Stránka 1 z 2

iexplore.exe a ctfmon

Napsal: 02 bře 2015 07:59
od Nakashi1
http://forum.viry.cz/viewtopic.php?f=13&t=143300

Toto téma bylo zamčeno, tak jsem musel založit nové.
Bohužel jsem právě zjistil, že problém přetrvává a znovu se mi objevilo to samé...třikrát bezdůvodně iexplore.exe...jeden si bere 250MB RAMky a brzdí systém. Napadá mě to už jen odinstalovat. IE je pro mě virus.

Re: iexplore.exe a ctfmon

Napsal: 02 bře 2015 08:06
od JaRon
ahoj,
no v prvom rade bude treba upratat :)
z minuleho logu:
Velikost slozky "C:\Users\Milan\Desktop" je 131299 MB.
tato velkost by nemala prekrocit 300MB :!:

Re: iexplore.exe a ctfmon

Napsal: 02 bře 2015 12:01
od Nakashi1
to už je vyřešeno.

Re: iexplore.exe a ctfmon

Napsal: 02 bře 2015 12:08
od JaRon
vloz aktualny log FRST

Re: iexplore.exe a ctfmon

Napsal: 07 bře 2015 07:19
od Nakashi1
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-03-2015 01
Ran by Milan (administrator) on MILAN-PC on 07-03-2015 07:07:59
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available profiles: Milan)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
(Acer Group) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [968272 2010-06-22] (Dritek System Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-26] (AVAST Software)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-606871128-3753375214-2841838745-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx? ... 5r4732s296
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACEW
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {0CA3A956-A72B-47B1-8FDA-1A5250A58CB7} URL = http://www.webhledani.cz/results.aspx?i ... earchTerms}
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... EW_csCZ411
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Hosts: 127.0.0.1 idnet.ua-corp.com
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default
FF Homepage: about:home
FF NetworkProxy: "http", "216.155.139.115"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-606871128-3753375214-2841838745-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Milan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\searchplugins\startpage-https.xml
FF Extension: DownloadHelper - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d} [2014-09-08]
FF Extension: Firebug - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\firebug@software.joehewitt.com.xpi [2015-01-25]
FF Extension: MEGA - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\firefox@mega.co.nz.xpi [2014-08-20]
FF Extension: FlashGot - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{19503e42-ca3c-4c27-b1e2-9cdb2170ee34}.xpi [2014-06-29]
FF Extension: Adblock Plus - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-26]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-26] (AVAST Software)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-26] ()
R1 HMFAxCore5decdc700443adec5f3e84408e3098ff; C:\Windows\HMFAxCore5decdc700443adec5f3e84408e3098ff.sys [115272 2014-06-18] (Eltima Software)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-02-26] (Malwarebytes Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-07 07:07 - 2015-03-07 07:10 - 00014062 _____ () C:\Users\Milan\Desktop\FRST.txt
2015-03-07 07:06 - 2015-03-07 07:06 - 02092544 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2015-03-05 23:10 - 2010-05-31 09:53 - 372460726 _____ () C:\Users\Milan\Desktop\Vzestup penez 2.avi
2015-03-05 23:09 - 2010-05-31 09:24 - 369397716 _____ () C:\Users\Milan\Desktop\Vzestup penez 1.avi
2015-03-05 10:47 - 2015-03-05 11:07 - 230479445 _____ () C:\Users\Milan\Downloads\SS-Kirsten_Plant(casting).wmv
2015-03-05 10:14 - 2015-03-05 10:14 - 45489700 _____ () C:\Users\Milan\Downloads\18-leta-kozata-amaterka.avi
2015-03-04 12:28 - 2015-03-04 12:50 - 98911475 _____ () C:\Users\Milan\Downloads\proslulá 35 letá maserka.mp4
2015-03-04 08:17 - 2015-03-04 08:19 - 107301954 _____ () C:\Users\Milan\Downloads\kveta horváthová 270115.ts 720p.mp4
2015-03-04 08:08 - 2015-03-04 08:35 - 117517513 _____ () C:\Users\Milan\Downloads\cekse osmnactky.mp4
2015-03-04 08:08 - 2015-03-04 08:34 - 113321417 _____ () C:\Users\Milan\Downloads\ogar vysuka 2 nadrbany devky.mp4
2015-03-04 08:07 - 2015-03-04 08:18 - 45265836 _____ () C:\Users\Milan\Downloads\orgasmum prekrasne slecny.mp4
2015-03-04 08:00 - 2015-03-04 08:06 - 644687313 _____ () C:\Users\Milan\Downloads\maruska-z-prahy.avi
2015-03-03 12:26 - 2015-03-03 12:27 - 26636392 _____ () C:\Users\Milan\Downloads\Renata_Czadernova_567.ts 720p.mp4
