VIRY.CZ

Zdravím mám problem bohužel nemužu pustit ani rsit protože vir všechno blokuje nevím zda ho znáte jmenuje se iexplore.exe ani internet pustit nemužu všechno se pouští na něm prosím o radu

Zdravim

Zkuste pouzit RSIT v nouzovem rezimu.

bohužel ani tak vyskakují okna i v nouzáku nemužu nahrát nic noveho všechno se poušti přes ten vir i v nouzovem režimu .. zkoušel sem tam natahnout mbam,rsit,ccleaner do pc to dostanu ale nepustím to ...

Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu, kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte


Pokud by to vir blokoval, pokracujte podle tohoto navodu
http://forum.viry.cz/viewtopic.php?f=24&t=130783

My si nerozumíme já tam nic nespustím všechno co natáhnu do pc klidně na flashce se spouští v tom exploreru všechno pokud proces nevypnu přes správce úloh tak vyskakuje do nekonečna .... takže ani rsit nic se nespustí vir to nedovolí zakáže to vypne to a je konec a tím že se pokusím něco spustit zapnu jen ten vir a zase vyskakuje donekanečna okno viz fotka ...

po natahnutí do pc a spuštění vyskočí a hned zmizí okno .... a tím se zase zapne další proces iexplore.exe do pár sekund se začnou tvořit další procesy stejného názvu ....odklikávání nepomáhá ... jedině povypínat všechny procesy ve správci úloh .... pak tyhle okna přestanou vyskakovat ale ntb je i tak nepouživatelný protože cokoliv člověk pustí se nespustí ale jen zapne ten vir .... prosím o pomoc v nouzovém režimu se děje úplně to stejné ....

Tak udelejte log z FRST, jak jsem psal http://forum.viry.cz/viewtopic.php?f=24&t=130783

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Jitka (administrator) on JITKA-PC on 30-03-2014 18:37:58
Running from E:\
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Safe Mode (minimal)

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Windows\SYSTEM32\WISPTIS.EXE
(Microsoft Corporation) C:\Windows\system32\cmd.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAStorIcon] - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1664000 2012-09-05] (IDT, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2780400 2013-09-13] (Synaptics Incorporated)
HKLM\...\Run: [IntelPROSet] - C:\Program Files\Common Files\Intel\WirelessCommon\iFrmewrk.exe [4802864 2012-06-25] (Intel(R) Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [168616 2013-12-18] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [141336 2013-12-18] (NVIDIA Corporation)
Startup: C:\Users\Jitka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://htp//www.seznam.cz
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Jitka\AppData\Roaming\Mozilla\Firefox\Profiles\1v58wdpn.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml

==================== Services (Whitelisted) =================

S2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2169016 2014-03-01] (Microsoft Corporation)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S2 IconMan_R; C:\Program Files (x86)\Realtek\Realtek USB 2.0 Card Reader\RIconMan.exe [2464400 2012-09-07] (Realsil Microelectronics Inc.)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [162648 2012-03-15] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [272688 2012-06-25] ()
S2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3325232 2012-06-25] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-07] (Intel Corporation)
S3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
R0 oem-drv64; C:\Windows\System32\DRIVERS\oem-drv64.sys [42496 2014-03-30] (secr9tos)
R0 rtcrfilt64; C:\Windows\System32\DRIVERS\rtcrfilt64.sys [19600 2012-09-04] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [34544 2013-09-13] (Synaptics Incorporated)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-30 18:37 - 2014-03-30 18:37 - 00000000 ____D () C:\FRST
2014-03-30 18:26 - 2014-03-30 18:26 - 02157056 _____ (Farbar) C:\Users\Jitka\Desktop\FRST64.exe
2014-03-30 18:08 - 2014-03-30 17:54 - 03972608 _____ () C:\Users\Jitka\Desktop\RogueKiller.exe
2014-03-30 16:36 - 2014-03-30 16:38 - 00000000 ____D () C:\Users\Jitka\Desktop\Otec odvirování
2014-03-29 12:47 - 2014-03-29 12:47 - 615465365 _____ () C:\Windows\MEMORY.DMP
2014-03-29 12:47 - 2014-03-29 12:47 - 00287376 _____ () C:\Windows\Minidump\032914-16177-01.dmp
2014-03-29 12:47 - 2014-03-29 12:47 - 00000000 ____D () C:\Windows\Minidump
2014-03-29 00:34 - 2014-01-28 04:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-29 00:33 - 2014-02-04 04:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-29 00:33 - 2014-02-04 04:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-29 00:33 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-29 00:33 - 2014-01-04 00:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-28 23:54 - 2014-03-29 12:35 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{908264FB-0254-4081-8070-B6B6892D9E28}
2014-03-28 21:00 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (5) (1).exe
2014-03-28 20:58 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (5).exe
2014-03-28 20:32 - 2009-07-14 03:38 - 00216064 _____ (Microsoft Corporation) C:\Program Files\cleanmgr.exe
2014-03-28 20:18 - 2014-03-28 20:34 - 00000000 ____D () C:\Users\Jitka\Games
2014-03-28 20:18 - 2014-03-28 20:18 - 00000000 ____D () C:\Users\Jitka\Dell15z
2014-03-28 20:17 - 2014-03-28 20:17 - 00000000 ____D () C:\Users\Jitka\Dell
2014-03-28 18:45 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (4).exe
2014-03-28 12:30 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (3).exe
2014-03-28 12:06 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (2).exe
2014-03-28 12:00 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox.exe
2014-03-28 12:00 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (1).exe
2014-03-28 09:49 - 2009-07-14 03:39 - 01076736 _____ (Microsoft Corporation) C:\Program Files\msdt.exe
2014-03-28 09:48 - 2009-07-14 03:39 - 00045568 _____ (Microsoft Corporation) C:\Program Files\rundll32.exe
2014-03-27 22:52 - 2014-03-27 22:52 - 00000000 _____ () C:\Users\Jitka\Desktop\Nový rastrový obrázek.bmp
2014-03-27 21:40 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox (2).exe
2014-03-27 21:35 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox (1).exe
2014-03-27 21:34 - 2014-03-20 15:13 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox.exe
2014-03-27 14:19 - 2014-03-27 14:19 - 00002037 _____ () C:\Users\Jitka\Desktop\Mozilla Firefox (3).lnk
2014-03-27 05:52 - 2014-03-27 05:52 - 00000017 _____ () C:\Users\Jitka\AppData\Local\resmon.resmoncfg
2014-03-27 05:50 - 2014-03-27 05:50 - 00001411 _____ () C:\Users\Jitka\Desktop\Dopravka (2).lnk
2014-03-27 05:12 - 2014-03-28 12:31 - 00000000 ____D () C:\Users\Jitka\Documents\Stažené soubory
2014-03-27 05:09 - 2014-03-27 05:04 - 00000758 _____ () C:\Users\Jitka\Documents\Mozilla Firefox.zip
2014-03-27 05:08 - 2014-03-27 05:08 - 00000000 _____ () C:\Users\Jitka\Desktop\Nový Microsoft PowerPoint Presentation.pptx
2014-03-27 05:04 - 2014-03-27 05:04 - 00000758 _____ () C:\Users\Public\Desktop\Mozilla Firefox.zip
2014-03-26 22:17 - 2014-03-26 22:17 - 00020111 ____H () C:\Users\Jitka\Desktop\~WRL0003.tmp
2014-03-26 19:31 - 2010-11-16 12:30 - 00679936 _____ () C:\Users\Jitka\Downloads\ASWData.mdb
