
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Problem s prehravanim videa + FRST nenasiel MSGBOX ani DLL
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
- Návštěvník
- Příspěvky: 5
- Registrován: 03 pro 2014 20:00
Problem s prehravanim videa + FRST nenasiel MSGBOX ani DLL
Mam problem s notebookom. Nejdu mi prehravat videa (firefox,ie) ani nezacne, preinstaloval som niekolkokrat flash, restartoval. Nepomohlo. Prikladam aj chybu ktoru som mal pri spustiny firstlauncheru s MSGBOX(caption.PNG).
Prikladam FRST LOG z firstlauncher + priloha (Addition):
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-12-2014
Ran by User (administrator) on LATITUDEE6420 on 03-12-2014 19:53:47
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
() C:\Windows\System32\srvany.exe
(O2Micro.) C:\Windows\System32\SDIOAssist.exe
(Crawler.com) C:\Program Files\Spyware Terminator\st_rsser.exe
(Ericsson AB) C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
() C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(12Voip) C:\Program Files\12Voip.com\12Voip\12voip.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [536668 2011-01-25] (IDT, Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2011-07-25] ()
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [505720 2011-07-20] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2774904 2014-11-12] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [3683704 2014-11-12] (Crawler.com)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [12Voip] => C:\Program Files\12Voip.com\12Voip\12voip.exe [19703608 2014-05-19] (12Voip)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-10] (Google Inc.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: German Dictionary - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-16]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-01]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-01]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-01]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-01]
CHR Extension: (Hľadať v Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-01]
CHR Extension: (Tabuľky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-01]
CHR Extension: (Peňaženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-01]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-01]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [72296 2010-02-10] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\system32\srvany.exe [8192 2003-04-18] () [File not signed]
R2 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [585080 2014-11-12] (Crawler.com)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [274514 2011-01-25] (IDT, Inc.)
R2 WMCoreService; C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe [584232 2010-12-09] (Ericsson AB)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Acceler; C:\Windows\System32\DRIVERS\accelern.sys [44144 2011-07-22] (ST Microelectronics)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [39656 2011-10-02] (Broadcom Corporation)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [53800 2010-11-19] (Ericsson AB)
R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [268968 2011-07-20] (Intel Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwanuss.sys [23592 2010-03-03] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwanussf.sys [26152 2010-03-03] (Ericsson AB)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [361032 2011-02-22] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [396872 2010-10-31] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [14920 2010-10-31] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [413768 2010-10-31] (MCCI Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7434240 2011-10-02] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [20328 2011-06-05] (NVIDIA Corporation)
R3 O2MDFRDR; C:\Windows\System32\DRIVERS\O2MDFw7.sys [60904 2011-01-04] (O2Micro )
R3 O2SDJRDR; C:\Windows\System32\DRIVERS\o2sdjw7.sys [63976 2011-03-23] (O2Micro )
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [17904 2011-07-15] (ST Microelectronics)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp.sys [237608 2010-12-28] (Ericsson AB)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 19:53 - 2014-12-03 19:54 - 00012198 _____ () C:\Users\User\Desktop\FRST.txt
2014-12-03 19:49 - 2014-12-03 19:53 - 00000000 ____D () C:\FRST
2014-12-02 09:12 - 2014-12-03 19:16 - 00000168 _____ () C:\Windows\setupact.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000304 _____ () C:\Windows\PFRO.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-01 21:31 - 2014-12-01 21:31 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-01 21:31 - 2014-12-01 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-01 21:30 - 2014-12-01 21:30 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-12-01 21:28 - 2014-12-03 19:33 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-01 21:28 - 2014-12-03 19:16 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 21:28 - 2014-12-01 21:31 - 00000000 ____D () C:\Program Files\Google
2014-12-01 21:28 - 2014-12-01 21:28 - 01109504 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2014-12-01 21:24 - 2014-12-01 21:28 - 00880784 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe
2014-12-01 21:10 - 2014-12-03 17:07 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00001012 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Program Files\Spyware Terminator
2014-12-01 21:10 - 2011-06-21 11:24 - 00032768 _____ () C:\Windows\system32\Drivers\sp_rsdrv2.sys
2014-12-01 21:07 - 2014-12-01 21:07 - 01070392 _____ (Crawler, LLC ) C:\Users\User\Downloads\SpywareTerminatorSetup.exe
2014-12-01 21:00 - 2014-12-01 21:00 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieBrowserModeList
2014-12-01 20:55 - 2014-12-01 20:55 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-01 20:17 - 2014-12-01 20:17 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-01 20:12 - 2014-12-01 20:12 - 00244440 _____ () C:\Users\User\Downloads\Firefox Setup Stub 34.0.5.exe
2014-12-01 20:07 - 2014-12-03 18:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-01 20:07 - 2014-12-01 21:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-01 20:07 - 2014-12-01 21:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-30 22:25 - 2014-11-30 22:37 - 10767630 _____ () C:\Users\User\Desktop\male.rar
2014-11-19 20:42 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 20:42 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-12 21:45 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 21:44 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 21:44 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 21:44 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 21:44 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 21:44 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 21:44 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 21:44 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 21:44 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 21:44 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 21:44 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 21:44 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 21:44 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 21:44 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 21:44 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:44 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 21:44 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 21:44 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 21:44 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 21:44 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 21:44 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 21:44 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 21:44 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 21:44 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 21:44 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 21:44 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 21:44 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 21:44 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 21:44 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 21:44 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 21:44 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 21:44 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 21:44 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 21:44 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 21:44 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 21:44 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 21:13 - 2014-11-11 21:13 - 00000000 ____D () C:\ProgramData\NuwaBameb
