VIRY.CZ

Logfile of random's system information tool 1.10 (written by random/random)
Run by Black at 2015-01-30 14:00:33
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 174 GB (51%) free of 341 GB
Total RAM: 3327 MB (74% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 14:00:40, on 30.1.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\HRY a PROGRAMY\uTorrent\uTorrent.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Users\Black\Desktop\RSIT.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\trend micro\Black.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.thesettlersonline.cz/cs/domo ... r%C3%A1nka
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AMD AVT] Cmd.exe /c start "AMD Accelerated Video Transcoding device initialization" /min "C:\Program Files\AMD AVT\bin\kdbsync.exe" aml
O4 - HKLM\..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe -s
O4 - HKCU\..\Run: [uTorrent] "C:\HRY a PROGRAMY\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: AvastVBox COM Service (AvastVBoxSvc) - Avast Software - C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\HRY a PROGRAMY\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe

--
End of file - 4210 bytes

=========Mozilla firefox=========

ProfilePath - C:\Users\Black\AppData\Roaming\Mozilla\Firefox\Profiles\svyb1rvo.default

"wrc@avast.com"=C:\Program Files\AVAST Software\Avast\WebRep\FF


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 16.0.0.296 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=11.31.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=11.31.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\HRY a PROGRAMY\VLC Player\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll


C:\Users\Black\AppData\Roaming\Mozilla\Firefox\Profiles\svyb1rvo.default\extensions\
{b9db16a4-6edc-47ec-a1f4-b86292ed211d}

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-01-30 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-23 586968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18 403840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-30 172968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2015-01-26 5227112]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2013-04-30 642304]
"AMD AVT"=Cmd.exe /c start AMD Accelerated Video Transcoding device initialization /min C:\Program Files\AMD AVT\bin\kdbsync.exe aml []
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [2012-06-11 10996368]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"uTorrent"=C:\HRY a PROGRAMY\uTorrent\uTorrent.exe [2014-11-23 328568]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\HRY a PROGRAMY\D-Tools\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Common Files\Java\Java Update\jusched.exe [2014-12-17 508800]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"SoftwareSASGeneration"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"vidc.VP60"=C:\Windows\system32\vp6vfw.dll
"vidc.VP61"=C:\Windows\system32\vp6vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-01-30 14:00:33 ----D---- C:\rsit
2015-01-30 14:00:33 ----D---- C:\Program Files\trend micro
2015-01-30 01:26:33 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2015-01-30 00:45:37 ----D---- C:\Program Files\Common Files\Java
2015-01-30 00:45:24 ----A---- C:\Windows\system32\WindowsAccessBridge.dll
2015-01-30 00:44:31 ----D---- C:\Program Files\Java
2015-01-22 03:41:02 ----D---- C:\ProgramData\Sun
2015-01-22 03:39:07 ----D---- C:\ProgramData\Oracle
2015-01-12 02:44:16 ----D---- C:\UpdateChromeLinksLogs
2015-01-12 02:41:21 ----D---- C:\ProgramData\Baidu
2015-01-12 02:41:21 ----D---- C:\FFOutput
2015-01-11 21:56:07 ----D---- C:\Program Files\Common Files\Adobe
2015-01-11 21:56:07 ----D---- C:\Program Files\Adobe
2015-01-11 21:55:53 ----D---- C:\ProgramData\Adobe
2014-12-31 15:15:00 ----D---- C:\Users\Black\AppData\Roaming\vlc