2015-03-03 12:25 - 2015-03-03 12:51 - 382999052 _____ () C:\Users\Milan\Downloads\Renata_Czadernova_568.ts
2015-03-03 12:25 - 2015-03-03 12:30 - 136903565 _____ () C:\Users\Milan\Downloads\Renata_Czadernova_568.ts 720p.mp4
2015-03-03 11:56 - 2015-03-03 11:56 - 00000026 _____ () C:\Users\Milan\Desktop\tasks.txt
2015-03-02 09:34 - 2015-03-02 10:03 - 126599740 _____ () C:\Users\Milan\Downloads\prepychova ceska 25.mp4
2015-03-02 09:27 - 2015-03-02 11:49 - 941551962 _____ () C:\Users\Milan\Downloads\Rychlyprachy.cz - 82. díl (krásná MILFka) 25.02.2015.mp4
2015-03-02 09:22 - 2015-03-02 10:03 - 180361015 _____ () C:\Users\Milan\Downloads\lucka fakeagent.mp4
2015-03-02 09:19 - 2015-03-02 09:29 - 130650521 _____ () C:\Users\Milan\Downloads\iveta kořínková 170215.ts 720p.mp4
2015-03-02 08:22 - 2015-03-02 08:22 - 00000137 _____ () C:\Users\Milan\Desktop\bet.txt
2015-03-02 00:24 - 2015-03-02 00:45 - 367925964 _____ () C:\Users\Milan\Downloads\Adriana_Polakova_035.ts
2015-03-02 00:22 - 2015-03-02 00:23 - 26341271 _____ () C:\Users\Milan\Downloads\Adriana_Polakova_022.ts 720p.mp4
2015-03-01 23:07 - 2015-03-01 23:10 - 18525235 _____ () C:\Users\Milan\Downloads\xvideos.com_3fd3249c98e109ce8a55364071008580.flv
2015-03-01 23:06 - 2015-03-01 23:13 - 35216354 _____ () C:\Users\Milan\Downloads\xvideos.com_81264a1493a99e5801fee0a3889afdfa.flv
2015-03-01 23:02 - 2015-03-01 23:16 - 88924214 _____ () C:\Users\Milan\Downloads\xvideos.com_855b37e167833e40c56798e19dd0d04e.flv
2015-03-01 23:01 - 2015-03-01 23:16 - 91085410 _____ () C:\Users\Milan\Downloads\xvideos.com_44d38a9e649d4bcf39d43396db282f79.flv
2015-03-01 23:01 - 2015-03-01 23:06 - 22675677 _____ () C:\Users\Milan\Downloads\xvideos.com_af4c4514f207726cabdeb342a3617c07.flv
2015-03-01 23:00 - 2015-03-01 23:07 - 29005977 _____ () C:\Users\Milan\Downloads\xvideos.com_2de7c1ea8cabf78d25b29c07e507c8b4.flv
2015-03-01 23:00 - 2015-03-01 23:02 - 17629824 _____ () C:\Users\Milan\Downloads\xvideos.com_398d5801a25c1633fc0270dbb370007b.flv
2015-03-01 22:59 - 2015-03-01 23:27 - 162095748 _____ () C:\Users\Milan\Downloads\xvideos.com_f6fcdc31b964a194bc89908711c3a3f4.flv
2015-03-01 22:49 - 2015-03-01 22:51 - 106826680 _____ () C:\Users\Milan\Downloads\adriana poláková 080115.ts 720p.mp4
2015-03-01 22:48 - 2015-03-01 22:48 - 21041492 _____ () C:\Users\Milan\Downloads\Adriana_Polakova_20150110_201007.ts 720p.mp4
2015-03-01 22:46 - 2015-03-01 22:49 - 127478732 _____ () C:\Users\Milan\Downloads\adriana poláková 021013.ts 720p.mp4
2015-03-01 22:46 - 2015-03-01 22:46 - 18119341 _____ () C:\Users\Milan\Downloads\adriana poláková 041012.ts 720p.mp4
2015-03-01 20:24 - 2015-03-01 20:27 - 67681950 _____ () C:\Users\Milan\Downloads\Markiza_HD_Teleráno20150213.ts 720p.mp4
2015-03-01 20:23 - 2015-03-01 20:26 - 44564480 _____ () C:\Users\Milan\Downloads\14.02.2015-20_11-v.Joined.TS4
2015-03-01 19:48 - 2015-03-01 19:48 - 00000000 _____ () C:\Windows\SysWOW64\debug.log
2015-03-01 19:30 - 2015-03-01 23:57 - 00000000 ____D () C:\Loc
2015-03-01 16:52 - 2015-03-01 16:53 - 02126848 _____ () C:\Users\Milan\Desktop\adwcleaner_4.111.exe
2015-03-01 14:21 - 2015-03-01 19:08 - 00007686 _____ () C:\Users\Milan\Desktop\Addition.rar
2015-03-01 14:06 - 2015-03-01 14:07 - 00112640 _____ (forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
2015-03-01 13:50 - 2015-03-01 13:50 - 00000556 _____ () C:\Windows\PFRO.log
2015-03-01 13:48 - 2015-03-01 13:48 - 00000042 _____ () C:\Users\Milan\Documents\nw.txt
2015-02-26 19:11 - 2015-02-26 19:11 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVAST Software
2015-02-26 19:09 - 2015-02-26 19:09 - 00001933 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-26 19:09 - 2015-02-26 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-26 19:08 - 2015-03-05 22:35 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-26 19:07 - 2015-02-26 19:09 - 00087912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-02-26 19:07 - 2015-02-26 19:08 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-26 19:07 - 2015-02-26 19:07 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-26 19:06 - 2015-02-26 19:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-26 19:04 - 2015-02-26 19:04 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-25 12:17 - 2015-02-25 12:17 - 00000587 _____ () C:\Users\Milan\Documents\fix.cmd
2015-02-25 10:53 - 2015-03-06 11:14 - 00001624 _____ () C:\Windows\setupact.log
