V PC neběží žádná aplikace
Napsal: 25 úno 2014 13:47
Zdravím Vás,
obracím se s prosbou o záchranu mého ntb. Včera jsem PC normálně vypl a dnes po zapnutí na mě vyskákalo pár dialogových oken, který mi hlásili nemožnost zapnutí autorun programů. V celém ntb běží jen avast jinak při pokusu otevřít nějakou aplikaci mi to hlásí buď chybější knihovnu nebo prostě chybu ( i z důvodu zavirovaného PC) povedlo se mi udělat FRST log prosím o pomoc. Mám při ruce Hiren's Boot CD pomůže mi? Všechny data vidím, ale když jsem chtěl zálohovat něco, tak mi to napsalo že je ten soubor infikovaný (hláška z woken ne z avastu).
FRST log:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-02-2014 01
Ran by ICISAH (administrator) on ICISAH-E520 on 25-02-2014 13:39:43
Running from C:\Users\ICISAH\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(HP) C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
(HP) C:\Windows\system32\HPSIsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\system32\wbem\WMIADAP.EXE
(Apple Inc.) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
(forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380776 2011-03-29] (Lenovo.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [41320 2011-01-27] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] - C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281448 2010-12-17] (Lenovo Group Limited)
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [5989688 2011-01-05] (Lenovo Group Limited)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [310912 2011-04-26] (Conexant Systems, Inc.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [31592 2011-04-14] (Lenovo)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AtwtusbIcon] - C:\Windows\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [634880 2012-04-01] ()
HKLM-x32\...\Run: [HPUsageTrackingLEDM] - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [GIGABYTEMOUSE] - C:\Users\ICISAH\Documents\GIGABYTE\GIGABYTE Sim\Mouse.exe [1308672 2012-12-03] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-02] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Rainlendar2] - C:\Program Files (x86)\Rainlendar2PRO\Rainlendar2.exe [4411488 2014-01-20] ()
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Google Update] - C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-22] (Google Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Advanced SystemCare 5] - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe [620376 2011-12-29] (IObit)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Akamai NetSession Interface] - C:\Users\ICISAH\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Zoner Photo Studio Service 16] - E:\Programy\ZONER\Photo Studio 16\Program32\ZPSService.exe [27672 2013-10-18] ()
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Zoner Photo Studio Autoupdate] - E:\Programy\ZONER\Photo Studio 16\Program32\ZPSTRAY.EXE [801816 2013-10-18] (ZONER software)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {611d651a-27ac-11e1-9c2a-402cf453766a} - F:\autostart.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {792fa2c6-bd3b-11e0-a894-806e6f6e6963} - Q:\LenovoQDrive.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {bd827d4e-1808-11e1-88a5-402cf453766a} - F:\AutoRun.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {c9c8e560-d303-11e0-a3ef-f0def17730f0} - G:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll ACGina
Startup: C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\ICISAH\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... 9&tsp=5007
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {673DB5E7-0FD7-4D6F-92B6-44E0D413BDDB} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={search ... 9&tsp=5007
SearchScopes: HKCU - {673DB5E7-0FD7-4D6F-92B6-44E0D413BDDB} URL =
SearchScopes: HKCU - {B38E7245-E97E-438A-9926-C5AF0D8A4673} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SelectionLinks - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - C:\Program Files (x86)\OApps\SelectionLinks.dll (SelectionLinks)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.1.2
FireFox:
========
FF ProfilePath: C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default
FF user.js: detected! => C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\user.js
FF SearchEngineOrder.1: Search the web (Babylon)
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ICISAH\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ICISAH\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPSibelius.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\PDFNetC.dll (PDFTron Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ScorchPDFWrapper.dll ()
FF SearchPlugin: C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\searchplugins\doplky-pro-firefox.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\cs@dictionaries.addons.mozilla.org [2013-01-13]
FF Extension: DownloadHelper - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: SelectionLinks - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{E6F44E5E-D885-4431-B9E4-CAB525E06554} [2013-04-28]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\paulsaintuzb@gmail.com.xpi [2013-09-22]
FF Extension: Test Pilot - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-02-19]
FF Extension: Speed Dial - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-08-29]
FF Extension: FireFTP - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi [2011-09-01]
FF Extension: Download Statusbar - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-08-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-08-29]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-11-27]
FF HKCU\...\Firefox\Extensions: [{FCF36B88-1BBA-487f-B64B-D2E8980A9293}] - C:\Program Files (x86)\Lenovo\Client Security Solution\PWM Firefox Extension
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Client Security Solution\PWM Firefox Extension [2011-08-30]
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 AdvancedSystemCareService5; C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [497496 2011-12-29] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-02] (AVAST Software)
R2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [362296 2010-05-11] (HP)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [820568 2011-07-20] (IObit)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43028328 2011-09-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
S2 Siemens PLM License Server; E:\Programy\NX\lmgrd.exe [1789776 2012-02-19] (Flexera Software, Inc.)
