VIRY.CZ

Dobrý den, prosím o kontrolu logu. Nepředpokládám žádnou infekci, ale systém je občas nějaký, nanicovatý.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-06-2014
Ran by VacKor (administrator) on TEST-PC on 01-06-2014 08:50:27
Running from C:\Users\VacKor\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft IntelliType Pro\itype.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.7\GoogleCrashHandler64.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil64_13_0_0_214_ActiveX.exe
(forum.viry.cz) C:\Users\VacKor\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [itype] => c:\Program Files\Microsoft IntelliType Pro\itype.exe [1860496 2011-04-13] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3888648 2014-05-26] (AVAST Software)
HKLM-x32\...\Run: [TkBellExe] => c:\program files (x86)\real\realplayer\Update\realsched.exe [295512 2013-11-26] (RealNetworks, Inc.)
HKLM-x32\...\Run: [HDAudDeck] => c:\program files (x86)\via\viaudioi\vdeck\vdeck.exe [2441840 2010-06-25] (VIA)
HKU\.DEFAULT\...\Policies\Explorer: [NoDriveTypeAutoRun] 0x00000000
HKU\S-1-5-21-4161623063-1077891321-1027309549-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-05-16] (Nero AG)
HKU\S-1-5-21-4161623063-1077891321-1027309549-1000\...\Run: [KSS] => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.msn.com/?pc=AV01
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/?pc=AV01
SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - DefaultScope {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {218CA1F2-3E77-46FE-B434-1D41EE40453A} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {D025BAB7-5211-4F19-AAC7-76615572D13D} URL = http://websearch.ask.com/redirect?clien ... 3D55C5C177
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... AEC5BFCAFF}
SearchScopes: HKCU - {F889E016-FF82-4205-8145-371B165C6430} URL = http://search.yahoo.com/search?p={searc ... type=10513
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
DPF: HKLM-x32 {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\VacKor\AppData\Roaming\Mozilla\Firefox\Profiles\s0ocoma0.default
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: about:home
FF Keyword.URL: https://www.google.com/search
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.7 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.1 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\VacKor\AppData\Roaming\Mozilla\Firefox\Profiles\s0ocoma0.default\searchplugins\sfd.xml
FF SearchPlugin: C:\Users\VacKor\AppData\Roaming\Mozilla\Firefox\Profiles\s0ocoma0.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Adblock Plus - C:\Users\VacKor\AppData\Roaming\Mozilla\Firefox\Profiles\s0ocoma0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-11-30]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-05-01]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} [2014-05-01]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-05-01]
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff [2014-02-09]
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2011-07-18]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
FF HKCU\...\Firefox\Extensions: [{B64D9B05-48E1-4CEB-BF58-E0643994E900}] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\
FF Extension: Download videos and MP3s from YouTube - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\ff\ []

Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/
CHR StartupUrls: "www.google.com"
CHR Extension: (Disk Google) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-02]
CHR Extension: (YouTube) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-02]
CHR Extension: (Vyhledávání Google) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-02]
CHR Extension: (Ads Removal) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen [2014-02-25]
CHR Extension: (avast! Online Security) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-01-06]
CHR Extension: (RealDownloader) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-01-02]
CHR Extension: (DVDVideoSoft) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nikpibnbobmbdbheedjfogjlikpgpnhp [2014-02-10]
CHR Extension: (Peněženka Google) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-02]
CHR Extension: (Gmail) - C:\Users\VacKor\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-02]
CHR HKCU\...\Chrome\Extension: [nikpibnbobmbdbheedjfogjlikpgpnhp] - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\DVDVideoSoftBrowserExtension.crx [2014-02-09]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-26]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-05-14]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-26] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-04-26] (AVAST Software)
