VIRY.CZ

v chrome mi nabiha samovolne stranka wrapper.z5x.net

diky za pomoc

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Marketa (administrator) on MARKETA-PC on 24-03-2014 23:28:43
Running from C:\Users\Marketa\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Roman Svihalek, ActivityMon Software) C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe
() C:\Program Files\ActivityMon Software\ActivityMon\rundll32.exe
(Andrea Electronics Corporation) C:\windows\system32\AEADISRV.EXE
() C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
(Bioscrypt Inc.) C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) c:\program files\windows defender\MpCmdRun.exe
(forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767608 2014-03-22] (AVAST Software)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-12] (Hewlett-Packard)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [90624 2013-04-11] ()
AppInit_DLLs: C:\PROGRA~1\HEWLET~1\IAM\Bin\APSHook.dll => C:\Program Files\Hewlett-Packard\IAM\Bin\APSHook.dll [89872 2009-07-23] (Bioscrypt Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {33352078-A858-42E4-A7F6-4231D8370186} URL = http://startsear.ch/?aff=1&src=sp&cf=f4 ... earchTerms}
SearchScopes: HKCU - DefaultScope {3BAE4745-31B5-4D9C-B4A8-139E334CD8A3} URL = http://search.conduit.com/ResultsExt.as ... 84513&UM=2
SearchScopes: HKCU - {33352078-A858-42E4-A7F6-4231D8370186} URL = http://startsear.ch/?aff=1&src=sp&cf=f4 ... earchTerms}
SearchScopes: HKCU - {35D1B90A-EC19-4791-883F-FA59996960D3} URL = http://www.mysearchresults.com/search?& ... earchTerms}
SearchScopes: HKCU - {3BAE4745-31B5-4D9C-B4A8-139E334CD8A3} URL = http://search.conduit.com/ResultsExt.as ... 84513&UM=2
SearchScopes: HKCU - {CC2D3BCA-B2B2-4C1F-B750-DFAEAA32B2C6} URL = http://search.seznam.cz/searchScreen?w= ... rms}&mod=f
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - C:\Program Files\PasswordBox\Application\pbbtn.dll (PasswordBox, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1
Tcpip\..\Interfaces\{080FA4BF-28B2-4E7A-A306-E06364A2E9F9}: [NameServer]217.77.165.81 217.77.161.131
Tcpip\..\Interfaces\{58A95CB5-18F8-4B18-929F-C7A966324B11}: [NameServer]217.77.165.81 217.77.161.131

FireFox:
========
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: uTorrentBar Community Toolbar - \Extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} [2011-09-14]
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]
FF HKLM\...\Firefox\Extensions: [{77BEC163-D389-42c1-91A4-C758846296A5}] - C:\Program Files\Video downloader\Firefox
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]

Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR RestoreOnStartup: "spdy": {
"servers": [ "plusone.google.com:443", "googleads.g.doubleclick.net:443", "toolbarqueries.google.com:443", "clients2.google.com:443", "apis.google.com:443", "ajax.googleapis.com:443"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\33.0.1750.154\pdf.dll ()
CHR Plugin: (Microsoft® Windows Media Player Firefox Plugin) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak\1.0_0\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Injovo Extension Plugin) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk\2.0.0.432_0\npbrowserext.dll (Injovo)
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.7.2) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (AVG SiteSafety plugin) - C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\15.3.0\\npsitesafety.dll No File
CHR Plugin: (Garmin Communicator Plug-In) - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U21) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Media Go Detector) - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
CHR Plugin: (PlayStation(R)Network Downloader Check Plug-in) - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll No File
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
CHR Plugin: (RealJukebox NS Plugin) - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
CHR Plugin: (RealPlayer Version Plugin) - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
CHR Extension: (Bejeweled) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm [2013-03-02]
CHR Extension: (Angry Birds) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2013-03-02]
CHR Extension: (TV) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\beobeededemalmllhkmnkinmfembdimh [2013-03-02]
CHR Extension: (FreeHDSport.TV) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok [2013-02-20]
CHR Extension: (YouTube) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-25]
CHR Extension: (Adblock Plus) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-02-20]
CHR Extension: (Vyhledávání Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-25]
CHR Extension: (TV program) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo [2013-03-02]
CHR Extension: (Crimson: Steam Pirates) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\glfbkgkceahodalogdpenjoekbacjfcj [2013-03-02]
CHR Extension: (avast! Online Security) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-03-22]
CHR Extension: (AirMech) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdahlabpinmfcemhcbcfoijcpoalfgdn [2013-03-02]
CHR Extension: (Ultimate Flash Sonic) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmgmfbijldhdncjcipeocgkgbjhaecfp [2013-03-02]
CHR Extension: (Windows Media Player Extension for HTML5) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak [2013-03-08]
CHR Extension: (Video downloader) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk [2013-01-29]
CHR Extension: (Plants vs Zombies) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina [2013-03-02]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]
CHR Extension: (Peněženka Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR Extension: (Gmail) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-25]
CHR HKLM\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Marketa\AppData\Local\Temp\crx3AEF.tmp [2011-12-25]
CHR HKLM\...\Chrome\Extension: [bgnnidmnbdkmhfkjgdnngciimpdgohok] - C:\Program Files\VipBoxSportsApp.com\stv11.crx [2012-11-10]
CHR HKLM\...\Chrome\Extension: [fdkednngfjmpnljkolbapdednncafhen] - C:\Users\Marketa\AppData\Local\CRE\fdkednngfjmpnljkolbapdednncafhen.crx [2013-06-26]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [kpionmjnkbpcdpcflammlgllecmejgjj] - C:\Program Files\vShare.tv plugin\vshareplg.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR HKCU\...\Chrome\Extension: [fdkednngfjmpnljkolbapdednncafhen] - C:\Users\Marketa\AppData\Local\CRE\fdkednngfjmpnljkolbapdednncafhen.crx [2013-06-26]

========================== Services (Whitelisted) =================

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [207400 2009-06-03] (ActivIdentity)
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [777584 2013-08-21] (Acronis)
R2 ActivityMon2; C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe [80568 2012-10-18] (Roman Svihalek, ActivityMon Software)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3869688 2013-12-20] (Acronis)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192784 2009-07-23] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\AsChnl.dll [150288 2009-07-23] (Bioscrypt Inc.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1201400 2009-07-29] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-05] (AVAST Software)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard)
S3 HP ProtectTools Service; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2009-07-30] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256544 2009-07-29] (McAfee, Inc.)
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [67584 2013-11-01] (PasswordBox, Inc.)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RipCore; C:\Program Files\Fawkes Engineering\AccuRIP\RipCore.exe [2108352 2012-09-20] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
S3 Správce výběru OS; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2011-12-12] ()
S3 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7149264 2013-10-22] (Acronis)
S3 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [9216 2011-07-14] (Vodafone)
S2 yksvc; C:\windows\System32\yk62x86.dll [364544 2009-09-28] (Marvell)