S2 Správce výběru OS; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2010-07-07] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [370024 2011-09-22] (Microsoft Corporation)
S2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [443240 2011-03-02] (Lenovo Group Limited)
S2 WTService; C:\Windows\system32\atwtusb.exe [581120 2012-09-20] ()
==================== Drivers (Whitelisted) ====================
S3 ALSysIO; No ImagePath
S1 ASPI32; No ImagePath
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-23] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-23] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-16] (DT Soft Ltd)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [20336 2011-07-11] ()
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2009-12-15] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-12-15] (Huawei Technologies Co., Ltd.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [33184 2011-03-22] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2010-11-26] ()
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [203672 2013-06-04] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 StarOpen; No ImagePath
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [21328 2011-03-22] (IObit.com)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 clwvd6; system32\DRIVERS\clwvd6.sys [X]
S3 CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfoX64.sys [X]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X]
S3 SNP2STD; system32\DRIVERS\snp2sxp.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-25 13:39 - 2014-02-25 13:40 - 00023835 _____ () C:\Users\ICISAH\Desktop\FRST.txt
2014-02-25 13:39 - 2014-02-25 13:39 - 00000000 ____D () C:\FRST
2014-02-25 13:38 - 2014-02-25 13:35 - 02156032 _____ (Farbar) C:\Users\ICISAH\Desktop\FRST64.exe
2014-02-25 13:38 - 2014-02-25 13:32 - 00112640 _____ (forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
2014-02-25 07:57 - 2014-02-25 08:04 - 00006400 _____ () C:\Windows\PFRO.log
2014-02-24 23:18 - 2014-02-24 23:23 - 00000000 ____D () C:\Users\ICISAH\Desktop\besednice
2014-02-23 16:16 - 2014-02-23 16:16 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-21 17:33 - 2014-02-21 17:36 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Extensions
2014-02-21 17:33 - 2008-10-21 15:56 - 09037312 _____ (Codejock Software) C:\Windows\system32\toolkitpro1202vc80.dll
2014-02-21 17:33 - 2001-07-31 02:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3a.dll
2014-02-21 17:29 - 2014-02-21 17:36 - 00000000 ____D () C:\ProgramData\Extensions
2014-02-21 17:15 - 2014-02-25 13:23 - 00000168 _____ () C:\Windows\setupact.log
2014-02-21 17:15 - 2014-02-21 17:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 19:38 - 2011-04-16 01:13 - 00003787 ____R () C:\ProgramData\P1210OS.HTM
2014-02-15 19:38 - 2010-03-30 11:12 - 00024772 _____ () C:\ProgramData\P1210DEF.css
2014-02-15 11:41 - 2014-02-15 11:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 07:59 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 07:59 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 07:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 07:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 07:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 07:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 07:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 07:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 07:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 07:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 07:58 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 07:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 07:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 07:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 07:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 07:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 07:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 07:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 07:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 07:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 07:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 07:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 07:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 07:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 07:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 07:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 07:58 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 07:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 07:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 07:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 07:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 07:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 07:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 07:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 07:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 07:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 07:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 07:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 07:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 07:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 07:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 15:14 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 15:14 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 15:14 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 15:14 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 15:14 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 15:14 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 15:14 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 15:14 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 15:14 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 15:14 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 15:14 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 15:14 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 15:14 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 15:14 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 15:14 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-10 20:40 - 2014-02-11 17:13 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-02-10 16:08 - 2014-02-10 16:08 - 00000000 ____D () C:\Users\ICISAH\Documents\Avatar
2014-02-10 15:55 - 2014-02-10 15:55 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\CyberLink
2014-02-10 15:54 - 2014-02-10 18:34 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-10 15:54 - 2014-02-10 16:13 - 00000000 ____D () C:\Users\ICISAH\Documents\YouCam
2014-02-10 15:54 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CyberLink
2014-02-10 15:53 - 2014-02-11 17:14 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-10 15:51 - 2014-02-11 17:11 - 00000000 ____D () C:\ProgramData\SUPPORTDIR
2014-02-10 15:51 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\install_clap
2014-02-10 15:47 - 2014-02-10 15:54 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-06 14:48 - 2014-02-06 14:48 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2014-02-04 13:24 - 2014-02-04 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\item