2014-11-11 13:26 - 2014-12-01 20:17 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 20:38 - 2014-11-09 20:38 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 19:23 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-03 19:23 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-03 19:22 - 2010-11-20 22:01 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 19:19 - 2012-06-19 17:40 - 01992239 _____ () C:\Windows\WindowsUpdate.log
2014-12-03 19:16 - 2012-06-19 19:55 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-12-03 19:16 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-03 19:14 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-12-03 18:26 - 2014-05-03 15:55 - 00000000 ____D () C:\Users\User\Desktop\oblecenie 2
2014-12-03 18:06 - 2013-11-10 11:38 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job
2014-12-03 18:01 - 2014-07-31 17:08 - 00000000 ____D () C:\Users\User\Desktop\KARLA
2014-12-02 14:06 - 2013-11-10 11:38 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job
2014-12-01 21:45 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-12-01 21:31 - 2013-11-10 11:38 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-12-01 20:42 - 2012-06-19 19:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-01 20:17 - 2012-06-19 19:22 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-01 16:47 - 2014-10-16 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-12-01 16:47 - 2014-06-26 16:19 - 00000000 ____D () C:\Windows\Minidump
2014-12-01 16:47 - 2012-06-20 03:37 - 00000000 ____D () C:\Windows\Panther
2014-11-24 14:04 - 2012-06-19 19:19 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-13 14:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 13:07 - 2012-06-19 18:53 - 00109280 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 13:06 - 2009-07-14 05:33 - 00408248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 13:05 - 2014-05-02 08:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 13:03 - 2012-06-19 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 12:55 - 2013-07-16 11:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 12:48 - 2012-06-19 19:37 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-04 14:02 - 2012-06-19 19:22 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 25065 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Prikladam FRST LOG z firstlauncher + priloha (Addition):
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 01-12-2014
Ran by User (administrator) on LATITUDEE6420 on 03-12-2014 19:53:47
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
() C:\Windows\System32\srvany.exe
(O2Micro.) C:\Windows\System32\SDIOAssist.exe
(Crawler.com) C:\Program Files\Spyware Terminator\st_rsser.exe
(Ericsson AB) C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
() C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(12Voip) C:\Program Files\12Voip.com\12Voip\12voip.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [536668 2011-01-25] (IDT, Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2011-07-25] ()
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [505720 2011-07-20] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2774904 2014-11-12] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [3683704 2014-11-12] (Crawler.com)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [12Voip] => C:\Program Files\12Voip.com\12Voip\12voip.exe [19703608 2014-05-19] (12Voip)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-10] (Google Inc.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: German Dictionary - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-16]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-01]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-01]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-01]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-01]
CHR Extension: (Hľadať v Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-01]
CHR Extension: (Tabuľky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-01]
CHR Extension: (Peňaženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-01]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-01]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [72296 2010-02-10] (O2Micro International)
R2 O2SDIOAssist; C:\Windows\system32\srvany.exe [8192 2003-04-18] () [File not signed]
R2 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [585080 2014-11-12] (Crawler.com)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [274514 2011-01-25] (IDT, Inc.)
R2 WMCoreService; C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe [584232 2010-12-09] (Ericsson AB)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Acceler; C:\Windows\System32\DRIVERS\accelern.sys [44144 2011-07-22] (ST Microelectronics)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [39656 2011-10-02] (Broadcom Corporation)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [53800 2010-11-19] (Ericsson AB)
R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [268968 2011-07-20] (Intel Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwanuss.sys [23592 2010-03-03] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwanussf.sys [26152 2010-03-03] (Ericsson AB)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [361032 2011-02-22] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [396872 2010-10-31] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [14920 2010-10-31] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [413768 2010-10-31] (MCCI Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7434240 2011-10-02] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [20328 2011-06-05] (NVIDIA Corporation)
R3 O2MDFRDR; C:\Windows\System32\DRIVERS\O2MDFw7.sys [60904 2011-01-04] (O2Micro )
R3 O2SDJRDR; C:\Windows\System32\DRIVERS\o2sdjw7.sys [63976 2011-03-23] (O2Micro )
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [17904 2011-07-15] (ST Microelectronics)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp.sys [237608 2010-12-28] (Ericsson AB)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 19:53 - 2014-12-03 19:54 - 00012198 _____ () C:\Users\User\Desktop\FRST.txt
2014-12-03 19:49 - 2014-12-03 19:53 - 00000000 ____D () C:\FRST
2014-12-02 09:12 - 2014-12-03 19:16 - 00000168 _____ () C:\Windows\setupact.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000304 _____ () C:\Windows\PFRO.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-01 21:31 - 2014-12-01 21:31 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-01 21:31 - 2014-12-01 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-01 21:30 - 2014-12-01 21:30 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-12-01 21:28 - 2014-12-03 19:33 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-01 21:28 - 2014-12-03 19:16 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 21:28 - 2014-12-01 21:31 - 00000000 ____D () C:\Program Files\Google
2014-12-01 21:28 - 2014-12-01 21:28 - 01109504 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2014-12-01 21:24 - 2014-12-01 21:28 - 00880784 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe
2014-12-01 21:10 - 2014-12-03 17:07 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00001012 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Program Files\Spyware Terminator
2014-12-01 21:10 - 2011-06-21 11:24 - 00032768 _____ () C:\Windows\system32\Drivers\sp_rsdrv2.sys
2014-12-01 21:07 - 2014-12-01 21:07 - 01070392 _____ (Crawler, LLC ) C:\Users\User\Downloads\SpywareTerminatorSetup.exe
2014-12-01 21:00 - 2014-12-01 21:00 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieBrowserModeList
2014-12-01 20:55 - 2014-12-01 20:55 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-01 20:17 - 2014-12-01 20:17 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-01 20:12 - 2014-12-01 20:12 - 00244440 _____ () C:\Users\User\Downloads\Firefox Setup Stub 34.0.5.exe
2014-12-01 20:07 - 2014-12-03 18:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-01 20:07 - 2014-12-01 21:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-01 20:07 - 2014-12-01 21:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-30 22:25 - 2014-11-30 22:37 - 10767630 _____ () C:\Users\User\Desktop\male.rar