======List of files/folders modified in the last 1 month======

2015-01-30 14:00:40 ----D---- C:\Windows\Prefetch
2015-01-30 14:00:36 ----D---- C:\Windows\Temp
2015-01-30 14:00:33 ----RD---- C:\Program Files
2015-01-30 14:00:33 ----D---- C:\Users\Black\AppData\Roaming\uTorrent
2015-01-30 13:55:43 ----RD---- C:\Downloads
2015-01-30 13:23:45 ----D---- C:\Windows\system32\LogFiles
2015-01-30 13:21:14 ----D---- C:\Windows\System32
2015-01-30 13:18:41 ----D---- C:\Windows
2015-01-30 01:26:49 ----D---- C:\Windows\system32\Tasks
2015-01-30 01:26:34 ----D---- C:\Windows\Tasks
2015-01-30 00:45:38 ----SHD---- C:\Windows\Installer
2015-01-30 00:45:37 ----D---- C:\Program Files\Common Files
2015-01-30 00:42:35 ----SHD---- C:\System Volume Information
2015-01-30 00:41:12 ----RD---- C:\HRY a PROGRAMY
2015-01-29 23:10:50 ----A---- C:\Windows\BlendSettings.ini
2015-01-26 20:49:18 ----D---- C:\Users\Black\AppData\Roaming\Skype
2015-01-25 18:21:44 ----D---- C:\Windows\system32\config
2015-01-22 03:41:02 ----HD---- C:\ProgramData
2015-01-11 21:57:26 ----D---- C:\Users\Black\AppData\Roaming\Adobe
2015-01-10 22:47:10 ----RAD---- C:\Obrázky
2015-01-10 18:46:13 ----RD---- C:\FILM +
2015-01-09 18:26:07 ----D---- C:\Windows\inf
2015-01-09 18:26:07 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-01-01 03:53:04 ----D---- C:\Windows\system32\catroot2

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-11-23 49944]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-11-23 206248]
R0 giveio;giveio; C:\Windows\system32\giveio.sys [1996-04-03 5248]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 speedfan;speedfan; C:\Windows\system32\speedfan.sys [2012-12-29 24184]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-11-23 81768]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-11-23 787800]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-11-23 423784]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2014-11-23 243128]
R2 AODDriver4.1;AODDriver4.1; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [2012-03-05 45184]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-11-23 24184]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-11-23 70384]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-11-23 91496]
R2 VBoxAswDrv;VBoxAsw Support Driver; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [2014-11-23 218192]
R3 amdiox86;AMD IO Driver; C:\Windows\system32\DRIVERS\amdiox86.sys [2010-02-18 37944]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-04-30 10070016]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-04-30 290304]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW73.sys [2012-05-14 86656]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHDA.sys [2012-06-19 3240400]
R3 RTL8167;Ovladač Realtek 8167 NT; C:\Windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]
S2 Parvdm;Parvdm; C:\Windows\system32\drivers\parvdm.sys [2009-07-14 8704]
S3 aic78xx;aic78xx; C:\Windows\system32\drivers\djsvs.sys [2009-07-14 70720]
S3 amdagp;AMD AGP Bus Filter Driver; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-04-30 10070016]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-20 62464]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sisagp;SIS AGP Bus Filter; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264]
S3 viaagp;VIA AGP Bus Filter; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\drivers\viac7.sys [2009-07-14 52736]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-03 81088]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-04-30 217088]
R2 AMD FUEL Service;AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [2013-04-29 291840]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-11-23 50344]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 9216]
R2 wlidsvc;Windows Live ID Sign-in Assistant; C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE [2009-08-18 1529728]
R3 AvastVBoxSvc;AvastVBox COM Service; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [2014-11-23 3192344]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 SkypeUpdate;Skype Updater; C:\HRY a PROGRAMY\Skype\Updater\Updater.exe [2014-04-03 315008]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2014-11-18 833728]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]

-----------------EOF-----------------

Zdravim

Doinstalujte Internet Explorer 11 a pak i vsechny ostatni dulezite aktualizace od MS.

Log je jinak cisty, takze jsou s PC nejake konkretni problemy? Vyprazdnete tempy napr. pomoci CCleaneru.

Internet Explorer jsem nikdy v životě nepoužil, takže nevim jestli je toto nutnost a CCleaner používám...problémy jsem měl v poslední době s Firefoxem a adobe flash pluginem (neustálé padání her v prohlížeči i padání při přehrávání videa) a ačkoliv jsem měl poslední verze, pořád to hlásí že mám zastaralou verzi....problém je taky v tom že jsem na Win 7 jen krátce a ještě moc nevim kde se co a jak nastavuje (je to strašně nepřehledný oproti XP).