2014-02-04 12:40 - 2014-02-04 13:47 - 00078336 _____ () C:\Users\ICISAH\Desktop\profily.xls
==================== One Month Modified Files and Folders =======
2014-02-25 13:40 - 2014-02-25 13:39 - 00023835 _____ () C:\Users\ICISAH\Desktop\FRST.txt
2014-02-25 13:39 - 2014-02-25 13:39 - 00000000 ____D () C:\FRST
2014-02-25 13:39 - 2013-05-21 11:09 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-25 13:39 - 2011-08-02 20:08 - 00732410 _____ () C:\Windows\system32\perfh005.dat
2014-02-25 13:39 - 2011-08-02 20:08 - 00165164 _____ () C:\Windows\system32\perfc005.dat
2014-02-25 13:39 - 2009-07-14 06:13 - 01762460 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-25 13:38 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-25 13:38 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-25 13:37 - 2011-08-02 20:16 - 01881752 _____ () C:\Windows\WindowsUpdate.log
2014-02-25 13:35 - 2014-02-25 13:38 - 02156032 _____ (Farbar) C:\Users\ICISAH\Desktop\FRST64.exe
2014-02-25 13:35 - 2012-12-23 15:23 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CrashDumps
2014-02-25 13:32 - 2014-02-25 13:38 - 00112640 _____ (forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
2014-02-25 13:24 - 2013-05-21 11:09 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-25 13:23 - 2014-02-21 17:15 - 00000168 _____ () C:\Windows\setupact.log
2014-02-25 13:23 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-25 08:04 - 2014-02-25 07:57 - 00006400 _____ () C:\Windows\PFRO.log
2014-02-25 07:57 - 2011-09-25 20:21 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-02-25 07:57 - 2009-07-14 05:45 - 02427136 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-25 07:56 - 2011-08-29 17:51 - 00000000 ____D () C:\Users\ICISAH
2014-02-24 23:51 - 2012-05-07 07:22 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\AIMP3
2014-02-24 23:49 - 2012-08-20 06:03 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-24 23:23 - 2014-02-24 23:18 - 00000000 ____D () C:\Users\ICISAH\Desktop\besednice
2014-02-24 23:21 - 2011-11-22 13:23 - 00000966 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA.job
2014-02-24 23:15 - 2011-08-29 18:10 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Adobe
2014-02-24 23:06 - 2011-08-30 08:30 - 00000000 ____D () C:\Users\ICISAH\.rainlendar2
2014-02-24 16:21 - 2011-11-22 13:23 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core.job
2014-02-24 15:03 - 2013-10-18 08:00 - 00000000 ____D () C:\Users\ICISAH\Desktop\Kancelar
2014-02-24 14:00 - 2011-09-25 20:21 - 00003500 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-02-24 14:00 - 2011-09-25 20:21 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-02-23 16:47 - 2013-09-22 00:03 - 03655168 ___SH () C:\Users\ICISAH\Desktop\Thumbs.db
2014-02-23 16:17 - 2013-12-02 01:00 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-23 16:16 - 2014-02-23 16:16 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-23 16:16 - 2013-02-28 22:39 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-23 16:16 - 2012-07-11 16:49 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-23 16:16 - 2011-08-29 18:16 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-23 16:16 - 2011-08-29 18:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-22 22:30 - 2011-12-14 10:08 - 00000000 ____D () C:\ProgramData\tmp
2014-02-22 20:52 - 2012-04-20 10:39 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Dropbox
2014-02-22 19:48 - 2011-11-22 13:23 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Google
2014-02-21 18:03 - 2011-11-22 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-02-21 17:58 - 2012-02-17 10:35 - 00000000 ____D () C:\Program Files (x86)\SeaMonkey
2014-02-21 17:56 - 2011-08-29 17:58 - 00000000 ___RD () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-21 17:55 - 2011-08-29 17:54 - 00144224 _____ () C:\Users\ICISAH\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-21 17:54 - 2011-08-02 20:41 - 00000000 ____D () C:\ProgramData\Corel
2014-02-21 17:54 - 2011-08-02 20:41 - 00000000 ____D () C:\Program Files (x86)\Corel
2014-02-21 17:52 - 2011-09-01 10:45 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Deployment
2014-02-21 17:51 - 2011-08-02 20:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-21 17:36 - 2014-02-21 17:33 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Extensions
2014-02-21 17:36 - 2014-02-21 17:29 - 00000000 ____D () C:\ProgramData\Extensions
2014-02-21 17:15 - 2014-02-21 17:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-21 17:00 - 2011-08-30 17:11 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\DAEMON Tools Lite
2014-02-21 11:07 - 2012-05-15 15:34 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\vlc
2014-02-21 09:49 - 2012-08-20 06:03 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 09:49 - 2012-04-18 05:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 09:49 - 2011-08-29 18:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-18 16:59 - 2012-04-20 10:41 - 00000000 ___RD () C:\Users\ICISAH\Dropbox
2014-02-18 16:59 - 2012-04-09 15:53 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Htc
2014-02-18 16:57 - 2009-07-14 03:34 - 00000923 _____ () C:\Windows\win.ini
2014-02-18 16:56 - 2012-04-27 04:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-18 03:05 - 2013-07-24 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 03:01 - 2011-09-02 22:44 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 20:55 - 2011-09-25 20:21 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-02-16 16:34 - 2013-05-21 11:09 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-16 16:34 - 2013-05-21 11:09 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-16 10:10 - 2011-08-30 13:45 - 00000000 ____D () C:\Users\ICISAH\Desktop\Programy
2014-02-16 10:09 - 2011-08-30 08:30 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rainlendar2
2014-02-16 10:08 - 2012-05-22 07:57 - 00000000 ____D () C:\Program Files (x86)\Rainlendar2PRO
2014-02-15 11:41 - 2014-02-15 11:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:18 - 2011-08-30 20:39 - 01741682 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-14 08:18 - 2011-08-29 22:18 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-13 16:16 - 2011-11-22 13:23 - 00003942 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA
2014-02-13 16:16 - 2011-11-22 13:23 - 00003546 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core
2014-02-13 10:59 - 2011-09-25 20:21 - 00004240 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-02-11 17:14 - 2014-02-10 15:53 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-11 17:13 - 2014-02-10 20:40 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-02-11 17:11 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\SUPPORTDIR
2014-02-10 18:34 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-10 16:13 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\Documents\YouCam
2014-02-10 16:08 - 2014-02-10 16:08 - 00000000 ____D () C:\Users\ICISAH\Documents\Avatar
2014-02-10 15:55 - 2014-02-10 15:55 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\CyberLink