2014-11-19 20:42 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 20:42 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-12 21:45 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 21:44 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 21:44 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 21:44 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 21:44 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 21:44 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 21:44 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 21:44 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 21:44 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 21:44 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 21:44 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 21:44 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 21:44 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 21:44 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 21:44 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:44 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 21:44 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 21:44 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 21:44 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 21:44 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 21:44 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 21:44 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 21:44 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 21:44 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 21:44 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 21:44 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 21:44 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 21:44 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 21:44 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 21:44 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 21:44 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 21:44 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 21:44 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 21:44 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 21:44 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 21:44 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 21:13 - 2014-11-11 21:13 - 00000000 ____D () C:\ProgramData\NuwaBameb
2014-11-11 13:26 - 2014-12-01 20:17 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 20:38 - 2014-11-09 20:38 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 19:23 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-03 19:23 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-03 19:22 - 2010-11-20 22:01 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 19:19 - 2012-06-19 17:40 - 01992239 _____ () C:\Windows\WindowsUpdate.log
2014-12-03 19:16 - 2012-06-19 19:55 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-12-03 19:16 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-03 19:14 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-12-03 18:26 - 2014-05-03 15:55 - 00000000 ____D () C:\Users\User\Desktop\oblecenie 2
2014-12-03 18:06 - 2013-11-10 11:38 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job
2014-12-03 18:01 - 2014-07-31 17:08 - 00000000 ____D () C:\Users\User\Desktop\KARLA
2014-12-02 14:06 - 2013-11-10 11:38 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job
2014-12-01 21:45 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-12-01 21:31 - 2013-11-10 11:38 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-12-01 20:42 - 2012-06-19 19:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-01 20:17 - 2012-06-19 19:22 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-01 16:47 - 2014-10-16 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-12-01 16:47 - 2014-06-26 16:19 - 00000000 ____D () C:\Windows\Minidump
2014-12-01 16:47 - 2012-06-20 03:37 - 00000000 ____D () C:\Windows\Panther
2014-11-24 14:04 - 2012-06-19 19:19 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-13 14:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 13:07 - 2012-06-19 18:53 - 00109280 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 13:06 - 2009-07-14 05:33 - 00408248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 13:05 - 2014-05-02 08:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 13:03 - 2012-06-19 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 12:55 - 2013-07-16 11:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 12:48 - 2012-06-19 19:37 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-04 14:02 - 2012-06-19 19:22 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 25065 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition,Error.zip
- (53.87 KiB) Staženo 30 x
- Rudy
- Site Admin
- Příspěvky: 119556
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Zdravím!
Spusťte nejprve tuto utilitu:
Spusťte nejprve tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
- Návštěvník
- Příspěvky: 5
- Registrován: 03 pro 2014 20:00
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
# AdwCleaner v4.103 - Report created 03/12/2014 at 20:39:07
# Updated 01/12/2014 by Xplode
# Database : 2014-12-03.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : User - LATITUDEE6420
# Running from : C:\Users\User\Desktop\adwcleaner_4.103.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : O2SDIOAssist
***** [ Files / Folders ] *****
File Deleted : C:\Windows\system32\srvany.exe
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v34.0.5 (x86 sk)
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [954 octets] - [03/12/2014 20:36:41]
AdwCleaner[S0].txt - [882 octets] - [03/12/2014 20:39:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [941 octets] ##########
# Updated 01/12/2014 by Xplode
# Database : 2014-12-03.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : User - LATITUDEE6420
# Running from : C:\Users\User\Desktop\adwcleaner_4.103.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : O2SDIOAssist
***** [ Files / Folders ] *****
File Deleted : C:\Windows\system32\srvany.exe
***** [ Scheduled Tasks ] *****
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17420
-\\ Mozilla Firefox v34.0.5 (x86 sk)
-\\ Google Chrome v39.0.2171.71
*************************
AdwCleaner[R0].txt - [954 octets] - [03/12/2014 20:36:41]
AdwCleaner[S0].txt - [882 octets] - [03/12/2014 20:39:07]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [941 octets] ##########
- Rudy
- Site Admin
- Příspěvky: 119556
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
- Návštěvník
- Příspěvky: 5
- Registrován: 03 pro 2014 20:00
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 03-12-2014
Ran by User (administrator) on LATITUDEE6420 on 03-12-2014 21:22:03
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(Crawler.com) C:\Program Files\Spyware Terminator\st_rsser.exe
(Ericsson AB) C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
() C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(12Voip) C:\Program Files\12Voip.com\12Voip\12voip.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
(forum.viry.cz) C:\Users\User\Desktop\FRST-OlderVersion\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [536668 2011-01-25] (IDT, Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2011-07-25] ()
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [505720 2011-07-20] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2774904 2014-11-12] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [3683704 2014-11-12] (Crawler.com)
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [12Voip] => C:\Program Files\12Voip.com\12Voip\12voip.exe [19703608 2014-05-19] (12Voip)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-10] (Google Inc.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: German Dictionary - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-16]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-01]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-01]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-01]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-01]
CHR Extension: (Hľadať v Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-01]
CHR Extension: (Tabuľky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-01]
CHR Extension: (Peňaženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-01]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-01]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [72296 2010-02-10] (O2Micro International)
R2 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [585080 2014-11-12] (Crawler.com)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [274514 2011-01-25] (IDT, Inc.)