R2 KSS; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Scan 2.0\kss.exe [202328 2012-12-07] (Kaspersky Lab ZAO)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-05-16] (Nero AG)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2014-02-13] (VIA Technologies, Inc.)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-26] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-04-26] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-26] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [447888 2014-05-15] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-15] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-15] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-15] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-26] ()
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [119512 2014-05-31] (Malwarebytes Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-16] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19032 2012-06-18] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12384 2012-06-18] ()
R1 RrNetCapFilterDriver; C:\Windows\System32\DRIVERS\RrNetCapFilterDriver.sys [24744 2013-12-18] (Audials AG)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-01 08:50 - 2014-06-01 08:50 - 00020089 _____ () C:\Users\VacKor\Desktop\FRST.txt
2014-06-01 08:50 - 2014-06-01 08:50 - 00000000 ____D () C:\FRST
2014-06-01 08:49 - 2014-06-01 08:49 - 00112640 _____ (forum.viry.cz) C:\Users\VacKor\Desktop\FRSTLauncher.exe
2014-06-01 08:48 - 2014-06-01 08:48 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-06-01 08:48 - 2014-06-01 08:48 - 00003208 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-06-01 07:58 - 2014-06-01 07:58 - 02067456 _____ (Farbar) C:\Users\VacKor\Desktop\FRST64.exe
2014-05-31 20:38 - 2014-05-31 20:38 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E95A8E1C-1EDD-4E8B-8848-86700A0406A8}
2014-05-31 20:37 - 2014-05-31 20:37 - 00001077 _____ () C:\Users\VacKor\Desktop\Kaspersky Security Scan.lnk
2014-05-31 20:37 - 2014-05-31 20:37 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-05-31 20:36 - 2014-05-31 20:36 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-31 20:36 - 2014-05-31 20:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-05-31 20:19 - 2014-05-31 20:19 - 00000000 ____D () C:\ProgramData\F-Secure
2014-05-31 19:47 - 2014-05-31 19:47 - 00000733 _____ () C:\Users\VacKor\.recently-used.xbel
2014-05-31 07:53 - 2014-05-31 07:54 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{26E4D41E-D56B-4513-9FC4-D670DE1BA60B}
2014-05-30 19:25 - 2014-05-30 19:25 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{50A77542-6E90-44CE-B8E0-692A841ABFCE}
2014-05-30 07:24 - 2014-05-30 07:24 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{74F43DA7-8C3F-41E6-A0FD-CFB70A7ECAC2}
2014-05-29 19:23 - 2014-05-29 19:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{1C17ED5F-4921-4012-B42F-9EF515976E79}
2014-05-29 07:22 - 2014-05-29 07:22 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{EDBCF395-3A88-4C37-B3C3-E6EA518735DD}
2014-05-28 16:12 - 2014-05-28 16:13 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{D053DEC2-CC75-40F4-9A8C-478CB5DE9B3B}
2014-05-27 15:49 - 2014-05-27 15:50 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{3ADC751C-79EF-4161-B71E-E4581CA0779E}
2014-05-26 15:21 - 2014-05-26 15:21 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{0EE3D3B0-D320-421C-86E8-BA88F4D3EA76}
2014-05-25 21:28 - 2014-05-25 21:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{B460EC78-D524-45F0-8C5C-17847BDF578A}
2014-05-25 09:28 - 2014-05-25 09:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{14907F3F-D324-4708-8E3F-3126C3CB56D1}
2014-05-24 21:26 - 2014-05-24 21:27 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E0A2D713-5128-43F9-B297-64AE92C906D5}
2014-05-24 08:23 - 2014-05-24 08:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{826CE455-2434-4507-80B2-30238D6B9E87}
2014-05-23 13:34 - 2014-05-23 13:34 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{A70C21FB-404C-41C0-A752-340D8236BC85}
2014-05-22 17:38 - 2014-05-22 17:38 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{015FF6C1-7DD6-457C-A965-8E234486452A}
2014-05-22 04:49 - 2014-05-22 04:49 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7D2365AE-4BF3-41B1-9661-BA1CB5E5B3DF}