==================== Drivers (Whitelisted) ====================

R3 5U876UVC; C:\windows\System32\DRIVERS\5U876.sys [118656 2009-06-30] (Ricoh co.,Ltd.)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-02-05] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2013-10-29] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2014-02-05] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410784 2014-02-05] (AVAST Software)
S3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2014-02-05] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180248 2013-12-26] ()
R1 dtsoftbus01; C:\windows\System32\DRIVERS\dtsoftbus01.sys [232512 2011-10-07] (DT Soft Ltd)
S3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\windows\System32\DRIVERS\ew_juextctrl.sys [26624 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\windows\System32\DRIVERS\ew_juwwanecm.sys [182272 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
S3 NETw1v32; C:\windows\System32\DRIVERS\NETw1v32.sys [5958656 2009-07-21] (Intel Corporation)
R2 npf; C:\windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R1 RsvLock; C:\windows\system32\Drivers\RsvLock.sys [12528 2009-07-29] (SafeBoot International)
R0 SafeBoot; C:\windows\system32\Drivers\SafeBoot.sys [109216 2009-07-29] ()
R0 SbAlg; C:\windows\system32\Drivers\SbAlg.sys [51408 2009-07-29] (SafeBoot N.V.)
R0 SbFsLock; C:\windows\system32\Drivers\SbFsLock.sys [12960 2009-07-29] (SafeBoot International)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [436792 2012-06-05] ()
S3 ss_bbus; C:\windows\System32\DRIVERS\ss_bbus.sys [98432 2010-04-27] (MCCI)
S3 ss_bmdfl; C:\windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-04-27] (MCCI Corporation)
S3 ss_bmdm; C:\windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-04-27] (MCCI Corporation)
S3 tdrpman; C:\windows\System32\DRIVERS\tdrpman.sys [889888 2013-12-20] (Acronis International GmbH)
R0 tib; C:\windows\System32\DRIVERS\tib.sys [736192 2013-11-08] (Acronis International GmbH)
R0 tib_mounter; C:\windows\System32\DRIVERS\tib_mounter.sys [143648 2013-12-20] (Acronis International GmbH)
R0 vididr; C:\windows\System32\DRIVERS\vididr.sys [116000 2013-11-08] (Acronis International GmbH)
R0 vidsflt; C:\windows\System32\DRIVERS\vidsflt.sys [85280 2013-11-08] (Acronis International GmbH)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-24 23:28 - 2014-03-24 23:28 - 00027290 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-24 23:21 - 2014-03-24 23:21 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 191337.crdownload
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-24 23:15 - 2014-03-24 23:15 - 10904816 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner.exe
2014-03-24 23:09 - 2014-03-24 23:09 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (4).exe
2014-03-23 21:39 - 2014-03-23 21:45 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-22 22:57 - 2014-03-22 22:58 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (3).exe
2014-03-22 12:56 - 2014-03-22 12:56 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (2).exe
2014-03-20 23:14 - 2014-03-20 23:32 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 23:05 - 2014-03-20 23:06 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (1).exe
2014-03-16 15:23 - 2014-03-16 15:24 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-15 07:15 - 2014-03-15 07:15 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar.exe
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 06:45 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-14 06:45 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-14 06:45 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-14 06:45 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-14 06:45 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-14 06:45 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-14 06:45 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-14 06:45 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-14 06:45 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-14 06:45 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-14 06:45 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:45 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-14 06:45 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-14 06:45 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-14 06:45 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-14 06:45 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-14 06:45 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-14 06:45 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-14 06:45 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-14 06:45 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-14 06:45 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-14 06:44 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-14 06:44 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-14 06:44 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-14 06:44 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 10:28 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-07 21:21 - 2014-03-24 23:02 - 00008586 _____ () C:\windows\setupact.log
2014-03-07 21:21 - 2014-03-11 15:24 - 00000982 _____ () C:\windows\PFRO.log
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-05 07:32 - 2014-03-07 21:56 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-02 20:18 - 2014-03-02 20:55 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 19:58 - 2014-03-02 20:13 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 19:07 - 2014-03-02 20:54 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 18:04 - 2014-03-02 18:06 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:39 - 2014-03-02 17:46 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-02 17:38 - 2014-03-02 18:08 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:17 - 2014-03-01 12:14 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-02-22 11:47 - 2014-02-22 11:52 - 73892478 _____ () C:\Users\Marketa\Downloads\Eso-hity--2001-☼.rar
2014-02-22 11:38 - 2014-02-22 11:47 - 106301416 _____ () C:\Users\Marketa\Downloads\Největší-hity.rar
2014-02-22 11:00 - 2014-02-22 11:12 - 227341952 _____ () C:\Users\Marketa\Downloads\Hity-2012-2013(hits).rar

