Pomalý PC

[marquesb51]

Zdravím všechny!
Mám problém s PC od známé, jakákoliv práce je velmi pomalá. Problém je nejspíš jen 1GB RAM, ale pro jistotu prosím o kontrolu logu z FRST.



Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-02-2014 01
Ran by Lubos (administrator) on MOJEPC on 16-02-2014 16:39:57
Running from C:\Users\Lubos\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Google Inc.) C:\Users\Lubos\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lubos\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Lubos\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(forum.viry.cz) C:\Users\Lubos\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-03-21] (Microsoft Corporation)
HKU\S-1-5-21-2806406425-2806999305-3387432958-1001\...\MountPoints2: {b525c9cd-8e39-11e2-ae5c-0019db83b78d} - E:\Autorun.exe
AppInit_DLLs: c:\progra~2\bitguard\271832~1.68\{c16c1~1\bitguard.dll => File Not Found
Startup: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
ShortcutTarget: OpenOffice.org 3.0.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()
Startup: C:\Users\Jana\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.0.lnk
ShortcutTarget: OpenOffice.org 3.0.lnk -> C:\Program Files\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1198 ... 19DB83B78D
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 19DB83B78D
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 19DB83B78D
SearchScopes: HKCU - {2A994959-0E61-45CF-931D-0AE6EAEBF9FF} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Toolbar: HKLM - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
Toolbar: HKCU - DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll ()
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\xz6o72xh.default
FF NewTab: hxxp://www.delta-search.com/?affID=119816&babs ... 19DB83B78D
FF DefaultSearchEngine: Delta Search
FF SearchEngineOrder.1: Delta Search
FF SelectedSearchEngine: Delta Search
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=6.0.12.69 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.69 - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF SearchPlugin: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\xz6o72xh.default\searchplugins\babylon.xml
FF SearchPlugin: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\xz6o72xh.default\searchplugins\BrowserProtect.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\babylon.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: DAEMON Tools Toolbar - C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\xz6o72xh.default\Extensions\DTToolbar@toolbarnet.com [2013-03-11]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2013-12-20]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR DefaultSearchURL: {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR Plugin: (Shockwave Flash) - C:\Users\Lubos\AppData\Local\Google\Chrome\Application\15.0.874.102\gcswf32.dll ()
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Lubos\AppData\Local\Google\Chrome\Application\15.0.874.102\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Lubos\AppData\Local\Google\Chrome\Application\15.0.874.102\pdf.dll ()
CHR Plugin: (Skype Click to Call) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.13.0.13771_0\npSkypeChromePlugin.dll (Skype Technologies S.A.)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
CHR Plugin: (Windows Presentation Foundation) - C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (Skype Click to Call) - C:\Users\Lubos\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-01-18]
CHR HKLM\...\Chrome\Extension: [eooncjejnppfjjklapaamhcdmjbilmde] - C:\Users\Lubos\AppData\Roaming\BabSolution\CR\Delta.crx [2014-01-18]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
CHR StartMenuInternet: Google Chrome - C:\Users\Lubos\AppData\Local\Google\Chrome\Application\chrome.exe

