Users\Data aplikací\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2010-09-01]
FF HKLM\...\Firefox\Extensions: [
wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-09-16]
========================== Services (Whitelisted) =================
S4 602XML Updater; C:\Program Files\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
S3 Aladdin SQL Server; C:\Program Files\Aladdin\Aladdin SQL Server\AladdinSQL.exe [140736 2012-08-17] ()
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-01-12] (AVAST Software)
S3 EpsonBidirectionalAgent; C:\Program Files\Common Files\EPSON\EBAPI\eEBAgent.exe [184320 2002-06-21] (SEIKO EPSON CORPORATION)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-01-15] (Oracle Corporation)
R2 LVCOMSer; C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe [186904 2008-07-26] (Logitech Inc.)
S3 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2010-07-09] (TuneUp Software)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe [1050440 2010-04-19] (TuneUp Software)
S3 nosGetPlusHelper; C:\Program Files\NOS\bin\getPlus_Helper_3004.dll [x]
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-01-12] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-01-12] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-01-12] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2014-01-12] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410528 2014-01-12] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-01-12] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [180248 2014-01-12] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
R3 cmuda; C:\WINDOWS\System32\drivers\cmuda.sys [1373120 2006-06-09] (C-Media Inc)
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
R3 LVPr2Mon; C:\WINDOWS\System32\DRIVERS\LVPr2Mon.sys [25624 2008-07-26] ()
R3 LVUSBSta; C:\WINDOWS\System32\drivers\LVUSBSta.sys [41752 2008-07-26] (Logitech Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-13] (Microsoft Corporation)
R3 pepifilter; C:\WINDOWS\System32\DRIVERS\lv302af.sys [13848 2008-07-26] (Logitech Inc.)
R3 pfc; C:\WINDOWS\System32\drivers\pfc.sys [10368 2007-04-01] (Padus, Inc.)
R3 PID_PEPI; C:\WINDOWS\System32\DRIVERS\LV302V32.SYS [2570520 2008-07-26] (Logitech Inc.)
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2004-08-03] (Realtek Semiconductor Corporation)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys [10064 2010-02-25] (TuneUp Software)
S3 wceusbsh; C:\WINDOWS\System32\DRIVERS\wceusbsh.sys [104576 2005-06-14] (Microsoft Corporation)
S2 adfs; No ImagePath
S3 BlueletAudio; system32\DRIVERS\blueletaudio.sys [x]
S3 BlueletSCOAudio; system32\DRIVERS\BlueletSCOAudio.sys [x]
S3 BT; system32\DRIVERS\btnetdrv.sys [x]
S3 btaudio; system32\drivers\btaudio.sys [x]
S3 Btcsrusb; System32\Drivers\btcusb.sys [x]
S3 BTDriver; system32\DRIVERS\btport.sys [x]
S3 BTHidEnum; system32\DRIVERS\vbtenum.sys [x]
S0 BTHidMgr; System32\Drivers\BTHidMgr.sys [x]
S3 BTWDNDIS; system32\DRIVERS\btwdndis.sys [x]
S3 BTWUSB; System32\Drivers\btwusb.sys [x]
S3 pccsmcfd; system32\DRIVERS\pccsmcfd.sys [x]
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 TNET1130; system32\DRIVERS\tnet1130.sys [x]
S3 VComm; system32\DRIVERS\VComm.sys [x]
S3 VcommMgr; System32\Drivers\VcommMgr.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-27 20:28 - 2014-01-27 20:28 - 00015327 _____ C:\Documents and Settings\petr\Plocha\LM.bat
2014-01-27 20:14 - 2014-01-27 20:29 - 00018663 _____ C:\Documents and Settings\petr\Plocha\FRST.txt
2014-01-27 20:14 - 2014-01-27 20:14 - 00000000 ____D C:\FRST
2014-01-27 20:13 - 2014-01-27 20:28 - 00029696 _____ C:\Documents and Settings\petr\Local Settings\Data aplikací\MSGBOX.EXE
2014-01-27 20:09 - 2014-01-27 20:09 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\petr\Plocha\FRSTLauncher (1).exe
2014-01-27 20:05 - 2014-01-27 20:05 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\petr\Plocha\Nepotvrzeno 669621.crdownload