==================== One Month Modified Files and Folders =======

2014-03-24 23:29 - 2013-01-28 22:49 - 00000000 ____D () C:\ProgramData\ActivityMon
2014-03-24 23:28 - 2014-03-24 23:28 - 00027290 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-24 23:21 - 2014-03-24 23:21 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 191337.crdownload
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-24 23:17 - 2013-10-24 12:22 - 00000328 _____ () C:\windows\Tasks\HP Photo Creations Communicator.job
2014-03-24 23:15 - 2014-03-24 23:15 - 10904816 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner.exe
2014-03-24 23:09 - 2014-03-24 23:09 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (4).exe
2014-03-24 23:03 - 2013-07-26 20:31 - 01665803 _____ () C:\windows\WindowsUpdate.log
2014-03-24 23:03 - 2013-07-12 11:27 - 00000940 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-24 23:02 - 2014-03-07 21:21 - 00008586 _____ () C:\windows\setupact.log
2014-03-24 20:23 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:23 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-24 20:15 - 2013-07-12 11:27 - 00000936 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-24 20:15 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-24 17:48 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\ProductData
2014-03-23 23:17 - 2011-09-14 10:39 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\uTorrent
2014-03-23 21:45 - 2014-03-23 21:39 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-23 07:34 - 2009-09-20 08:18 - 00000000 ____D () C:\ProgramData\PDFC
2014-03-22 22:58 - 2014-03-22 22:57 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (3).exe
2014-03-22 12:56 - 2014-03-22 12:56 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (2).exe
2014-03-22 07:55 - 2014-02-05 05:25 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-22 07:49 - 2011-09-12 15:27 - 00000000 ____D () C:\Users\Marketa
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\wfp
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\registration
2014-03-20 23:32 - 2014-03-20 23:14 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 23:06 - 2014-03-20 23:05 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar (1).exe
2014-03-20 20:35 - 2011-09-15 19:00 - 00000052 _____ () C:\windows\system32\DOErrors.log
2014-03-20 20:34 - 2011-09-20 12:54 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\HpUpdate
2014-03-20 07:59 - 2013-12-18 07:54 - 00000000 ____D () C:\Users\Marketa\Desktop\Montessori pomůcky
2014-03-19 07:37 - 2013-11-13 10:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Tea foto
2014-03-18 22:54 - 2013-08-05 08:25 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 22:51 - 2011-09-16 05:32 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-18 22:48 - 2009-07-14 03:04 - 00000513 _____ () C:\windows\win.ini
2014-03-18 22:47 - 2009-07-14 05:52 - 00000000 ____D () C:\windows\twain_32
2014-03-18 22:46 - 2012-04-09 16:13 - 07022592 ___SH () C:\Users\Marketa\Desktop\Thumbs.db
2014-03-18 22:06 - 2013-11-10 08:10 - 00000000 ____D () C:\Users\Marketa\Desktop\Logo MŠ Rybička
2014-03-17 20:07 - 2009-09-20 08:17 - 00006428 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-16 20:43 - 2011-09-14 10:35 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Media Player Classic
2014-03-16 15:24 - 2014-03-16 15:23 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-16 09:54 - 2011-10-15 21:13 - 00000000 ____D () C:\Users\Marketa\Desktop\Sokol
2014-03-15 11:16 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\IObit
2014-03-15 11:14 - 2009-07-14 05:33 - 03819744 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 11:12 - 2011-09-19 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 07:15 - 2014-03-15 07:15 - 00902264 _____ () C:\Users\Marketa\Downloads\yet_another_cleaner_mar.exe
2014-03-15 06:55 - 2009-09-20 08:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 11:16 - 2013-01-09 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 06:38 - 2012-04-02 04:04 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-14 06:38 - 2011-09-26 19:32 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-11 15:24 - 2014-03-07 21:21 - 00000982 _____ () C:\windows\PFRO.log
2014-03-11 10:59 - 2009-09-20 08:30 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:58 - 2014-03-11 10:28 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 07:33 - 2012-06-29 20:24 - 00000000 ____D () C:\Trefik10
2014-03-10 16:40 - 2011-09-15 05:05 - 00000000 ____D () C:\Users\Marketa\AppData\Local\Microsoft Help
2014-03-10 16:23 - 2014-02-19 16:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Výzkum v MŠ NA Herzánce
2014-03-10 10:24 - 2011-09-23 16:30 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\BatteryBar
2014-03-10 09:29 - 2011-09-12 15:50 - 00000000 ____D () C:\Users\Marketa\AppData\Local\PDFC
2014-03-09 12:55 - 2013-08-24 11:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Pro Terezku a kluky
2014-03-08 17:16 - 2013-11-12 07:16 - 00000000 ____D () C:\Users\Marketa\Desktop\Háčkování a pletení návody
2014-03-07 21:56 - 2014-03-05 07:32 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-07 16:51 - 2011-10-07 19:45 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\DAEMON Tools Lite
2014-03-07 16:06 - 2014-01-15 22:52 - 72515584 _____ () C:\windows\system32\config\SOFTWARE.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00364544 _____ () C:\windows\system32\config\DEFAULT.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00061440 _____ () C:\windows\system32\config\SAM.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00032768 _____ () C:\windows\system32\config\SECURITY.iobit
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-03 18:53 - 2011-11-11 19:56 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\vlc
2014-03-02 20:55 - 2014-03-02 20:18 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 20:54 - 2014-03-02 19:07 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 20:13 - 2014-03-02 19:58 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 18:08 - 2014-03-02 17:38 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-02 18:06 - 2014-03-02 18:04 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:46 - 2014-03-02 17:39 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-01 12:14 - 2014-03-01 08:17 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:29 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-03-01 05:30 - 2014-03-14 06:45 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:45 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:45 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:45 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:45 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:45 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:45 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:45 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:45 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:45 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:45 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:45 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:45 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:45 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:45 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:45 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:45 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:45 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:45 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-02-25 16:59 - 2009-07-14 05:53 - 00032594 _____ () C:\windows\Tasks\SCHEDLGU.TXT
2014-02-23 08:17 - 2011-09-22 19:43 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Winamp
2014-02-22 11:52 - 2014-02-22 11:47 - 73892478 _____ () C:\Users\Marketa\Downloads\Eso-hity--2001-☼.rar
2014-02-22 11:47 - 2014-02-22 11:38 - 106301416 _____ () C:\Users\Marketa\Downloads\Největší-hity.rar
2014-02-22 11:12 - 2014-02-22 11:00 - 227341952 _____ () C:\Users\Marketa\Downloads\Hity-2012-2013(hits).rar

Some content of TEMP:
====================
C:\Users\Marketa\AppData\Local\temp\ExPromo.exe
C:\Users\Marketa\AppData\Local\temp\promote-upx.exe
C:\Users\Marketa\AppData\Local\temp\UNINSTALL.EXE

==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Marketa\Desktop" je 62427 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\accrdsub
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\acevents
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor
c:\program files\common files\acronis\tibmounter\tibmountermonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\actSessionUI32.exe
"C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANT Agent
c:\program files\garmin\ant agent\ant agent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS
rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp
c:\program files\garmin\express tray\expresstray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8
"c:\program files\google\chrome\application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileBroadband
C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Slu�ba Acronis Scheduler2
c:\program files\common files\acronis\schedule2\schedhlp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX
C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP
C:\Program Files\Analog Devices\Core\smax4pnp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh
%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe
c:\program files\acronis\trueimagehome\trueimagemonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt
c:\program files\avg safeguard toolbar\vprot.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WirelessAssistant
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk
C:\PROGRA~1\WinZip\WZQKPICK.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk
C:\Users\Marketa\AppData\Roaming\Dropbox\bin\Dropbox.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~1\MICROS~2\Office14\ONENOTEM.EXE

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 7 Home Premium x86
Ran by Marketa on Łt 25.03.2014 at 22:12:22,20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\scripthelper.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installcore
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-730507215-887370363-3937766701-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-730507215-887370363-3937766701-1001\Software\video downloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\video downloader
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HPSF_Tasks_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\HPSF_Tasks_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitHelper_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\ConduitHelper_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_veetle_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_veetle_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33352078-A858-42E4-A7F6-4231D8370186}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{35D1B90A-EC19-4791-883F-FA59996960D3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{3BAE4745-31B5-4D9C-B4A8-139E334CD8A3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{CC2D3BCA-B2B2-4C1F-B750-DFAEAA32B2C6}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33352078-A858-42E4-A7F6-4231D8370186}