2014-05-21 15:44 - 2014-05-21 15:44 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{6E0A3D3D-F721-46E5-9629-317DA6C32BF4}
2014-05-20 15:11 - 2014-05-20 15:11 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{04EEA251-1F30-495B-85C2-4ED9449D6183}
2014-05-19 16:27 - 2014-05-19 16:27 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{2E470A1A-E5ED-4EA7-A53B-69530E9E28BB}
2014-05-18 16:01 - 2014-05-18 16:01 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-05-18 10:40 - 2014-05-18 10:40 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7BA3FF87-D45E-443A-9A69-0FA42835F807}
2014-05-17 22:40 - 2014-05-17 22:40 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{04C05475-4395-4BCB-B6E7-529BE0363810}
2014-05-17 13:25 - 2014-05-17 13:25 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-17 13:18 - 2014-05-17 13:18 - 00000000 __SHD () C:\Users\VacKor\AppData\Local\EmieUserList
2014-05-17 13:18 - 2014-05-17 13:18 - 00000000 __SHD () C:\Users\VacKor\AppData\Local\EmieSiteList
2014-05-17 10:50 - 2014-05-31 07:53 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-17 10:50 - 2014-05-17 10:50 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 10:50 - 2014-04-03 09:51 - 00088280 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-05-17 10:50 - 2014-04-03 09:51 - 00063192 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-05-17 10:50 - 2014-04-03 09:50 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-05-17 10:39 - 2014-05-17 10:39 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7B0EDB9E-1A7C-42A7-929D-BDBA6118DED2}
2014-05-16 13:45 - 2014-05-16 13:45 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{DE8667AA-09F3-4BE1-A173-137418A8B901}
2014-05-15 18:41 - 2014-06-01 07:26 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-05-15 18:41 - 2014-06-01 07:26 - 00003230 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-05-15 17:34 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-15 17:34 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-15 17:34 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-15 17:34 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-15 17:34 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-15 17:34 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-15 15:09 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-15 15:09 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-15 15:09 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-15 15:09 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-15 15:09 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-15 15:09 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-15 15:09 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-15 15:09 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-15 15:09 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-15 15:09 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-15 15:09 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-15 15:09 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-15 15:09 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-15 15:09 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-15 15:09 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-15 15:09 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-15 15:09 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-15 15:09 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-15 15:09 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-15 15:09 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-15 15:09 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-15 15:09 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-15 15:09 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-15 15:04 - 2014-05-15 15:04 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{1C2A4AAE-9E90-44D9-9684-E4F9EE872954}
2014-05-14 19:09 - 2014-05-14 19:09 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 16:08 - 2014-05-14 16:08 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{D54FF328-324C-4A91-BC52-86218416BE14}
2014-05-13 16:06 - 2014-05-13 16:06 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{5E6ACB2D-7688-4E51-9581-9B8A0C74AD34}
2014-05-12 15:20 - 2014-05-12 15:20 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{BE12AD4C-390D-4D39-85ED-5FABE1CB50EF}
2014-05-11 20:18 - 2014-05-11 20:18 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{58E5A7C6-B327-4161-8BD5-3DFAF33D6A5B}
2014-05-09 07:46 - 2014-05-09 07:46 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{9CEC1DD4-E68E-4097-A658-A4B1AD00CF1A}
