VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Helenka at 2014-12-13 16:57:17
Microsoft Windows 7 Home Basic Service Pack 1
System drive C: has 128 GB (84%) free of 153 GB
Total RAM: 953 MB (12% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:57:33, on 13.12.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17496)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\System32\igfxtray.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\system32\igfxsrvc.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Windows\PixArt\Pac207\Monitor.exe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Helenka\Desktop\RSIT.exe
C:\Program Files\trend micro\Helenka.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [Monitor] C:\Windows\PixArt\PAC207\Monitor.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 3448 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

=========Mozilla firefox=========

ProfilePath - C:\Users\Helenka\AppData\Roaming\Mozilla\Firefox\Profiles\8v75363c.default

prefs.js - "browser.startup.homepage" - "www.seznam.cz"

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.246 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll


======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-21 586968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2009-09-02 135168]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2009-09-02 167424]
"Persistence"=C:\Windows\system32\igfxpers.exe [2009-09-02 144384]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-11-21 5226600]
"Monitor"=C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-11-27 30524520]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Monitor]
C:\Windows\PixArt\PAC207\Monitor.exe [2006-11-03 319488]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2009-09-02 217088]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-12-11 17:08:40 ----D---- C:\Windows\system32\appraiser
2014-12-11 09:47:37 ----A---- C:\Windows\system32\mferror.dll
2014-12-11 09:47:36 ----A---- C:\Windows\system32\mfpmp.exe
2014-12-11 09:47:35 ----A---- C:\Windows\system32\mfps.dll
2014-12-11 09:47:34 ----A---- C:\Windows\system32\mf.dll
2014-12-11 09:47:33 ----A---- C:\Windows\system32\rrinstaller.exe
2014-12-10 09:10:40 ----A---- C:\Windows\system32\drivers\tdx.sys
2014-12-10 09:10:37 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-12-10 09:10:34 ----A---- C:\Windows\system32\aitstatic.exe
2014-12-10 09:10:33 ----A---- C:\Windows\system32\appraiser.dll
2014-12-10 09:10:33 ----A---- C:\Windows\system32\aepic.dll
2014-12-10 09:10:33 ----A---- C:\Windows\system32\aeinv.dll
2014-12-10 09:10:32 ----A---- C:\Windows\system32\invagent.dll
2014-12-10 09:10:29 ----A---- C:\Windows\system32\generaltel.dll
2014-12-10 09:10:29 ----A---- C:\Windows\system32\devinv.dll
2014-12-10 09:10:28 ----A---- C:\Windows\system32\aepdu.dll
2014-12-10 09:10:17 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-12-10 09:10:15 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-12-10 09:10:15 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-12-10 09:10:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-12-10 09:10:08 ----A---- C:\Windows\system32\jsproxy.dll
2014-12-10 09:10:07 ----A---- C:\Windows\system32\jscript9diag.dll
2014-12-10 09:10:07 ----A---- C:\Windows\system32\ieUnatt.exe
2014-12-10 09:10:06 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-12-10 09:10:06 ----A---- C:\Windows\system32\dxtmsft.dll
2014-12-10 09:10:05 ----A---- C:\Windows\system32\vbscript.dll
2014-12-10 09:10:04 ----A---- C:\Windows\system32\wininet.dll
2014-12-10 09:10:02 ----A---- C:\Windows\system32\dxtrans.dll
2014-12-10 09:10:01 ----A---- C:\Windows\system32\ieui.dll
2014-12-10 09:10:00 ----A---- C:\Windows\system32\mshtmled.dll
2014-12-10 09:09:59 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-12-10 09:09:58 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-12-10 09:09:57 ----A---- C:\Windows\system32\iertutil.dll
2014-12-10 09:09:54 ----A---- C:\Windows\system32\jscript9.dll
2014-12-10 09:09:52 ----A---- C:\Windows\system32\mshtml.dll
2014-12-10 09:09:50 ----A---- C:\Windows\system32\iernonce.dll
2014-12-10 09:09:50 ----A---- C:\Windows\system32\ie4uinit.exe
2014-12-10 09:09:49 ----A---- C:\Windows\system32\urlmon.dll
2014-12-10 09:09:49 ----A---- C:\Windows\system32\iedkcs32.dll
2014-12-10 09:09:49 ----A---- C:\Windows\system32\ieapfltr.dll
2014-12-10 09:09:48 ----A---- C:\Windows\system32\msfeeds.dll
2014-12-10 09:09:43 ----A---- C:\Windows\system32\msrating.dll
2014-12-10 09:09:42 ----A---- C:\Windows\system32\iesetup.dll
2014-12-10 09:09:40 ----A---- C:\Windows\system32\ieframe.dll
2014-12-10 09:08:48 ----A---- C:\Windows\system32\tzres.dll
2014-12-10 09:08:26 ----A---- C:\Windows\system32\cryptsvc.dll
2014-12-10 09:08:24 ----A---- C:\Windows\system32\crypt32.dll
2014-12-10 09:07:48 ----A---- C:\Windows\system32\charmap.exe
2014-12-10 09:07:46 ----A---- C:\Windows\system32\WsmSvc.dll
2014-12-10 09:07:44 ----A---- C:\Windows\system32\WsmWmiPl.dll
2014-12-10 09:07:44 ----A---- C:\Windows\system32\WSManMigrationPlugin.dll
2014-12-10 09:07:43 ----A---- C:\Windows\system32\WSManHTTPConfig.exe
2014-12-10 09:07:41 ----A---- C:\Windows\system32\WsmAuto.dll
2014-11-21 13:07:24 ----A---- C:\Windows\system32\aswBoot.exe
2014-11-21 13:07:08 ----A---- C:\Windows\avastSS.scr
2014-11-20 12:14:50 ----A---- C:\Windows\system32\pku2u.dll
2014-11-20 12:14:49 ----A---- C:\Windows\system32\kerberos.dll