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\ytd video downloader"
Successfully deleted: [Folder] "C:\Users\Marketa\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\Marketa\appdata\local\cre"
Successfully deleted: [Folder] "C:\Program Files\coupons"
Successfully deleted: [Folder] "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ytd video downloader"
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{0C1DB5FC-0E90-44B9-91DD-D86A196CC3E9}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{44551CE3-47C8-495F-B952-9FDD93178F80}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{467DA7B7-8E57-4675-8D6F-778E00C6FF9E}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{6ED00CBF-36AC-476C-ADC2-D4AA4BFBCD36}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{8A204261-6315-495F-ADF7-27277E5B1713}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{A9C7BBA3-16FD-49B3-BDB6-4F38794555E0}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{C63578F1-AE0F-4770-A73A-32EC140984D0}
Successfully deleted: [Empty Folder] C:\Users\Marketa\appdata\local\{CBA78A0A-D9F9-40C7-B8E6-B2EAB7F06302}

~~~ Chrome

Successfully deleted: [Folder] C:\Users\Marketa\appdata\local\Google\Chrome\User Data\Default\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\bgnnidmnbdkmhfkjgdnngciimpdgohok

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 25.03.2014 at 22:16:00,10
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.022 - Report created 25/03/2014 at 22:19:01
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Marketa - MARKETA-PC
# Running from : C:\Users\Marketa\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Marketa\AppData\LocalLow\MixiDJ_V30
Folder Deleted : C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\adpkifcfcacgmnggcbpbjbkdijciiigm
File Deleted : C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\freehdsport@freehdsport.tv.xpi
File Deleted : C:\Users\Marketa\AppData\Local\Temp\Uninstall.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [{77BEC163-D389-42c1-91A4-C758846296A5}]
Key Deleted : HKCU\Software\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\fdkednngfjmpnljkolbapdednncafhen
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kpionmjnkbpcdpcflammlgllecmejgjj
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ApnSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{408CFAD9-8F13-4747-8EC7-770A339C7237}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{07CAC314-E962-4F78-89AB-DD002F2490EE}
Key Deleted : HKCU\Software\vShare.tv
Key Deleted : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521

-\\ Mozilla Firefox v

[ File : C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ]

Line Deleted : user_pref("browser.search.defaultenginename", "AVG Secure Search");
Line Deleted : user_pref("browser.search.selectedEngine", "AVG Secure Search");

-\\ Google Chrome v33.0.1750.154

[ File : C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [2293 octets] - [25/03/2014 22:17:02]
AdwCleaner[S0].txt - [2250 octets] - [25/03/2014 22:19:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [2310 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Marketa on st 26.03.2014 at 22:57:44,98.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Marketa\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

26.3.2014 23:04:42 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{77BEC163-D389-42c1-91A4-C758846296A5} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js:
user_pref("browser.startup.homepage", "http://mysearch.avg.com?cid={C3AE18FB-1 ... 2014-02-06 06:59:19&v=17.3.1.204&pid=safeguard&sg=0&sap=hp");

Added to C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_26.03.2014_2316_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Program Files\VipBoxSportsApp.com deleted
C:\Program Files\Common Files\DVDVideoSoft\bin deleted
C:\extensions deleted
C:\Users\Marketa\AppData\Roaming\cdr.ini deleted
C:\PROGRA~2\ProductData deleted
C:\PROGRA~2\Package Cache deleted
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\External Extensions\{EEE6C373-6118-11DC-9C72-001320C79847} deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons deleted
C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VipBoxSportsApp.com deleted
C:\windows\system32\config\systemprofile\AppData\LocalLow\AVG SafeGuard toolbar deleted
"C:\Users\Marketa\AppData\Roaming\Samsung" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [03.04.2012 21:56]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"smartwebprinting@hp.com"="C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3" [03.04.2012 21:56]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Marketa\AppData\Roaming\Mozilla\Firefox\Profiles\0
- Advanced SystemCare Surfing Protection - %ProfilePath%\extensions\ascsurfingprotection@iobit.com

==== Firefox Plugins ======================

==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
bejbohlohkkgompgecdcbbglkpjfjgdj - C:\Users\Marketa\AppData\Local\Temp\crx3AEF.tmp[]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[05.02.2014 05:24]
jfmjfhklogoienhpfnppmbcbjfjnkonk - No path found[]
nfengeggddojhakldhlpjdlddgkkjkdd - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx[12.10.2013 13:04]

Angry Birds - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
TV program - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\eggkgjblbjpigonjpmblphnackhfigbo
Crimson Steam Pirates - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\glfbkgkceahodalogdpenjoekbacjfcj
avast Online Security - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
AirMech - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hdahlabpinmfcemhcbcfoijcpoalfgdn
Windows Media Player Extension for HTML5 - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\hokdglbhghcebcopdbanieangmcamaak
Video downloader - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk
Plants vs Zombies - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmcegpfdgcoclcdfkjahiimlikdpnina
Advanced SystemCare Surfing Protection - Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd

==== Chrome Fix ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\khldgopgjjapmbkgflpoclebjjmkmbnk deleted successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_khldgopgjjapmbkgflpoclebjjmkmbnk_0.localstorage deleted successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_khldgopgjjapmbkgflpoclebjjmkmbnk_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Coupon Printer for Windows5.0.0.0 deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vProt deleted successfully

==== Empty IE Cache ======================

C:\Users\Marketa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Marketa\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=135 folders=38 20555943 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\temp emptied successfully
C:\Users\Default User\AppData\Local\temp emptied successfully
C:\Users\Marketa\AppData\Local\temp will be emptied at reboot
C:\Users\Public\AppData\Local\temp emptied successfully
C:\windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\windows\serviceprofiles\Localservice\AppData\Local\Temp will be emptied at reboot
C:\windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\windows\Temp successfully emptied
C:\Users\Marketa\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\windows\serviceprofiles\networkservice\AppData\Local\Temp\MpCmdRun.log" not found

==== EOF on st 26.03.2014 at 23:27:05,46 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-03-2014 01
