Stránka 1 z 1

Prosím o kontrolu logu

Napsal: 22 úno 2014 14:52
od kRt3k
Ahoj, prosím o kontrolu logu, prohlížeč občas vyhodí nějaké okno s reklamou..

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 22-02-2014 01
Ran by standard (administrator) on MORAVOVA on 22-02-2014 14:48:31
Running from C:\Users\standard\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\PROGRAM FILES\MICROSOFT SECURITY CLIENT\MSMPENG.EXE
(Validity Sensors, Inc.) C:\Windows\system32\vcsFPService.exe
(NVIDIA Corporation) C:\PROGRAM FILES\NVIDIA CORPORATION\DISPLAY\NVXDSYNC.EXE
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\WINDOWS\SYSTEM32\WLANEXT.EXE
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(DigitalPersona, Inc.) C:\PROGRAM FILES (X86)\DIGITALPERSONA\BIN\DPAGENT.EXE
(SUPERAntiSpyware.com) C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE
(ABBYY) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(ABBYY) C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Realtek Semiconductor) C:\PROGRAM FILES\REALTEK\AUDIO\HDA\RTKNGUI64.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXTRAY.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\HKCMD.EXE
(Intel Corporation) C:\WINDOWS\SYSTEM32\IGFXPERS.EXE
(Alps Electric Co., Ltd.) C:\PROGRAM FILES\DELLTPAD\APOINT.EXE
() C:\PROGRAM FILES (X86)\STMICROELECTRONICS\ACCELEROMETERP11\FF_PROTECTION.EXE
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel(R) Corporation) C:\PROGRAM FILES\COMMON FILES\INTEL\WIRELESSCOMMON\IFRMEWRK.EXE
(CrypKey (Canada) Ltd.) C:\WINDOWS\SYSTEM32\CRYPSERV.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50STB.EXE
(Dell Inc.) C:\PROGRAM FILES\DELL\QUICKSET\QUICKSET.EXE
(SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S50RPB.EXE
(Dell Computer Corporation) C:\DELL\DBRM\REMINDER\DBRMTRAYICON.EXE
(Intel(R) Corporation) C:\PROGRAM FILES\INTEL\WIFI\BIN\EVTENG.EXE
(Alps Electric Co., Ltd.) C:\PROGRAM FILES\DELLTPAD\APMSGFWD.EXE
(Microsoft Corporation) C:\PROGRAM FILES\MICROSOFT SECURITY CLIENT\MSSECES.EXE
(Crawler.com) C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DPAgent.exe
(Alps Electric Co., Ltd.) C:\PROGRAM FILES\DELLTPAD\HIDFIND.EXE
(Alps Electric Co., Ltd.) C:\PROGRAM FILES\DELLTPAD\APNTEX.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Ai Squared ) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\ZT.EXE
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.22.5\GOOGLECRASHHANDLER.EXE
(Microsoft Corporation) C:\PROGRAM FILES\WINDOWS SIDEBAR\SIDEBAR.EXE
(Ai Squared ) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\ZOOMTEXTHELPERSERVICE.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.22.5\GOOGLECRASHHANDLER64.EXE
(Somoto) C:\USERS\STANDARD\APPDATA\LOCAL\FILESFROG UPDATE CHECKER\UPDATE_CHECKER.EXE
(Microsoft Corporation) C:\PROGRAM FILES\MICROSOFT SECURITY CLIENT\NISSRV.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\BLUETOOTH\MEDIASRV.EXE
() C:\PROGRAM FILES (X86)\KALENDAR\KALENDAR.EXE
() C:\USERS\STANDARD\APPDATA\LOCAL\WEBPLAYER\APPSHAT\WEBPLAYER.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\BLUETOOTH\BTPLAYERCTRL.EXE
(CyberLink Corp.) C:\PROGRAM FILES (X86)\CYBERLINK\POWERDVD9\PDVD9SERV.EXE
(Creative Technology Ltd) C:\PROGRAM FILES (X86)\DELL WEBCAM\DELL WEBCAM CENTRAL\WEBCAMDELL2.EXE
() C:\PROGRAM FILES (X86)\ROXIO\OEM\ROXIO BURN\ROXIOBURNLAUNCHER.EXE
(SEIKO EPSON CORPORATION) C:\PROGRAM FILES (X86)\EPSON SOFTWARE\EVENT MANAGER\EEVENTMANAGER.EXE
(Ai Squared ) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\PROTECTEDUI.EXE
(Ai Squared ) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\X64\PROTECTEDUI64.EXE
(Ai Squared) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\WIN32\AISQUARED.LOADER.ELEVATED.EXE
(Ai Squared) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\WIN64\AISQUARED.LOADER.ELEVATED.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\LMS\LMS.EXE
(Nero AG) C:\PROGRAM FILES (X86)\NERO\UPDATE\NASVC.EXE
(NVIDIA Corporation) C:\PROGRAM FILES (X86)\NVIDIA CORPORATION\NVIDIA UPDATUS\DAEMONU.EXE
(Intel Corporation) C:\PROGRAM FILES (X86)\INTEL\INTEL(R) MANAGEMENT ENGINE COMPONENTS\UNS\UNS.EXE
(Ai Squared ) C:\PROGRAM FILES (X86)\ZOOMTEXT 10\X64\ZTUAC64.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE
(Google Inc.) C:\USERS\STANDARD\APPDATA\LOCAL\GOOGLE\CHROME\APPLICATION\CHROME.EXE