2014-03-26 19:31 - 2010-11-16 12:30 - 00679936 _____ () C:\Users\Jitka\Downloads\ASWData (2).mdb
2014-03-26 19:31 - 2010-11-16 12:30 - 00679936 _____ () C:\Users\Jitka\Downloads\ASWData (1).mdb
2014-03-26 10:38 - 2014-03-26 10:38 - 13084896 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\Silverlight_x64.exe
2014-03-26 10:05 - 2014-03-07 12:15 - 01345414 _____ () C:\Users\Jitka\Downloads\DvrPlayer (2).rar
2014-03-26 09:42 - 2014-03-26 19:56 - 01345414 _____ () C:\Users\Jitka\Downloads\DvrPlayer (1).rar
2014-03-26 09:20 - 2014-03-26 09:20 - 01069728 _____ (Solid State Networks) C:\Users\Jitka\Downloads\install_flashplayer12x32ax_gtba_chra_dy_aaa_aih.exe
2014-03-26 09:19 - 2014-03-07 12:22 - 02690934 _____ () C:\Users\Jitka\Downloads\DvrPlayer.rar
2014-03-26 09:07 - 2014-03-26 09:07 - 00347816 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\MicrosoftFixit.Codec.RNP.283192458907451.3.1.Run.exe
2014-03-26 08:32 - 2014-03-26 08:32 - 00002938 _____ () C:\Windows\System32\Tasks\{072E29BC-D52C-4675-A6B8-D5B016F3261B}
2014-03-26 08:31 - 2014-03-26 08:31 - 00002938 _____ () C:\Windows\System32\Tasks\{1259786D-CCCD-470C-BD1C-D08965615121}
2014-03-26 08:24 - 2014-03-26 08:24 - 00347816 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\MicrosoftFixit.Codec.LB.283192458907451.1.1.Run.exe
2014-03-26 08:15 - 2014-03-26 08:15 - 04954736 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\WindowsUpgradeAssistant(2).exe
2014-03-26 08:04 - 2014-03-26 08:04 - 00000619 _____ () C:\Users\Jitka\Desktop\DvrPlayer – zástupce.lnk
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{E67F53B3-6E48-478E-AD19-C1A9E694DC05}
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{8E4B937F-CC77-4534-9DAB-542BF592D364}
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{78B125CE-A0A5-4166-942E-943D1B1B78A7}
2014-03-26 07:48 - 2014-03-26 07:48 - 01528184 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\GenuineCheck.exe
2014-03-26 07:48 - 2014-03-26 07:48 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-03-25 13:00 - 2013-03-24 00:01 - 02930688 _____ () C:\Users\Jitka\Downloads\aswdata_den7.mdb
2014-03-25 12:50 - 2014-03-27 05:50 - 00001411 _____ () C:\Users\Jitka\Desktop\Dopravka.lnk
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Users\Jitka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dopravka
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Asw
2014-03-25 12:48 - 2014-03-25 12:48 - 07278793 _____ () C:\Users\Jitka\Downloads\dopravkaxp(1).exe
2014-03-25 12:48 - 2014-03-25 12:48 - 00421888 ____N (Microsoft Corporation) C:\Windows\Setup1.exe
2014-03-25 12:48 - 2014-03-25 12:48 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2014-03-25 12:48 - 2014-03-25 12:48 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE
2014-03-25 12:48 - 2014-03-25 12:48 - 00000000 ____D () C:\aswinstal
2014-03-25 12:47 - 2014-03-25 12:47 - 07278793 _____ () C:\Users\Jitka\Downloads\dopravkaxp.exe
2014-03-25 12:30 - 2014-03-25 15:04 - 00013606 ____H () C:\Users\Jitka\Desktop\~WRL3587.tmp
2014-03-23 13:50 - 2014-03-26 09:40 - 00000000 ____D () C:\Users\Jitka\Desktop\Logo
2014-03-20 15:13 - 2014-03-29 00:08 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-20 10:26 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-03-20 10:26 - 2013-04-03 00:51 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-03-19 21:13 - 2014-03-19 21:14 - 00000000 ____D () C:\Users\Jitka\Documents\Nová složka (3)
2014-03-17 18:45 - 2014-03-17 18:45 - 00004633 _____ () C:\Users\Jitka\Downloads\ONDRUŠOVÁ_JITKA.p12
2014-03-17 08:16 - 2014-03-17 08:16 - 00010856 _____ () C:\Users\Jitka\Downloads\H+M - Josef Matula - ÚP.odt
2014-03-16 01:33 - 2014-03-16 01:33 - 00000000 ____D () C:\Users\Jitka\AppData\Roaming\IDT
2014-03-15 21:57 - 2013-12-21 11:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-15 21:57 - 2013-12-21 10:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-15 19:25 - 2014-03-01 08:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-15 19:25 - 2014-03-01 07:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-15 19:25 - 2014-03-01 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-15 19:25 - 2014-03-01 06:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-15 19:25 - 2014-03-01 06:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-15 19:25 - 2014-03-01 06:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-15 19:25 - 2014-03-01 06:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-15 19:25 - 2014-03-01 06:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-15 19:25 - 2014-03-01 06:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-15 19:25 - 2014-03-01 06:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-15 19:25 - 2014-03-01 06:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-15 19:25 - 2014-03-01 06:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-15 19:25 - 2014-03-01 06:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-15 19:25 - 2014-03-01 06:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-15 19:25 - 2014-03-01 06:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-15 19:25 - 2014-03-01 06:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-15 19:25 - 2014-03-01 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-15 19:25 - 2014-03-01 05:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-15 19:25 - 2014-03-01 05:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-15 19:25 - 2014-03-01 05:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-15 19:25 - 2014-03-01 05:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-15 19:25 - 2014-03-01 05:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-15 19:25 - 2014-03-01 05:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-15 19:25 - 2014-03-01 05:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-15 19:25 - 2014-03-01 05:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-15 19:25 - 2014-03-01 05:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-15 19:25 - 2014-03-01 05:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-15 19:25 - 2014-03-01 05:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-15 19:25 - 2014-03-01 05:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-15 19:25 - 2014-03-01 05:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-15 19:25 - 2014-03-01 05:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-15 19:25 - 2014-03-01 05:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-15 19:25 - 2014-03-01 05:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-15 19:25 - 2014-03-01 05:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-15 19:25 - 2014-03-01 04:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-15 19:25 - 2014-03-01 04:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-15 19:25 - 2014-03-01 04:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-15 19:25 - 2014-03-01 04:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-15 19:25 - 2014-03-01 04:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-15 19:25 - 2014-03-01 04:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-15 19:25 - 2014-02-07 03:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-15 19:25 - 2014-01-29 04:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-15 19:25 - 2014-01-29 04:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-15 19:23 - 2014-03-15 19:23 - 00000000 ____D () C:\Users\Jitka\Downloads\prilohy_40008
2014-03-15 19:20 - 2014-02-04 04:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-15 19:20 - 2014-02-04 04:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-15 18:47 - 2014-03-15 18:47 - 12140193 _____ () C:\Users\Jitka\Downloads\prilohy_40008.zip
2014-03-12 19:39 - 2014-03-12 19:39 - 00004006 _____ () C:\Users\Jitka\Downloads\dokument.xml
2014-03-12 16:39 - 2014-03-12 16:39 - 00004633 _____ () C:\Users\Public\Documents\ONDRUŠOVÁ_JITKA.p12
2014-03-11 17:06 - 2014-03-11 17:06 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(3).zip
2014-03-11 17:02 - 2014-03-11 17:02 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(2)(1).zip
2014-03-11 17:02 - 2014-03-11 17:02 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(1).zip
2014-03-11 17:01 - 2014-03-11 17:01 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607.zip
2014-03-07 05:54 - 2014-02-14 17:41 - 09304408 _____ (Wargaming.net ) C:\Users\Jitka\Downloads\WoT_internet_install_eu(1) – kopie.exe
2014-03-07 05:54 - 2014-02-14 17:28 - 08988024 _____ (Wargaming.net ) C:\Users\Jitka\Downloads\WoWP_internet_install_eu – kopie.exe
2014-03-07 05:54 - 2013-08-24 22:28 - 00040018 _____ () C:\Users\Jitka\Downloads\wot_87.2903_86.2732_client.patch (1) – kopie.torrent
2014-03-07 05:54 - 2013-08-24 17:52 - 520080058 _____ () C:\Users\Jitka\Downloads\wot_87.2903_86.2732_client – kopie.patch
2014-03-07 05:54 - 2013-08-07 16:12 - 02715469 _____ () C:\Users\Jitka\Downloads\prilohy_31444 – kopie.zip
2014-02-28 07:25 - 2014-02-28 07:25 - 00000000 ____D () C:\Program Files (x86)\Samsung