Ran by Marketa (administrator) on MARKETA-PC on 28-03-2014 22:24:59
Running from C:\Users\Marketa\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AuthenTec, Inc.) C:\Program Files\Fingerprint Sensor\AtService.exe
(AMD) C:\windows\system32\atiesrxx.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(AMD) C:\windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(Acronis) C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
(Roman Svihalek, ActivityMon Software) C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe
(Andrea Electronics Corporation) C:\windows\system32\AEADISRV.EXE
() C:\Program Files\ActivityMon Software\ActivityMon\rundll32.exe
(Acronis) C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe
() C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe
(Bioscrypt Inc.) C:\Program Files\Hewlett-Packard\IAM\Bin\AsGHost.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-08-04] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767608 2014-03-22] (AVAST Software)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-03-25] (Hewlett-Packard)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [ShowBatteryBar] - C:\Program Files\BatteryBar\ShowBatteryBar.exe [90624 2013-04-11] ()
AppInit_DLLs: C:\PROGRA~1\HEWLET~1\IAM\Bin\APSHook.dll => C:\Program Files\Hewlett-Packard\IAM\Bin\APSHook.dll [89872 2009-07-23] (Bioscrypt Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll (Hewlett-Packard Co.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - C:\Program Files\PasswordBox\Application\pbbtn.dll (PasswordBox, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll (Bioscrypt Inc.)
BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll (Hewlett-Packard Co.)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138 192.168.1.1
Tcpip\..\Interfaces\{080FA4BF-28B2-4E7A-A306-E06364A2E9F9}: [NameServer]217.77.165.81 217.77.161.131
Tcpip\..\Interfaces\{58A95CB5-18F8-4B18-929F-C7A966324B11}: [NameServer]217.77.165.81 217.77.161.131

FireFox:
========
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @playstation.com/PsndlCheck,version=1.00 - C:\Program Files\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF Plugin: @real.com/nppl3260;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpchromebrowserrecordext;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprphtml5videoshim;version=15.0.0.198 - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=15.0.0.198 - c:\program files\real\realplayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]
FF HKCU\...\Firefox\Extensions: [smartwebprinting@hp.com] - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3
FF Extension: HP Smart Web Printing - C:\Program Files\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012-04-03]

Chrome:
=======
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]
CHR Extension: (Peněženka Google) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-10-29]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]

========================== Services (Whitelisted) =================

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [207400 2009-06-03] (ActivIdentity)
R2 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [777584 2013-08-21] (Acronis)
R2 ActivityMon2; C:\Program Files\ActivityMon Software\ActivityMon\svchost.exe [80568 2012-10-18] (Roman Svihalek, ActivityMon Software)
R2 afcdpsrv; C:\Program Files\Common Files\Acronis\CDP\afcdpsrv.exe [3869688 2013-12-20] (Acronis)
R2 ASBroker; C:\Program Files\Hewlett-Packard\IAM\Bin\ASWLNPkg.dll [192784 2009-07-23] (Bioscrypt Inc.)
R2 ASChannel; C:\Program Files\Hewlett-Packard\IAM\Bin\AsChnl.dll [150288 2009-07-23] (Bioscrypt Inc.)
R2 ATService; C:\Program Files\Fingerprint Sensor\AtService.exe [1201400 2009-07-29] (AuthenTec, Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-05] (AVAST Software)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250200 2013-09-19] (Garmin Ltd or its subsidiaries)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [124928 2009-07-09] (Hewlett-Packard)
S3 HP ProtectTools Service; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTChangeFilterService.exe [45056 2009-07-30] (Hewlett-Packard Development Company, L.P)
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [256544 2009-07-29] (McAfee, Inc.)
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 PasswordBox; C:\Program Files\PasswordBox\pbbtnService.exe [67584 2013-11-01] (PasswordBox, Inc.)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
S3 RipCore; C:\Program Files\Fawkes Engineering\AccuRIP\RipCore.exe [2108352 2012-09-20] ()
S3 Sony PC Companion; C:\Program Files\Sony\Sony PC Companion\PCCService.exe [155824 2013-02-04] (Avanquest Software)
S3 Správce výběru OS; C:\Program Files\Acronis\DiskDirector\OSS\reinstall_svc.exe [2156952 2011-12-12] ()
S3 syncagentsrv; C:\Program Files\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7149264 2013-10-22] (Acronis)
S3 VmbService; C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\VmbService.exe [9216 2011-07-14] (Vodafone)
S2 yksvc; C:\windows\System32\yk62x86.dll [364544 2009-09-28] (Marvell)

==================== Drivers (Whitelisted) ====================

R3 5U876UVC; C:\windows\System32\DRIVERS\5U876.sys [118656 2009-06-30] (Ricoh co.,Ltd.)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-02-05] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [79720 2013-10-29] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2013-10-29] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [775952 2014-02-05] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [410784 2014-02-05] (AVAST Software)
S3 aswStm; C:\windows\system32\drivers\aswStm.sys [64168 2014-02-05] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [180248 2013-12-26] ()
R1 dtsoftbus01; C:\windows\System32\DRIVERS\dtsoftbus01.sys [232512 2011-10-07] (DT Soft Ltd)
S3 FsUsbExDisk; C:\windows\system32\FsUsbExDisk.SYS [36608 2010-06-14] ()
S3 grmnusb; C:\windows\System32\drivers\grmnusb.sys [15720 2012-04-18] (GARMIN Corp.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [89856 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_ext_ctrl; C:\windows\System32\DRIVERS\ew_juextctrl.sys [26624 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 huawei_wwanecm; C:\windows\System32\DRIVERS\ew_juwwanecm.sys [182272 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
S3 NETw1v32; C:\windows\System32\DRIVERS\NETw1v32.sys [5958656 2009-07-21] (Intel Corporation)
R2 npf; C:\windows\System32\drivers\npf.sys [50704 2010-01-27] (CACE Technologies, Inc.)
R1 RsvLock; C:\windows\system32\Drivers\RsvLock.sys [12528 2009-07-29] (SafeBoot International)
R0 SafeBoot; C:\windows\system32\Drivers\SafeBoot.sys [109216 2009-07-29] ()
R0 SbAlg; C:\windows\system32\Drivers\SbAlg.sys [51408 2009-07-29] (SafeBoot N.V.)
R0 SbFsLock; C:\windows\system32\Drivers\SbFsLock.sys [12960 2009-07-29] (SafeBoot International)
R0 sptd; C:\windows\System32\Drivers\sptd.sys [436792 2012-06-05] ()
S3 ss_bbus; C:\windows\System32\DRIVERS\ss_bbus.sys [98432 2010-04-27] (MCCI)
S3 ss_bmdfl; C:\windows\System32\DRIVERS\ss_bmdfl.sys [14848 2010-04-27] (MCCI Corporation)
S3 ss_bmdm; C:\windows\System32\DRIVERS\ss_bmdm.sys [123648 2010-04-27] (MCCI Corporation)
S3 tdrpman; C:\windows\System32\DRIVERS\tdrpman.sys [889888 2013-12-20] (Acronis International GmbH)
R0 tib; C:\windows\System32\DRIVERS\tib.sys [736192 2013-11-08] (Acronis International GmbH)
R0 tib_mounter; C:\windows\System32\DRIVERS\tib_mounter.sys [143648 2013-12-20] (Acronis International GmbH)