R2 WMCoreService; C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe [584232 2010-12-09] (Ericsson AB)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Acceler; C:\Windows\System32\DRIVERS\accelern.sys [44144 2011-07-22] (ST Microelectronics)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [39656 2011-10-02] (Broadcom Corporation)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [53800 2010-11-19] (Ericsson AB)
R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [268968 2011-07-20] (Intel Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwanuss.sys [23592 2010-03-03] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwanussf.sys [26152 2010-03-03] (Ericsson AB)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [361032 2011-02-22] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [396872 2010-10-31] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [14920 2010-10-31] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [413768 2010-10-31] (MCCI Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7434240 2011-10-02] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [20328 2011-06-05] (NVIDIA Corporation)
R3 O2MDFRDR; C:\Windows\System32\DRIVERS\O2MDFw7.sys [60904 2011-01-04] (O2Micro )
R3 O2SDJRDR; C:\Windows\System32\DRIVERS\o2sdjw7.sys [63976 2011-03-23] (O2Micro )
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [17904 2011-07-15] (ST Microelectronics)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp.sys [237608 2010-12-28] (Ericsson AB)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 21:22 - 2014-12-03 21:23 - 00012709 _____ () C:\Users\User\Desktop\FRST.txt
2014-12-03 21:20 - 2014-12-03 21:21 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-12-03 20:34 - 2014-12-03 20:39 - 00000000 ____D () C:\AdwCleaner
2014-12-03 20:33 - 2014-12-03 20:33 - 02154496 _____ () C:\Users\User\Desktop\adwcleaner_4.103.exe
2014-12-03 19:49 - 2014-12-03 21:22 - 00000000 ____D () C:\FRST
2014-12-02 09:12 - 2014-12-03 20:41 - 00000618 _____ () C:\Windows\PFRO.log
2014-12-02 09:12 - 2014-12-03 20:41 - 00000224 _____ () C:\Windows\setupact.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-01 21:31 - 2014-12-01 21:31 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-01 21:31 - 2014-12-01 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-01 21:28 - 2014-12-03 21:21 - 01110016 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2014-12-01 21:28 - 2014-12-03 20:41 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 21:28 - 2014-12-03 20:33 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-01 21:28 - 2014-12-01 21:31 - 00000000 ____D () C:\Program Files\Google
2014-12-01 21:24 - 2014-12-01 21:28 - 00880784 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe
2014-12-01 21:10 - 2014-12-03 17:07 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00001012 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Program Files\Spyware Terminator
2014-12-01 21:10 - 2011-06-21 11:24 - 00032768 _____ () C:\Windows\system32\Drivers\sp_rsdrv2.sys
2014-12-01 21:07 - 2014-12-01 21:07 - 01070392 _____ (Crawler, LLC ) C:\Users\User\Downloads\SpywareTerminatorSetup.exe
2014-12-01 21:00 - 2014-12-01 21:00 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieBrowserModeList
2014-12-01 20:55 - 2014-12-01 20:55 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-01 20:17 - 2014-12-01 20:17 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-01 20:12 - 2014-12-01 20:12 - 00244440 _____ () C:\Users\User\Downloads\Firefox Setup Stub 34.0.5.exe
2014-12-01 20:07 - 2014-12-03 21:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-01 20:07 - 2014-12-01 21:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-01 20:07 - 2014-12-01 21:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-30 22:25 - 2014-11-30 22:37 - 10767630 _____ () C:\Users\User\Desktop\male.rar
2014-11-19 20:42 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 20:42 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-12 21:45 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 21:44 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 21:44 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 21:44 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 21:44 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 21:44 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 21:44 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 21:44 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 21:44 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 21:44 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 21:44 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 21:44 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 21:44 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 21:44 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 21:44 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:44 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 21:44 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 21:44 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 21:44 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 21:44 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 21:44 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 21:44 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 21:44 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 21:44 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 21:44 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 21:44 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 21:44 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 21:44 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 21:44 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 21:44 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 21:44 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 21:44 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 21:44 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 21:44 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 21:44 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 21:44 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 21:13 - 2014-11-11 21:13 - 00000000 ____D () C:\ProgramData\NuwaBameb