==================== One Month Modified Files and Folders =======

2014-03-30 18:37 - 2014-03-30 18:37 - 00000000 ____D () C:\FRST
2014-03-30 18:27 - 2014-02-13 18:09 - 00042496 _____ (secr9tos) C:\Windows\system32\Drivers\oem-drv64.sys
2014-03-30 18:26 - 2014-03-30 18:26 - 02157056 _____ (Farbar) C:\Users\Jitka\Desktop\FRST64.exe
2014-03-30 18:26 - 2014-02-12 23:09 - 01999649 _____ () C:\Windows\WindowsUpdate.log
2014-03-30 18:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-30 17:58 - 2014-02-13 11:38 - 00217600 ___SH () C:\Users\Jitka\Desktop\Thumbs.db
2014-03-30 17:54 - 2014-03-30 18:08 - 03972608 _____ () C:\Users\Jitka\Desktop\RogueKiller.exe
2014-03-30 17:51 - 2014-02-13 05:14 - 00737882 _____ () C:\Windows\system32\perfh00A.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00735924 _____ () C:\Windows\system32\perfh013.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00717026 _____ () C:\Windows\system32\perfh019.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00676180 _____ () C:\Windows\system32\perfh00E.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00656146 _____ () C:\Windows\system32\perfh01D.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00599414 _____ () C:\Windows\system32\perfh008.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00486940 _____ () C:\Windows\system32\perfh014.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00473928 _____ () C:\Windows\system32\perfh00B.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00420850 _____ () C:\Windows\system32\perfh012.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00384770 _____ () C:\Windows\system32\perfh00D.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00171262 _____ () C:\Windows\system32\perfc00E.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00158462 _____ () C:\Windows\system32\perfc00A.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00153090 _____ () C:\Windows\system32\perfc013.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00150830 _____ () C:\Windows\system32\perfc019.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00142462 _____ () C:\Windows\system32\perfc01D.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00120372 _____ () C:\Windows\system32\perfc012.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00111116 _____ () C:\Windows\system32\perfc008.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00101508 _____ () C:\Windows\system32\perfc00B.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00095392 _____ () C:\Windows\system32\perfc014.dat
2014-03-30 17:51 - 2014-02-13 05:14 - 00084746 _____ () C:\Windows\system32\perfc00D.dat
2014-03-30 17:51 - 2014-02-13 00:41 - 00732472 _____ () C:\Windows\system32\perfh010.dat
2014-03-30 17:51 - 2014-02-13 00:41 - 00146834 _____ () C:\Windows\system32\perfc010.dat
2014-03-30 17:51 - 2014-02-13 00:37 - 00738142 _____ () C:\Windows\system32\perfh00C.dat
2014-03-30 17:51 - 2014-02-13 00:37 - 00471440 _____ () C:\Windows\system32\perfh001.dat
2014-03-30 17:51 - 2014-02-13 00:37 - 00149568 _____ () C:\Windows\system32\perfc00C.dat
2014-03-30 17:51 - 2014-02-13 00:37 - 00094760 _____ () C:\Windows\system32\perfc001.dat
2014-03-30 17:51 - 2011-03-17 21:49 - 00689634 _____ () C:\Windows\system32\perfh007.dat
2014-03-30 17:51 - 2011-03-17 21:49 - 00149104 _____ () C:\Windows\system32\perfc007.dat
2014-03-30 17:51 - 2011-03-17 21:36 - 00669414 _____ () C:\Windows\system32\perfh005.dat
2014-03-30 17:51 - 2011-03-17 21:36 - 00141540 _____ () C:\Windows\system32\perfc005.dat
2014-03-30 17:51 - 2009-07-14 07:13 - 11923418 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-30 17:51 - 2009-07-14 06:45 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-30 17:51 - 2009-07-14 06:45 - 00026576 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-30 17:44 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-30 17:43 - 2009-07-14 06:51 - 00038190 _____ () C:\Windows\setupact.log
2014-03-30 17:42 - 2014-02-13 11:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-30 17:24 - 2014-02-13 11:43 - 00027136 ___SH () C:\Users\Jitka\Downloads\Thumbs.db
2014-03-30 16:38 - 2014-03-30 16:36 - 00000000 ____D () C:\Users\Jitka\Desktop\Otec odvirování
2014-03-29 12:47 - 2014-03-29 12:47 - 615465365 _____ () C:\Windows\MEMORY.DMP
2014-03-29 12:47 - 2014-03-29 12:47 - 00287376 _____ () C:\Windows\Minidump\032914-16177-01.dmp
2014-03-29 12:47 - 2014-03-29 12:47 - 00000000 ____D () C:\Windows\Minidump
2014-03-29 12:35 - 2014-03-28 23:54 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{908264FB-0254-4081-8070-B6B6892D9E28}
2014-03-29 12:29 - 2010-11-21 05:47 - 00029930 _____ () C:\Windows\PFRO.log
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\uk-UA
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\th-TH
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\sl-SI
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\lv-LV
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\he-IL
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\ar-SA
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\uk-UA
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\th-TH
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\he-IL
2014-03-29 00:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-03-29 00:32 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-29 00:12 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-29 00:08 - 2014-03-20 15:13 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-03-28 20:55 - 2014-02-12 23:09 - 00000000 ____D () C:\Users\Jitka