2014-05-08 19:45 - 2014-05-08 19:45 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E45224AC-651A-4689-BCE8-F1570AE94F86}
2014-05-08 07:30 - 2014-05-08 07:31 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{46C6CE26-AD22-495D-8829-595E5932A3DB}
2014-05-07 19:29 - 2014-05-07 19:30 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{EA17FF20-8F79-4EBA-B3BF-B62682706DFC}
2014-05-07 07:29 - 2014-05-07 07:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{671A620B-6558-46FB-B259-CCE63A56BEE0}
2014-05-06 19:29 - 2014-05-06 19:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{492EF8B7-E13A-4F04-8F22-7774D11086BC}
2014-05-06 07:28 - 2014-05-06 07:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{75C11A09-3C96-4525-BFBC-986C98A0D039}
2014-05-05 19:28 - 2014-05-05 19:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{4FD4F8FE-78B3-469D-989F-D2BC3DFCD739}
2014-05-05 06:23 - 2014-05-05 06:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{788CAD33-2A05-41EA-A7EF-B00C882E261E}
2014-05-04 06:57 - 2014-05-04 06:57 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7840AF89-1D0A-4371-9780-A2C95FB30707}
2014-05-03 18:56 - 2014-05-03 18:56 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{3E437772-6D41-4756-A194-2192529D4901}
2014-05-02 07:52 - 2014-05-02 07:52 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{0F228869-6705-4389-881B-3082F880F9EB}

==================== One Month Modified Files and Folders =======

2014-06-01 08:50 - 2014-06-01 08:50 - 00020089 _____ () C:\Users\VacKor\Desktop\FRST.txt
2014-06-01 08:50 - 2014-06-01 08:50 - 00000000 ____D () C:\FRST
2014-06-01 08:50 - 2011-07-08 22:23 - 01096392 _____ () C:\Windows\WindowsUpdate.log
2014-06-01 08:50 - 2011-07-08 22:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\Temp
2014-06-01 08:49 - 2014-06-01 08:49 - 00112640 _____ (forum.viry.cz) C:\Users\VacKor\Desktop\FRSTLauncher.exe
2014-06-01 08:48 - 2014-06-01 08:48 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-06-01 08:48 - 2014-06-01 08:48 - 00003208 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-06-01 08:46 - 2013-01-06 16:27 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-06-01 08:46 - 2012-07-09 20:50 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-06-01 08:45 - 2010-11-21 05:47 - 00240376 _____ () C:\Windows\PFRO.log
2014-06-01 08:45 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-06-01 08:45 - 2009-07-14 06:51 - 00105845 _____ () C:\Windows\setupact.log
2014-06-01 08:30 - 2014-01-09 23:22 - 00000000 ____D () C:\Down
2014-06-01 08:09 - 2012-09-25 20:15 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-06-01 08:04 - 2013-01-06 16:27 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-01 07:58 - 2014-06-01 07:58 - 02067456 _____ (Farbar) C:\Users\VacKor\Desktop\FRST64.exe
2014-06-01 07:34 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-06-01 07:34 - 2009-07-14 06:45 - 00022064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-06-01 07:26 - 2014-05-15 18:41 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-06-01 07:26 - 2014-05-15 18:41 - 00003230 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4161623063-1077891321-1027309549-1000
2014-05-31 20:48 - 2011-07-10 09:47 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\vlc
2014-05-31 20:38 - 2014-05-31 20:38 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E95A8E1C-1EDD-4E8B-8848-86700A0406A8}
2014-05-31 20:37 - 2014-05-31 20:37 - 00001077 _____ () C:\Users\VacKor\Desktop\Kaspersky Security Scan.lnk
2014-05-31 20:37 - 2014-05-31 20:37 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Kaspersky Security Scan
2014-05-31 20:36 - 2014-05-31 20:36 - 00000000 ____D () C:\ProgramData\Kaspersky Lab
2014-05-31 20:36 - 2014-05-31 20:36 - 00000000 ____D () C:\Program Files (x86)\Kaspersky Lab
2014-05-31 20:19 - 2014-05-31 20:19 - 00000000 ____D () C:\ProgramData\F-Secure
2014-05-31 19:47 - 2014-05-31 19:47 - 00000733 _____ () C:\Users\VacKor\.recently-used.xbel
2014-05-31 19:47 - 2011-07-08 22:23 - 00000000 ____D () C:\Users\VacKor
2014-05-31 17:31 - 2011-07-10 11:29 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\inkscape
2014-05-31 15:30 - 2011-04-12 10:34 - 00668882 _____ () C:\Windows\system32\perfh005.dat
2014-05-31 15:30 - 2011-04-12 10:34 - 00141542 _____ () C:\Windows\system32\perfc005.dat
2014-05-31 15:30 - 2009-07-14 07:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-31 07:54 - 2014-05-31 07:53 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{26E4D41E-D56B-4513-9FC4-D670DE1BA60B}