========================== Services (Whitelisted) =================

R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1729336 2013-12-10] (TuneUp Software)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-03-16] (DT Soft Ltd)
S3 LVUSBSta; C:\Windows\System32\drivers\lvusbsta.sys [22016 2005-01-19] (Labtec Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1311232 2009-07-13] (NXP Semiconductors)
S3 PID_0928; C:\Windows\System32\DRIVERS\LV561AV.SYS [211712 2005-01-19] (Labtec Inc.)
S4 sptd; C:\Windows\System32\Drivers\sptd.sys [717296 2009-04-16] (Duplex Secure Ltd.)
S3 ss_bbus; C:\Windows\System32\DRIVERS\ss_bbus.sys [98432 2009-09-19] (MCCI)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-11-16] (TuneUp Software)
S1 bflardep; \??\C:\Windows\system32\drivers\bflardep.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-16 16:39 - 2014-02-16 16:40 - 00010939 _____ () C:\Users\Lubos\Desktop\FRST.txt
2014-02-16 16:38 - 2014-02-16 16:39 - 00000000 ____D () C:\FRST
2014-02-16 16:38 - 2014-02-16 16:33 - 01141248 _____ (Farbar) C:\Users\Lubos\Desktop\FRST.exe
2014-02-16 16:35 - 2014-02-16 16:37 - 00112640 _____ (forum.viry.cz) C:\Users\Lubos\Desktop\FRSTLauncher.exe
2014-02-16 16:05 - 2014-02-16 16:05 - 00000000 ____D () C:\Users\Lubos\Desktop\Nová složka (2)
2014-02-13 21:38 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 21:38 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 21:38 - 2014-02-06 11:19 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 21:38 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 21:38 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 21:38 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 21:38 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 21:38 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 21:38 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 21:38 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 21:38 - 2014-02-06 10:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 21:38 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 21:38 - 2014-02-06 10:34 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 21:38 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 21:38 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 21:38 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 21:38 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 21:38 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 21:38 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 21:38 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 21:38 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 21:24 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 15:16 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 15:16 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 15:16 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 15:15 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 15:15 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 15:15 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 15:15 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 15:15 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 15:15 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 15:15 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 15:15 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 15:15 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 15:15 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-04 19:37 - 2014-02-04 19:37 - 00053760 _____ () C:\Users\Lubos\Desktop\rozvaha k podnikateláku - jana.xls
2014-02-03 18:22 - 2014-02-03 18:15 - 00039936 _____ () C:\Users\Lubos\Desktop\rozvaha_ve_zjednodusenem_rozsahu_2007.xls
2014-01-23 14:02 - 2014-01-23 14:02 - 00001461 _____ () C:\Users\Lubos\.recently-used.xbel
2014-01-22 15:52 - 2014-01-30 16:41 - 00000000 ____D () C:\Users\Lubos\Desktop\anička
2014-01-21 15:29 - 2014-02-16 16:30 - 00004676 _____ () C:\Windows\PFRO.log
2014-01-20 11:11 - 2014-02-16 15:48 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-19 13:05 - 2014-01-19 16:44 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\vlc
2014-01-19 13:03 - 2014-01-19 13:03 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-19 13:01 - 2014-01-19 13:01 - 00000000 ____D () C:\Program Files\VideoLAN
2014-01-19 13:00 - 2014-01-19 12:57 - 24097311 _____ () C:\Users\Lubos\Desktop\vlc-2.1.2-win32.exe
2014-01-18 22:05 - 2014-01-18 22:33 - 445705775 _____ () C:\Users\Lubos\Desktop\01---RudĂ˝-had.rar
2014-01-18 17:02 - 2014-02-16 16:30 - 00994958 _____ () C:\Windows\setupact.log
2014-01-18 17:02 - 2014-01-18 17:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-18 17:01 - 2013-12-10 19:09 - 00030520 _____ (TuneUp Software) C:\Windows\system32\uxtuneup.dll
2014-01-18 17:01 - 2013-12-10 19:09 - 00022328 _____ (TuneUp Software) C:\Windows\system32\authuitu.dll
2014-01-18 16:52 - 2013-12-10 19:09 - 00032568 _____ (TuneUp Software) C:\Windows\system32\TURegOpt.exe
2014-01-18 16:49 - 2014-01-18 16:49 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\TuneUp Software
2014-01-18 16:48 - 2014-02-16 16:04 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2013
2014-01-18 16:47 - 2014-01-18 17:12 - 00000000 __SHD () C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-01-18 16:47 - 2014-01-18 17:01 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-01-18 15:12 - 2014-01-20 17:49 - 00000000 ____D () C:\Users\Lubos\Desktop\Programy
2014-01-18 15:10 - 2014-01-18 15:10 - 00002278 _____ () C:\Users\Lubos\Desktop\Google Chrome.lnk
2014-01-18 15:10 - 2014-01-18 15:10 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-18 15:08 - 2014-01-18 15:08 - 00000000 ____D () C:\Program Files\Google chrome 15.0.874.102 cz
2014-01-18 15:08 - 2013-12-10 22:25 - 00005453 ____S () C:\Windows\system32\msyqedt.vbe
2014-01-18 15:08 - 2013-12-10 22:25 - 00001645 ____S () C:\Windows\system32\msabru.vbe
2014-01-18 15:08 - 2013-12-10 22:25 - 00000583 ____S () C:\Windows\system32\msaqalck.vbe
2014-01-18 15:02 - 2014-01-18 15:02 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\Opera Software
2014-01-18 15:02 - 2014-01-18 15:02 - 00000000 ____D () C:\Users\Lubos\AppData\Local\Opera Software
2014-01-18 15:02 - 2014-01-18 15:01 - 00001091 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-01-18 15:01 - 2014-01-18 15:02 - 00000000 ____D () C:\Program Files\Opera
2014-01-18 15:00 - 2014-01-18 15:01 - 00000000 ____D () C:\Extracted
2014-01-18 15:00 - 2013-12-10 22:25 - 00005453 ____S () C:\Windows\system32\msyxkgw.vbe
2014-01-18 15:00 - 2013-12-10 22:25 - 00001645 ____S () C:\Windows\system32\msrfjiln.vbe
2014-01-18 15:00 - 2013-12-10 22:25 - 00000583 ____S () C:\Windows\system32\msxhhg.vbe
2014-01-18 15:00 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\Windows\system32\nircmdc.exe
2014-01-18 14:49 - 2014-01-18 14:49 - 00000017 _____ () C:\Users\Lubos\AppData\Local\resmon.resmoncfg