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6629480 2011-04-15] (Realtek Semiconductor)
HKLM\...\Run: [NVHotkey] - C:\Windows\system32\nvHotkey.dll [312936 2011-04-22] (NVIDIA Corporation)
HKLM\...\Run: [Apoint] - C:\Program Files\DellTPad\Apoint.exe [609144 2011-04-13] (Alps Electric Co., Ltd.)
HKLM\...\Run: [FreeFallProtection] - C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [727664 2010-10-01] ()
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-07-28] (Intel(R) Corporation)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10365952 2011-05-19] (Intel Corporation)
HKLM\...\Run: [QuickSet] - c:\Program Files\Dell\QuickSet\QuickSet.exe [4500640 2011-03-11] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] - wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [DBRMTray] - C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [227328 2011-03-08] (Dell Computer Corporation)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777296 2012-09-07] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] - C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [RemoteControl9] - C:\Program Files (x86)\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2010-10-01] (CyberLink Corp.)
HKLM-x32\...\Run: [PDVD9LanguageShortcut] - C:\Program Files (x86)\CyberLink\PowerDVD9\Language\Language.exe [50472 2010-09-18] (CyberLink Corp.)
HKLM-x32\...\Run: [Dell Webcam Central] - C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [RoxWatchTray] - C:\Program Files (x86)\Common Files\Roxio Shared\OEM\12.0\SharedCOM\RoxWatchTray12OEM.exe [240112 2010-11-25] (Sonic Solutions)
HKLM-x32\...\Run: [Desktop Disc Tool] - C:\Program Files (x86)\Roxio\OEM\Roxio Burn\RoxioBurnLauncher.exe [514544 2010-11-17] ()
HKLM-x32\...\Run: [Bonus.SSR.FR11] - C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [934152 2011-11-01] (ABBYY.)
HKLM-x32\...\Run: [EEventManager] - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [979328 2010-10-12] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM\...\RunOnce: [DBRMTray] - C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-05] (Microsoft)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [ZoomText] - C:\Program Files (x86)\ZoomText 10\ZT.exe [5063808 2013-10-31] (Ai Squared )
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [Google Update] - C:\Users\standard\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2012-03-03] (Google Inc.)
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [EPSON SX430 Series] - C:\Windows\system32\spool\DRIVERS\x64\3\E_IATIHAE.EXE [232448 2012-05-09] (SEIKO EPSON CORPORATION)
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [SDP] - C:\Users\standard\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [AppsHat] - C:\Users\standard\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [Kalendar] - C:\Program Files (x86)\Kalendar\kalendar.exe [580608 2005-11-09] ()
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\Run: [Apps Hat] - C:\Users\standard\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {2c852472-7904-11e3-b79e-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {2c852499-7904-11e3-b79e-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {7c27068f-8d71-11e3-981f-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {8077720a-8728-11e3-bf43-4c80931ff044} - E:\DT4000_Launcher.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-04-22] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [193128 2011-04-22] (NVIDIA Corporation)
Lsa: [Notification Packages] DPPassFilter scecli