OK, koukneme na to

IE je velice uzce spjaty s jadrem operacniho systemu, takze ano, z bezpecnostniho hlediska je to nutnost - Tatry03 nam primo na forum shrnuje posledni srovnavaci testy antiviru atd a napriklad na obrazku zde je videt, ze opatchovany (zaplatovany) system se i bez antiviru ubrani ~30 % hrozeb http://forum.viry.cz/viewtopic.php?f=29 ... 6#p1353406

Pokud flash hlasi, ze je zastaraly, manualne jej zaktualizujte (predevcirem vysla nova verze, ktera opravuje 2 ze 3 kritickych zranitelnosti - cesky... pokud mate starou verzi flashe/javy/prohlizece a navstivite infikovany web, neni problem Vam do PC havet bez Vaseho vedomi stahnout a spustit). Aktualizujte na http://get.adobe.com/flashplayer a pred stazenim pozor na adware viz http://forum.viry.cz/viewtopic.php?p=1374437#p1374437

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

• ukoncete vsechny programy
• kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
• kliknete na Scan, pote na Clean
• po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

Tak hotovo a tady je ten log, ale nějak nechápu proč se tam píše o mozille v 29, když já používám poslední v 36.....Ten IE 11 už jsem taky nainstaloval.



# AdwCleaner v4.109 - Report created 30/01/2015 at 20:36:56
# Updated 24/01/2015 by Xplode
# Database : 2015-01-26.1 [Live]
# Operating System : Windows 7 Professional Service Pack 1 (32 bits)
# Username : Black - TARDIS
# Running from : C:\Users\Black\Desktop\adwcleaner_4.109.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\baidu

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v29.0 (cs)


*************************

AdwCleaner[R0].txt - [783 octets] - [30/01/2015 20:34:50]
AdwCleaner[S0].txt - [707 octets] - [30/01/2015 20:36:56]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [766 octets] ##########

Už jsem to přečetl pořádně a chápu.....smazaný složky.

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-01-2015 01
Ran by Black (administrator) on TARDIS on 30-01-2015 21:05:02
Running from C:\Users\Black\Desktop
Loaded Profiles: Black (Available profiles: Black)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(BitTorrent, Inc.) C:\HRY a PROGRAMY\uTorrent\uTorrent.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-01-26] (AVAST Software)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [642304 2013-04-30] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AMD AVT] => C:\Program Files\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10996368 2012-06-11] (Realtek Semiconductor)
HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\...\Run: [uTorrent] => C:\HRY a PROGRAMY\uTorrent\uTorrent.exe [328568 2014-11-23] (BitTorrent, Inc.)
HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\...\MountPoints2: {ceb6c1dd-7343-11e4-ae48-0021859dfb59} - E:\OblivionLauncher.exe
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.thesettlersonline.cz/cs/domo ... r%C3%A1nka
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1471422611-3306088640-2433698573-1000 -> {F90B226D-297C-4112-B35D-03DB85ED0B6E} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_2
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.122.1

FireFox:
========
FF ProfilePath: C:\Users\Black\AppData\Roaming\Mozilla\Firefox\Profiles\svyb1rvo.default
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_16_0_0_296.dll ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\HRY a PROGRAMY\VLC Player\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: DownloadHelper - C:\Users\Black\AppData\Roaming\Mozilla\Firefox\Profiles\svyb1rvo.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-11-27]
FF Extension: Adblock Plus - C:\Users\Black\AppData\Roaming\Mozilla\Firefox\Profiles\svyb1rvo.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-24]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-11-23]
StartMenuInternet: FIREFOX.EXE - C:\HRY a PROGRAMY\Mozilla Firefox\firefox.exe
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2014-11-23]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-11-23]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [291840 2013-04-29] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-11-23] (AVAST Software)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3192344 2014-11-23] (Avast Software)
S2 SkypeUpdate; C:\HRY a PROGRAMY\Skype\Updater\Updater.exe [315008 2014-04-03] (Skype Technologies)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [45184 2012-03-05] (Advanced Micro Devices)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-11-23] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [70384 2014-11-23] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-11-23] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-11-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787800 2014-11-23] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423784 2014-11-23] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [91496 2014-11-23] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206248 2014-11-23] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-11-23] (Disc Soft Ltd)
R0 giveio; C:\Windows\System32\giveio.sys [5248 1996-04-03] () [File not signed]
R0 speedfan; C:\Windows\System32\speedfan.sys [24184 2012-12-29] (Almico Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [218192 2014-11-23] (Avast Software)