2014-11-11 13:26 - 2014-12-01 20:17 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 20:38 - 2014-11-09 20:38 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 21:06 - 2013-11-10 11:38 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job
2014-12-03 20:48 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-03 20:48 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-03 20:47 - 2010-11-20 22:01 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 20:44 - 2012-06-19 17:40 - 01999736 _____ () C:\Windows\WindowsUpdate.log
2014-12-03 20:41 - 2012-06-19 19:55 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-12-03 20:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-03 19:14 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-12-03 18:26 - 2014-05-03 15:55 - 00000000 ____D () C:\Users\User\Desktop\oblecenie 2
2014-12-03 18:01 - 2014-07-31 17:08 - 00000000 ____D () C:\Users\User\Desktop\KARLA
2014-12-02 14:06 - 2013-11-10 11:38 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job
2014-12-01 21:45 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-12-01 21:31 - 2013-11-10 11:38 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-12-01 20:42 - 2012-06-19 19:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-01 20:17 - 2012-06-19 19:22 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-01 16:47 - 2014-10-16 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-12-01 16:47 - 2014-06-26 16:19 - 00000000 ____D () C:\Windows\Minidump
2014-12-01 16:47 - 2012-06-20 03:37 - 00000000 ____D () C:\Windows\Panther
2014-11-24 14:04 - 2012-06-19 19:19 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-13 14:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 13:07 - 2012-06-19 18:53 - 00109280 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 13:06 - 2009-07-14 05:33 - 00408248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 13:05 - 2014-05-02 08:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 13:03 - 2012-06-19 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 12:55 - 2013-07-16 11:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 12:48 - 2012-06-19 19:37 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-04 14:02 - 2012-06-19 19:22 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-02 14:31
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (System_7) (Fixed) (Total:113.18 GB) (Free:57.27 GB) NTFS
Drive d: (Private) (Fixed) (Total:119.6 GB) (Free:117.43 GB) NTFS
Available physical RAM: 1915.29 MB
Total physical RAM: 2985.02 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: C902E16D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=119.6 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 25068 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by User (administrator) on LATITUDEE6420 on 03-12-2014 21:22:03
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AEstSrv.exe
(O2Micro International) C:\Windows\System32\drivers\o2flash.exe
(Crawler.com) C:\Program Files\Spyware Terminator\st_rsser.exe
(Ericsson AB) C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
() C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\Apoint.exe
(Crawler.com) C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApMsgFwd.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\ApntEx.exe
(Alps Electric Co., Ltd.) C:\Program Files\DellTPad\hidfind.exe
(12Voip) C:\Program Files\12Voip.com\12Voip\12voip.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe
(TeamViewer GmbH) C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe
(forum.viry.cz) C:\Users\User\Desktop\FRST-OlderVersion\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [283160 2010-11-05] (Intel Corporation)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [536668 2011-01-25] (IDT, Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files\STMicroelectronics\AccelerometerP11\FF_Protection.exe [686704 2011-07-25] ()
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [505720 2011-07-20] (Alps Electric Co., Ltd.)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe [2774904 2014-11-12] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files\Spyware Terminator\SpywareTerminatorUpdate.exe [3683704 2014-11-12] (Crawler.com)
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [12Voip] => C:\Program Files\12Voip.com\12Voip\12voip.exe [19703608 2014-05-19] (12Voip)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Google Update] => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-11-10] (Google Inc.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
AppInit_DLLs: C:\Windows\system32\nvinit.dll => C:\Windows\system32\nvinit.dll [193128 2011-06-05] (NVIDIA Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.dell.com
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.dell.com
BHO: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 -> C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKU\S-1-5-21-6918886-418769647-3116604721-1000: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF Extension: German Dictionary - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\kst1pc43.default\Extensions\de-DE@dictionaries.addons.mozilla.org [2014-06-16]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-01]
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-01]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-01]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-01]
CHR Extension: (Hľadať v Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-01]
CHR Extension: (Tabuľky Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-01]
CHR Extension: (Peňaženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-01]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-01]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 O2FLASH; C:\Windows\system32\DRIVERS\o2flash.exe [72296 2010-02-10] (O2Micro International)
R2 ST2012_Svc; C:\Program Files\Spyware Terminator\st_rsser.exe [585080 2014-11-12] (Crawler.com)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV.exe [274514 2011-01-25] (IDT, Inc.)