==================== One Month Modified Files and Folders =======

2014-02-16 16:40 - 2014-02-16 16:39 - 00010939 _____ () C:\Users\Lubos\Desktop\FRST.txt
2014-02-16 16:39 - 2014-02-16 16:38 - 00000000 ____D () C:\FRST
2014-02-16 16:37 - 2014-02-16 16:35 - 00112640 _____ (forum.viry.cz) C:\Users\Lubos\Desktop\FRSTLauncher.exe
2014-02-16 16:37 - 2013-03-10 17:54 - 01662820 _____ () C:\Windows\WindowsUpdate.log
2014-02-16 16:37 - 2013-03-10 17:14 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-16 16:37 - 2013-03-10 17:14 - 00010512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-16 16:33 - 2014-02-16 16:38 - 01141248 _____ (Farbar) C:\Users\Lubos\Desktop\FRST.exe
2014-02-16 16:30 - 2014-01-21 15:29 - 00004676 _____ () C:\Windows\PFRO.log
2014-02-16 16:30 - 2014-01-18 17:02 - 00994958 _____ () C:\Windows\setupact.log
2014-02-16 16:30 - 2013-03-09 18:38 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-02-16 16:30 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-16 16:16 - 2009-07-14 03:04 - 00002577 _____ () C:\Windows\system32\config.nt
2014-02-16 16:05 - 2014-02-16 16:05 - 00000000 ____D () C:\Users\Lubos\Desktop\Nová složka (2)
2014-02-16 16:04 - 2014-01-18 16:48 - 00000000 ____D () C:\Program Files\TuneUp Utilities 2013
2014-02-16 15:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-02-16 15:48 - 2014-01-20 11:11 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-16 15:28 - 2010-02-06 13:45 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\DAEMON Tools Lite
2014-02-16 15:24 - 2009-07-14 05:53 - 00032606 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-16 15:23 - 2013-03-10 18:12 - 01470062 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-16 15:21 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-02-13 21:33 - 2013-09-11 15:35 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 21:30 - 2013-09-11 15:35 - 85946576 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-06 11:38 - 2014-02-13 21:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 11:20 - 2014-02-13 21:38 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 11:19 - 2014-02-13 21:38 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 11:01 - 2014-02-13 21:38 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 11:00 - 2014-02-13 21:38 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-13 21:38 - 02168320 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 10:52 - 2014-02-13 21:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 10:52 - 2014-02-13 21:38 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 10:49 - 2014-02-13 21:38 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 10:47 - 2014-02-13 21:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 10:47 - 2014-02-13 21:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 10:46 - 2014-02-13 21:38 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 10:34 - 2014-02-13 21:38 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 10:25 - 2014-02-13 21:38 - 04244480 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 10:25 - 2014-02-13 21:38 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 10:13 - 2014-02-13 21:38 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:09 - 2014-02-13 21:38 - 01964032 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:03 - 2014-02-13 21:38 - 11266048 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 09:41 - 2014-02-13 21:38 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 09:36 - 2014-02-13 21:38 - 01156096 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:34 - 2014-02-13 21:38 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-05 17:49 - 2012-09-01 12:36 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-05 17:49 - 2012-09-01 12:36 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-04 19:37 - 2014-02-04 19:37 - 00053760 _____ () C:\Users\Lubos\Desktop\rozvaha k podnikateláku - jana.xls