R0 vididr; C:\windows\System32\DRIVERS\vididr.sys [116000 2013-11-08] (Acronis International GmbH)
R0 vidsflt; C:\windows\System32\DRIVERS\vidsflt.sys [85280 2013-11-08] (Acronis International GmbH)
R3 yukonw7; C:\windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U5 AppMgmt; C:\windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-25 15:08 - 2014-03-25 15:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Boty
2014-03-24 23:32 - 2014-03-24 23:33 - 00781383 _____ () C:\Users\Marketa\Downloads\RSIT.exe
2014-03-24 23:28 - 2014-03-28 22:25 - 00017360 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-23 21:39 - 2014-03-27 20:44 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-20 23:14 - 2014-03-20 23:32 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-16 15:23 - 2014-03-16 15:24 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 06:45 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-14 06:45 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-14 06:45 - 2014-03-01 05:10 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-14 06:45 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-14 06:45 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-14 06:45 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-14 06:45 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-14 06:45 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-14 06:45 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-14 06:45 - 2014-03-01 04:38 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-14 06:45 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-14 06:45 - 2014-03-01 04:31 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-14 06:45 - 2014-03-01 04:25 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-14 06:45 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-14 06:45 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-14 06:45 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-14 06:45 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-14 06:45 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-14 06:45 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-14 06:45 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-14 06:45 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-03-14 06:45 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2014-03-14 06:44 - 2014-02-07 02:07 - 02349056 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2014-03-14 06:44 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\windows\system32\WindowsCodecs.dll
2014-03-14 06:44 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\windows\system32\wer.dll
2014-03-14 06:44 - 2014-01-28 03:07 - 00185344 _____ (Microsoft Corporation) C:\windows\system32\wwansvc.dll
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 10:28 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-07 21:21 - 2014-03-28 22:13 - 00010378 _____ () C:\windows\setupact.log
2014-03-07 21:21 - 2014-03-26 23:25 - 00001318 _____ () C:\windows\PFRO.log
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-05 07:32 - 2014-03-07 21:56 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-02 20:18 - 2014-03-02 20:55 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 19:58 - 2014-03-02 20:13 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 19:07 - 2014-03-02 20:54 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 18:04 - 2014-03-02 18:06 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:39 - 2014-03-02 17:46 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-02 17:38 - 2014-03-02 18:08 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:17 - 2014-03-01 12:14 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood

==================== One Month Modified Files and Folders =======

2014-03-28 22:25 - 2014-03-24 23:28 - 00017360 _____ () C:\Users\Marketa\Desktop\FRST.txt
2014-03-28 22:25 - 2013-01-28 22:49 - 00000000 ____D () C:\ProgramData\ActivityMon
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:13 - 2014-03-07 21:21 - 00010378 _____ () C:\windows\setupact.log
2014-03-28 22:13 - 2013-07-26 20:31 - 01788990 _____ () C:\windows\WindowsUpdate.log
2014-03-28 21:54 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-28 21:54 - 2009-07-14 05:34 - 00019760 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-28 21:49 - 2013-07-12 11:27 - 00000940 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-28 21:46 - 2013-07-12 11:27 - 00000936 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-28 21:46 - 2009-07-14 05:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-28 19:44 - 2013-10-24 12:22 - 00000328 _____ () C:\windows\Tasks\HP Photo Creations Communicator.job
2014-03-28 13:16 - 2011-11-11 19:56 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\vlc
2014-03-27 23:03 - 2011-09-14 10:39 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\uTorrent
2014-03-27 20:44 - 2014-03-23 21:39 - 00000000 ____D () C:\Users\Marketa\Downloads\47.Ronin.2013.WEBRip.x264.AC3-FooKaS
2014-03-27 20:18 - 2011-09-15 19:00 - 00000052 _____ () C:\windows\system32\DOErrors.log
2014-03-27 20:15 - 2011-09-20 12:54 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\HpUpdate
2014-03-26 23:27 - 2014-03-26 23:04 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:25 - 2014-03-07 21:21 - 00001318 _____ () C:\windows\PFRO.log
2014-03-26 23:17 - 2014-03-26 22:57 - 00000000 ____D () C:\zoek_backup
2014-03-26 23:16 - 2011-10-07 18:31 - 00000000 ____D () C:\Program Files\Common Files\DVDVideoSoft
2014-03-26 23:01 - 2014-03-26 23:00 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:21 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:52 - 2014-03-26 22:53 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:19 - 2014-03-25 22:16 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-25 15:15 - 2014-03-25 15:08 - 00000000 ____D () C:\Users\Marketa\Desktop\Boty
2014-03-25 15:08 - 2012-04-09 16:13 - 07027200 ___SH () C:\Users\Marketa\Desktop\Thumbs.db
2014-03-24 23:33 - 2014-03-24 23:32 - 00781383 _____ () C:\Users\Marketa\Downloads\RSIT.exe
2014-03-24 23:25 - 2014-03-24 23:25 - 00000000 ____D () C:\FRST
2014-03-24 23:23 - 2014-03-28 22:22 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 01145856 _____ (Farbar) C:\Users\Marketa\Desktop\FRST.exe
2014-03-24 23:20 - 2014-03-24 23:20 - 00085784 _____ () C:\Users\Marketa\Downloads\trzFC12.tmp
2014-03-23 21:38 - 2014-03-23 21:38 - 00018585 _____ () C:\Users\Marketa\Downloads\[CzT]47_roninu_47_Ronin_2013_WebRip_.torrent
2014-03-23 21:04 - 2014-03-23 21:04 - 00035301 _____ () C:\Users\Marketa\Downloads\[CzT]Trosecnik_Cast_Away_2000_1080p_.torrent
2014-03-23 07:34 - 2009-09-20 08:18 - 00000000 ____D () C:\ProgramData\PDFC
2014-03-22 07:55 - 2014-02-05 05:25 - 00002047 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-22 07:49 - 2011-09-12 15:27 - 00000000 ____D () C:\Users\Marketa
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\system32\wfp
2014-03-22 07:49 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\registration
2014-03-20 23:32 - 2014-03-20 23:14 - 1554069504 _____ () C:\Users\Marketa\Downloads\Thor.The.Dark.World.2013.480p.BRRip.XviD.AC3.CZ.avi
2014-03-20 23:14 - 2014-03-20 23:14 - 00015415 _____ () C:\Users\Marketa\Downloads\[CzT]Thor_Temny_svet_Thor_The_Dark_World_2013_CZ_.torrent
2014-03-20 07:59 - 2013-12-18 07:54 - 00000000 ____D () C:\Users\Marketa\Desktop\Montessori pomůcky
2014-03-19 07:37 - 2013-11-13 10:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Tea foto