======List of files/folders modified in the last 1 month======

2014-12-13 16:57:25 ----D---- C:\Program Files\trend micro
2014-12-13 16:53:54 ----D---- C:\Users\Helenka\AppData\Roaming\Skype
2014-12-13 16:53:04 ----SHD---- C:\Windows\Installer
2014-12-13 16:53:04 ----D---- C:\ProgramData\Skype
2014-12-13 16:52:48 ----RD---- C:\Program Files\Skype
2014-12-13 16:52:46 ----D---- C:\Windows\System32
2014-12-13 16:51:23 ----D---- C:\Windows\Temp
2014-12-13 16:35:42 ----D---- C:\Windows\inf
2014-12-13 16:35:41 ----D---- C:\Windows\debug
2014-12-13 16:35:41 ----D---- C:\Windows
2014-12-13 16:28:39 ----D---- C:\Windows\winsxs
2014-12-13 16:27:10 ----SHD---- C:\System Volume Information
2014-12-13 16:26:10 ----D---- C:\Windows\system32\config
2014-12-11 17:18:58 ----D---- C:\Windows\system32\catroot2
2014-12-11 17:08:41 ----D---- C:\Windows\system32\drivers
2014-12-11 17:08:40 ----SD---- C:\Windows\system32\CompatTel
2014-12-11 17:08:40 ----D---- C:\Windows\AppCompat
2014-12-11 17:08:39 ----SD---- C:\ProgramData\Microsoft
2014-12-11 17:08:39 ----D---- C:\Windows\system32\en-US
2014-12-11 17:08:39 ----D---- C:\Windows\system32\cs-CZ
2014-12-11 17:08:39 ----D---- C:\Windows\PolicyDefinitions
2014-12-11 17:08:36 ----D---- C:\Program Files\Internet Explorer
2014-12-11 09:49:20 ----D---- C:\Program Files\Malwarebytes Anti-Malware
2014-12-11 09:47:53 ----D---- C:\Windows\system32\catroot
2014-12-11 09:44:46 ----D---- C:\Windows\system32\MRT
2014-12-11 09:23:41 ----A---- C:\Windows\system32\MRT.exe
2014-12-09 22:29:01 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-12-05 22:29:22 ----D---- C:\Program Files\Mozilla Maintenance Service
2014-12-04 11:28:26 ----D---- C:\Program Files\Mozilla Firefox
2014-11-23 15:31:29 ----D---- C:\Windows\Microsoft.NET
2014-11-23 15:29:01 ----RSD---- C:\Windows\assembly
2014-11-21 13:07:58 ----D---- C:\Windows\system32\Tasks
2014-11-14 11:38:07 ----D---- C:\Windows\Prefetch

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-21 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-21 206248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-21 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-22 787800]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-21 423784]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-21 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-21 70384]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-21 91496]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athr.sys [2009-10-05 1221632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd32.sys [2009-09-02 5946368]
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x86.sys [2009-07-13 50688]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 PAC207;Webcam 1200; C:\Windows\system32\DRIVERS\PFC027.SYS [2007-06-29 611584]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2012-08-23 49664]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2012-08-23 27136]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-21 50344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-09 267440]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-11-22 102912]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2014-12-04 114800]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