R2 WMCoreService; C:\Program Files\Dell\Dell WWAN\WMCore\mini_WMCore.exe [584232 2010-12-09] (Ericsson AB)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 Acceler; C:\Windows\System32\DRIVERS\accelern.sys [44144 2011-07-22] (ST Microelectronics)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [39656 2011-10-02] (Broadcom Corporation)
R3 d554scard; C:\Windows\System32\DRIVERS\d554scard.sys [53800 2010-11-19] (Ericsson AB)
R3 e1cexpress; C:\Windows\System32\DRIVERS\e1c6232.sys [268968 2011-07-20] (Intel Corporation)
R3 ecnssndis; C:\Windows\System32\Drivers\wwanuss.sys [23592 2010-03-03] (Ericsson AB)
R3 ecnssndisfltr; C:\Windows\System32\Drivers\wwanussf.sys [26152 2010-03-03] (Ericsson AB)
S3 ivusb; C:\Windows\System32\DRIVERS\ivusb.sys [25112 2010-07-29] (Initio Corporation)
R3 Mbm3CBus; C:\Windows\System32\DRIVERS\Mbm3CBus.sys [361032 2011-02-22] (MCCI Corporation)
R3 Mbm3DevMt; C:\Windows\System32\DRIVERS\Mbm3DevMt.sys [396872 2010-10-31] (MCCI Corporation)
R3 Mbm3mdfl; C:\Windows\System32\DRIVERS\Mbm3mdfl.sys [14920 2010-10-31] (MCCI Corporation)
R3 Mbm3Mdm; C:\Windows\System32\DRIVERS\Mbm3Mdm.sys [413768 2010-10-31] (MCCI Corporation)
R3 NETwNs32; C:\Windows\System32\DRIVERS\NETwNs32.sys [7434240 2011-10-02] (Intel Corporation)
R0 nvpciflt; C:\Windows\System32\DRIVERS\nvpciflt.sys [20328 2011-06-05] (NVIDIA Corporation)
R3 O2MDFRDR; C:\Windows\System32\DRIVERS\O2MDFw7.sys [60904 2011-01-04] (O2Micro )
R3 O2SDJRDR; C:\Windows\System32\DRIVERS\o2sdjw7.sys [63976 2011-03-23] (O2Micro )
R1 sp_rsdrv2; C:\Windows\system32\drivers\sp_rsdrv2.sys [32768 2011-06-21] () [File not signed]
R0 stdcfltn; C:\Windows\System32\DRIVERS\stdcfltn.sys [17904 2011-07-15] (ST Microelectronics)
R3 WwanUsbServ; C:\Windows\System32\DRIVERS\WwanUsbMp.sys [237608 2010-12-28] (Ericsson AB)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 21:22 - 2014-12-03 21:23 - 00012709 _____ () C:\Users\User\Desktop\FRST.txt
2014-12-03 21:20 - 2014-12-03 21:21 - 00000000 ____D () C:\Users\User\Desktop\FRST-OlderVersion
2014-12-03 20:34 - 2014-12-03 20:39 - 00000000 ____D () C:\AdwCleaner
2014-12-03 20:33 - 2014-12-03 20:33 - 02154496 _____ () C:\Users\User\Desktop\adwcleaner_4.103.exe
2014-12-03 19:49 - 2014-12-03 21:22 - 00000000 ____D () C:\FRST
2014-12-02 09:12 - 2014-12-03 20:41 - 00000618 _____ () C:\Windows\PFRO.log
2014-12-02 09:12 - 2014-12-03 20:41 - 00000224 _____ () C:\Windows\setupact.log
2014-12-02 09:12 - 2014-12-02 09:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-12-01 21:31 - 2014-12-01 21:31 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-01 21:31 - 2014-12-01 21:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-01 21:28 - 2014-12-03 21:21 - 01110016 _____ (Farbar) C:\Users\User\Desktop\FRST.exe
2014-12-01 21:28 - 2014-12-03 20:41 - 00000916 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-01 21:28 - 2014-12-03 20:33 - 00000920 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-01 21:28 - 2014-12-01 21:31 - 00000000 ____D () C:\Program Files\Google
2014-12-01 21:24 - 2014-12-01 21:28 - 00880784 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe
2014-12-01 21:10 - 2014-12-03 17:07 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00001012 _____ () C:\Users\Public\Desktop\Spyware Terminator 2012.lnk
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spyware Terminator
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spyware Terminator 2012
2014-12-01 21:10 - 2014-12-01 21:10 - 00000000 ____D () C:\Program Files\Spyware Terminator
2014-12-01 21:10 - 2011-06-21 11:24 - 00032768 _____ () C:\Windows\system32\Drivers\sp_rsdrv2.sys
2014-12-01 21:07 - 2014-12-01 21:07 - 01070392 _____ (Crawler, LLC ) C:\Users\User\Downloads\SpywareTerminatorSetup.exe
2014-12-01 21:00 - 2014-12-01 21:00 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieBrowserModeList
2014-12-01 20:55 - 2014-12-01 20:55 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-01 20:17 - 2014-12-01 20:17 - 00001109 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-12-01 20:12 - 2014-12-01 20:12 - 00244440 _____ () C:\Users\User\Downloads\Firefox Setup Stub 34.0.5.exe
2014-12-01 20:07 - 2014-12-03 21:11 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-01 20:07 - 2014-12-01 21:45 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-12-01 20:07 - 2014-12-01 21:45 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-11-30 22:25 - 2014-11-30 22:37 - 10767630 _____ () C:\Users\User\Desktop\male.rar
2014-11-19 20:42 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 20:42 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-12 21:45 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-12 21:44 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-12 21:44 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-12 21:44 - 2014-11-06 04:28 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-12 21:44 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-12 21:44 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-12 21:44 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-12 21:44 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-12 21:44 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-12 21:44 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-12 21:44 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-12 21:44 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-12 21:44 - 2014-11-06 03:59 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-12 21:44 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-12 21:44 - 2014-11-06 03:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-12 21:44 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-12 21:44 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-12 21:44 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-12 21:44 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-12 21:44 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-12 21:44 - 2014-11-06 03:22 - 00683008 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-12 21:44 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-12 21:44 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-12 21:44 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-12 21:44 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-12 21:44 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-12 21:44 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-12 21:44 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00254464 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-11-12 21:44 - 2014-11-05 18:50 - 00203776 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-11-12 21:44 - 2014-11-05 18:47 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-11-12 21:44 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-12 21:44 - 2014-10-14 02:56 - 00136632 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-12 21:44 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-12 21:44 - 2014-10-14 02:50 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-12 21:44 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-12 21:44 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-12 21:44 - 2014-10-10 01:45 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-12 21:44 - 2014-10-03 02:44 - 00475136 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00275968 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-12 21:44 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-12 21:44 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-12 21:44 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-12 21:44 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-12 21:44 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 21:13 - 2014-11-11 21:13 - 00000000 ____D () C:\ProgramData\NuwaBameb
2014-11-11 13:26 - 2014-12-01 20:17 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-11-09 20:38 - 2014-11-09 20:38 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-03 21:06 - 2013-11-10 11:38 - 00000942 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job