2014-02-10 15:54 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CyberLink
2014-02-10 15:54 - 2014-02-10 15:47 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-10 15:51 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\install_clap
2014-02-10 15:45 - 2011-09-09 18:00 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Skype
2014-02-06 14:48 - 2014-02-06 14:48 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2014-02-06 13:16 - 2014-02-14 07:58 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 07:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 07:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 07:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 07:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 07:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 07:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 07:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 07:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 07:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 07:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 07:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 07:58 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 07:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 07:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 07:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 07:58 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 07:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 07:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 07:58 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 07:58 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 07:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 07:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 07:58 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 07:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 07:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 07:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 07:58 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 07:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 07:58 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 07:58 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 07:58 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 07:58 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 07:58 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 07:58 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 07:58 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 07:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 07:58 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 07:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-04 13:47 - 2014-02-04 12:40 - 00078336 _____ () C:\Users\ICISAH\Desktop\profily.xls
2014-02-04 13:24 - 2014-02-04 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\item
2014-01-27 13:43 - 2011-10-15 08:02 - 00000089 _____ () C:\Users\ICISAH\AppData\Local\msmathematics.qat.ICISAH
Files to move or delete:
====================
C:\ProgramData\PKP_DLdy.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\ICISAH\AppData\Local\Temp\BackupSetup.exe
C:\Users\ICISAH\AppData\Local\Temp\Foxit Updater.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-20 00:07
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (System) (Fixed) (Total:72.23 GB) (Free:5.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data) (Fixed) (Total:380.64 GB) (Free:12.34 GB) NTFS
Drive q: (Lenovo_Recovery) (Fixed) (Total:11.72 GB) (Free:1.75 GB) NTFS
Available physical RAM: 2090.97 MB
Total physical RAM: 4007.23 MB
Percentage of memory in use: 47%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 466 GB) (Disk ID: DFB61208)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core.job => C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA.job => C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ICISAH\Desktop" je 1034 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
obracím se s prosbou o záchranu mého ntb. Včera jsem PC normálně vypl a dnes po zapnutí na mě vyskákalo pár dialogových oken, který mi hlásili nemožnost zapnutí autorun programů. V celém ntb běží jen avast jinak při pokusu otevřít nějakou aplikaci mi to hlásí buď chybější knihovnu nebo prostě chybu ( i z důvodu zavirovaného PC) povedlo se mi udělat FRST log prosím o pomoc. Mám při ruce Hiren's Boot CD pomůže mi? Všechny data vidím, ale když jsem chtěl zálohovat něco, tak mi to napsalo že je ten soubor infikovaný (hláška z woken ne z avastu).
FRST log:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 24-02-2014 01
Ran by ICISAH (administrator) on ICISAH-E520 on 25-02-2014 13:39:43
Running from C:\Users\ICISAH\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe
(Lenovo.) C:\Windows\system32\ibmpmsvc.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(UPEK Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKLOAD.exe
(Lenovo Group Limited) C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(HP) C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe
(HP) C:\Windows\system32\HPSIsvc.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\system32\wbem\WMIADAP.EXE
(Apple Inc.) C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe
(forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2789160 2011-05-19] (Synaptics Incorporated)
HKLM\...\Run: [TpShocks] - C:\Windows\system32\TpShocks.exe [380776 2011-03-29] (Lenovo.)
HKLM\...\Run: [ForteConfig] - C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [LENOVO.TPKNRRES] - C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [41320 2011-01-27] (Lenovo Group Limited)
HKLM\...\Run: [ALCKRESI.EXE] - C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281448 2010-12-17] (Lenovo Group Limited)
HKLM\...\Run: [cssauth] - C:\Program Files\Lenovo\Client Security Solution\cssauth.exe [5989688 2011-01-05] (Lenovo Group Limited)
HKLM\...\Run: [IntelPAN] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [1935120 2011-05-02] (Intel(R) Corporation)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [310912 2011-04-26] (Conexant Systems, Inc.)
HKLM\...\Run: [AcWin7Hlpr] - C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [31592 2011-04-14] (Lenovo)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [AtwtusbIcon] - C:\Windows\system32\AtwtusbIcon.exe [3593728 2012-09-10] ()
HKLM-x32\...\Run: [RotateImage] - C:\Program Files (x86)\Integrated Camera Driver\X64\RCIMGDIR.exe [55808 2008-10-30] (Ricoh co.,Ltd.)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-02-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PWMTRV] - rundll32 C:\PROGRA~2\ThinkPad\UTILIT~1\PWMTR64V.DLL,PwrMgrBkGndMonitor
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-10-11] (Apple Inc.)
HKLM-x32\...\Run: [HTC Sync Loader] - C:\Program Files (x86)\HTC\HTC Sync 3.0\htcUPCTLoader.exe [634880 2012-04-01] ()
HKLM-x32\...\Run: [HPUsageTrackingLEDM] - C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe [30264 2009-10-15] (Hewlett-Packard Company)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2012-10-25] (Apple Inc.)