2014-02-03 18:15 - 2014-02-03 18:22 - 00039936 _____ () C:\Users\Lubos\Desktop\rozvaha_ve_zjednodusenem_rozsahu_2007.xls
2014-01-30 16:41 - 2014-01-22 15:52 - 00000000 ____D () C:\Users\Lubos\Desktop\anička
2014-01-23 14:03 - 2013-08-15 11:42 - 00000000 ____D () C:\Users\Lubos\Desktop\Nová složka
2014-01-23 14:03 - 2009-05-05 19:03 - 00000000 ____D () C:\Users\Lubos\.gimp-2.6
2014-01-23 14:02 - 2014-01-23 14:02 - 00001461 _____ () C:\Users\Lubos\.recently-used.xbel
2014-01-23 14:02 - 2013-03-10 17:17 - 00000000 ____D () C:\Users\Lubos
2014-01-22 17:22 - 2013-08-24 13:49 - 00000000 ____D () C:\Users\Lubos\Desktop\ŠKOLA
2014-01-22 17:19 - 2010-05-12 18:41 - 00000000 ____D () C:\Users\Lubos\Desktop\VIDEA
2014-01-20 17:49 - 2014-01-18 15:12 - 00000000 ____D () C:\Users\Lubos\Desktop\Programy
2014-01-20 11:18 - 2009-04-08 10:24 - 00000000 ____D () C:\Users\Lubos\AppData\Local\Adobe
2014-01-19 18:06 - 2009-04-08 10:23 - 00000000 ____D () C:\Users\Lubos\AppData\Local\VirtualStore
2014-01-19 16:44 - 2014-01-19 13:05 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\vlc
2014-01-19 13:03 - 2014-01-19 13:03 - 00001028 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-01-19 13:01 - 2014-01-19 13:01 - 00000000 ____D () C:\Program Files\VideoLAN
2014-01-19 12:57 - 2014-01-19 13:00 - 24097311 _____ () C:\Users\Lubos\Desktop\vlc-2.1.2-win32.exe
2014-01-19 11:30 - 2013-03-10 17:14 - 00001394 _____ () C:\Windows\system32\lvcoinst.log
2014-01-18 22:33 - 2014-01-18 22:05 - 445705775 _____ () C:\Users\Lubos\Desktop\01---RudĂ˝-had.rar
2014-01-18 17:12 - 2014-01-18 16:47 - 00000000 __SHD () C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-01-18 17:02 - 2014-01-18 17:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-18 17:01 - 2014-01-18 16:47 - 00000000 ____D () C:\ProgramData\TuneUp Software
2014-01-18 16:49 - 2014-01-18 16:49 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\TuneUp Software
2014-01-18 15:15 - 2009-08-16 21:05 - 00000000 ____D () C:\Users\Lubos\Desktop\PÍSNIČKY
2014-01-18 15:10 - 2014-01-18 15:10 - 00002278 _____ () C:\Users\Lubos\Desktop\Google Chrome.lnk
2014-01-18 15:10 - 2014-01-18 15:10 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-01-18 15:10 - 2012-06-04 21:53 - 00000000 ____D () C:\Users\Lubos\AppData\Local\Google
2014-01-18 15:08 - 2014-01-18 15:08 - 00000000 ____D () C:\Program Files\Google chrome 15.0.874.102 cz
2014-01-18 15:02 - 2014-01-18 15:02 - 00000000 ____D () C:\Users\Lubos\AppData\Roaming\Opera Software
2014-01-18 15:02 - 2014-01-18 15:02 - 00000000 ____D () C:\Users\Lubos\AppData\Local\Opera Software
2014-01-18 15:02 - 2014-01-18 15:01 - 00000000 ____D () C:\Program Files\Opera
2014-01-18 15:01 - 2014-01-18 15:02 - 00001091 _____ () C:\Users\Public\Desktop\Opera.lnk
2014-01-18 15:01 - 2014-01-18 15:00 - 00000000 ____D () C:\Extracted
2014-01-18 14:49 - 2014-01-18 14:49 - 00000017 _____ () C:\Users\Lubos\AppData\Local\resmon.resmoncfg