==================== NetSvcs (Whitelisted) ===================


(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-30 21:05 - 2015-01-30 21:05 - 00008823 _____ () C:\Users\Black\Desktop\FRST.txt
2015-01-30 21:02 - 2015-01-30 21:05 - 00000000 ____D () C:\FRST
2015-01-30 20:59 - 2015-01-30 21:00 - 00000908 _____ () C:\Users\Black\Desktop\Nový textový dokument.txt
2015-01-30 20:57 - 2015-01-30 20:57 - 01121792 _____ (Farbar) C:\Users\Black\Desktop\FRST.exe
2015-01-30 20:54 - 2015-01-30 20:54 - 00000000 __SHD () C:\Users\Black\AppData\Local\EmieUserList
2015-01-30 20:54 - 2015-01-30 20:54 - 00000000 __SHD () C:\Users\Black\AppData\Local\EmieSiteList
2015-01-30 20:54 - 2015-01-30 20:54 - 00000000 __SHD () C:\Users\Black\AppData\Local\EmieBrowserModeList
2015-01-30 20:41 - 2015-01-30 20:41 - 00000197 _____ () C:\Windows\system32\2015-01-30-19-41-41.006-AvastVBoxSVC.exe-2504.log
2015-01-30 20:39 - 2015-01-30 20:39 - 00000056 _____ () C:\Windows\setupact.log
2015-01-30 20:39 - 2015-01-30 20:39 - 00000000 _____ () C:\Windows\setuperr.log
2015-01-30 20:38 - 2015-01-30 20:38 - 00000314 _____ () C:\Windows\PFRO.log
2015-01-30 20:34 - 2015-01-30 20:36 - 00000000 ____D () C:\AdwCleaner
2015-01-30 20:29 - 2015-01-30 20:29 - 19749376 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 12836864 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 04299264 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-01-30 20:29 - 2015-01-30 20:29 - 02277888 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 02052096 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-01-30 20:29 - 2015-01-30 20:29 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 01307136 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00684544 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2015-01-30 20:29 - 2015-01-30 20:29 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00501248 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00342200 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-01-30 20:29 - 2015-01-30 20:29 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2015-01-30 20:29 - 2015-01-30 20:29 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2015-01-30 20:29 - 2015-01-30 20:29 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2015-01-30 20:29 - 2015-01-30 20:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-01-30 20:28 - 2015-01-30 20:28 - 03969472 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-01-30 20:28 - 2015-01-30 20:28 - 03914176 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-01-30 20:28 - 2015-01-30 20:28 - 01294272 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2015-01-30 20:28 - 2015-01-30 20:28 - 01289096 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-01-30 20:28 - 2015-01-30 20:28 - 00640512 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-01-30 20:28 - 2015-01-30 20:28 - 00619520 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-01-30 20:28 - 2015-01-30 20:28 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-01-30 20:28 - 2015-01-30 20:28 - 00240496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2015-01-30 20:28 - 2015-01-30 20:28 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2015-01-30 20:28 - 2015-01-30 20:28 - 00187752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2015-01-30 20:28 - 2015-01-30 20:28 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-01-30 20:28 - 2015-01-30 20:28 - 00049152 _____ (Microsoft Corporation) C:\Windows\system32\taskhost.exe
2015-01-30 20:28 - 2015-01-30 20:28 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00293376 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00271360 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-01-30 20:27 - 2015-01-30 20:27 - 00169984 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-01-30 20:27 - 2015-01-30 20:27 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-01-30 20:25 - 2015-01-30 20:25 - 01505280 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2015-01-30 20:24 - 2015-01-30 20:34 - 00014993 _____ () C:\Windows\IE11_main.log
2015-01-30 20:20 - 2015-01-30 20:20 - 02194432 _____ () C:\Users\Black\Desktop\adwcleaner_4.109.exe
2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\rsit
2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\Program Files\trend micro
2015-01-30 13:54 - 2015-01-30 13:54 - 01107968 _____ () C:\Users\Black\Desktop\RSIT.exe
2015-01-30 01:26 - 2015-01-30 01:26 - 00701616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-01-30 01:26 - 2015-01-30 01:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-01-30 00:45 - 2015-01-30 00:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-01-30 00:45 - 2015-01-30 00:45 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-01-30 00:45 - 2015-01-30 00:44 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-01-30 00:44 - 2015-01-30 00:44 - 00000000 ____D () C:\Program Files\Java