2014-12-03 20:48 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-03 20:48 - 2009-07-14 05:34 - 00031088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-03 20:47 - 2010-11-20 22:01 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-03 20:44 - 2012-06-19 17:40 - 01999736 _____ () C:\Windows\WindowsUpdate.log
2014-12-03 20:41 - 2012-06-19 19:55 - 00000266 _____ () C:\Windows\Tasks\AutoKMS.job
2014-12-03 20:41 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-03 19:14 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-12-03 18:26 - 2014-05-03 15:55 - 00000000 ____D () C:\Users\User\Desktop\oblecenie 2
2014-12-03 18:01 - 2014-07-31 17:08 - 00000000 ____D () C:\Users\User\Desktop\KARLA
2014-12-02 14:06 - 2013-11-10 11:38 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job
2014-12-01 21:45 - 2012-06-19 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-12-01 21:31 - 2013-11-10 11:38 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-12-01 20:42 - 2012-06-19 19:22 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-12-01 20:17 - 2012-06-19 19:22 - 00001121 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-12-01 16:47 - 2014-10-16 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-12-01 16:47 - 2014-06-26 16:19 - 00000000 ____D () C:\Windows\Minidump
2014-12-01 16:47 - 2012-06-20 03:37 - 00000000 ____D () C:\Windows\Panther
2014-11-24 14:04 - 2012-06-19 19:19 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-11-13 14:27 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-13 13:07 - 2012-06-19 18:53 - 00109280 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-11-13 13:06 - 2009-07-14 05:33 - 00408248 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-13 13:05 - 2014-05-02 08:11 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-11-13 13:03 - 2012-06-19 19:25 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-13 12:55 - 2013-07-16 11:16 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-13 12:48 - 2012-06-19 19:37 - 100445232 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-04 14:02 - 2012-06-19 19:22 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-02 14:31
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (System_7) (Fixed) (Total:113.18 GB) (Free:57.27 GB) NTFS
Drive d: (Private) (Fixed) (Total:119.6 GB) (Free:117.43 GB) NTFS
Available physical RAM: 1915.29 MB
Total physical RAM: 2985.02 MB
Percentage of memory in use: 35%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: C902E16D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=113.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=119.6 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS\AutoKMS.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
==================== Security Center ==================
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 25068 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Rudy
- Site Admin
- Příspěvky: 119556
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
C:\ProgramData\NuwaBameb
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\AutoKMS.job
C:\Users\User\AppData\Local\Temp
C:\Windows\AutoKMS
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
- Návštěvník
- Příspěvky: 5
- Registrován: 03 pro 2014 20:00
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 03-12-2014
Ran by User at 2014-12-03 21:36:59 Run:1
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
C:\ProgramData\NuwaBameb
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\AutoKMS.job
C:\Users\User\AppData\Local\Temp
C:\Windows\AutoKMS
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
End
*****************
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
C:\ProgramData\NuwaBameb => Moved successfully.
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NuwaBameb => value deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\AutoKMS.job => Moved successfully.
"C:\Users\User\AppData\Local\Temp" directory move:
C:\Users\User\AppData\Local\Temp\adwcleaner.db => Moved successfully.
C:\Users\User\AppData\Local\Temp\AdwCleaner.jpg => Moved successfully.
C:\Users\User\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Cleaning.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\closeui.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Donate.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWH5D5C.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHC5DF.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHD664.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHEA90.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHEE4.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHFA88.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\EULA.txt => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\User\AppData\Local\Temp\MSI98f92.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\MSI98f93.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\REG896A.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\REGBEBE.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\Report.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\Scan.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SYMEVENT.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\teeferInstall.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstall.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\~2FD.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~5F01.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~A025.bat => Moved successfully.
C:\Users\User\AppData\Local\Temp\~A025.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF027B4D4FF1D267FA.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF12F947C039AD704C.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF141792F1436A65C0.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF3106741DCC98B42F.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF9A1E9C5AEA6FE97E.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFBB9F1157A4DF011D.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFC28B152BD787B602.TMP => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp\~DFD640C0AD2294A225.TMP" => Scheduled to move on reboot.
C:\Users\User\AppData\Local\Temp\~DFEEB3891B9F899416.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFF81227586FC0C3E7.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFF9709117FA07BB20.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E50F2F86-FC7D-4D89-9FA6-73BDD75B8A8B}\fpb.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\7.hta => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\Connections_incoming.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\CopyRights.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\License.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\teamviewer8.otf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_en.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_sk.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Service.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_StaticRes.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tvinfo.ini => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TVInstall.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_w32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_w32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_x64.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\uninstall.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewer.gpd => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewer.ppd => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.sy_ => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\Teamviewer_PrintProcessor.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.sy_ => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\tvprint.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVPrint.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\tvpsprint.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVPSPrint.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\outlook\TeamViewerMeetingAddIn.dll => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp" directory. => Scheduled to move on reboot.