2014-03-18 22:54 - 2013-08-05 08:25 - 00000000 ____D () C:\windows\system32\MRT
2014-03-18 22:51 - 2011-09-16 05:32 - 87350280 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-03-18 22:48 - 2009-07-14 03:04 - 00000513 _____ () C:\windows\win.ini
2014-03-18 22:47 - 2009-07-14 05:52 - 00000000 ____D () C:\windows\twain_32
2014-03-18 22:06 - 2013-11-10 08:10 - 00000000 ____D () C:\Users\Marketa\Desktop\Logo MŠ Rybička
2014-03-17 20:07 - 2009-09-20 08:17 - 00006428 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-16 20:43 - 2011-09-14 10:35 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Media Player Classic
2014-03-16 15:24 - 2014-03-16 15:23 - 00000000 ____D () C:\Users\Marketa\Desktop\Masopust Vraclav březen 2014
2014-03-16 09:54 - 2011-10-15 21:13 - 00000000 ____D () C:\Users\Marketa\Desktop\Sokol
2014-03-15 11:16 - 2014-01-15 22:33 - 00000000 ____D () C:\ProgramData\IObit
2014-03-15 11:14 - 2009-07-14 05:33 - 03819744 _____ () C:\windows\system32\FNTCACHE.DAT
2014-03-15 11:12 - 2011-09-19 13:49 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-15 06:55 - 2009-09-20 08:23 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-14 20:12 - 2014-03-14 20:12 - 00000000 ____D () C:\windows\Tasks\ImCleanDisabled
2014-03-14 11:16 - 2013-01-09 21:44 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-03-14 06:38 - 2012-04-02 04:04 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2014-03-14 06:38 - 2011-09-26 19:32 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2014-03-11 10:59 - 2009-09-20 08:30 - 00000000 ____D () C:\ProgramData\Sonic
2014-03-11 10:58 - 2014-03-11 10:58 - 00000000 ____D () C:\Users\Marketa\Documents\GomPlayer
2014-03-11 10:58 - 2014-03-11 10:28 - 00000000 ____D () C:\Users\Marketa\Desktop\DVD Radost ze zdravych deti
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\GRETECH
2014-03-11 10:57 - 2014-03-11 10:57 - 00000000 ____D () C:\Program Files\GRETECH
2014-03-11 07:33 - 2012-06-29 20:24 - 00000000 ____D () C:\Trefik10
2014-03-10 16:40 - 2011-09-15 05:05 - 00000000 ____D () C:\Users\Marketa\AppData\Local\Microsoft Help
2014-03-10 16:23 - 2014-02-19 16:48 - 00000000 ____D () C:\Users\Marketa\Desktop\Výzkum v MŠ NA Herzánce
2014-03-10 10:24 - 2011-09-23 16:30 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\BatteryBar
2014-03-10 09:29 - 2011-09-12 15:50 - 00000000 ____D () C:\Users\Marketa\AppData\Local\PDFC
2014-03-09 12:55 - 2013-08-24 11:15 - 00000000 ____D () C:\Users\Marketa\Desktop\Pro Terezku a kluky
2014-03-08 17:16 - 2013-11-12 07:16 - 00000000 ____D () C:\Users\Marketa\Desktop\Háčkování a pletení návody
2014-03-07 21:56 - 2014-03-05 07:32 - 00000000 ____D () C:\Users\Marketa\Desktop\Masky
2014-03-07 21:21 - 2014-03-07 21:21 - 00000000 _____ () C:\windows\setuperr.log
2014-03-07 16:51 - 2011-10-07 19:45 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\DAEMON Tools Lite
2014-03-07 16:06 - 2014-01-15 22:52 - 72515584 _____ () C:\windows\system32\config\SOFTWARE.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00364544 _____ () C:\windows\system32\config\DEFAULT.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00061440 _____ () C:\windows\system32\config\SAM.iobit
2014-03-07 16:06 - 2014-01-15 22:52 - 00032768 _____ () C:\windows\system32\config\SECURITY.iobit
2014-03-05 10:04 - 2014-03-05 10:04 - 43634688 _____ () C:\windows\system32\config\COMPONENTS.iobit
2014-03-02 20:55 - 2014-03-02 20:18 - 2653429760 _____ () C:\Users\Marketa\Downloads\Strom života.avi
2014-03-02 20:54 - 2014-03-02 19:07 - 00000000 ____D () C:\Users\Marketa\Downloads\Hwayi
2014-03-02 20:13 - 2014-03-02 19:58 - 00000000 ____D () C:\Users\Marketa\Downloads\12 Years a Slave (2013) DVDRip XviD-MAXSPEED
2014-03-02 18:08 - 2014-03-02 17:38 - 2560399726 _____ () C:\Users\Marketa\Downloads\Bláznivá, zatracená láska - CZ (2011).avi
2014-03-02 18:06 - 2014-03-02 18:04 - 00000000 ____D () C:\Users\Marketa\Downloads\Jen pockej, zajici!
2014-03-02 17:59 - 2014-03-02 17:59 - 00013615 _____ () C:\Users\Marketa\Desktop\nhc – zástupce.lnk
2014-03-02 17:46 - 2014-03-02 17:39 - 919937384 _____ () C:\Users\Marketa\Downloads\Babovresky (2013).avi
2014-03-01 12:14 - 2014-03-01 08:17 - 00000000 ____D () C:\Users\Marketa\Downloads\The Neverhood
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Users\Marketa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DreamWorks
2014-03-01 12:10 - 2014-03-01 12:10 - 00000000 ____D () C:\Program Files\DreamWorks Interactive
2014-03-01 08:29 - 2009-07-14 03:37 - 00000000 ____D () C:\windows\Microsoft.NET
2014-03-01 05:30 - 2014-03-14 06:45 - 17074688 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-03-01 05:11 - 2014-03-14 06:45 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-03-01 05:10 - 2014-03-14 06:45 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-03-01 04:52 - 2014-03-14 06:45 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-03-01 04:51 - 2014-03-14 06:45 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-14 06:45 - 02168320 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-03-01 04:43 - 2014-03-14 06:45 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-03-01 04:40 - 2014-03-14 06:45 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-03-01 04:38 - 2014-03-14 06:45 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-03-01 04:38 - 2014-03-14 06:45 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-03-01 04:37 - 2014-03-14 06:45 - 00553472 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-03-01 04:31 - 2014-03-14 06:45 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-03-01 04:25 - 2014-03-14 06:45 - 00208896 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-03-01 04:16 - 2014-03-14 06:45 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-03-01 04:14 - 2014-03-14 06:45 - 04244480 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-03-01 04:03 - 2014-03-14 06:45 - 00524288 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-03-01 04:00 - 2014-03-14 06:45 - 01964032 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-03-01 03:57 - 2014-03-14 06:45 - 11266048 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-03-01 03:32 - 2014-03-14 06:45 - 01820160 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-03-01 03:27 - 2014-03-14 06:45 - 01156096 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-03-01 03:25 - 2014-03-14 06:45 - 00703488 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Marketa\AppData\Local\Temp\promote-upx.exe

==================== Bamital & volsnap Check =================

C:\windows\explorer.exe => MD5 is legit
C:\windows\system32\winlogon.exe => MD5 is legit
C:\windows\system32\wininit.exe => MD5 is legit
C:\windows\system32\svchost.exe => MD5 is legit
C:\windows\system32\services.exe => MD5 is legit
C:\windows\system32\User32.dll => MD5 is legit
C:\windows\system32\userinit.exe => MD5 is legit
C:\windows\system32\rpcss.dll => MD5 is legit
C:\windows\system32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2014-03-21 00:23

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:448.47 GB) (Free:64.38 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.92 GB) FAT32

Available physical RAM: 1689.78 MB
Total physical RAM: 3066.27 MB
Percentage of memory in use: 44%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 68E784C7)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=448 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Marketa\Desktop" je 62430 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\accrdsub
"C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\acevents
"C:\Program Files\ActivIdentity\ActivClient\acevents.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AcronisTibMounterMonitor
c:\program files\common files\acronis\tibmounter\tibmountermonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\actSessionUI32.exe
"C:\Program Files\ActivityMon Software\ActivityMon\actSessionUI32.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANT Agent
c:\program files\garmin\ant agent\ant agent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CognizanceTS
rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GarminExpressTrayApp
c:\program files\garmin\express tray\expresstray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8
"c:\program files\google\chrome\application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8
"C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPADVISOR
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IAAnotif
C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LightScribe Control Panel
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileBroadband
C:\Program Files\Vodafone\Vodafone Mobile Broadband\Bin\MobileBroadband.exe /silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PTHOSTTR
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QlbCtrl.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Slu�ba Acronis Scheduler2
c:\program files\common files\acronis\schedule2\schedhlp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAX
C:\Program Files\Analog Devices\SoundMAX\soundmax.exe /tray [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMAXPnP
C:\Program Files\Analog Devices\Core\smax4pnp.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SynTPEnh
%ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TrueImageMonitor.exe
c:\program files\acronis\trueimagehome\trueimagemonitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WirelessAssistant
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTTray.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk
C:\PROGRA~1\WinZip\WZQKPICK.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Dropbox.lnk
C:\Users\Marketa\AppData\Roaming\Dropbox\bin\Dropbox.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Marketa^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2010.lnk
C:\PROGRA~1\MICROS~2\Office14\ONENOTEM.EXE

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)

CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]

R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

C:\Program Files\IObit
C:\Program Files\Enigma Software Group
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 13-03-2014 01
Ran by Marketa at 2014-03-30 22:24:55 Run:1
Running from C:\Users\Marketa\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-730507215-887370363-3937766701-1001\...\Run: [GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8] - C:\Program Files\Google\Chrome\Application\chrome.exe [859976 2014-03-15] (Google Inc.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)

CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2014-01-15]
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd [2014-02-23]

R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 catchme; \??\C:\Users\Marketa\AppData\Local\Temp\catchme.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S0 SmartDefragDriver; System32\Drivers\SmartDefragDriver.sys [X]

C:\Program Files\IObit
C:\Program Files\Enigma Software Group
2014-03-28 22:24 - 2014-03-28 22:24 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\FRSTLauncher.exe
2014-03-28 22:23 - 2014-03-28 22:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload
2014-03-28 22:22 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Desktop\trz75EF.tmp
2014-03-26 23:21 - 2014-03-26 22:57 - 00024064 _____ () C:\windows\zoek-delete.exe
2014-03-26 23:04 - 2014-03-26 23:27 - 00010344 _____ () C:\zoek-results.log
2014-03-26 23:00 - 2014-03-26 23:01 - 01285120 _____ () C:\Users\Marketa\Downloads\zoek.exe
2014-03-26 22:57 - 2014-03-26 23:17 - 00000000 ____D () C:\zoek_backup
2014-03-26 22:56 - 2014-03-26 22:56 - 04095370 _____ () C:\Users\Marketa\Downloads\zoek.zip
2014-03-26 22:53 - 2014-03-26 22:52 - 01271747 _____ () C:\Users\Marketa\Downloads\trz1EAE.tmp
2014-03-25 22:16 - 2014-03-25 22:19 - 00000000 ____D () C:\AdwCleaner
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT1.txt
2014-03-25 22:16 - 2014-03-25 22:16 - 00005541 _____ () C:\Users\Marketa\Desktop\JRT.txt
2014-03-25 22:08 - 2014-03-25 22:08 - 00000000 ____D () C:\windows\ERUNT
2014-03-25 22:06 - 2014-03-25 22:06 - 01950720 _____ () C:\Users\Marketa\Desktop\adwcleaner.exe
2014-03-25 22:06 - 2014-03-25 22:06 - 01038974 _____ (Thisisu) C:\Users\Marketa\Desktop\JRT.exe
2014-03-24 23:23 - 2014-03-24 23:23 - 00112640 _____ (forum.viry.cz) C:\Users\Marketa\Downloads\FRSTLauncher.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HP Photo Creations Communicator.job => C:\ProgramData\HP Photo Creations\Communicator.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f

Hosts:
End
*****************

HKU\S-1-5-21-730507215-887370363-3937766701-1001\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8 => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814} => Key deleted successfully.
HKCR\CLSID\{10921475-03CE-4E04-90CE-E2E7EF20C814} => Key deleted successfully.
HKLM\SOFTWARE\Google\Chrome\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd => Key deleted successfully.
C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx => Moved successfully.
C:\Users\Marketa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd => Moved successfully.
LiveUpdateSvc => Service stopped successfully.
LiveUpdateSvc => Service deleted successfully.
catchme => Service deleted successfully.
esgiguard => Service deleted successfully.
SmartDefragDriver => Service deleted successfully.
C:\Program Files\IObit => Moved successfully.
C:\Program Files\Enigma Software Group => Moved successfully.
C:\Users\Marketa\Desktop\FRSTLauncher.exe => Moved successfully.
"C:\Users\Marketa\Downloads\Nepotvrzeno 864135.crdownload" => File/Directory not found.
C:\Users\Marketa\Desktop\trz75EF.tmp => Moved successfully.
C:\windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\Marketa\Downloads\zoek.exe => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Marketa\Downloads\zoek.zip => Moved successfully.
C:\Users\Marketa\Downloads\trz1EAE.tmp => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Marketa\Desktop\JRT1.txt => Moved successfully.
C:\Users\Marketa\Desktop\JRT.txt => Moved successfully.
C:\Windows\ERUNT => Moved successfully.
C:\Users\Marketa\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Marketa\Desktop\JRT.exe => Moved successfully.
C:\Users\Marketa\Downloads\FRSTLauncher.exe => Moved successfully.
C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\windows\Tasks\HP Photo Creations Communicator.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_60AD4DAC0E14AC9C614E8CCC3E8C71F8" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched" /f =========

Operace byla dokonźena ŁspŘçnŘ.

========= End of Reg: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

T-Cleaner se mi zasekne hned na zacatku:

Stisknete klávesu A pro pokracovani, N pro ukniceni programu: a
C:\Program Files\Trend Micro\hijackthis.exe
C:\Program Files\Trend Micro\Marketa.exe

a dal nejede

pokracuj dalsim krokom

VIRY.CZ

prosim o kontrolu - wrapper.z5x.net

prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net

Re: prosim o kontrolu - wrapper.z5x.net