HKLM-x32\...\Run: [GIGABYTEMOUSE] - C:\Users\ICISAH\Documents\GIGABYTE\GIGABYTE Sim\Mouse.exe [1308672 2012-12-03] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3568312 2013-12-02] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (UPEK Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Rainlendar2] - C:\Program Files (x86)\Rainlendar2PRO\Rainlendar2.exe [4411488 2014-01-20] ()
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Google Update] - C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-22] (Google Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Advanced SystemCare 5] - C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe [620376 2011-12-29] (IObit)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Akamai NetSession Interface] - C:\Users\ICISAH\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Zoner Photo Studio Service 16] - E:\Programy\ZONER\Photo Studio 16\Program32\ZPSService.exe [27672 2013-10-18] ()
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Run: [Zoner Photo Studio Autoupdate] - E:\Programy\ZONER\Photo Studio 16\Program32\ZPSTRAY.EXE [801816 2013-10-18] (ZONER software)
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\Policies\system: [DisableChangePassword] 0
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {611d651a-27ac-11e1-9c2a-402cf453766a} - F:\autostart.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {792fa2c6-bd3b-11e0-a894-806e6f6e6963} - Q:\LenovoQDrive.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {bd827d4e-1808-11e1-88a5-402cf453766a} - F:\AutoRun.exe
HKU\S-1-5-21-3684142516-2308995022-981006365-1000\...\MountPoints2: {c9c8e560-d303-11e0-a3ef-f0def17730f0} - G:\autorun.exe
Lsa: [Notification Packages] scecli C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll ACGina
Startup: C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\ICISAH\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... 9&tsp=5007
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {673DB5E7-0FD7-4D6F-92B6-44E0D413BDDB} URL =
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={search ... 9&tsp=5007
SearchScopes: HKCU - {673DB5E7-0FD7-4D6F-92B6-44E0D413BDDB} URL =
SearchScopes: HKCU - {B38E7245-E97E-438A-9926-C5AF0D8A4673} URL =
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: SelectionLinks - {7825CFB6-490A-436B-9F26-4A7B5CFC01A9} - C:\Program Files (x86)\OApps\SelectionLinks.dll (SelectionLinks)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.1.2
FireFox:
========
FF ProfilePath: C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default
FF user.js: detected! => C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\user.js
FF SearchEngineOrder.1: Search the web (Babylon)
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.17.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ICISAH\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ICISAH\AppData\Local\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPSibelius.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\PDFNetC.dll (PDFTron Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\ScorchPDFWrapper.dll ()
FF SearchPlugin: C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\searchplugins\doplky-pro-firefox.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\cs@dictionaries.addons.mozilla.org [2013-01-13]
FF Extension: DownloadHelper - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2013-08-27]
FF Extension: SelectionLinks - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{E6F44E5E-D885-4431-B9E4-CAB525E06554} [2013-04-28]
FF Extension: Youtube Downloader - Media Downloader - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\paulsaintuzb@gmail.com.xpi [2013-09-22]
FF Extension: Test Pilot - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\testpilot@labs.mozilla.com.xpi [2012-02-19]
FF Extension: Speed Dial - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{64161300-e22b-11db-8314-0800200c9a66}.xpi [2011-08-29]
FF Extension: FireFTP - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{a7c6cf7f-112c-4500-a7ea-39801a327e5f}.xpi [2011-09-01]
FF Extension: Download Statusbar - C:\Users\ICISAH\AppData\Roaming\Mozilla\Firefox\Profiles\ln8ei7pe.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi [2011-08-29]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0039-ABCDEFFEDCBA} [2014-02-15]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-08-29]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: SmartPrintButton - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2013-11-27]
FF HKCU\...\Firefox\Extensions: [{FCF36B88-1BBA-487f-B64B-D2E8980A9293}] - C:\Program Files (x86)\Lenovo\Client Security Solution\PWM Firefox Extension
FF Extension: ThinkVantage Password Manager - C:\Program Files (x86)\Lenovo\Client Security Solution\PWM Firefox Extension [2011-08-30]
==================== Services (Whitelisted) =================
R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-07-11] (SUPERAntiSpyware.com)
R2 AdvancedSystemCareService5; C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe [497496 2011-12-29] (IObit)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-02] (AVAST Software)
R2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [362296 2010-05-11] (HP)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [820568 2011-07-20] (IObit)
S2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [93032 2010-04-07] (Lenovo Group Limited)
R2 MSSQL$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43028328 2011-09-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2011-05-02] ()
S2 NMSAccess; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2010-03-04] ()
S2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [87040 2012-03-23] ()
S2 Siemens PLM License Server; E:\Programy\NX\lmgrd.exe [1789776 2012-02-19] (Flexera Software, Inc.)
S2 Správce výběru OS; C:\Program Files (x86)\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2010-07-07] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files (x86)\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [370024 2011-09-22] (Microsoft Corporation)
S2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [443240 2011-03-02] (Lenovo Group Limited)
S2 WTService; C:\Windows\system32\atwtusb.exe [581120 2012-09-20] ()
==================== Drivers (Whitelisted) ====================
S3 ALSysIO; No ImagePath
S1 ASPI32; No ImagePath
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-02] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-02] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-23] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-23] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-12-16] (DT Soft Ltd)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [20336 2011-07-11] ()
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [29696 2009-12-15] (Huawei Tech. Co., Ltd.)