2015-01-28 16:58 - 2015-01-28 16:58 - 00000197 _____ () C:\Windows\system32\2015-01-28-15-58-33.099-AvastVBoxSVC.exe-2232.log
2015-01-27 15:12 - 2015-01-27 15:12 - 00000197 _____ () C:\Windows\system32\2015-01-27-14-12-36.071-AvastVBoxSVC.exe-2572.log
2015-01-26 15:14 - 2015-01-26 15:14 - 00000197 _____ () C:\Windows\system32\2015-01-26-14-14-45.054-AvastVBoxSVC.exe-2052.log
2015-01-25 17:39 - 2015-01-25 17:40 - 00000197 _____ () C:\Windows\system32\2015-01-25-16-39-48.057-AvastVBoxSVC.exe-2812.log
2015-01-23 19:01 - 2015-01-23 19:01 - 00000197 _____ () C:\Windows\system32\2015-01-23-18-01-47.082-AvastVBoxSVC.exe-2656.log
2015-01-23 14:16 - 2015-01-23 14:17 - 00000197 _____ () C:\Windows\system32\2015-01-23-13-16-48.059-AvastVBoxSVC.exe-2744.log
2015-01-22 03:41 - 2015-01-22 03:41 - 00000000 ____D () C:\ProgramData\Sun
2015-01-22 03:39 - 2015-01-30 00:45 - 00000000 ____D () C:\ProgramData\Oracle
2015-01-21 16:08 - 2015-01-21 16:08 - 00000197 _____ () C:\Windows\system32\2015-01-21-15-08-42.097-AvastVBoxSVC.exe-2432.log
2015-01-19 12:53 - 2015-01-19 12:54 - 00000197 _____ () C:\Windows\system32\2015-01-19-11-53-56.044-AvastVBoxSVC.exe-3048.log
2015-01-18 12:36 - 2015-01-18 12:36 - 00000197 _____ () C:\Windows\system32\2015-01-18-11-36-12.018-AvastVBoxSVC.exe-2304.log
2015-01-17 17:35 - 2015-01-17 17:35 - 00000197 _____ () C:\Windows\system32\2015-01-17-16-35-41.058-AvastVBoxSVC.exe-2256.log
2015-01-16 18:36 - 2015-01-16 18:36 - 00000247 _____ () C:\Windows\system32\2015-01-16-17-36-55.047-aswFe.exe-5104.log
2015-01-16 18:32 - 2015-01-16 18:36 - 00000247 _____ () C:\Windows\system32\2015-01-16-17-32-37.029-aswFe.exe-5884.log
2015-01-16 14:18 - 2015-01-16 14:18 - 00000197 _____ () C:\Windows\system32\2015-01-16-13-18-23.015-AvastVBoxSVC.exe-2184.log
2015-01-15 18:42 - 2015-01-15 18:42 - 00000197 _____ () C:\Windows\system32\2015-01-15-17-42-04.052-AvastVBoxSVC.exe-2108.log
2015-01-14 13:00 - 2015-01-14 13:01 - 00000197 _____ () C:\Windows\system32\2015-01-14-12-00-55.023-AvastVBoxSVC.exe-1436.log
2015-01-13 00:16 - 2015-01-13 00:16 - 00000736 _____ () C:\Users\Black\Desktop\p3.lnk
2015-01-12 14:49 - 2015-01-12 14:53 - 00000247 _____ () C:\Windows\system32\2015-01-12-13-49-27.002-aswFe.exe-5044.log
2015-01-12 14:49 - 2015-01-12 14:49 - 00000197 _____ () C:\Windows\system32\2015-01-12-13-49-16.030-AvastVBoxSVC.exe-4384.log
2015-01-12 02:42 - 2015-01-12 02:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2015-01-12 02:41 - 2015-01-12 02:41 - 00000000 ____D () C:\Users\Public\Documents\Baidu
2015-01-12 02:41 - 2015-01-12 02:41 - 00000000 ____D () C:\FFOutput
2015-01-12 02:40 - 2015-01-12 02:40 - 00000000 ____D () C:\Users\Black\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FormatFactory
2015-01-11 21:56 - 2015-01-11 22:01 - 00002471 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-01-11 21:56 - 2015-01-11 21:56 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-01-11 21:56 - 2015-01-11 21:56 - 00000000 ____D () C:\Program Files\Adobe
2015-01-11 21:55 - 2015-01-11 21:58 - 00000000 ____D () C:\ProgramData\Adobe
2015-01-10 20:11 - 2015-01-10 20:11 - 00021092 _____ () C:\Users\Black\Documents\cd_10.1.015.dxp
2015-01-10 17:45 - 2015-01-10 17:45 - 00000197 _____ () C:\Windows\system32\2015-01-10-16-45-13.032-AvastVBoxSVC.exe-2144.log
2015-01-07 11:27 - 2015-01-07 11:27 - 00000197 _____ () C:\Windows\system32\2015-01-07-10-27-01.039-AvastVBoxSVC.exe-2368.log
2015-01-06 14:11 - 2015-01-06 14:11 - 00000247 _____ () C:\Windows\system32\2015-01-06-13-11-09.090-aswFe.exe-5036.log
2015-01-06 14:07 - 2015-01-06 14:11 - 00000247 _____ () C:\Windows\system32\2015-01-06-13-07-13.028-aswFe.exe-4264.log
2015-01-05 11:49 - 2015-01-05 11:49 - 00000197 _____ () C:\Windows\system32\2015-01-05-10-49-41.017-AvastVBoxSVC.exe-2452.log
2015-01-05 11:32 - 2015-01-05 11:32 - 00000197 _____ () C:\Windows\system32\2015-01-05-10-32-16.028-AvastVBoxSVC.exe-1692.log
2015-01-03 12:41 - 2015-01-03 12:41 - 00000197 _____ () C:\Windows\system32\2015-01-03-11-41-24.015-AvastVBoxSVC.exe-2372.log
2015-01-02 16:19 - 2015-01-02 16:19 - 00000197 _____ () C:\Windows\system32\2015-01-02-15-19-19.096-AvastVBoxSVC.exe-2224.log
2014-12-31 19:42 - 2014-12-31 19:42 - 00000919 _____ () C:\Users\Black\Desktop\SETTLERS ONLINE.lnk
2014-12-31 15:53 - 2014-12-31 15:53 - 00000197 _____ () C:\Windows\system32\2014-12-31-14-53-49.009-AvastVBoxSVC.exe-2696.log
2014-12-31 15:41 - 2014-12-31 15:41 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Combined Community Codec Pack
2014-12-31 15:15 - 2015-01-30 03:26 - 00000000 ____D () C:\Users\Black\AppData\Roaming\vlc
2014-12-31 15:14 - 2014-12-31 15:14 - 00000855 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-12-31 15:14 - 2014-12-31 15:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2014-12-31 14:55 - 2014-12-31 14:56 - 00000197 _____ () C:\Windows\system32\2014-12-31-13-55-49.000-AvastVBoxSVC.exe-2136.log