2015-02-25 10:53 - 2015-02-25 10:53 - 00000000 _____ () C:\Windows\setuperr.log
2015-02-23 13:33 - 2015-02-23 13:33 - 00000000 ____D () C:\Users\Milan\Documents\eRightSoft
2015-02-23 13:32 - 2015-02-23 13:33 - 00004360 _____ () C:\Windows\System32\Tasks\HHMQ
2015-02-23 13:31 - 2015-02-23 13:32 - 00004710 _____ () C:\Windows\System32\Tasks\LMYIDGO
2015-02-23 13:30 - 2015-02-23 13:30 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\tricomfi
2015-02-23 13:29 - 2014-03-07 10:03 - 03109520 ____N (FFmpeg Project) C:\Windows\SysWOW64\avcodec-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00550032 ____N (FFmpeg Project) C:\Windows\SysWOW64\avformat-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00313520 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLvideo.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00203408 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLsplit.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00181392 ____N (FFmpeg Project) C:\Windows\SysWOW64\avutil-lav-52.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00122512 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLaudio.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00118416 ____N (FFmpeg Project) C:\Windows\SysWOW64\swscale-lav-2.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00109712 ____N () C:\Windows\SysWOW64\libbluray.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00098960 ____N (FFmpeg Project) C:\Windows\SysWOW64\avfilter-lav-4.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00059536 ____N (FFmpeg Project) C:\Windows\SysWOW64\avresample-lav-1.dll
2015-02-23 13:29 - 2012-10-05 18:54 - 00188416 ____N () C:\Windows\SysWOW64\winDCE32.dll
2015-02-23 13:29 - 2011-06-14 19:05 - 00121344 ____N () C:\Windows\SysWOW64\TAKDSDecoder.ax
2015-02-23 13:29 - 2011-02-11 09:26 - 00112128 ____N () C:\Windows\SysWOW64\OptimFROG.dll
2015-02-23 13:29 - 2010-01-06 23:00 - 00107520 ____N () C:\Windows\SysWOW64\TAKDSDecoder.dll
2015-02-23 13:29 - 2009-08-10 22:00 - 00352768 ____N () C:\Windows\SysWOW64\ac3DX.ax
2015-02-23 13:29 - 2005-02-22 16:55 - 00081920 ____N () C:\Windows\SysWOW64\aac_parser.ax
2015-02-23 13:29 - 2004-10-10 08:50 - 00278528 ____N (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2015-02-23 13:29 - 2004-07-02 16:33 - 00327749 ____N (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll
2015-02-23 13:29 - 2004-04-27 15:03 - 00017408 ____N (RadLight) C:\Windows\SysWOW64\RLOFRDec.ax
2015-02-23 12:50 - 2015-02-24 16:29 - 00001707 _____ () C:\Users\Public\Desktop\MKVToolNix GUI preview.lnk
2015-02-23 12:50 - 2015-02-24 16:29 - 00001624 _____ () C:\Users\Public\Desktop\mkvmerge GUI.lnk
2015-02-23 12:50 - 2015-02-23 12:50 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\mkvtoolnix
2015-02-23 12:49 - 2015-02-24 17:59 - 00000000 ____D () C:\Program Files\MKVToolNix
2015-02-23 12:49 - 2015-02-23 12:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MKVToolNix
2015-02-23 12:45 - 2015-02-23 12:45 - 00000000 ____D () C:\Users\Milan\AppData\Local\Pinnacle
2015-02-23 12:44 - 2015-02-23 12:44 - 00000000 ____D () C:\Users\Milan\Documents\Pinnacle Studio
2015-02-23 12:34 - 2015-02-23 12:34 - 00000000 ____D () C:\ProgramData\Pinnacle Studio Ultimate Collection
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\ProgramData\Pinnacle
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\Program Files (x86)\Pinnacle
2015-02-22 11:06 - 2015-02-22 11:09 - 248903724 _____ () C:\Users\Milan\Documents\mp41547788.mp4SIGV=2&IS=0&ET=1424608528&CIP=194.228.11.180&KO=1&KN=1&US=fd10d84065713fd52c1df72ce7be9c823c87424e.flv
2015-02-22 10:54 - 2015-02-22 10:56 - 174142813 _____ () C:\Users\Milan\Documents\2015-02-21_volejte_novu-volejte_novu-c136889-np-mp4-lq.mp4SIGV=2&IS=0&ET=1424607772&CIP=194.228.11.180&KO=1&KN=1&US=e066e7fbf8b9.flv
2015-02-22 01:47 - 2015-02-22 01:47 - 00060846 _____ () C:\Users\Milan\Documents\200.txt
2015-02-21 15:03 - 2015-02-21 15:10 - 04613332 _____ () C:\Users\Milan\bk mux2.ts
2015-02-14 15:21 - 2015-02-14 15:21 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Unity
2015-02-14 15:09 - 2015-02-16 14:58 - 00000000 ____D () C:\Users\Milan\AppData\Local\Unity
2015-02-08 07:13 - 2015-02-08 07:13 - 00000306 _____ () C:\Users\Milan\Documents\FX 8350.txt
2015-02-06 10:03 - 2015-02-06 10:03 - 00000045 _____ () C:\Users\Milan\Documents\fx 8370.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-07 07:08 - 2014-06-16 16:12 - 00000000 ____D () C:\FRST