S3 hwusbdev; C:\Windows\System32\DRIVERS\ewusbdev.sys [114304 2009-12-15] (Huawei Technologies Co., Ltd.)
R3 moufiltr; C:\Windows\System32\DRIVERS\moufiltr.sys [7680 2009-03-08] (Windows (R) Codename Longhorn DDK provider)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [33184 2011-03-22] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [17720 2010-11-26] ()
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13840 2009-03-13] (UPEK Inc.)
S3 ssudobex; C:\Windows\System32\DRIVERS\ssudobex.sys [203672 2013-06-04] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 StarOpen; No ImagePath
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [21328 2011-03-22] (IObit.com)
R3 vhidmini; C:\Windows\System32\DRIVERS\walvhid.sys [7552 2009-08-26] (Windows (R) Win 7 DDK provider)
S3 clwvd6; system32\DRIVERS\clwvd6.sys [X]
S3 CrystalSysInfo; \??\C:\Program Files\MediaCoder\SysInfoX64.sys [X]
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [243200 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X]
S3 SNP2STD; system32\DRIVERS\snp2sxp.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-25 13:39 - 2014-02-25 13:40 - 00023835 _____ () C:\Users\ICISAH\Desktop\FRST.txt
2014-02-25 13:39 - 2014-02-25 13:39 - 00000000 ____D () C:\FRST
2014-02-25 13:38 - 2014-02-25 13:35 - 02156032 _____ (Farbar) C:\Users\ICISAH\Desktop\FRST64.exe
2014-02-25 13:38 - 2014-02-25 13:32 - 00112640 _____ (forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
2014-02-25 07:57 - 2014-02-25 08:04 - 00006400 _____ () C:\Windows\PFRO.log
2014-02-24 23:18 - 2014-02-24 23:23 - 00000000 ____D () C:\Users\ICISAH\Desktop\besednice
2014-02-23 16:16 - 2014-02-23 16:16 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-21 17:33 - 2014-02-21 17:36 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Extensions
2014-02-21 17:33 - 2008-10-21 15:56 - 09037312 _____ (Codejock Software) C:\Windows\system32\toolkitpro1202vc80.dll
2014-02-21 17:33 - 2001-07-31 02:40 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3a.dll
2014-02-21 17:29 - 2014-02-21 17:36 - 00000000 ____D () C:\ProgramData\Extensions
2014-02-21 17:15 - 2014-02-25 13:23 - 00000168 _____ () C:\Windows\setupact.log
2014-02-21 17:15 - 2014-02-21 17:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-15 19:38 - 2011-04-16 01:13 - 00003787 ____R () C:\ProgramData\P1210OS.HTM
2014-02-15 19:38 - 2010-03-30 11:12 - 00024772 _____ () C:\ProgramData\P1210DEF.css
2014-02-15 11:41 - 2014-02-15 11:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 07:59 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 07:59 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 07:58 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-14 07:58 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-14 07:58 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-14 07:58 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-14 07:58 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-14 07:58 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-14 07:58 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-14 07:58 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-14 07:58 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-14 07:58 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-14 07:58 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-14 07:58 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-14 07:58 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-14 07:58 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-14 07:58 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-14 07:58 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-14 07:58 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-14 07:58 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-14 07:58 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-14 07:58 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-14 07:58 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-14 07:58 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-14 07:58 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-14 07:58 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-14 07:58 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-14 07:58 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-14 07:58 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-14 07:58 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-14 07:58 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-14 07:58 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-14 07:58 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-14 07:58 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-14 07:58 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-14 07:58 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-14 07:58 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-14 07:58 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-14 07:58 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-14 07:58 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-14 07:58 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 15:14 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-13 15:14 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-13 15:14 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-13 15:14 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-13 15:14 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-13 15:14 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-13 15:14 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-13 15:14 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-13 15:14 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-13 15:14 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-13 15:14 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-13 15:14 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-13 15:14 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-13 15:14 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-13 15:14 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-13 15:14 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-13 15:14 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-13 15:14 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-13 15:14 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-10 20:40 - 2014-02-11 17:13 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-02-10 16:08 - 2014-02-10 16:08 - 00000000 ____D () C:\Users\ICISAH\Documents\Avatar