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-01-30 21:04 - 2014-11-23 22:21 - 00000000 ____D () C:\Users\Black\AppData\Roaming\uTorrent
2015-01-30 20:45 - 2009-07-14 05:34 - 00021088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-30 20:45 - 2009-07-14 05:34 - 00021088 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-30 20:43 - 2010-11-20 22:01 - 01575230 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-01-30 20:42 - 2014-11-23 19:19 - 00849851 _____ () C:\Windows\WindowsUpdate.log
2015-01-30 20:39 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-30 20:39 - 2009-07-14 05:33 - 00267216 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-01-30 15:49 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2015-01-30 00:41 - 2014-11-23 19:59 - 00000000 ___RD () C:\HRY a PROGRAMY
2015-01-29 23:10 - 2014-12-26 23:58 - 00000023 _____ () C:\Windows\BlendSettings.ini
2015-01-26 20:49 - 2014-12-12 19:05 - 00000000 ____D () C:\Users\Black\AppData\Roaming\Skype
2015-01-11 21:57 - 2014-11-24 00:09 - 00000000 ____D () C:\Users\Black\AppData\Roaming\Adobe
2015-01-11 21:57 - 2014-11-24 00:08 - 00000000 ____D () C:\Users\Black\AppData\Local\Adobe
2015-01-11 21:51 - 2014-11-23 23:05 - 00001328 _____ () C:\Users\Black\Desktop\Záloha (H).lnk
2015-01-10 22:47 - 2014-11-23 20:51 - 00000000 ___RD () C:\Obrázky
2015-01-10 18:46 - 2014-11-28 00:29 - 00000000 ___RD () C:\FILM +
2014-12-31 15:23 - 2014-12-10 01:49 - 00015360 _____ () C:\Users\Black\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