==================== Internet (Whitelisted) ====================

ProxyServer: vsproxy.kb.cz:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://intranet.kb.cz/KBNET/cz/default.aspx
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... tbid=60747
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60747
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60747
URLSearchHook: HKCU - &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {AB56F085-1A76-4130-A982-0B2B621A089B} URL =
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatche ... tbid=60747
SearchScopes: HKCU - {AB56F085-1A76-4130-A982-0B2B621A089B} URL =
BHO: Apps Hat Mini - {11111111-1111-1111-1111-110511031101} - C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-bho64.dll (Nero)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: No Name - {DBC80044-A445-435b-BC74-9C25C1C588A9} - No File
BHO-x32: Apps Hat Mini - {11111111-1111-1111-1111-110511031101} - C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-bho.dll (Nero)
BHO-x32: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Easy Photo Print - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
Toolbar: HKLM-x32 - &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
Toolbar: HKCU - No Name - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/pub/s ... wflash.cab
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - No File
Handler-x32: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
Tcpip\Parameters: [DhcpNameServer] 192.168.100.252

Chrome:
=======
CHR HomePage: hxxp://www.google.cz/
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: http://avira.search.ask.com/web?tpid=AV ... earchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\standard\AppData\Local\Google\Chrome\Application\33.0.1750.117\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\standard\AppData\Local\Google\Chrome\Application\33.0.1750.117\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\standard\AppData\Local\Google\Chrome\Application\33.0.1750.117\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.270.7) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U27) - C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll No File
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Windows Live™ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\standard\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\standard\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-03-03]
CHR Extension: (Vyhledávání Google) - C:\Users\standard\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-03-03]
CHR Extension: (Apps Hat Mini) - C:\Users\standard\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbibhpbpkppfpcgopfbkokifpfiacdok [2014-01-30]
CHR Extension: (Peněženka Google) - C:\Users\standard\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-25]
CHR Extension: (Gmail) - C:\Users\standard\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-03-03]
CHR StartMenuInternet: Google Chrome - C:\Users\standard\AppData\Local\Google\Chrome\Application\chrome.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\PROGRAM FILES\SUPERANTISPYWARE\SASCORE64.EXE [144152 2013-10-10] (SUPERAntiSpyware.com)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [819976 2011-10-12] (ABBYY)
R2 ABBYY.Licensing.FineReader.Sprint.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048 2009-05-14] (ABBYY)
R2 Crypkey License; C:\Windows\system32\crypserv.exe [122880 2007-05-23] (CrypKey (Canada) Ltd.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-07-28] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1148632 2012-03-28] (Crawler.com)
R2 ZoomText Helper Service; C:\Program Files (x86)\ZoomText 10\ZoomTextHelperService.exe [17024 2013-10-31] (Ai Squared )

==================== Drivers (Whitelisted) ====================

R1 Ai2Chroniker; C:\Windows\System32\DRIVERS\Ai2Chroniker.sys [14016 2013-11-14] (Ai Squared )
R3 Ai2Mmpd; C:\Windows\System32\DRIVERS\Ai2Mmpd.sys [12992 2013-11-14] (Ai Squared )
S3 GenericMount; C:\Windows\System32\DRIVERS\GenericMount.sys [66608 2010-02-12] (Symantec Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R1 NetworkX; C:\Windows\system32\ckldrv.sys [27904 2007-05-17] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2012-05-29] (Windows (R) Win 7 DDK provider)
S3 PCDSRVC{D3412D80-CF3B4A27-06020200}_0; \??\c:\program files\my dell\pcdsrvc_x64.pkms [X]
U2 V2iMount;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-02-22 14:48 - 2014-02-22 14:48 - 00020570 _____ () C:\Users\standard\Desktop\FRST.txt
2014-02-22 14:48 - 2014-02-22 14:48 - 00000000 ____D () C:\FRST
2014-02-22 14:46 - 2014-02-22 14:46 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\FRSTLauncher (2).exe
2014-02-22 14:45 - 2014-02-22 14:45 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\Nepotvrzeno 935500.crdownload
2014-02-22 14:45 - 2014-02-22 14:45 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\Nepotvrzeno 788323.crdownload
2014-02-22 14:45 - 2014-02-22 14:44 - 02154496 _____ (Farbar) C:\Users\standard\Desktop\FRST64.exe
2014-02-22 14:44 - 2014-02-22 14:44 - 02154496 _____ (Farbar) C:\Users\standard\Downloads\FRST64.exe
2014-02-22 14:29 - 2014-02-22 14:29 - 00000124 _____ () C:\Windows\error.log
2014-02-22 14:28 - 2014-02-22 14:28 - 00000338 _____ () C:\Windows\PFRO.log
2014-02-22 14:28 - 2014-02-22 14:28 - 00000056 _____ () C:\Windows\setupact.log
2014-02-22 14:28 - 2014-02-22 14:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 09:48 - 2014-02-22 09:48 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-21 11:25 - 2014-02-21 11:50 - 00010406 _____ () C:\Users\standard\Desktop\rozvrh - březen.xlsx
2014-02-21 11:14 - 2014-02-21 11:49 - 00037888 _____ () C:\Users\standard\Downloads\Semináře_FDV_-_Rozvrh.xls
2014-02-15 16:12 - 2014-02-15 16:12 - 00000000 ____D () C:\ProgramData\APN
2014-02-15 16:06 - 2014-02-21 15:55 - 00000516 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 71298db2-d587-455b-b1a8-abe3543afebf.job
2014-02-15 16:06 - 2014-02-15 16:06 - 00003526 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 71298db2-d587-455b-b1a8-abe3543afebf
2014-02-15 15:54 - 2014-02-15 15:54 - 00000000 ____D () C:\Users\standard\AppData\Roaming\SUPERAntiSpyware.com
2014-02-15 15:53 - 2014-02-15 15:54 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-02-15 15:53 - 2014-02-15 15:53 - 00001810 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-02-15 15:53 - 2014-02-15 15:53 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-02-12 23:47 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 23:47 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 23:46 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 23:46 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 23:46 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 23:46 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 23:46 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 23:46 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 23:46 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 23:46 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 23:46 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 23:46 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 23:46 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 23:46 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 23:46 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 23:46 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 23:46 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 23:46 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 23:46 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 23:46 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 23:46 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 23:46 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 23:46 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 23:46 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 23:46 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 23:46 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 23:46 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 23:46 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 23:45 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 23:45 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 23:45 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 23:45 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 23:45 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 23:45 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 23:45 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 23:45 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 23:45 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 23:45 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 23:45 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 23:45 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 23:45 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 18:23 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 18:23 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 18:23 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 18:23 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 18:23 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 18:23 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 18:23 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 18:23 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 18:23 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 18:23 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 18:23 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 18:23 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 18:23 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 18:23 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 18:23 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 18:23 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 18:23 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 18:23 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 18:23 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 18:23 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 18:23 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 18:23 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 18:23 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 18:23 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 18:23 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 18:23 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 18:23 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 18:23 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-02 11:30 - 2014-02-02 11:30 - 00000000 ____D () C:\Users\standard\Downloads\Školní-zralost,-Jiřina-Bednářová,-Vlasta-Šmardová,-
2014-01-30 10:10 - 2014-02-22 14:28 - 00001552 _____ () C:\Windows\Tasks\Apps Hat Mini-updater.job
2014-01-30 10:10 - 2014-01-30 10:10 - 00004582 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-updater
2014-01-30 10:10 - 2014-01-30 10:10 - 00002129 _____ () C:\Users\standard\Desktop\AppsHat.lnk
2014-01-30 10:09 - 2014-02-22 14:28 - 00002684 _____ () C:\Windows\Tasks\Apps Hat Mini-firefoxinstaller.job
2014-01-30 10:09 - 2014-02-22 14:28 - 00002174 _____ () C:\Windows\Tasks\Apps Hat Mini-chromeinstaller.job
2014-01-30 10:09 - 2014-02-22 14:28 - 00001502 _____ () C:\Windows\Tasks\Apps Hat Mini-codedownloader.job
2014-01-30 10:09 - 2014-02-22 14:28 - 00001380 _____ () C:\Windows\Tasks\Apps Hat Mini-enabler.job
2014-01-30 10:09 - 2014-01-30 10:10 - 00000000 ____D () C:\Program Files (x86)\Apps Hat Mini
2014-01-30 10:09 - 2014-01-30 10:09 - 00004532 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-codedownloader
2014-01-30 10:09 - 2014-01-30 10:09 - 00004410 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-enabler

==================== One Month Modified Files and Folders =======

2014-02-22 14:48 - 2014-02-22 14:48 - 00020570 _____ () C:\Users\standard\Desktop\FRST.txt
2014-02-22 14:48 - 2014-02-22 14:48 - 00000000 ____D () C:\FRST
2014-02-22 14:48 - 2012-11-07 09:50 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-22 14:46 - 2014-02-22 14:46 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\FRSTLauncher (2).exe
2014-02-22 14:45 - 2014-02-22 14:45 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\Nepotvrzeno 935500.crdownload
2014-02-22 14:45 - 2014-02-22 14:45 - 00112640 _____ (forum.viry.cz) C:\Users\standard\Downloads\Nepotvrzeno 788323.crdownload
2014-02-22 14:44 - 2014-02-22 14:45 - 02154496 _____ (Farbar) C:\Users\standard\Desktop\FRST64.exe
2014-02-22 14:44 - 2014-02-22 14:44 - 02154496 _____ (Farbar) C:\Users\standard\Downloads\FRST64.exe
2014-02-22 14:36 - 2009-07-14 05:45 - 00025040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-22 14:36 - 2009-07-14 05:45 - 00025040 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-22 14:35 - 2010-11-21 10:27 - 00666444 _____ () C:\Windows\system32\perfh005.dat
2014-02-22 14:35 - 2010-11-21 10:27 - 00140108 _____ () C:\Windows\system32\perfc005.dat
2014-02-22 14:35 - 2009-07-14 06:13 - 01576554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-22 14:33 - 2011-11-22 14:44 - 01474206 _____ () C:\Windows\WindowsUpdate.log
2014-02-22 14:29 - 2014-02-22 14:29 - 00000124 _____ () C:\Windows\error.log
2014-02-22 14:29 - 2011-11-22 14:42 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-22 14:28 - 2014-02-22 14:28 - 00000338 _____ () C:\Windows\PFRO.log
2014-02-22 14:28 - 2014-02-22 14:28 - 00000056 _____ () C:\Windows\setupact.log
2014-02-22 14:28 - 2014-02-22 14:28 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-22 14:28 - 2014-01-30 10:10 - 00001552 _____ () C:\Windows\Tasks\Apps Hat Mini-updater.job
2014-02-22 14:28 - 2014-01-30 10:09 - 00002684 _____ () C:\Windows\Tasks\Apps Hat Mini-firefoxinstaller.job
2014-02-22 14:28 - 2014-01-30 10:09 - 00002174 _____ () C:\Windows\Tasks\Apps Hat Mini-chromeinstaller.job
2014-02-22 14:28 - 2014-01-30 10:09 - 00001502 _____ () C:\Windows\Tasks\Apps Hat Mini-codedownloader.job
2014-02-22 14:28 - 2014-01-30 10:09 - 00001380 _____ () C:\Windows\Tasks\Apps Hat Mini-enabler.job
2014-02-22 14:28 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-22 14:20 - 2012-03-03 18:00 - 00000974 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001UA.job
2014-02-22 14:17 - 2011-11-22 15:32 - 00000000 ____D () C:\ProgramData\Sonic
2014-02-22 11:37 - 2013-05-22 11:38 - 00003440 _____ () C:\Windows\System32\Tasks\PCDEventLauncherTask
2014-02-22 10:20 - 2012-03-03 18:00 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001Core.job
2014-02-22 09:48 - 2014-02-22 09:48 - 17858952 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-22 09:48 - 2012-11-07 09:50 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-22 09:48 - 2012-11-07 09:50 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-22 09:48 - 2012-11-07 09:50 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-22 08:23 - 2012-03-03 18:01 - 00002387 _____ () C:\Users\standard\Desktop\Google Chrome.lnk
2014-02-22 08:02 - 2012-05-29 20:22 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-02-21 15:55 - 2014-02-15 16:06 - 00000516 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 71298db2-d587-455b-b1a8-abe3543afebf.job
2014-02-21 12:01 - 2013-05-22 11:38 - 00000000 ____D () C:\Program Files\My Dell
2014-02-21 12:01 - 2012-02-22 10:00 - 00000000 ____D () C:\ProgramData\PCDr
2014-02-21 11:50 - 2014-02-21 11:25 - 00010406 _____ () C:\Users\standard\Desktop\rozvrh - březen.xlsx
2014-02-21 11:49 - 2014-02-21 11:14 - 00037888 _____ () C:\Users\standard\Downloads\Semináře_FDV_-_Rozvrh.xls
2014-02-21 09:52 - 2014-01-09 10:37 - 00000000 ____D () C:\Users\standard\Desktop\KB
2014-02-18 10:15 - 2012-03-03 18:00 - 00003954 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001UA
2014-02-18 10:15 - 2012-03-03 18:00 - 00003558 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001Core
2014-02-17 20:58 - 2013-08-14 20:35 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 20:56 - 2012-02-22 08:00 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-15 16:12 - 2014-02-15 16:12 - 00000000 ____D () C:\ProgramData\APN
2014-02-15 16:06 - 2014-02-15 16:06 - 00003526 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 71298db2-d587-455b-b1a8-abe3543afebf
2014-02-15 15:54 - 2014-02-15 15:54 - 00000000 ____D () C:\Users\standard\AppData\Roaming\SUPERAntiSpyware.com
2014-02-15 15:54 - 2014-02-15 15:53 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-02-15 15:53 - 2014-02-15 15:53 - 00001810 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-02-15 15:53 - 2014-02-15 15:53 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-02-14 02:21 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-13 00:11 - 2012-02-22 10:43 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-13 00:10 - 2011-02-15 08:08 - 01555776 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-11 11:10 - 2014-01-15 13:17 - 00001994 ____H () C:\Users\standard\Documents\Default.rdp
2014-02-11 10:07 - 2009-07-14 06:32 - 00000000 ____D () C:\Windows\system32\FxsTmp
2014-02-06 13:16 - 2014-02-12 23:46 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 23:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 23:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 23:45 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 23:46 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 23:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 23:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 23:46 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 23:46 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 23:46 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 23:46 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 23:46 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 23:45 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 23:46 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 23:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 23:46 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 23:45 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 23:46 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 23:46 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 23:46 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:57 - 2014-02-12 23:45 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:52 - 2014-02-12 23:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 23:46 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 23:45 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 23:46 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 23:46 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 23:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-12 23:46 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:25 - 2014-02-12 23:45 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:24 - 2014-02-12 23:45 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 23:45 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 23:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 23:45 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 23:45 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 23:45 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 23:45 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 23:46 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 23:45 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 23:46 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-05 15:58 - 2013-11-14 12:30 - 00002158 _____ () C:\Users\standard\Desktop\FLV Player.lnk
2014-02-05 15:58 - 2013-09-15 13:34 - 00000000 ____D () C:\Users\standard\AppData\Local\WebPlayer
2014-02-02 15:14 - 2012-04-05 19:06 - 00000000 ____D () C:\Users\standard\Desktop\SPPG
2014-02-02 11:30 - 2014-02-02 11:30 - 00000000 ____D () C:\Users\standard\Downloads\Školní-zralost,-Jiřina-Bednářová,-Vlasta-Šmardová,-
2014-01-30 10:10 - 2014-01-30 10:10 - 00004582 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-updater
2014-01-30 10:10 - 2014-01-30 10:10 - 00002129 _____ () C:\Users\standard\Desktop\AppsHat.lnk
2014-01-30 10:10 - 2014-01-30 10:09 - 00000000 ____D () C:\Program Files (x86)\Apps Hat Mini
2014-01-30 10:09 - 2014-01-30 10:09 - 00004532 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-codedownloader
2014-01-30 10:09 - 2014-01-30 10:09 - 00004410 _____ () C:\Windows\System32\Tasks\Apps Hat Mini-enabler

Some content of TEMP:
====================
C:\Users\standard\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Apps Hat Mini-chromeinstaller.job => C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Apps Hat Mini-codedownloader.job => C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Apps Hat Mini-enabler.job => C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Apps Hat Mini-firefoxinstaller.job => C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Apps Hat Mini-updater.job => C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-updater.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001Core.job => C:\Users\standard\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001UA.job => C:\Users\standard\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 71298db2-d587-455b-b1a8-abe3543afebf.job => C:\PROGRAM FILES\SUPERANTISPYWARE\SASTask.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\standard\Desktop" je 14390 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: Prosím o kontrolu logu

Napsal: 22 úno 2014 17:45
od Rudy
Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKLM-x32\...\Run: [] - [X]
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {2c852472-7904-11e3-b79e-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {2c852499-7904-11e3-b79e-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {7c27068f-8d71-11e3-981f-4c80931ff044} - E:\DT4000_Launcher.exe
HKU\S-1-5-21-3978708776-1634146858-1730522941-1001\...\MountPoints2: {8077720a-8728-11e3-bf43-4c80931ff044} - E:\DT4000_Launcher.exe
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.crawler.com/search/dispatche ... p=aus&qkw=%s&tbid=60747
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60747
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_custo ... TbId=60747
URLSearchHook: HKCU - &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {AB56F085-1A76-4130-A982-0B2B621A089B} URL =
SearchScopes: HKCU - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} URL = http://www.crawler.com/search/dispatche ... tp=bs&qkw={searchTerms}&tbid=60747
SearchScopes: HKCU - {AB56F085-1A76-4130-A982-0B2B621A089B} URL =
BHO: Apps Hat Mini - {11111111-1111-1111-1111-110511031101} - C:\Program Files (x86)\Apps Hat Mini\Apps Hat Mini-bho64.dll (Nero)
BHO-x32: &Crawler Toolbar Helper - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
Toolbar: HKLM-x32 - &Crawler lišta - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
Toolbar: HKCU - No Name - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
Handler: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - No File
Handler-x32: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\Program Files (x86)\Crawler\Toolbar\ctbr.dll (Crawler.com)
CHR DefaultSearchKeyword: ask search
CHR DefaultSearchProvider: Ask Search
CHR DefaultSearchURL: http://avira.search.ask.com/web?tpid=AV ... =&crxv=&q={searchTerms}
CHR DefaultNewTabURL:
C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001UA
C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001Core
C:\Users\standard\AppData\Local\Temp
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001Core.job => C:\Users\standard\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3978708776-1634146858-1730522941-1001UA.job => C:\Users\standard\AppData\Local\Google\Update\GoogleUpdate.exe
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.