C:\Windows\AutoKMS => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => Moved successfully.
C:\ProgramData\TEMP => ":0B4227B4" ADS removed successfully.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-12-03 21:37:58)<=
C:\Users\User\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\User\AppData\Local\Temp\~DFD640C0AD2294A225.TMP => Is moved successfully.
C:\Users\User\AppData\Local\Temp => Moved successfully.
==== End of Fixlog ====
Ran by User at 2014-12-03 21:36:59 Run:1
Running from C:\Users\User\Desktop
Loaded Profile: User (Available profiles: User)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Malwarebytes <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Spyware Terminator <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\AVG <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Malwarebytes' Anti-Malware <====== ATTENTION
C:\ProgramData\NuwaBameb
HKU\S-1-5-21-6918886-418769647-3116604721-1000\...\Run: [NuwaBameb] => regsvr32.exe "C:\ProgramData\NuwaBameb\NuwaBameb.dat"
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\Tasks\AutoKMS.job
C:\Users\User\AppData\Local\Temp
C:\Windows\AutoKMS
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
AlternateDataStreams: C:\ProgramData\TEMP:0B4227B4
End
*****************
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
HKLM => Group Policy Restriction on software restored successfully.
C:\ProgramData\NuwaBameb => Moved successfully.
HKU\S-1-5-21-6918886-418769647-3116604721-1000\Software\Microsoft\Windows\CurrentVersion\Run\\NuwaBameb => value deleted successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\AutoKMS.job => Moved successfully.
"C:\Users\User\AppData\Local\Temp" directory move:
C:\Users\User\AppData\Local\Temp\adwcleaner.db => Moved successfully.
C:\Users\User\AppData\Local\Temp\AdwCleaner.jpg => Moved successfully.
C:\Users\User\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Cleaning.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\closeui.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Donate.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWH5D5C.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHC5DF.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHD664.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHEA90.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHEE4.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\DWHFA88.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\EULA.txt => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp\FXSAPIDebugLogFile.txt" => Scheduled to move on reboot.
C:\Users\User\AppData\Local\Temp\MSI98f92.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\MSI98f93.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\REG896A.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\REGBEBE.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\Report.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\Scan.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite3.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SYMEVENT.LOG => Moved successfully.
C:\Users\User\AppData\Local\Temp\teeferInstall.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstall.ico => Moved successfully.
C:\Users\User\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\~2FD.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~5F01.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~A025.bat => Moved successfully.
C:\Users\User\AppData\Local\Temp\~A025.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF027B4D4FF1D267FA.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF12F947C039AD704C.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF141792F1436A65C0.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF3106741DCC98B42F.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DF9A1E9C5AEA6FE97E.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFBB9F1157A4DF011D.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFC28B152BD787B602.TMP => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp\~DFD640C0AD2294A225.TMP" => Scheduled to move on reboot.
C:\Users\User\AppData\Local\Temp\~DFEEB3891B9F899416.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFF81227586FC0C3E7.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\~DFF9709117FA07BB20.TMP => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E50F2F86-FC7D-4D89-9FA6-73BDD75B8A8B}\fpb.tmp => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\7.hta => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\Connections_incoming.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\CopyRights.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\License.txt => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\teamviewer8.otf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Desktop.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_en.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Resource_sk.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_Service.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TeamViewer_StaticRes.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tvinfo.ini => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\TVInstall.log => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_w32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_w32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_x64.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\tv_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\uninstall.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewer.gpd => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewer.ppd => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TeamViewerVPN.sy_ => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\Teamviewer_PrintProcessor.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVMonitor.sy_ => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\tvprint.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVPrint.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\tvpsprint.cat => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\x86\TVPSPrint.inf => Moved successfully.
C:\Users\User\AppData\Local\Temp\TeamViewer\Version8\outlook\TeamViewerMeetingAddIn.dll => Moved successfully.
Could not move "C:\Users\User\AppData\Local\Temp" directory. => Scheduled to move on reboot.
C:\Windows\AutoKMS => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-6918886-418769647-3116604721-1000UA.job => Moved successfully.
C:\ProgramData\TEMP => ":0B4227B4" ADS removed successfully.
=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-12-03 21:37:58)<=
C:\Users\User\AppData\Local\Temp\FXSAPIDebugLogFile.txt => Is moved successfully.
C:\Users\User\AppData\Local\Temp\~DFD640C0AD2294A225.TMP => Is moved successfully.
C:\Users\User\AppData\Local\Temp => Moved successfully.
==== End of Fixlog ====
- Rudy
- Site Admin
- Příspěvky: 119556
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
-
- Návštěvník
- Příspěvky: 5
- Registrován: 03 pro 2014 20:00
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Dakujem velmi pekne pomohlo to.
- Rudy
- Site Admin
- Příspěvky: 119556
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Problem s prehravanim videa + FRST nenasiel MSGBOX ani D
Nemáte zač! 

Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.