==================== Files in the root of some directories =======

2014-12-10 01:49 - 2014-12-31 15:23 - 0015360 _____ () C:\Users\Black\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-23 20:44 - 2014-12-24 05:25 - 0007619 _____ () C:\Users\Black\AppData\Local\resmon.resmoncfg

Some content of TEMP:
====================
C:\Users\Black\AppData\Local\Temp\Quarantine.exe
C:\Users\Black\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-01-25 18:02

==================== End Of Log ============================

Vypnete trvale Windows Defender - http://windows.microsoft.com/cs-cz/wind ... =windows-7

Pred zalohou trvale pripojenou k PC pamatujte, ze v pripade nakazeni ransomwarem (kryptovir, ktery po spusteni zasifruje temer vsechny soubory na disku) Vam tyto zalohy budou k nicemu

• Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
• ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
• znovu spustte FRST a kliknete na Fix
• po restartu na Vas vyskoci fixlog (pripadne bude ulozen na Plose), jehoz obsah mi vlozte do pristi odpovedi

  Kód: Vybrat vše

  Start
  CloseProcesses:
  HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\...\MountPoints2: {ceb6c1dd-7343-11e4-ae48-0021859dfb59} - E:\OblivionLauncher.exe
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKU\S-1-5-21-1471422611-3306088640-2433698573-1000 -> {F90B226D-297C-4112-B35D-03DB85ED0B6E} URL = http://search.seznam.cz/?q={searchTerms}&sourceid=Searchmodule_2
  FF NetworkProxy: "type", 4
  2015-01-30 20:34 - 2015-01-30 20:36 - 00000000 ____D () C:\AdwCleaner
  2015-01-30 20:20 - 2015-01-30 20:20 - 02194432 _____ () C:\Users\Black\Desktop\adwcleaner_4.109.exe
  2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\rsit
  2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\Program Files\trend micro
  2015-01-30 13:54 - 2015-01-30 13:54 - 01107968 _____ () C:\Users\Black\Desktop\RSIT.exe
  
  Task: {ABCB7C84-9548-47A8-9D6B-E211DE505DC6} - System32\Tasks\{A1634E3C-D6B1-4616-933B-FB23C6E1177E} => C:\Program Files\Alwil Software\Avast4\ashAvast.exe
  Task: {BF79A2DF-1795-44D6-8B07-8FB6E6125098} - System32\Tasks\{2290E959-DBA8-4BD7-BCE5-2966098945C1} => pcalua.exe -a C:\Users\Black\Desktop\rzr-m2u4.exe -d C:\Users\Black\Desktop
  Hosts:
  EmptyTemp:
  End