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-02-12 17:25




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:60.01 GB) (Free:14.44 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:89.04 GB) (Free:25.94 GB) NTFS
Drive f: (WD My Book Essential 3TB) (Fixed) (Total:2794.49 GB) (Free:811 GB) NTFS

Available physical RAM: 235.03 MB
Total physical RAM: 1015.43 MB
Percentage of memory in use: 76%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: 626EDB30)
Partition 1: (Active) - (Size=60 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=89 GB) - (Type=05)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:A31FAD21

==================== Security Center ==================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Lubos\Desktop" je 6662 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe
C:\Windows\ehome\ehTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds
C:\Windows\system32\hkcmd.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray
C:\Windows\system32\igfxtray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair
C:\Program Files\Logitech\Video\ISStart.exe /RegAll [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray
C:\Program Files\Logitech\Video\LogiTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msaqalckSrv
"C:\Windows\system32\msaqalck.vbe" msyqedt msabru [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msxhhgSrv
"C:\Windows\system32\msxhhg.vbe" msyxkgw msrfjiln [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence
C:\Windows\system32\igfxpers.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDP
C:\Program Files\FilesFrog Update Checker\update_checker.exe /auto [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]


==================== End Of Log ==============================

[Rudy]

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start
HKCU\Software\Microsoft\Internet Explorer\Main,ICQ Search = http://search.icq.com/search/results.ph ... &ch_id=osd
HKCU\Software\Microsoft\Internet Explorer\Main,bProtector Start Page = http://www.delta-search.com/?affID=1198 ... 19DB83B78D
SearchScopes: HKCU - DefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 19DB83B78D
SearchScopes: HKCU - bProtectorDefaultScope {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchT ... 19DB83B78D
SearchScopes: HKCU - {2A994959-0E61-45CF-931D-0AE6EAEBF9FF} URL = http://search.icq.com/search/results.ph ... &ch_id=osd
SearchScopes: HKCU - {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
BHO: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
C:\Program Files\Skype\Toolbars
FF ProfilePath: C:\Users\Lubos\AppData\Roaming\Mozilla\Firefox\Profiles\xz6o72xh.default
FF NewTab: hxxp://www.delta-search.com/?affID=1198 ... 19DB83B78D
FF DefaultSearchEngine: Delta Search
FF SearchEngineOrder.1: Delta Search
FF SelectedSearchEngine: Delta Search
R2 Skype C2C Service; C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)
S1 bflardep; \??\C:\Windows\system32\drivers\bflardep.sys [X]
C:\Windows\system32\msyxkgw.vbe
C:\Windows\system32\msrfjiln.vbe
C:\Windows\system32\msxhhg.vbe
AlternateDataStreams: C:\ProgramData\TEMP:A31FAD21
C:\Windows\system32\msaqalck.vbe
C:\Windows\system32\msxhhg.vbe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msaqalckSrv
"C:\Windows\system32\msaqalck.vbe" msyqedt msabru [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msxhhgSrv
"C:\Windows\system32\msxhhg.vbe" msyxkgw msrfjiln [x]
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[marquesb51]

Omlouvám se za pozdní odpověď, problém je již vyřešen.

[Rudy]

OK.