2014-05-31 07:53 - 2014-05-17 10:50 - 00119512 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-05-30 19:25 - 2014-05-30 19:25 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{50A77542-6E90-44CE-B8E0-692A841ABFCE}
2014-05-30 07:24 - 2014-05-30 07:24 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{74F43DA7-8C3F-41E6-A0FD-CFB70A7ECAC2}
2014-05-29 22:24 - 2011-07-10 16:38 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\Skype
2014-05-29 19:23 - 2014-05-29 19:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{1C17ED5F-4921-4012-B42F-9EF515976E79}
2014-05-29 07:22 - 2014-05-29 07:22 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{EDBCF395-3A88-4C37-B3C3-E6EA518735DD}
2014-05-28 17:27 - 2014-05-01 13:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-05-28 16:13 - 2014-05-28 16:12 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{D053DEC2-CC75-40F4-9A8C-478CB5DE9B3B}
2014-05-27 18:23 - 2011-07-10 13:42 - 00000000 ____D () C:\ProgramData\Adobe
2014-05-27 18:23 - 2011-07-08 22:51 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\Adobe
2014-05-27 15:50 - 2014-05-27 15:49 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{3ADC751C-79EF-4161-B71E-E4581CA0779E}
2014-05-27 15:50 - 2011-07-08 23:10 - 00001126 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-05-27 15:45 - 2014-02-13 21:45 - 00000000 ____D () C:\ProgramData\ProductData
2014-05-26 15:21 - 2014-05-26 15:21 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{0EE3D3B0-D320-421C-86E8-BA88F4D3EA76}
2014-05-25 21:28 - 2014-05-25 21:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{B460EC78-D524-45F0-8C5C-17847BDF578A}
2014-05-25 09:28 - 2014-05-25 09:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{14907F3F-D324-4708-8E3F-3126C3CB56D1}
2014-05-24 21:27 - 2014-05-24 21:26 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E0A2D713-5128-43F9-B297-64AE92C906D5}
2014-05-24 08:23 - 2014-05-24 08:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{826CE455-2434-4507-80B2-30238D6B9E87}
2014-05-23 18:36 - 2009-07-14 05:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-23 13:34 - 2014-05-23 13:34 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{A70C21FB-404C-41C0-A752-340D8236BC85}
2014-05-22 17:38 - 2014-05-22 17:38 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{015FF6C1-7DD6-457C-A965-8E234486452A}
2014-05-22 04:49 - 2014-05-22 04:49 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7D2365AE-4BF3-41B1-9661-BA1CB5E5B3DF}
2014-05-21 15:44 - 2014-05-21 15:44 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{6E0A3D3D-F721-46E5-9629-317DA6C32BF4}
2014-05-20 15:11 - 2014-05-20 15:11 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{04EEA251-1F30-495B-85C2-4ED9449D6183}
2014-05-19 16:27 - 2014-05-19 16:27 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{2E470A1A-E5ED-4EA7-A53B-69530E9E28BB}
2014-05-18 16:04 - 2014-02-13 21:44 - 00000000 ____D () C:\Program Files (x86)\IObit
2014-05-18 16:03 - 2011-07-25 19:46 - 00000000 ____D () C:\Program Files (x86)\Call of Duty
2014-05-18 16:01 - 2014-05-18 16:01 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-05-18 10:40 - 2014-05-18 10:40 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7BA3FF87-D45E-443A-9A69-0FA42835F807}
2014-05-17 22:40 - 2014-05-17 22:40 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{04C05475-4395-4BCB-B6E7-529BE0363810}
2014-05-17 13:25 - 2014-05-17 13:25 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-05-17 13:24 - 2013-01-11 19:43 - 00000000 ____D () C:\Users\VacKor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GotClip
2014-05-17 13:18 - 2014-05-17 13:18 - 00000000 __SHD () C:\Users\VacKor\AppData\Local\EmieUserList
2014-05-17 13:18 - 2014-05-17 13:18 - 00000000 __SHD () C:\Users\VacKor\AppData\Local\EmieSiteList
2014-05-17 13:04 - 2013-01-11 19:43 - 00000000 ____D () C:\Program Files (x86)\GotClip
2014-05-17 11:04 - 2011-07-08 22:43 - 00000000 ____D () C:\Windows\AsDmiHtm
2014-05-17 10:50 - 2014-05-17 10:50 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-05-17 10:50 - 2014-05-17 10:50 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-05-17 10:39 - 2014-05-17 10:39 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7B0EDB9E-1A7C-42A7-929D-BDBA6118DED2}
2014-05-16 21:05 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-16 13:45 - 2014-05-16 13:45 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{DE8667AA-09F3-4BE1-A173-137418A8B901}
2014-05-15 18:44 - 2012-10-22 20:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-15 18:36 - 2011-07-08 22:23 - 00000000 ___RD () C:\Users\VacKor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-15 18:36 - 2011-07-08 22:23 - 00000000 ___RD () C:\Users\VacKor\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-15 18:33 - 2014-04-27 20:55 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-15 17:34 - 2011-07-10 19:31 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-15 17:33 - 2013-08-12 06:12 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-15 17:31 - 2011-07-13 19:00 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-15 15:09 - 2014-04-26 20:19 - 00447888 _____ (AVAST Software) C:\Windows\system32\Drivers\aswndisflt.sys
2014-05-15 15:09 - 2014-01-01 15:26 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-05-15 15:09 - 2011-07-18 13:19 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-05-15 15:09 - 2011-07-18 13:19 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-05-15 15:04 - 2014-05-15 15:04 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{1C2A4AAE-9E90-44D9-9684-E4F9EE872954}
2014-05-14 19:09 - 2014-05-14 19:09 - 17938608 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-05-14 19:09 - 2012-09-25 20:15 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-05-14 19:09 - 2012-09-25 20:15 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-05-14 19:09 - 2011-07-08 22:51 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-05-14 16:08 - 2014-05-14 16:08 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{D54FF328-324C-4A91-BC52-86218416BE14}
2014-05-13 16:06 - 2014-05-13 16:06 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{5E6ACB2D-7688-4E51-9581-9B8A0C74AD34}
2014-05-12 15:20 - 2014-05-12 15:20 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{BE12AD4C-390D-4D39-85ED-5FABE1CB50EF}
2014-05-11 20:18 - 2014-05-11 20:18 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{58E5A7C6-B327-4161-8BD5-3DFAF33D6A5B}
2014-05-09 08:14 - 2014-05-15 15:09 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-15 15:09 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-09 07:46 - 2014-05-09 07:46 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{9CEC1DD4-E68E-4097-A658-A4B1AD00CF1A}
2014-05-08 19:45 - 2014-05-08 19:45 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{E45224AC-651A-4689-BCE8-F1570AE94F86}
2014-05-08 15:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-05-08 10:59 - 2013-01-06 16:27 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 10:59 - 2013-01-06 16:27 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 07:31 - 2014-05-08 07:30 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{46C6CE26-AD22-495D-8829-595E5932A3DB}
2014-05-07 19:30 - 2014-05-07 19:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{EA17FF20-8F79-4EBA-B3BF-B62682706DFC}
2014-05-07 07:29 - 2014-05-07 07:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{671A620B-6558-46FB-B259-CCE63A56BEE0}
2014-05-06 19:29 - 2014-05-06 19:29 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{492EF8B7-E13A-4F04-8F22-7774D11086BC}
2014-05-06 07:29 - 2014-05-06 07:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{75C11A09-3C96-4525-BFBC-986C98A0D039}
2014-05-06 06:40 - 2014-05-15 17:34 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-15 17:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-15 17:34 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-15 17:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-15 17:34 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-15 17:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-05 19:28 - 2014-05-05 19:28 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{4FD4F8FE-78B3-469D-989F-D2BC3DFCD739}
2014-05-05 06:23 - 2014-05-05 06:23 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{788CAD33-2A05-41EA-A7EF-B00C882E261E}
2014-05-04 06:57 - 2014-05-04 06:57 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{7840AF89-1D0A-4371-9780-A2C95FB30707}
2014-05-03 18:56 - 2014-05-03 18:56 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{3E437772-6D41-4756-A194-2192529D4901}
2014-05-02 07:52 - 2014-05-02 07:52 - 00000000 ____D () C:\Users\VacKor\AppData\Local\{0F228869-6705-4389-881B-3082F880F9EB}
2014-05-02 07:48 - 2012-04-26 18:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-05-29 11:25




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:465.66 GB) (Free:269.13 GB) NTFS
Drive d: (Data) (Fixed) (Total:298.09 GB) (Free:17.73 GB) NTFS
Drive e: (NEW) (CDROM) (Total:2.9 GB) (Free:0 GB) UDF