2014-03-28 20:34 - 2014-03-28 20:18 - 00000000 ____D () C:\Users\Jitka\Games
2014-03-28 20:18 - 2014-03-28 20:18 - 00000000 ____D () C:\Users\Jitka\Dell15z
2014-03-28 20:17 - 2014-03-28 20:17 - 00000000 ____D () C:\Users\Jitka\Dell
2014-03-28 12:31 - 2014-03-27 05:12 - 00000000 ____D () C:\Users\Jitka\Documents\Stažené soubory
2014-03-27 22:52 - 2014-03-27 22:52 - 00000000 _____ () C:\Users\Jitka\Desktop\Nový rastrový obrázek.bmp
2014-03-27 14:19 - 2014-03-27 14:19 - 00002037 _____ () C:\Users\Jitka\Desktop\Mozilla Firefox (3).lnk
2014-03-27 05:52 - 2014-03-27 05:52 - 00000017 _____ () C:\Users\Jitka\AppData\Local\resmon.resmoncfg
2014-03-27 05:50 - 2014-03-27 05:50 - 00001411 _____ () C:\Users\Jitka\Desktop\Dopravka (2).lnk
2014-03-27 05:50 - 2014-03-25 12:50 - 00001411 _____ () C:\Users\Jitka\Desktop\Dopravka.lnk
2014-03-27 05:47 - 2014-02-13 11:38 - 00000000 ____D () C:\Users\Jitka\Desktop\data původní
2014-03-27 05:08 - 2014-03-27 05:08 - 00000000 _____ () C:\Users\Jitka\Desktop\Nový Microsoft PowerPoint Presentation.pptx
2014-03-27 05:05 - 2014-02-13 11:01 - 00002037 ____R () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-03-27 05:04 - 2014-03-27 05:09 - 00000758 _____ () C:\Users\Jitka\Documents\Mozilla Firefox.zip
2014-03-27 05:04 - 2014-03-27 05:04 - 00000758 _____ () C:\Users\Public\Desktop\Mozilla Firefox.zip
2014-03-26 22:17 - 2014-03-26 22:17 - 00020111 ____H () C:\Users\Jitka\Desktop\~WRL0003.tmp
2014-03-26 19:56 - 2014-03-26 09:42 - 01345414 _____ () C:\Users\Jitka\Downloads\DvrPlayer (1).rar
2014-03-26 18:36 - 2014-02-22 19:22 - 00000769 _____ () C:\Users\Public\Desktop\World of Tanks.lnk
2014-03-26 10:38 - 2014-03-26 10:38 - 13084896 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\Silverlight_x64.exe
2014-03-26 09:55 - 2014-02-14 10:21 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-03-26 09:40 - 2014-03-23 13:50 - 00000000 ____D () C:\Users\Jitka\Desktop\Logo
2014-03-26 09:20 - 2014-03-26 09:20 - 01069728 _____ (Solid State Networks) C:\Users\Jitka\Downloads\install_flashplayer12x32ax_gtba_chra_dy_aaa_aih.exe
2014-03-26 09:07 - 2014-03-26 09:07 - 00347816 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\MicrosoftFixit.Codec.RNP.283192458907451.3.1.Run.exe
2014-03-26 08:32 - 2014-03-26 08:32 - 00002938 _____ () C:\Windows\System32\Tasks\{072E29BC-D52C-4675-A6B8-D5B016F3261B}
2014-03-26 08:31 - 2014-03-26 08:31 - 00002938 _____ () C:\Windows\System32\Tasks\{1259786D-CCCD-470C-BD1C-D08965615121}
2014-03-26 08:24 - 2014-03-26 08:24 - 00347816 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\MicrosoftFixit.Codec.LB.283192458907451.1.1.Run.exe
2014-03-26 08:15 - 2014-03-26 08:15 - 04954736 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\WindowsUpgradeAssistant(2).exe
2014-03-26 08:04 - 2014-03-26 08:04 - 00000619 _____ () C:\Users\Jitka\Desktop\DvrPlayer – zástupce.lnk
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{E67F53B3-6E48-478E-AD19-C1A9E694DC05}
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{8E4B937F-CC77-4534-9DAB-542BF592D364}
2014-03-26 07:53 - 2014-03-26 07:53 - 00002938 _____ () C:\Windows\System32\Tasks\{78B125CE-A0A5-4166-942E-943D1B1B78A7}
2014-03-26 07:48 - 2014-03-26 07:48 - 01528184 _____ (Microsoft Corporation) C:\Users\Jitka\Downloads\GenuineCheck.exe
2014-03-26 07:48 - 2014-03-26 07:48 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-03-25 15:04 - 2014-03-25 12:30 - 00013606 ____H () C:\Users\Jitka\Desktop\~WRL3587.tmp
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Users\Jitka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dopravka
2014-03-25 12:50 - 2014-03-25 12:50 - 00000000 ____D () C:\Asw
2014-03-25 12:48 - 2014-03-25 12:48 - 07278793 _____ () C:\Users\Jitka\Downloads\dopravkaxp(1).exe
2014-03-25 12:48 - 2014-03-25 12:48 - 00421888 ____N (Microsoft Corporation) C:\Windows\Setup1.exe
2014-03-25 12:48 - 2014-03-25 12:48 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2014-03-25 12:48 - 2014-03-25 12:48 - 00073216 _____ (Microsoft Corporation) C:\Windows\ST6UNST.EXE
2014-03-25 12:48 - 2014-03-25 12:48 - 00000000 ____D () C:\aswinstal
2014-03-25 12:48 - 2014-02-12 23:09 - 00000000 ___RD () C:\Users\Jitka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-25 12:47 - 2014-03-25 12:47 - 07278793 _____ () C:\Users\Jitka\Downloads\dopravkaxp.exe
2014-03-20 15:13 - 2014-03-28 21:00 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (5) (1).exe
2014-03-20 15:13 - 2014-03-28 20:58 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (5).exe
2014-03-20 15:13 - 2014-03-28 18:45 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (4).exe
2014-03-20 15:13 - 2014-03-28 12:30 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (3).exe
2014-03-20 15:13 - 2014-03-28 12:06 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (2).exe
2014-03-20 15:13 - 2014-03-28 12:00 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox.exe
2014-03-20 15:13 - 2014-03-28 12:00 - 00275568 _____ (Mozilla Corporation) C:\Program Files\firefox (1).exe
2014-03-20 15:13 - 2014-03-27 21:40 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox (2).exe
2014-03-20 15:13 - 2014-03-27 21:35 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox (1).exe
2014-03-20 15:13 - 2014-03-27 21:34 - 00275568 _____ (Mozilla Corporation) C:\Users\Jitka\Downloads\firefox.exe
2014-03-19 21:14 - 2014-03-19 21:13 - 00000000 ____D () C:\Users\Jitka\Documents\Nová složka (3)
2014-03-19 21:14 - 2014-02-13 11:39 - 00000000 ____D () C:\Users\Jitka\Documents\Poznámkové bloky aplikace OneNote