2015-03-07 07:05 - 2014-06-17 16:48 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\uTorrent
2015-03-07 06:43 - 2010-09-15 21:00 - 01771641 _____ () C:\Windows\WindowsUpdate.log
2015-03-07 06:05 - 2014-06-18 07:05 - 00000000 ____D () C:\The KMPlayer
2015-03-06 11:24 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-06 11:24 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-06 11:14 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-05 23:12 - 2013-09-29 11:56 - 00930816 ___SH () C:\Users\Milan\Desktop\Thumbs.db
2015-03-05 10:41 - 2014-06-22 02:08 - 00000000 ____D () C:\Users\Milan\Desktop\Tors
2015-03-02 09:59 - 2014-06-22 02:09 - 00000000 ___HD () C:\Users\Milan\Desktop\Downs
2015-03-02 08:26 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther
2015-03-02 08:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-01 18:11 - 2014-06-18 06:17 - 00000000 ____D () C:\AdwCleaner
2015-02-28 18:05 - 2014-06-17 18:45 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\vlc
2015-02-27 18:52 - 2014-12-27 13:32 - 00000081 _____ () C:\out.txt
2015-02-27 18:39 - 2014-11-15 17:36 - 00000000 ____D () C:\Users\Milan\Desktop\Tor Browser
2015-02-27 06:47 - 2010-09-15 21:46 - 00671748 _____ () C:\Windows\system32\perfh005.dat
2015-02-27 06:47 - 2010-09-15 21:46 - 00142974 _____ () C:\Windows\system32\perfc005.dat
2015-02-27 06:47 - 2009-07-14 06:13 - 01592446 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-26 19:30 - 2014-08-03 10:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-02-26 19:04 - 2014-06-15 18:11 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-25 10:58 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-25 10:53 - 2010-12-23 18:41 - 00000000 ____D () C:\Users\Milan
2015-02-25 10:52 - 2014-09-13 20:29 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\.ACEStream
2015-02-25 10:52 - 2014-07-27 08:10 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Ulozto File Manager
2015-02-25 10:52 - 2014-06-28 14:26 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Capcom
2015-02-25 10:52 - 2014-06-17 20:05 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\PowerISO
2015-02-25 10:52 - 2011-01-27 12:04 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVG9
2015-02-25 10:51 - 2014-11-03 17:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-02-25 10:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-25 10:29 - 2015-01-25 21:02 - 00018432 ___SH () C:\Users\Milan\Thumbs.db
2015-02-25 10:21 - 2010-12-26 10:14 - 00000000 ____D () C:\Users\Milan\AppData\Local\CrashDumps
2015-02-25 07:59 - 2015-01-17 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-02-23 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources
2015-02-23 13:41 - 2009-07-14 05:45 - 05145680 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-23 12:52 - 2015-01-18 15:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cuttermaran
2015-02-23 12:52 - 2015-01-18 15:29 - 00000000 ____D () C:\Program Files (x86)\Cuttermaran
2015-02-23 12:43 - 2010-12-23 18:41 - 00148208 _____ () C:\Users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-23 12:35 - 2012-08-12 20:26 - 00000000 ____D () C:\Users\Milan\AppData\Local\Downloaded Installations
2015-02-22 10:52 - 2014-08-10 11:17 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\YouTube Downloader
2015-02-21 15:06 - 2014-06-18 14:57 - 00000568 ___SH () C:\Windows\hlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-02-21 15:06 - 2014-06-18 14:57 - 00000138 ___SH () C:\Windows\wlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-02-21 15:06 - 2014-06-18 14:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-02-16 14:58 - 2014-07-31 13:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-02-15 11:58 - 2014-12-01 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-02-14 10:16 - 2014-12-28 04:05 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2015-02-10 11:51 - 2015-02-01 17:46 - 00000400 _____ () C:\Users\Milan\Documents\i7 5930K.txt
2015-02-09 02:57 - 2014-10-04 09:52 - 00022016 ___SH () C:\Users\Milan\Documents\Thumbs.db
2015-02-07 12:30 - 2014-08-16 23:36 - 00000000 ____D () C:\Users\Milan\AppData\Local\Adobe
2015-02-07 12:29 - 2012-07-01 09:58 - 00701616 ____N (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-02-07 12:29 - 2012-02-15 18:48 - 00071344 ____N (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-02-06 13:49 - 2014-06-18 18:27 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Youtube Downloader HD