Available physical RAM: 1934.22 MB
Total physical RAM: 3838.05 MB
Percentage of memory in use: 49%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: A263278F)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Disk: 1 (Size: 298 GB) (Disk ID: CF25CF25)
Partition 1: (Not Active) - (Size=298 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\VacKor\Desktop" je 6 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - DefaultScope {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {D025BAB7-5211-4F19-AAC7-76615572D13D} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=7BC8F70C-B836-4A85-9767-BC769EDEA9AF&apn_sauid=CC0D8AB7-BBF8-4C5F-AD79-D63D55C5C177
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... AEC5BFCAFF}
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
End

Uložte na plochu jako fixlist.txt. Pak znovu spusťte FRST a klikněte na >Fix<. Zkopírujte sem pak log, který se na závěr vytvoří.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-06-2014
Ran by VacKor at 2014-06-01 14:21:23 Run:1
Running from C:\Users\VacKor\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM-x32 - DefaultScope {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKLM-x32 - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - DefaultScope {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = http://www.bing.com/search?q={searchTer ... DF&PC=AV01
SearchScopes: HKCU - {95048AA3-93E0-479C-912F-336D00870B01} URL = http://search.us.com/serp?guid={6188E71 ... earchTerms}
SearchScopes: HKCU - {D025BAB7-5211-4F19-AAC7-76615572D13D} URL = http://websearch.ask.com/redirect?clien ... &src=kw&q={searchTerms}&locale=&apn_ptnrs=&apn_dtid=OSJ000&apn_uid=7BC8F70C-B836-4A85-9767-BC769EDEA9AF&apn_sauid=CC0D8AB7-BBF8-4C5F-AD79-D63D55C5C177
SearchScopes: HKCU - {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://search.sweetim.com/search.asp?sr ... AEC5BFCAFF}
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
C:\Program Files (x86)\Skype\Toolbars
BHO-x32: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: No Name - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-11-26]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
End
*****************

HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key deleted successfully.
HKCR\CLSID\{632F07F3-19A1-4d16-A23F-E6CE9486BAB5} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95048AA3-93E0-479C-912F-336D00870B01} => Key deleted successfully.
HKCR\CLSID\{95048AA3-93E0-479C-912F-336D00870B01} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{D025BAB7-5211-4F19-AAC7-76615572D13D} => Key deleted successfully.
HKCR\CLSID\{D025BAB7-5211-4F19-AAC7-76615572D13D} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key deleted successfully.
HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKCR\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3049C3E9-B461-4BC5-8870-4C09146192CA} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Value deleted successfully.
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Value deleted successfully.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Key not found.
HKCR\Wow6432Node\PROTOCOLS\Handler\skype-ie-addon-data => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{91774881-D725-4E58-B298-07617B9B86A8} => Key deleted successfully.
HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File => Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprndlchromebrowserrecordext;version=1.3.3 => Key deleted successfully.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll => Moved successfully.
HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprndlhtml5videoshim;version=1.3.3 => Key deleted successfully.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll => Moved successfully.
HKLM\Software\Wow6432Node\MozillaPlugins\@real.com/nprndlpepperflashvideoshim;version=1.3.3 => Key deleted successfully.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2} => Value deleted successfully.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} => Value deleted successfully.
C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext not found.
HKCU\SOFTWARE\Policies\Google => Key deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA => Moved successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.

==== End of Fixlog ====

Smazáno. Nastala nějaká změna?

Vypadá, že to běhá svižněji. Ráno nešla ani odesílat pošta přes Live Mail, nevím jestli to má souvislost, ale už to také jde. Takže supr ! Moc děkuji !

To jsem rád a nemáte zač!