-----------------EOF-----------------

Zdravim

• Stahnete Crystal Disk Info (CDI) http://sourceforge.jp/frs/redir.php?m=j ... o6_2_1.zip
• v archivu spustte soubor DiskInfo.exe
• ve spustenem programu kliknete nahore na Upravy -> Kopirovat (log mate nyni zkopirovany ve schrance)
• log vlozte do dalsi odpovedi (Ctrl + V)

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

----------------------------------------------------------------------------
CrystalDiskInfo 5.4.2 (C) 2008-2013 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Home Basic Edition SP1 [6.1 Build 7601] (x86)
Date : 2014/12/13 17:47:28

-- Controller Map ----------------------------------------------------------
+ ATA Channel 1 (1) [ATA]
- TSSTcorp CDDVDW TS-L633B ATA Device
- ATA Channel 0 (0) [ATA]
- ATA Channel 1 (1) [ATA]
+ PCI Standardní dvoukanálový řadič IDE [ATA]
- ATA Channel 0 (0)
- ATA Channel 1 (1)
+ PCI Standardní dvoukanálový řadič IDE [ATA]
+ ATA Channel 0 (0)
- ST9160310AS ATA Device
- ATA Channel 1 (1)

-- Disk List ---------------------------------------------------------------
(1) ST9160310AS : 160,0 GB [0/0/0, pd1] - st

----------------------------------------------------------------------------
(1) ST9160310AS
----------------------------------------------------------------------------
Model : ST9160310AS
Firmware : 0303
Serial Number : 5SV78XM5
Disk Size : 160,0 GB (8,4/137,4/160,0)
Buffer Size : 8192 KB
Queue Depth : 32
# of Sectors : 312581808
Rotation Rate : Neznámy údaj
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300
Power On Hours : 8479 hod.
Power On Count : 10222 krát
Temparature : 40 C (104 F)
Health Status : Dobrý
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 8080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 109 _99 __6 0000017A29E5 Počet chyb čtení
03 _99 _99 __0 000000000000 Čas na roztočení ploten
04 _90 _90 _20 000000002806 Počet spuštění/zastavení
05 100 100 _36 000000000000 Počet přemapovaných sektorů
07 _81 _60 _30 0000083BECEA Počet chybných hledání
09 _91 _91 __0 00000000211F Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _91 _91 _20 0000000027EE Počet cyklů zapnutí zařízení
B8 100 100 _99 000000000000 Ukončovacích chyb
BB 100 100 __0 000000000000 Ohlášeno neopravitelných chyb
BC 100 _98 __0 000000000164 Časový limit příkazu
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _60 _54 _45 000028180028 Teplota toku vzduchu
BF 100 100 __0 00000000005F Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 000000000021 Počet vypnutí disku
C1 _25 _25 __0 000000024FD8 Počet cyklů načítání/vymazání
C2 _40 _46 __0 000D00000028 Teplota
C3 _56 _47 __0 0000017A29E5 Počet oprav chybného čtení
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 3553 5637 3858 4D35
020: 0000 4000 0004 3033 3033 2020 2020 5354 3931 3630
030: 3331 3041 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0506 0000 0048 0040
080: 01F0 0029 346B 7D09 61E3 3469 BC09 61E3 407F 001B
090: 001B 8080 FFFE 0000 FE00 0000 0000 0000 0000 0000
100: 9EB0 12A1 0000 0000 0000 0000 0000 0000 5000 C500
110: 166C F84C 0000 0000 0000 0000 0000 0000 0000 400E
120: 400E 0000 0000 0000 0000 0000 0000 0000 0029 9EB0
130: 12A1 9EB0 12A1 0000 0002 0140 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 0000 000F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 3400 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 103F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
220: 0002 0000 1010 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 C8A5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 6D 63 E5 29 7A 01 00 00 00 03 03
010: 00 63 63 00 00 00 00 00 00 00 04 32 00 5A 5A 06
020: 28 00 00 00 00 00 05 33 00 64 64 00 00 00 00 00
030: 00 00 07 0F 00 51 3C EA EC 3B 08 00 00 00 09 32
040: 00 5B 5B 1F 21 00 00 00 00 00 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 32 00 5B 5B EE 27 00 00 00
060: 00 00 B8 32 00 64 64 00 00 00 00 00 00 00 BB 32
070: 00 64 64 00 00 00 00 00 00 00 BC 32 00 64 62 64
080: 01 00 00 00 00 00 BD 3A 00 64 64 00 00 00 00 00
090: 00 00 BE 22 00 3C 36 28 00 18 28 00 00 00 BF 32
0A0: 00 64 64 5F 00 00 00 00 00 00 C0 32 00 64 64 21
0B0: 00 00 00 00 00 00 C1 32 00 19 19 D8 4F 02 00 00
0C0: 00 00 C2 22 00 28 2E 28 00 00 00 0D 00 00 C3 1A
0D0: 00 38 2F E5 29 7A 01 00 00 00 C5 12 00 64 64 00
0E0: 00 00 00 00 00 00 C6 10 00 64 64 00 00 00 00 00
0F0: 00 00 C7 3E 00 C8 C8 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 C8 02 00 73
170: 03 00 01 00 01 3E 02 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 04 01 01 01 01 01 01 01
190: 01 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 5F 00 00 00 1E E3 96 13 C3 1B 00 00
1B0: 00 00 00 00 01 00 C4 06 96 57 14 85 77 1B 00 00
1C0: 1B 65 86 C6 C8 11 00 00 00 00 00 00 DE 33 03 00
1D0: 00 00 00 00 00 00 00 00 2A 1C 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2E