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-01-2015 01
Ran by Black at 2015-01-30 21:59:25 Run:1
Running from C:\Users\Black\Desktop
Loaded Profiles: Black (Available profiles: Black)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\...\MountPoints2: {ceb6c1dd-7343-11e4-ae48-0021859dfb59} - E:\OblivionLauncher.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1471422611-3306088640-2433698573-1000 -> {F90B226D-297C-4112-B35D-03DB85ED0B6E} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_2
FF NetworkProxy: "type", 4
2015-01-30 20:34 - 2015-01-30 20:36 - 00000000 ____D () C:\AdwCleaner
2015-01-30 20:20 - 2015-01-30 20:20 - 02194432 _____ () C:\Users\Black\Desktop\adwcleaner_4.109.exe
2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\rsit
2015-01-30 14:00 - 2015-01-30 14:00 - 00000000 ____D () C:\Program Files\trend micro
2015-01-30 13:54 - 2015-01-30 13:54 - 01107968 _____ () C:\Users\Black\Desktop\RSIT.exe

Task: {ABCB7C84-9548-47A8-9D6B-E211DE505DC6} - System32\Tasks\{A1634E3C-D6B1-4616-933B-FB23C6E1177E} => C:\Program Files\Alwil Software\Avast4\ashAvast.exe
Task: {BF79A2DF-1795-44D6-8B07-8FB6E6125098} - System32\Tasks\{2290E959-DBA8-4BD7-BCE5-2966098945C1} => pcalua.exe -a C:\Users\Black\Desktop\rzr-m2u4.exe -d C:\Users\Black\Desktop
Hosts:
EmptyTemp:
End



*****************

Processes closed successfully.
"HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ceb6c1dd-7343-11e4-ae48-0021859dfb59}" => Key deleted successfully.
HKCR\CLSID\{ceb6c1dd-7343-11e4-ae48-0021859dfb59} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-1471422611-3306088640-2433698573-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{F90B226D-297C-4112-B35D-03DB85ED0B6E}" => Key deleted successfully.
HKCR\CLSID\{F90B226D-297C-4112-B35D-03DB85ED0B6E} => Key not found.
Firefox Proxy settings were reset.
C:\AdwCleaner => Moved successfully.
C:\Users\Black\Desktop\adwcleaner_4.109.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Black\Desktop\RSIT.exe => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{ABCB7C84-9548-47A8-9D6B-E211DE505DC6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABCB7C84-9548-47A8-9D6B-E211DE505DC6}" => Key deleted successfully.
C:\Windows\System32\Tasks\{A1634E3C-D6B1-4616-933B-FB23C6E1177E} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{A1634E3C-D6B1-4616-933B-FB23C6E1177E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF79A2DF-1795-44D6-8B07-8FB6E6125098}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF79A2DF-1795-44D6-8B07-8FB6E6125098}" => Key deleted successfully.
C:\Windows\System32\Tasks\{2290E959-DBA8-4BD7-BCE5-2966098945C1} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2290E959-DBA8-4BD7-BCE5-2966098945C1}" => Key deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 428.3 MB temporary data.


The system needed a reboot.

==== End of Fixlog 21:59:46 ====

Timto byl PC vycisten...
Mate opravdu nainstalovane 2 verze Firefoxu... zazalohujte zalozky a hesla pomoci http://www.stahuj.centrum.cz/utility_a_ ... mozbackup/ (jen pro jistotu) a starsi verzi odinstalujte.

Jeste uklidime.

• Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
• Oznacte jen moznost "Remove disinfection tools"
• kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

No jo, vážně jsem tam měl 2 verze Firefoxu....tak už je tam jen 1....Děkuju za pomoc.

Nemate zac, rad jsem pomohl


Mejte se krasne a treba zase nekdy