2014-01-27 20:02 - 2014-01-27 20:02 - 01223168 _____ (Farbar) C:\Documents and Settings\petr\Plocha\FRST.exe
2014-01-26 10:43 - 2014-01-26 10:43 - 00033280 _____ C:\Documents and Settings\petr\Plocha\nabídka víno pro rok2014.xls
2014-01-26 10:31 - 2014-01-26 10:31 - 00034304 _____ C:\Documents and Settings\petr\Plocha\sud víno pro rok2014.xls
2014-01-24 19:55 - 2014-01-24 19:55 - 00001736 _____ C:\Documents and Settings\All Users\Plocha\Adobe Acrobat 8 Professional.lnk
2014-01-23 23:32 - 2014-01-23 23:32 - 00000279 _____ C:\Documents and Settings\petr\Plocha\Sterli1.loo
2014-01-23 23:17 - 2014-01-23 23:17 - 00000284 _____ C:\Documents and Settings\petr\Plocha\Sterli.loo
2014-01-23 23:07 - 2014-01-23 23:08 - 00000000 ____D C:\Documents and Settings\petr\Plocha\Sterling2
2014-01-23 23:06 - 2014-01-23 23:06 - 00446513 _____ C:\Documents and Settings\petr\Plocha\Sterling2.zip
2014-01-22 13:13 - 2014-01-22 13:13 - 00001294 _____ C:\Documents and Settings\petr\Local Settings\Data aplikací\recently-used.xbel
2014-01-21 22:42 - 2014-01-21 22:49 - 00000000 ____D C:\Documents and Settings\petr\mandelbulber
2014-01-21 22:42 - 2014-01-21 22:42 - 00001600 _____ C:\Documents and Settings\All Users\Plocha\Mandelbulber.lnk
2014-01-21 22:42 - 2014-01-21 22:42 - 00000000 ___HD C:\Program Files\InstallJammer Registry
2014-01-21 22:42 - 2014-01-21 22:42 - 00000000 ____D C:\Documents and Settings\petr\Nabídka Start\Programy\Mandelbulber
2014-01-21 22:41 - 2014-01-21 22:42 - 00000000 ____D C:\Program Files\Mandelbulber
2014-01-21 22:39 - 2014-01-21 22:40 - 09979757 _____ () C:\Documents and Settings\petr\Plocha\Mandelbulber-1.20-Setup.exe
2014-01-17 22:16 - 2014-01-17 22:16 - 00439480 _____ C:\Documents and Settings\petr\Plocha\rekl vinotéka.cdr
2014-01-15 14:04 - 2014-01-15 14:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-12 14:25 - 2014-01-12 14:25 - 00000000 ____D C:\Documents and Settings\petr\Data aplikací\AVAST Software
2014-01-12 10:40 - 2014-01-12 10:40 - 00001744 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-12 10:40 - 2014-01-12 10:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2014-01-12 10:36 - 2014-01-12 10:36 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-01-09 20:36 - 2014-01-09 20:36 - 00021918 _____ C:\Documents and Settings\petr\Plocha\nápisy.cdr
2014-01-05 19:19 - 2014-01-05 19:33 - 00033792 _____ C:\Documents and Settings\petr\Plocha\sudové víno.xls
2014-01-05 19:12 - 2014-01-05 19:12 - 00012576 _____ C:\Documents and Settings\petr\Plocha\Ceník sudových vín.xlsx
==================== One Month Modified Files and Folders =======
2014-01-27 20:29 - 2014-01-27 20:14 - 00018663 _____ C:\Documents and Settings\petr\Plocha\FRST.txt
2014-01-27 20:28 - 2014-01-27 20:28 - 00015327 _____ C:\Documents and Settings\petr\Plocha\LM.bat
2014-01-27 20:28 - 2014-01-27 20:13 - 00029696 _____ C:\Documents and Settings\petr\Local Settings\Data aplikací\MSGBOX.EXE
2014-01-27 20:28 - 2007-03-23 17:45 - 00000000 ___HD C:\Documents and Settings\petr\Local Settings\Data aplikací
2014-01-27 20:28 - 2007-03-23 17:45 - 00000000 ____D C:\Documents and Settings\petr\Plocha
2014-01-27 20:22 - 2012-10-17 11:42 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-01-27 20:14 - 2014-01-27 20:14 - 00000000 ____D C:\FRST
2014-01-27 20:09 - 2014-01-27 20:09 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\petr\Plocha\FRSTLauncher (1).exe
2014-01-27 20:05 - 2014-01-27 20:05 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\petr\Plocha\Nepotvrzeno 669621.crdownload
2014-01-27 20:02 - 2014-01-27 20:02 - 01223168 _____ (Farbar) C:\Documents and Settings\petr\Plocha\FRST.exe
2014-01-27 19:55 - 2012-08-16 22:13 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-27 19:54 - 2012-08-16 22:13 - 00000932 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-27 19:25 - 2007-03-23 01:23 - 00000000 ____D C:\WINDOWS\system32\ias