2014-03-19 21:14 - 2014-02-13 11:39 - 00000000 ____D () C:\Users\Jitka\Documents\Nová složka (2)
2014-03-19 00:28 - 2014-02-13 11:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-19 00:27 - 2014-02-13 11:25 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-18 22:26 - 2014-02-14 17:23 - 00000000 ____D () C:\Program Files (x86)\WarThunder
2014-03-17 18:48 - 2014-02-13 11:39 - 00000000 ____D () C:\Users\Jitka\Documents\Certifikáty KB
2014-03-17 18:45 - 2014-03-17 18:45 - 00004633 _____ () C:\Users\Jitka\Downloads\ONDRUŠOVÁ_JITKA.p12
2014-03-17 08:16 - 2014-03-17 08:16 - 00010856 _____ () C:\Users\Jitka\Downloads\H+M - Josef Matula - ÚP.odt
2014-03-16 01:33 - 2014-03-16 01:33 - 00000000 ____D () C:\Users\Jitka\AppData\Roaming\IDT
2014-03-16 00:47 - 2009-07-14 06:45 - 00371416 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-15 19:23 - 2014-03-15 19:23 - 00000000 ____D () C:\Users\Jitka\Downloads\prilohy_40008
2014-03-15 18:47 - 2014-03-15 18:47 - 12140193 _____ () C:\Users\Jitka\Downloads\prilohy_40008.zip
2014-03-12 19:39 - 2014-03-12 19:39 - 00004006 _____ () C:\Users\Jitka\Downloads\dokument.xml
2014-03-12 16:39 - 2014-03-12 16:39 - 00004633 _____ () C:\Users\Public\Documents\ONDRUŠOVÁ_JITKA.p12
2014-03-12 14:42 - 2014-02-13 11:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 14:42 - 2014-02-13 11:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 14:42 - 2014-02-13 11:47 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 17:06 - 2014-03-11 17:06 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(3).zip
2014-03-11 17:02 - 2014-03-11 17:02 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(2)(1).zip
2014-03-11 17:02 - 2014-03-11 17:02 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607(1).zip
2014-03-11 17:01 - 2014-03-11 17:01 - 00201971 _____ () C:\Users\Jitka\Downloads\prilohy_2607.zip
2014-03-11 16:59 - 2010-11-21 09:16 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-03-07 12:22 - 2014-03-26 09:19 - 02690934 _____ () C:\Users\Jitka\Downloads\DvrPlayer.rar
2014-03-07 12:15 - 2014-03-26 10:05 - 01345414 _____ () C:\Users\Jitka\Downloads\DvrPlayer (2).rar
2014-03-07 05:52 - 2014-02-13 11:43 - 01540712 _____ () C:\Users\Jitka\Downloads\prilohy_31449.zip
2014-03-01 08:05 - 2014-03-15 19:25 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 07:17 - 2014-03-15 19:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 07:16 - 2014-03-15 19:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 06:58 - 2014-03-15 19:25 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 06:52 - 2014-03-15 19:25 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 06:51 - 2014-03-15 19:25 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 06:42 - 2014-03-15 19:25 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 06:40 - 2014-03-15 19:25 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 06:37 - 2014-03-15 19:25 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 06:33 - 2014-03-15 19:25 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 06:33 - 2014-03-15 19:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 06:32 - 2014-03-15 19:25 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 06:30 - 2014-03-15 19:25 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 06:23 - 2014-03-15 19:25 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 06:17 - 2014-03-15 19:25 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 06:11 - 2014-03-15 19:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 06:02 - 2014-03-15 19:25 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 05:54 - 2014-03-15 19:25 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 05:52 - 2014-03-15 19:25 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 05:51 - 2014-03-15 19:25 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 05:47 - 2014-03-15 19:25 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 05:43 - 2014-03-15 19:25 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 05:43 - 2014-03-15 19:25 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 05:42 - 2014-03-15 19:25 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 05:40 - 2014-03-15 19:25 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 05:38 - 2014-03-15 19:25 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 05:37 - 2014-03-15 19:25 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 05:35 - 2014-03-15 19:25 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 05:18 - 2014-03-15 19:25 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 05:16 - 2014-03-15 19:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 05:14 - 2014-03-15 19:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 05:10 - 2014-03-15 19:25 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 05:03 - 2014-03-15 19:25 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 05:00 - 2014-03-15 19:25 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 04:57 - 2014-03-15 19:25 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 04:38 - 2014-03-15 19:25 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 04:32 - 2014-03-15 19:25 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 04:27 - 2014-03-15 19:25 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 04:25 - 2014-03-15 19:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 04:25 - 2014-03-15 19:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-28 07:25 - 2014-02-28 07:25 - 00000000 ____D () C:\Program Files (x86)\Samsung

Some content of TEMP:
====================
C:\Users\Jitka\AppData\Local\Temp\OfficeSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!


LastRegBack: 2014-03-21 15:12

==================== End Of Log ============================

Ja ho v tom logu nevidim, takze nemuzu napsat pro program zadne prikazy.

Jen takova mala technicka. jak je to s legalitou systemu? Ultimate neni zrovna bezna domaci verze

Zkuste combofix. Mozna blokuje jen exe soubory, takze kdyz ho prejmenujete na jouda.com , treba to projde



Pokud nemate, zazalohujte si radeji dulezita data (fotky, dokumenty, atd.)

Nepouzivejte ComboFix bez predchozi domluvy! Je to poruseni pravidel fora a ztratite tim narok na pomoc!

Stahnete ComboFix http://download.bleepingcomputer.com/sUBs/ComboFix.exe a ulozte ho na plochu.
Prejmenujte ho na jouda.com
Vypnete antivir i dalsi pripadne zabezpeceni.
Kliknete na ComboFix (joudu) pravym mysidlem a levym na Spustit jako spravce
Odsouhlaste licencni podminky a nechte program pracovat. Jestli vam nabidne instalaci Konzoly pro zotaveni, souhlaste.
Po dobu skenu nic nespoustejte, nikam neklikejte.
Po dokonceni skenovani (muze dojit i k restartu pc) by se mel vytvorit log, ktery bude umisteny zde C:\ComboFix.txt
Jeho obsah sem zkopirujte

Kdyby po restartu nenabehl windows, restartujte znovu, mackejte klavesu F8 a zvolte - Posledni znama funkcni konfigurace
Kdyz windows nabehne, ale pri spousteni ruznych programu bude hlasena chyba, staci restartovat pc a bude to v poradku



Pokud nepujde, zkuste bod obnovy z doby pred potizemi.

Zdravím systém je legální ... je to na ntb ... pokud bude potřeba můžu to od známeho někde vyptat není to můj počítač jen mi ho dal na "opravu" co sem kouka lblokuje to jen exe soubory a pak je jak kdyby nahrazuje nebo co ...

No a ten ComboFix funguje?

nespustího to ... ani když změním příponu z .exe na .com dokonce už na zdravém pc hned jak to hodím do pc hodí se na to ikonka exploeru a je hotovo ...

opravdu si nevím rady ... prosím o pomoc už nevím co dál zkusit navíc mě tlačí čas ...

Píši na výslovnou žádost uživatele. Zkuste CF spustit v nouz. režimu.

Bohužel to už sem zkoušel všechno co je exe se nespustí a spustí jen ixplore.exe ...