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B8 63 00 00 00 00 00 00 00 00 00 00 BB 00
070: 00 00 00 00 00 00 00 00 00 00 BC 00 00 00 00 00
080: 00 00 00 00 00 00 BD 00 00 00 00 00 00 00 00 00
090: 00 00 BE 2D 00 00 00 00 00 00 00 00 00 00 BF 00
0A0: 00 00 00 00 00 00 00 00 00 00 C0 00 00 00 00 00
0B0: 00 00 00 00 00 00 C1 00 00 00 00 00 00 00 00 00
0C0: 00 00 C2 00 00 00 00 00 00 00 00 00 00 00 C3 00
0D0: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
0E0: 00 00 00 00 00 00 C6 00 00 00 00 00 00 00 00 00
0F0: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 00 00
100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A1

# AdwCleaner v4.105 - Report created 13/12/2014 at 17:57:04
# Updated 08/12/2014 by Xplode
# Database : 2014-12-13.4 [Live]
# Operating System : Windows 7 Home Basic Service Pack 1 (32 bits)
# Username : Helenka - HELENKA-PC
# Running from : C:\Users\Helenka\Desktop\adwcleaner_4.105.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17496


-\\ Mozilla Firefox v34.0 (x86 cs)


*************************

AdwCleaner[R0].txt - [757 octets] - [13/12/2014 17:48:19]
AdwCleaner[S0].txt - [679 octets] - [13/12/2014 17:57:04]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [738 octets] ##########

Ulozte na plochu zoek.exe http://hijackthis.nl/smeenk/zoek.htm

• spustte jako spravce
• do velkeho okna zkopirujte script uvedeny nize
• kliknete na Run script
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\zoek-results.log) - vlozte mi jej do pristi odpovedi

  Kód: Vybrat vše

  autoclean;
  emptyclsid;
  emptyalltemp;

avast me hlasi vir pri stahovani toho zoeku mam ho vypnout docasne

Presne tak... docasne vypnout

Zoek.exe v5.0.0.0 Updated 12-December-2014
Tool run by Helenka on so 13.12.2014 at 18:35:29,09.
Microsoft Windows 7 Home Basic 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Helenka\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.12.2014 18:36:34 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Users\Helenka\AppData\Local\Adobe deleted successfully
C:\Users\Helenka\AppData\Local\MigWiz deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\Windows\system32\config\systemprofile\Searches deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [21.11.2014 13:07]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Helenka\AppData\Roaming\Mozilla\Firefox\Profiles\8v75363c.default
9860727E477F17B88E39AF8B69B0407A - C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_246.dll - Shockwave Flash


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[21.11.2014 13:06]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TVWiz deleted successfully

==== Empty IE Cache ======================

C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BFRSAC3J will be deleted at reboot
C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GB9ZRAN6 will be deleted at reboot
C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IEFHA3UX will be deleted at reboot
C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OK9RFIDF will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Helenka\AppData\Local\Mozilla\Firefox\Profiles\8v75363c.default\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=3 folders=1 787 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Helenka\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Helenka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\BFRSAC3J" not found
"C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GB9ZRAN6" not found
"C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\IEFHA3UX" not found
"C:\Users\Helenka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\OK9RFIDF" not found

==== EOF on so 13.12.2014 at 18:52:35,72 ======================

Nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=137928

• Upozorneni: tento sken zabere od 30 minut po nekolik hodin