2014-01-27 19:24 - 2012-07-22 10:04 - 00000366 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-01-27 19:24 - 2010-02-17 19:49 - 00186500 _____ C:\WINDOWS\system32\nvapps.xml
2014-01-27 19:23 - 2007-03-23 17:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-27 19:23 - 2007-03-23 01:31 - 00000159 _____ C:\WINDOWS\wiadebug.log
2014-01-27 19:23 - 2007-03-23 01:31 - 00000049 _____ C:\WINDOWS\wiaservc.log
2014-01-27 19:23 - 2007-03-23 01:23 - 00000000 _____ C:\WINDOWS\MEMORY.DMP
2014-01-27 08:45 - 2010-07-09 13:42 - 00458752 _____ C:\WINDOWS\system32\config\TuneUp.evt
2014-01-27 08:45 - 2007-03-23 17:45 - 00000272 ___SH C:\Documents and Settings\petr\ntuser.ini
2014-01-27 08:45 - 2007-03-23 17:41 - 00032630 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-27 08:45 - 2007-03-23 17:37 - 01821714 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-27 00:08 - 2007-03-23 17:45 - 00000000 ____D C:\Documents and Settings\petr
2014-01-26 17:47 - 2007-03-23 17:45 - 00000000 __RHD C:\Documents and Settings\petr\Data aplikací
2014-01-26 10:43 - 2014-01-26 10:43 - 00033280 _____ C:\Documents and Settings\petr\Plocha\nabídka víno pro rok2014.xls
2014-01-26 10:31 - 2014-01-26 10:31 - 00034304 _____ C:\Documents and Settings\petr\Plocha\sud víno pro rok2014.xls
2014-01-25 22:50 - 2007-03-23 17:45 - 00000000 ___RD C:\Documents and Settings\petr\Nabídka Start
2014-01-25 21:42 - 2001-10-25 15:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-24 19:55 - 2014-01-24 19:55 - 00001736 _____ C:\Documents and Settings\All Users\Plocha\Adobe Acrobat 8 Professional.lnk
2014-01-24 19:55 - 2008-12-17 18:43 - 00002359 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Acrobat 8 Professional.lnk
2014-01-24 19:55 - 2007-03-23 01:29 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2014-01-24 19:55 - 2007-03-23 01:29 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2014-01-24 19:55 - 2007-03-23 01:29 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-23 23:32 - 2014-01-23 23:32 - 00000279 _____ C:\Documents and Settings\petr\Plocha\Sterli1.loo
2014-01-23 23:17 - 2014-01-23 23:17 - 00000284 _____ C:\Documents and Settings\petr\Plocha\Sterli.loo
2014-01-23 23:08 - 2014-01-23 23:07 - 00000000 ____D C:\Documents and Settings\petr\Plocha\Sterling2
2014-01-23 23:06 - 2014-01-23 23:06 - 00446513 _____ C:\Documents and Settings\petr\Plocha\Sterling2.zip
2014-01-23 20:48 - 2012-01-01 14:59 - 00000000 ____D C:\WINDOWS\pss
2014-01-23 20:48 - 2007-03-23 01:26 - 00000281 __RSH C:\boot.ini
2014-01-23 20:48 - 2001-10-25 15:00 - 00000774 _____ C:\WINDOWS\win.ini
2014-01-23 20:48 - 2001-10-25 15:00 - 00000227 _____ C:\WINDOWS\system.ini
2014-01-22 13:13 - 2014-01-22 13:13 - 00001294 _____ C:\Documents and Settings\petr\Local Settings\Data aplikací\recently-used.xbel
2014-01-21 22:49 - 2014-01-21 22:42 - 00000000 ____D C:\Documents and Settings\petr\mandelbulber
2014-01-21 22:42 - 2014-01-21 22:42 - 00001600 _____ C:\Documents and Settings\All Users\Plocha\Mandelbulber.lnk
2014-01-21 22:42 - 2014-01-21 22:42 - 00000000 ___HD C:\Program Files\InstallJammer Registry
2014-01-21 22:42 - 2014-01-21 22:42 - 00000000 ____D C:\Documents and Settings\petr\Nabídka Start\Programy\Mandelbulber
2014-01-21 22:42 - 2014-01-21 22:41 - 00000000 ____D C:\Program Files\Mandelbulber
2014-01-21 22:42 - 2008-03-01 17:02 - 00000000 ___RD C:\Documents and Settings\petr\Nabídka Start\Programy
2014-01-21 22:40 - 2014-01-21 22:39 - 09979757 _____ () C:\Documents and Settings\petr\Plocha\Mandelbulber-1.20-Setup.exe
2014-01-18 00:45 - 2012-10-04 22:14 - 01514832 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-583907252-362288127-839522115-1003-0.dat
2014-01-18 00:45 - 2012-10-04 22:14 - 00387502 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
2014-01-17 22:16 - 2014-01-17 22:16 - 00439480 _____ C:\Documents and Settings\petr\Plocha\rekl vinotéka.cdr
2014-01-17 13:54 - 2011-11-27 20:37 - 00000000 ____D C:\Documents and Settings\petr\Plocha\večerka
2014-01-17 13:24 - 2013-01-18 16:42 - 00000000 ____D C:\Documents and Settings\petr\Plocha\fraktály
2014-01-17 11:59 - 2013-08-24 21:45 - 00001813 _____ C:\Documents and Settings\All Users\Plocha\Google Chrome.lnk
2014-01-16 21:37 - 2012-10-17 11:56 - 00002347 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
2014-01-15 14:04 - 2014-01-15 14:04 - 00264616 _____ (Oracle Corporation) C:\WINDOWS\system32\javaws.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00175016 _____ (Oracle Corporation) C:\WINDOWS\system32\javaw.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00174504 _____ (Oracle Corporation) C:\WINDOWS\system32\java.exe
2014-01-15 14:04 - 2014-01-15 14:04 - 00094632 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2014-01-15 14:04 - 2007-04-28 17:10 - 00145408 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2014-01-15 14:04 - 2007-03-24 16:04 - 00000000 ____D C:\Program Files\Java
2014-01-12 14:25 - 2014-01-12 14:25 - 00000000 ____D C:\Documents and Settings\petr\Data aplikací\AVAST Software
2014-01-12 10:40 - 2014-01-12 10:40 - 00001744 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-12 10:40 - 2014-01-12 10:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2014-01-12 10:40 - 2013-03-17 09:29 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-12 10:40 - 2013-03-17 09:29 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-12 10:40 - 2013-03-17 09:29 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-12 10:40 - 2011-09-16 22:08 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-12 10:40 - 2010-11-14 10:31 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-12 10:40 - 2008-07-19 20:06 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-12 10:40 - 2008-07-19 20:06 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-01-12 10:40 - 2008-07-19 20:06 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-01-12 10:40 - 2008-07-19 20:05 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-12 10:36 - 2014-01-12 10:36 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-01-12 10:36 - 2007-03-23 17:38 - 00002504 _____ C:\WINDOWS\system32\CONFIG.NT
2014-01-12 10:36 - 2007-03-23 01:27 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-09 20:36 - 2014-01-09 20:36 - 00021918 _____ C:\Documents and Settings\petr\Plocha\nápisy.cdr
2014-01-05 19:33 - 2014-01-05 19:19 - 00033792 _____ C:\Documents and Settings\petr\Plocha\sudové víno.xls
2014-01-05 19:12 - 2014-01-05 19:12 - 00012576 _____ C:\Documents and Settings\petr\Plocha\Ceník sudových vín.xlsx
2014-01-03 14:15 - 2009-01-27 21:45 - 00068301 _____ C:\WINDOWS\FontData.fdb
Some content of TEMP:
====================
C:\Documents and Settings\petr\Local Settings\temp\{0E681F0C-BFEA-4E61-9E43-45B4EA300538}-GoogleEarth-Win-Plugin-7.1.1.1888.exe
==================== Bamital & volsnap Check =================
C:\WINDOWS\explorer.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1
C:\WINDOWS\system32\winlogon.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea
C:\WINDOWS\system32\svchost.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93
C:\WINDOWS\system32\services.exe
[2004-08-17 14:49] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7
C:\WINDOWS\system32\User32.dll
[2004-08-17 14:49] - [2008-04-14 04:22] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53
C:\WINDOWS\system32\userinit.exe
[2004-08-17 14:49] - [2008-04-14 04:22] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239
C:\WINDOWS\system32\rpcss.dll => MD5 is legit
C:\WINDOWS\system32\Drivers\volsnap.sys
[2004-08-17 14:44] - [2008-04-14 03:12] - 0052480 ____A (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\Alwil Software\Avast5\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\RealUpgradeLogonTaskS-1-5-21-583907252-362288127-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\WINDOWS\Tasks\RealUpgradeScheduledTaskS-1-5-21-583907252-362288127-839522115-1003.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****