==================== Files in the root of some directories =======

2014-09-18 22:34 - 2014-09-18 22:34 - 0000037 ___SH () C:\Users\Milan\AppData\Local\69ff07055291669bb2b218.72821112
2014-07-10 06:14 - 2014-07-10 06:14 - 0007670 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2013-10-05 15:11 - 2013-10-05 15:11 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-06-18 14:57 - 2014-06-18 14:57 - 0000072 _____ () C:\ProgramData\flfconfig.ini

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Milan\Desktop" je 97364 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk
C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: iexplore.exe a ctfmon

Napsal: 07 bře 2015 10:04
od Nakashi1
Našel sem pomocí Ccleaneru tyhle dvě naplánované úlohy, které mi připadají jako svinstvo:

HHMQ C:\Users\Milan\AppData\Roaming\HHMQ.exe /infocmdline=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

LMYIDGO C:\Users\Milan\AppData\Roaming\LMYIDGO.exe /infocmdline=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


Soubory ovšem na dané cestě nejsou k zobrazení v exploreru ani total commanderu.

Re: iexplore.exe a ctfmon

Napsal: 08 bře 2015 09:51
od Nakashi1
Zdravím. Budeme pokračovat?

Re: iexplore.exe a ctfmon

Napsal: 08 bře 2015 16:48
od cernohous13
Ahoj, kolega si užívá víkend tak si dovolím vstup :oops:
JaRon píše:ahoj,
Velikost slozky "C:\Users\Milan\Desktop" je 131299 MB.
tato velkost by nemala prekrocit 300MB :!:
Nakashi1 píše:to už je vyřešeno.
Velikost slozky "C:\Users\Milan\Desktop" je 97364 MB. :?:
Soubory přesuň a na ploše nech jen zástupce

:???: Co ti brání v odstranění těch úloh
C:\Windows\System32\Tasks\HHMQ
C:\Windows\System32\Tasks\LMYIDGO

Re: iexplore.exe a ctfmon

Napsal: 08 bře 2015 17:47
od Nakashi1
Díky za odpověď a ochotu. Tu složku sem už přehodil do kmenového adresáře.

S těma úlohama sem čekal, až mi někdo napíše. Smazal sem je pomocí Ccleaneru.
Ještě sem si tam teď všiml téhle, kterou sem vypnul:
Task CreateChoiceProcessTask Microsoft Corporation C:\Windows\System32\browserchoice.exe /launch

Re: iexplore.exe a ctfmon

Napsal: 08 bře 2015 18:15
od JaRon
ak mame problem velkosti plochy vyrieseny, doporucujem prescanovat PC s AVPTool
a ak nie su nejake problemy - hotovo :)

Re: iexplore.exe a ctfmon

Napsal: 14 bře 2015 09:44
od Nakashi1
Zdravím. Provedl jsem scan AVPTool, ale jediné, co objevil byl FRSTLauncher.exe =)
Nicméně problém stále zůstává.

Re: iexplore.exe a ctfmon

Napsal: 16 bře 2015 09:10
od JaRon
skus popisat 2-3 vetami problem, uz sa v tom stracam
+ priloz aktualny log FRST

Re: iexplore.exe a ctfmon

Napsal: 19 bře 2015 16:46
od Nakashi1
Podstata problému stále spočívá v tom, že najednou je comp zpožděný a když zkoumám, co dělá, tak ve správci úloh naleznu 3krát bezdůvodně spuštěný iexplore.exe a jednou ctfmon.exe, který se předtím nespouštěl. To, když manuálně povypínám, tak vše běží asi tak, jak má, než se za nějakou dobu opět toto svinstvo znovu spustí a donutí mě opakovat stejný postup.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Milan (administrator) on MILAN-PC on 19-03-2015 16:39:17
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available profiles: Milan)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
(Acer Group) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nodus Technologies s.r.o.) C:\Program Files (x86)\Ulozto File Manager\ufm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [968272 2010-06-22] (Dritek System Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-26] (AVAST Software)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\2bbd63bd-1554-46f8-ae45-db48116a3947.exe [183232 2015-03-17] (AVAST Software)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKU\S-1-5-21-606871128-3753375214-2841838745-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.emachines.com/rdr.aspx? ... 5r4732s296
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ACEW
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {0CA3A956-A72B-47B1-8FDA-1A5250A58CB7} URL = http://www.webhledani.cz/results.aspx?i ... earchTerms}
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... EW_csCZ411
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-02-26] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-13] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-02-26] (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-13] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Hosts: 127.0.0.1 idnet.ua-corp.com
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default
FF Homepage: about:home
FF NetworkProxy: "http", "216.155.139.115"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-606871128-3753375214-2841838745-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Milan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-01-26] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll [2003-02-11] (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\searchplugins\heurekacz.xml [2015-03-16]
FF SearchPlugin: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\searchplugins\startpage-https.xml [2015-03-19]
FF Extension: Firebug - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\firebug@software.joehewitt.com.xpi [2015-01-25]
FF Extension: MEGA - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\firefox@mega.co.nz.xpi [2014-08-20]
FF Extension: Video DownloadHelper - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-18]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-26]