2014-02-10 15:55 - 2014-02-10 15:55 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\CyberLink
2014-02-10 15:54 - 2014-02-10 18:34 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-10 15:54 - 2014-02-10 16:13 - 00000000 ____D () C:\Users\ICISAH\Documents\YouCam
2014-02-10 15:54 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CyberLink
2014-02-10 15:53 - 2014-02-11 17:14 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-10 15:51 - 2014-02-11 17:11 - 00000000 ____D () C:\ProgramData\SUPPORTDIR
2014-02-10 15:51 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\install_clap
2014-02-10 15:47 - 2014-02-10 15:54 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-06 14:48 - 2014-02-06 14:48 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2014-02-04 13:24 - 2014-02-04 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\item
2014-02-04 12:40 - 2014-02-04 13:47 - 00078336 _____ () C:\Users\ICISAH\Desktop\profily.xls
==================== One Month Modified Files and Folders =======
2014-02-25 13:40 - 2014-02-25 13:39 - 00023835 _____ () C:\Users\ICISAH\Desktop\FRST.txt
2014-02-25 13:39 - 2014-02-25 13:39 - 00000000 ____D () C:\FRST
2014-02-25 13:39 - 2013-05-21 11:09 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-25 13:39 - 2011-08-02 20:08 - 00732410 _____ () C:\Windows\system32\perfh005.dat
2014-02-25 13:39 - 2011-08-02 20:08 - 00165164 _____ () C:\Windows\system32\perfc005.dat
2014-02-25 13:39 - 2009-07-14 06:13 - 01762460 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-25 13:38 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-25 13:38 - 2009-07-14 05:45 - 00024608 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-25 13:37 - 2011-08-02 20:16 - 01881752 _____ () C:\Windows\WindowsUpdate.log
2014-02-25 13:35 - 2014-02-25 13:38 - 02156032 _____ (Farbar) C:\Users\ICISAH\Desktop\FRST64.exe
2014-02-25 13:35 - 2012-12-23 15:23 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CrashDumps
2014-02-25 13:32 - 2014-02-25 13:38 - 00112640 _____ (forum.viry.cz) C:\Users\ICISAH\Desktop\FRSTLauncher.exe
2014-02-25 13:24 - 2013-05-21 11:09 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-25 13:23 - 2014-02-21 17:15 - 00000168 _____ () C:\Windows\setupact.log
2014-02-25 13:23 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-25 08:04 - 2014-02-25 07:57 - 00006400 _____ () C:\Windows\PFRO.log
2014-02-25 07:57 - 2011-09-25 20:21 - 00000466 _____ () C:\Windows\Tasks\SystemToolsDailyTest.job
2014-02-25 07:57 - 2009-07-14 05:45 - 02427136 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-25 07:56 - 2011-08-29 17:51 - 00000000 ____D () C:\Users\ICISAH
2014-02-24 23:51 - 2012-05-07 07:22 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\AIMP3
2014-02-24 23:49 - 2012-08-20 06:03 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-24 23:23 - 2014-02-24 23:18 - 00000000 ____D () C:\Users\ICISAH\Desktop\besednice
2014-02-24 23:21 - 2011-11-22 13:23 - 00000966 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA.job
2014-02-24 23:15 - 2011-08-29 18:10 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Adobe
2014-02-24 23:06 - 2011-08-30 08:30 - 00000000 ____D () C:\Users\ICISAH\.rainlendar2
2014-02-24 16:21 - 2011-11-22 13:23 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core.job
2014-02-24 15:03 - 2013-10-18 08:00 - 00000000 ____D () C:\Users\ICISAH\Desktop\Kancelar
2014-02-24 14:00 - 2011-09-25 20:21 - 00003500 _____ () C:\Windows\System32\Tasks\SystemToolsDailyTest
2014-02-24 14:00 - 2011-09-25 20:21 - 00003448 _____ () C:\Windows\System32\Tasks\PCDEventLauncher
2014-02-23 16:47 - 2013-09-22 00:03 - 03655168 ___SH () C:\Users\ICISAH\Desktop\Thumbs.db
2014-02-23 16:17 - 2013-12-02 01:00 - 00001972 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-02-23 16:16 - 2014-02-23 16:16 - 00080184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-02-23 16:16 - 2013-02-28 22:39 - 00207904 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-02-23 16:16 - 2012-07-11 16:49 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-02-23 16:16 - 2011-08-29 18:16 - 01038072 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00421704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00334136 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-02-23 16:16 - 2011-08-29 18:16 - 00078648 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-02-23 16:16 - 2011-08-29 18:16 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-02-22 22:30 - 2011-12-14 10:08 - 00000000 ____D () C:\ProgramData\tmp
2014-02-22 20:52 - 2012-04-20 10:39 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Dropbox
2014-02-22 19:48 - 2011-11-22 13:23 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Google
2014-02-21 18:03 - 2011-11-22 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-02-21 17:58 - 2012-02-17 10:35 - 00000000 ____D () C:\Program Files (x86)\SeaMonkey
2014-02-21 17:56 - 2011-08-29 17:58 - 00000000 ___RD () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-21 17:55 - 2011-08-29 17:54 - 00144224 _____ () C:\Users\ICISAH\AppData\Local\GDIPFONTCACHEV1.DAT
2014-02-21 17:54 - 2011-08-02 20:41 - 00000000 ____D () C:\ProgramData\Corel
2014-02-21 17:54 - 2011-08-02 20:41 - 00000000 ____D () C:\Program Files (x86)\Corel
2014-02-21 17:52 - 2011-09-01 10:45 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Deployment
2014-02-21 17:51 - 2011-08-02 20:22 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-21 17:36 - 2014-02-21 17:33 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Extensions
2014-02-21 17:36 - 2014-02-21 17:29 - 00000000 ____D () C:\ProgramData\Extensions
2014-02-21 17:15 - 2014-02-21 17:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-21 17:00 - 2011-08-30 17:11 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\DAEMON Tools Lite
2014-02-21 11:07 - 2012-05-15 15:34 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\vlc
2014-02-21 09:49 - 2012-08-20 06:03 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-21 09:49 - 2012-04-18 05:41 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-21 09:49 - 2011-08-29 18:56 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-18 16:59 - 2012-04-20 10:41 - 00000000 ___RD () C:\Users\ICISAH\Dropbox
2014-02-18 16:59 - 2012-04-09 15:53 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\Htc
2014-02-18 16:57 - 2009-07-14 03:34 - 00000923 _____ () C:\Windows\win.ini
2014-02-18 16:56 - 2012-04-27 04:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-18 03:05 - 2013-07-24 02:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-18 03:01 - 2011-09-02 22:44 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 20:55 - 2011-09-25 20:21 - 00000528 _____ () C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job
2014-02-16 16:34 - 2013-05-21 11:09 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-16 16:34 - 2013-05-21 11:09 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-16 10:10 - 2011-08-30 13:45 - 00000000 ____D () C:\Users\ICISAH\Desktop\Programy
2014-02-16 10:09 - 2011-08-30 08:30 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rainlendar2
2014-02-16 10:08 - 2012-05-22 07:57 - 00000000 ____D () C:\Program Files (x86)\Rainlendar2PRO
2014-02-15 11:41 - 2014-02-15 11:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:18 - 2011-08-30 20:39 - 01741682 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-14 08:18 - 2011-08-29 22:18 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-13 16:16 - 2011-11-22 13:23 - 00003942 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA
2014-02-13 16:16 - 2011-11-22 13:23 - 00003546 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core
2014-02-13 10:59 - 2011-09-25 20:21 - 00004240 _____ () C:\Windows\System32\Tasks\PCDoctorBackgroundMonitorTask
2014-02-11 17:14 - 2014-02-10 15:53 - 00000000 ____D () C:\Program Files (x86)\CyberLink
2014-02-11 17:13 - 2014-02-10 20:40 - 00000000 ____D () C:\Users\Public\Documents\CyberLink
2014-02-11 17:11 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\SUPPORTDIR
2014-02-10 18:34 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\Public\CyberLink
2014-02-10 16:13 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\Documents\YouCam
2014-02-10 16:08 - 2014-02-10 16:08 - 00000000 ____D () C:\Users\ICISAH\Documents\Avatar
2014-02-10 15:55 - 2014-02-10 15:55 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\CyberLink
2014-02-10 15:54 - 2014-02-10 15:54 - 00000000 ____D () C:\Users\ICISAH\AppData\Local\CyberLink
2014-02-10 15:54 - 2014-02-10 15:47 - 00000000 ____D () C:\ProgramData\CyberLink
2014-02-10 15:51 - 2014-02-10 15:51 - 00000000 ____D () C:\ProgramData\install_clap
2014-02-10 15:45 - 2011-09-09 18:00 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Skype
2014-02-06 14:48 - 2014-02-06 14:48 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2014-02-06 13:16 - 2014-02-14 07:58 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-14 07:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-14 07:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-14 07:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-14 07:58 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-14 07:58 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-14 07:58 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-14 07:58 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-14 07:58 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-14 07:58 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-14 07:58 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-14 07:58 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-14 07:58 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-14 07:58 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-14 07:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-14 07:58 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-14 07:58 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-14 07:58 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-14 07:58 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-14 07:58 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-14 07:58 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-14 07:58 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-14 07:58 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-14 07:58 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-14 07:58 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-14 07:58 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-14 07:58 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-14 07:58 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-14 07:58 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-14 07:58 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-14 07:58 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-14 07:58 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-14 07:58 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-14 07:58 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-14 07:58 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-14 07:58 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-14 07:58 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-14 07:58 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-14 07:58 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-04 13:47 - 2014-02-04 12:40 - 00078336 _____ () C:\Users\ICISAH\Desktop\profily.xls
2014-02-04 13:24 - 2014-02-04 13:24 - 00000000 ____D () C:\Users\ICISAH\AppData\Roaming\item
2014-01-27 13:43 - 2011-10-15 08:02 - 00000089 _____ () C:\Users\ICISAH\AppData\Local\msmathematics.qat.ICISAH
Files to move or delete:
====================
C:\ProgramData\PKP_DLdy.DAT
C:\ProgramData\PKP_DLes.DAT
C:\ProgramData\PKP_DLet.DAT
C:\ProgramData\PKP_DLev.DAT
Some content of TEMP:
====================
C:\Users\ICISAH\AppData\Local\Temp\BackupSetup.exe
C:\Users\ICISAH\AppData\Local\Temp\Foxit Updater.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-20 00:07
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (System) (Fixed) (Total:72.23 GB) (Free:5.29 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Data) (Fixed) (Total:380.64 GB) (Free:12.34 GB) NTFS
Drive q: (Lenovo_Recovery) (Fixed) (Total:11.72 GB) (Free:1.75 GB) NTFS
Available physical RAM: 2090.97 MB
Total physical RAM: 4007.23 MB
Percentage of memory in use: 47%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 466 GB) (Disk ID: DFB61208)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000Core.job => C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-3684142516-2308995022-981006365-1000UA.job => C:\Users\ICISAH\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SystemToolsDailyTest.job => C:\Program Files\PC-Doctor\uaclauncher.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ICISAH\Desktop" je 1034 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Odinstalujte Advanced SystemCare a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti