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-26]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-26] (AVAST Software)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-26] ()
R1 HMFAxCore5decdc700443adec5f3e84408e3098ff; C:\Windows\HMFAxCore5decdc700443adec5f3e84408e3098ff.sys [115272 2014-06-18] (Eltima Software)
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-07] (Malwarebytes Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-19 16:39 - 2015-03-19 16:40 - 00014957 _____ () C:\Users\Milan\Desktop\FRST.txt
2015-03-19 16:38 - 2015-03-19 16:39 - 00000000 ____D () C:\FRST
2015-03-19 16:38 - 2015-03-19 16:38 - 00112640 _____ (forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
2015-03-19 16:35 - 2015-03-19 16:35 - 02095616 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2015-03-18 16:27 - 2015-03-18 16:27 - 00000000 ____D () C:\Program Files\ConvertHelper3
2015-03-18 16:24 - 2015-03-18 16:25 - 29654131 _____ (DownloadHelper ) C:\Users\Milan\Downloads\ConvertHelper3Setup.exe
2015-03-18 16:19 - 2015-03-18 16:19 - 07083952 _____ () C:\Users\Milan\Downloads\Kristina_Svarinska-Love.avi
2015-03-18 16:18 - 2015-03-18 17:02 - 711966328 _____ () C:\Users\Milan\Downloads\damska-jizda-se-stripterama.mp4
2015-03-18 16:17 - 2015-03-18 16:30 - 638361400 _____ () C:\Users\Milan\Downloads\fantasticka-31-s-velkyma-kozama.flv
2015-03-18 07:11 - 2015-03-18 07:14 - 41680896 _____ () C:\Users\Milan\Downloads\09.03.2015-17_26-PRVÉ-TELEVÍZNE-NOVINY.Joined.TS4
2015-03-18 07:06 - 2015-03-18 07:09 - 56623104 _____ () C:\Users\Milan\Downloads\13.03.2015-17_49-PRVÉ-TELEVÍZNE-NOVINY.Joined.TS4
2015-03-17 19:14 - 2015-03-17 19:14 - 00001107 _____ () C:\Users\Milan\Desktop\ASIO4ALL v2 Instruction Manual.lnk
2015-03-17 19:14 - 2015-03-17 19:14 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-03-17 19:14 - 2015-03-17 19:14 - 00000000 ____D () C:\Program Files (x86)\ASIO4ALL v2
2015-03-17 19:10 - 2015-03-17 19:10 - 00001108 _____ () C:\Users\Milan\Desktop\FL Studio 9.lnk
2015-03-17 19:10 - 2006-06-20 09:56 - 00225280 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\rewire.dll
2015-03-17 19:09 - 2015-03-17 19:09 - 00000000 ____D () C:\Users\Milan\Documents\Image-Line
2015-03-17 19:09 - 2009-08-02 21:09 - 01554944 _____ (HMS http://hp.vector.co.jp/authors/VA012897/) C:\Windows\SysWOW64\vorbis.acm
2015-03-17 19:05 - 2015-03-17 19:10 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2015-03-17 19:05 - 2015-03-17 19:09 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-03-17 19:04 - 2015-03-17 19:04 - 00000000 ____D () C:\Program Files (x86)\Outsim
2015-03-17 18:50 - 2015-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2015-03-17 17:31 - 2015-03-17 17:31 - 00148856 _____ () C:\Users\Milan\Downloads\b r 17.3.2015.htm
2015-03-17 17:31 - 2015-03-17 17:31 - 00126641 _____ () C:\Users\Milan\Downloads\b p 17.3.2015.htm
2015-03-17 17:30 - 2015-03-17 17:30 - 00136149 _____ () C:\Users\Milan\Downloads\b v 17.3.2015.htm
2015-03-17 17:29 - 2015-03-17 17:29 - 00060765 _____ () C:\Users\Milan\Downloads\p 17.3.2015.htm
2015-03-17 17:29 - 2015-03-17 17:29 - 00050970 _____ () C:\Users\Milan\Downloads\r 17.3.2015.htm
2015-03-17 17:28 - 2015-03-17 17:28 - 00061386 _____ () C:\Users\Milan\Downloads\v 17.3.2015.htm
2015-03-17 16:32 - 2015-03-17 16:46 - 268436448 _____ () C:\Users\Milan\Downloads\ceske-krasky-ve-vane.mp4
2015-03-16 07:39 - 2015-03-16 08:21 - 180776597 _____ () C:\Users\Milan\Downloads\warcolwp.mkv
2015-03-15 19:57 - 2015-03-15 20:41 - 184803124 _____ () C:\Users\Milan\Downloads\Romy_Betty_Christine_-_Le_Mouton_Enrage-(FR1974)-1080p-RUFFAH.rar
2015-03-15 18:10 - 2015-03-19 08:00 - 00001064 _____ () C:\Windows\setupact.log
2015-03-15 18:10 - 2015-03-15 18:10 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-13 23:18 - 2015-03-13 23:18 - 00000151 _____ () C:\Users\Milan\Documents\denc.txt
2015-03-13 23:15 - 2015-03-13 23:15 - 00003030 _____ () C:\Users\Milan\Documents\cc_20150313_231523.reg
2015-03-09 20:28 - 2015-03-10 15:53 - 00000081 _____ () C:\Windows\YouTubeDownloaderHD.ini
2015-03-08 21:05 - 2015-03-10 17:22 - 00001105 _____ () C:\Windows\system32\Spolčení k ovládnutí světa Tajná organizace svobodných zednářů je stále realitou. Jejich vraždy měnily moderní svět. Zednářský atentát spustil první „průmyslové vraždění“ na světě _ PROTIPROUD.htm.lnk
2015-03-08 21:03 - 2015-03-10 17:22 - 00001162 _____ () C:\Windows\system32\Svobodní zednáři a jejich vraždy Dějiny plné zrádných úkladů a vydírání. Dva císaři a korunní princ. Svět bez svobody a lidské důstojnosti. Padla jim za oběť i Sissi Stop řekl až císař František.htm.lnk
2015-03-08 19:54 - 2015-03-14 09:36 - 00000000 ____D () C:\KVRT_Data
2015-03-08 17:02 - 2015-03-17 19:22 - 00000000 ____D () C:\Downs
2015-03-07 10:03 - 2015-03-08 17:47 - 00000588 _____ () C:\Users\Milan\Documents\startup.txt
2015-03-07 08:53 - 2015-03-07 08:53 - 00000061 _____ () C:\Users\Milan\Documents\d.txt
2015-03-03 11:56 - 2015-03-15 16:35 - 00000143 _____ () C:\Users\Milan\Desktop\tasks.txt
2015-03-02 08:22 - 2015-03-02 08:22 - 00000137 _____ () C:\Users\Milan\Desktop\bet.txt
2015-03-01 19:48 - 2015-03-01 19:48 - 00000000 _____ () C:\Windows\SysWOW64\debug.log
2015-03-01 19:30 - 2015-03-15 18:01 - 00000000 ____D () C:\Loc
2015-03-01 16:52 - 2015-03-01 16:53 - 02126848 _____ () C:\Users\Milan\Desktop\adwcleaner_4.111.exe
2015-03-01 13:48 - 2015-03-01 13:48 - 00000042 _____ () C:\Users\Milan\Documents\nw.txt
2015-02-26 19:11 - 2015-02-26 19:11 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVAST Software
2015-02-26 19:09 - 2015-02-26 19:09 - 00001933 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-26 19:09 - 2015-02-26 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-26 19:08 - 2015-03-17 19:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-26 19:07 - 2015-02-26 19:09 - 00087912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-02-26 19:07 - 2015-02-26 19:08 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-26 19:07 - 2015-02-26 19:07 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-26 19:06 - 2015-02-26 19:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-26 19:04 - 2015-02-26 19:04 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-23 13:33 - 2015-02-23 13:33 - 00000000 ____D () C:\Users\Milan\Documents\eRightSoft
2015-02-23 13:30 - 2015-02-23 13:30 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\tricomfi
2015-02-23 13:29 - 2014-03-07 10:03 - 03109520 ____N (FFmpeg Project) C:\Windows\SysWOW64\avcodec-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00550032 ____N (FFmpeg Project) C:\Windows\SysWOW64\avformat-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00313520 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLvideo.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00203408 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLsplit.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00181392 ____N (FFmpeg Project) C:\Windows\SysWOW64\avutil-lav-52.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00122512 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLaudio.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00118416 ____N (FFmpeg Project) C:\Windows\SysWOW64\swscale-lav-2.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00109712 ____N () C:\Windows\SysWOW64\libbluray.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00098960 ____N (FFmpeg Project) C:\Windows\SysWOW64\avfilter-lav-4.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00059536 ____N (FFmpeg Project) C:\Windows\SysWOW64\avresample-lav-1.dll
2015-02-23 13:29 - 2012-10-05 18:54 - 00188416 ____N () C:\Windows\SysWOW64\winDCE32.dll
2015-02-23 13:29 - 2011-06-14 19:05 - 00121344 ____N () C:\Windows\SysWOW64\TAKDSDecoder.ax
2015-02-23 13:29 - 2011-02-11 09:26 - 00112128 ____N () C:\Windows\SysWOW64\OptimFROG.dll
2015-02-23 13:29 - 2010-01-06 23:00 - 00107520 ____N () C:\Windows\SysWOW64\TAKDSDecoder.dll
2015-02-23 13:29 - 2009-08-10 22:00 - 00352768 ____N () C:\Windows\SysWOW64\ac3DX.ax
2015-02-23 13:29 - 2005-02-22 16:55 - 00081920 ____N () C:\Windows\SysWOW64\aac_parser.ax
2015-02-23 13:29 - 2004-10-10 08:50 - 00278528 ____N (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2015-02-23 13:29 - 2004-07-02 16:33 - 00327749 ____N (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll
2015-02-23 13:29 - 2004-04-27 15:03 - 00017408 ____N (RadLight) C:\Windows\SysWOW64\RLOFRDec.ax
2015-02-23 12:49 - 2015-03-12 17:05 - 00000000 ____D () C:\Program Files\MKVToolNix
2015-02-23 12:45 - 2015-02-23 12:45 - 00000000 ____D () C:\Users\Milan\AppData\Local\Pinnacle
2015-02-23 12:34 - 2015-02-23 12:34 - 00000000 ____D () C:\ProgramData\Pinnacle Studio Ultimate Collection
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\ProgramData\Pinnacle
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\Program Files (x86)\Pinnacle
2015-02-22 01:47 - 2015-02-22 01:47 - 00060846 _____ () C:\Users\Milan\Documents\200.txt
2015-02-21 15:03 - 2015-02-21 15:10 - 04613332 _____ () C:\Users\Milan\bk mux2.ts

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-19 15:43 - 2014-12-27 13:32 - 00000081 _____ () C:\out.txt
2015-03-19 14:52 - 2010-09-15 21:00 - 01878261 _____ () C:\Windows\WindowsUpdate.log
2015-03-19 08:01 - 2014-06-17 16:48 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\uTorrent
2015-03-19 07:30 - 2014-06-22 02:08 - 00000000 ____D () C:\Users\Milan\Desktop\Tors
2015-03-18 16:32 - 2014-06-18 07:05 - 00000000 ____D () C:\The KMPlayer
2015-03-18 16:30 - 2014-06-18 07:10 - 00000000 ____D () C:\Users\Milan\dwhelper
2015-03-17 19:12 - 2010-12-26 10:14 - 00000000 ____D () C:\Users\Milan\AppData\Local\CrashDumps
2015-03-17 08:26 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-17 08:26 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-15 17:59 - 2014-06-18 14:57 - 00000073 ___SH () C:\Windows\hlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-03-15 17:59 - 2014-06-18 14:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-03-15 17:58 - 2014-06-18 14:57 - 00000138 ___SH () C:\Windows\wlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-03-15 16:25 - 2014-12-22 10:28 - 00000000 ____D () C:\Users\Milan\Desktop\pix
2015-03-14 04:07 - 2014-11-15 23:38 - 00000000 ____D () C:\Windows\rescache
2015-03-13 23:16 - 2014-06-16 19:09 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-03-13 22:16 - 2010-12-23 18:41 - 00000000 ____D () C:\Users\Milan
2015-03-12 17:06 - 2014-11-29 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2015-03-12 17:06 - 2014-11-29 21:22 - 00000000 ____D () C:\Program Files\DAUM
2015-03-12 17:06 - 2010-07-15 02:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines
2015-03-12 17:06 - 2010-07-15 02:27 - 00000000 ____D () C:\Program Files (x86)\eMachines
2015-03-12 16:59 - 2014-12-28 04:05 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2015-03-12 16:54 - 2015-01-18 16:07 - 00000000 ____D () C:\Program Files (x86)\VideoReDoTVSuite5
2015-03-12 16:51 - 2014-06-29 18:13 - 00000000 ____D () C:\Users\Milan\Documents\Pdf
2015-03-12 16:49 - 2014-10-04 09:52 - 00022016 ___SH () C:\Users\Milan\Documents\Thumbs.db
2015-03-12 16:46 - 2012-08-12 20:26 - 00000000 ____D () C:\Users\Milan\AppData\Local\Downloaded Installations
2015-03-11 21:45 - 2013-09-29 11:56 - 00935424 ___SH () C:\Users\Milan\Desktop\Thumbs.db
2015-03-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-09 21:09 - 2014-06-18 18:27 - 00000000 ____D () C:\Program Files (x86)\Youtube Downloader HD
2015-03-08 17:46 - 2010-12-25 13:53 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2015-03-08 01:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-08 01:39 - 2014-07-31 13:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-07 11:57 - 2014-08-03 10:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-07 11:12 - 2015-01-17 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-07 09:23 - 2015-01-25 21:02 - 00018432 ___SH () C:\Users\Milan\Thumbs.db
2015-03-07 08:48 - 2014-07-10 06:14 - 00007670 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2015-03-07 07:58 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther
2015-03-02 08:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-01 18:11 - 2014-06-18 06:17 - 00000000 ____D () C:\AdwCleaner
2015-02-28 18:05 - 2014-06-17 18:45 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\vlc
2015-02-27 18:39 - 2014-11-15 17:36 - 00000000 ____D () C:\Users\Milan\Desktop\Tor Browser
2015-02-27 06:47 - 2010-09-15 21:46 - 00671748 _____ () C:\Windows\system32\perfh005.dat
2015-02-27 06:47 - 2010-09-15 21:46 - 00142974 _____ () C:\Windows\system32\perfc005.dat
2015-02-27 06:47 - 2009-07-14 06:13 - 01592446 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-26 19:04 - 2014-06-15 18:11 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-25 10:58 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-25 10:52 - 2014-09-13 20:29 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\.ACEStream
2015-02-25 10:52 - 2014-07-27 08:10 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Ulozto File Manager
2015-02-25 10:52 - 2014-06-28 14:26 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Capcom
2015-02-25 10:52 - 2014-06-17 20:05 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\PowerISO
2015-02-25 10:52 - 2011-01-27 12:04 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVG9
2015-02-25 10:51 - 2014-11-03 17:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-02-25 10:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-24 04:17 - 2010-12-26 09:55 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources
2015-02-23 13:41 - 2009-07-14 05:45 - 05145680 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-23 12:43 - 2010-12-23 18:41 - 00148208 _____ () C:\Users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-22 10:52 - 2014-08-10 11:17 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\YouTube Downloader

==================== Files in the root of some directories =======

2014-09-18 22:34 - 2014-09-18 22:34 - 0000037 ___SH () C:\Users\Milan\AppData\Local\69ff07055291669bb2b218.72821112
2014-07-10 06:14 - 2015-03-07 08:48 - 0007670 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2013-10-05 15:11 - 2013-10-05 15:11 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-06-18 14:57 - 2014-06-18 14:57 - 0000072 _____ () C:\ProgramData\flfconfig.ini

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================


==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Milan\Desktop" je 477 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
Re�im ECHO je vypnut.

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk
C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Re: iexplore.exe a ctfmon

Napsal: 19 bře 2015 17:39
od JaRon
uprav subor hosts - toto tam nepatri:
Hosts: 127.0.0.1 idnet.ua-corp.com
+
prescanuj PC s TDSSKiller + MBAR >> log vloz iba ak nieco najdu

Re: iexplore.exe a ctfmon

Napsal: 19 bře 2015 21:01
od Nakashi1
Jak mám upravit ten soubor hosts? :???:
Tohle neumím. :?: