Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 23-07-2016 01
Ran by uživatel (administrator) on UŽIVATEL-PC (23-07-2016 10:17:27)
Running from C:\Users\uživatel\Desktop
Loaded Profiles: uživatel (Available Profiles: uživatel)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe
(Broadcom Corporation) C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avguard.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\Launcher\Avira.Systray.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.30.3\GoogleCrashHandler.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files\Avira\AntiVir Desktop\avcenter.exe
(forum.viry.cz) C:\Users\uživatel\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [avgnt] => C:\Program Files\Avira\AntiVir Desktop\avgnt.exe [814608 2016-05-19] (Avira Operations GmbH & Co. KG)
HKLM\...\Run: [Avira SystrayStartTrigger] => C:\Program Files\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-06-01] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3020921174-989337016-1626390250-1000\...\MountPoints2: {12a360ec-b27c-11e3-a5b3-0024e8c0d3b5} - F:\USBAutoRun.exe
HKU\S-1-5-21-3020921174-989337016-1626390250-1000\...\MountPoints2: {86ced8c0-6c24-11e3-9021-0024e8c0d3b5} - E:\USBAutoRun.exe
HKU\S-1-5-21-3020921174-989337016-1626390250-1000\...\MountPoints2: {aa6e56d7-e5d6-11e5-80b6-0024e8c0d3b5} - F:\autorun.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2013-12-21] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{2777B3D5-EB84-45EB-8A99-7073D88A8A0B}: [DhcpNameServer] 192.168.8.1 192.168.8.1
Tcpip\..\Interfaces\{802FCC86-CA10-4840-81BD-E32E54F6AF18}: [DhcpNameServer] 10.0.0.138
Internet Explorer:
==================
HKU\S-1-5-21-3020921174-989337016-1626390250-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.seznam.cz/
SearchScopes: HKU\S-1-5-21-3020921174-989337016-1626390250-1000 -> DefaultScope {42DD04C6-0F26-4A6E-B670-2D7E1D6D92E2} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-3020921174-989337016-1626390250-1000 -> {42DD04C6-0F26-4A6E-B670-2D7E1D6D92E2} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_12454
SearchScopes: HKU\S-1-5-21-3020921174-989337016-1626390250-1000 -> {ECD974A6-688E-4ED4-B52F-E8DED8F3441A} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_12454
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ohyg1wsj.default
FF Homepage: hxxp://www.seznam.cz/
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_22_0_0_209.dll [2016-07-21] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2014-03-29] (Nexon)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-06-30] (Adobe Systems Inc.)
FF Extension: Avira Browser Safety - C:\Users\uživatel\AppData\Roaming\Mozilla\Firefox\Profiles\ohyg1wsj.default\Extensions\abs@avira.com [2016-07-14]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [fjbbjfdilbioabojmcplalojlmdngbjl] - C:\Users\uživatel\AppData\Local\Temp\swlfiles\smileyswelovetoolbar.crx <not found>
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-05-25]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AntiVirMailService; C:\Program Files\Avira\AntiVir Desktop\avmailc7.exe [970656 2016-05-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files\Avira\AntiVir Desktop\sched.exe [467016 2016-05-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files\Avira\AntiVir Desktop\avguard.exe [467016 2016-05-19] (Avira Operations GmbH & Co. KG)
S4 AntiVirWebService; C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE [1212048 2015-09-07] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files\Avira\Launcher\Avira.ServiceHost.exe [302680 2016-06-01] (Avira Operations GmbH & Co. KG)
R2 Credential Vault Host Control Service; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostControlService.exe [827272 2013-03-07] (Broadcom Corporation)
R2 Credential Vault Host Storage; C:\Program Files\Broadcom Corporation\Broadcom USH Host Components\CV\bin\HostStorageService.exe [32648 2013-03-07] (Broadcom Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [109016 2016-05-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [137240 2016-05-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [37896 2016-05-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [60088 2016-05-19] (Avira Operations GmbH & Co. KG)
R3 cvusbdrv; C:\Windows\System32\Drivers\cvusbdrv.sys [41480 2013-03-07] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-03-23] (Disc Soft Ltd)
R1 ssmdrv; C:\Windows\System32\DRIVERS\ssmdrv.sys [31848 2015-09-07] (Avira Operations GmbH & Co. KG)
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-23 10:17 - 2016-07-23 10:18 - 00009279 _____ C:\Users\uživatel\Desktop\FRST.txt
2016-07-23 10:15 - 2016-07-23 10:17 - 00000000 ____D C:\FRST
2016-07-23 10:11 - 2016-07-23 10:11 - 00112640 _____ (forum.viry.cz) C:\Users\uživatel\Desktop\FRSTLauncher.exe
2016-07-23 10:07 - 2016-07-23 10:07 - 01744384 _____ (Farbar) C:\Users\uživatel\Desktop\FRST.exe
2016-07-22 08:13 - 2016-06-25 22:01 - 00037096 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2016-07-22 08:13 - 2016-06-25 21:54 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2016-07-22 08:13 - 2016-06-25 21:53 - 01004544 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2016-07-22 08:13 - 2016-06-25 21:53 - 00779776 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2016-07-22 08:13 - 2016-06-25 21:53 - 00297472 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.dll
2016-07-22 08:13 - 2016-06-25 21:53 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\inetpp.dll
2016-07-22 08:13 - 2016-06-25 21:42 - 00039424 _____ (Microsoft Corporation) C:\Windows\system32\wpnpinst.exe
2016-07-22 08:13 - 2016-06-25 21:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\ntprint.exe
2016-07-22 08:13 - 2016-06-25 21:41 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\inetppui.dll
2016-07-22 08:13 - 2016-06-22 15:06 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 01288192 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 00468992 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 00179712 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2016-07-22 08:13 - 2016-06-17 20:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2016-07-22 08:13 - 2016-06-14 16:57 - 02398208 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2016-07-22 08:13 - 2016-05-13 23:54 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2016-07-22 08:13 - 2016-05-13 23:49 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2016-07-22 08:13 - 2016-05-13 23:49 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2016-07-22 08:13 - 2016-05-13 23:49 - 00010240 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2016-07-22 08:13 - 2016-05-13 23:27 - 00034304 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2016-07-22 08:13 - 2016-05-12 17:22 - 00137960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2016-07-22 08:13 - 2016-05-12 17:22 - 00067304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2016-07-22 08:13 - 2016-05-12 17:18 - 01062400 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00606720 _____ (Microsoft Corporation) C:\Windows\system32\gpsvc.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\IPSECSVC.DLL
2016-07-22 08:13 - 2016-05-12 17:18 - 00274944 _____ (Microsoft Corporation) C:\Windows\system32\polstore.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00260608 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\gpapi.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00070144 _____ (Microsoft Corporation) C:\Windows\system32\winipsec.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\FwRemoteSvr.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2016-07-22 08:13 - 2016-05-12 17:18 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2016-07-22 08:13 - 2016-05-12 16:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2016-07-22 08:13 - 2016-05-12 16:52 - 00313856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2016-07-22 08:13 - 2016-05-12 16:52 - 00310784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv.sys
2016-07-22 08:13 - 2016-05-12 16:52 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2016-07-22 08:13 - 2016-05-12 16:52 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2016-07-22 08:13 - 2016-05-12 16:52 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2016-07-22 08:13 - 2016-05-12 16:52 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2016-07-22 08:13 - 2016-05-12 16:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2016-07-22 08:13 - 2016-05-12 16:51 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2016-07-22 08:13 - 2016-05-12 16:51 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2016-07-22 08:13 - 2016-05-12 15:04 - 00370784 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2016-07-22 08:13 - 2016-05-12 15:04 - 00249352 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2016-07-22 08:13 - 2016-05-11 17:19 - 00363520 _____ (Microsoft Corporation) C:\Windows\system32\StructuredQuery.dll
2016-07-22 08:13 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2016-07-22 08:13 - 2016-04-09 08:59 - 00730344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2016-07-22 08:13 - 2016-04-09 08:59 - 00218856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2016-07-22 08:13 - 2016-04-09 08:54 - 12881408 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2016-07-22 08:13 - 2016-04-09 08:54 - 01499648 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2016-07-22 08:13 - 2016-04-09 08:54 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll
2016-07-22 08:13 - 2016-04-09 07:44 - 02973184 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2016-07-22 08:13 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2016-07-22 08:13 - 2016-04-06 12:36 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2016-07-22 08:13 - 2016-03-09 20:40 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\webio.dll
2016-07-22 08:13 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2016-07-22 08:09 - 2016-06-11 06:48 - 00346320 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2016-07-22 08:09 - 2016-06-10 21:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2016-07-22 08:09 - 2016-06-10 21:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2016-07-22 08:09 - 2016-06-10 20:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2016-07-22 08:09 - 2016-06-10 20:53 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2016-07-22 08:09 - 2016-06-10 20:53 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2016-07-22 08:09 - 2016-06-10 20:53 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2016-07-22 08:09 - 2016-06-10 20:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2016-07-22 08:09 - 2016-06-10 20:47 - 02287104 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2016-07-22 08:09 - 2016-06-10 20:46 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2016-07-22 08:09 - 2016-06-10 20:45 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2016-07-22 08:09 - 2016-06-10 20:42 - 20348928 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2016-07-22 08:09 - 2016-06-10 20:42 - 00476160 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2016-07-22 08:09 - 2016-06-10 20:41 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2016-07-22 08:09 - 2016-06-10 20:41 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2016-07-22 08:09 - 2016-06-10 20:41 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2016-07-22 08:09 - 2016-06-10 20:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2016-07-22 08:09 - 2016-06-10 20:35 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2016-07-22 08:09 - 2016-06-10 20:32 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2016-07-22 08:09 - 2016-06-10 20:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2016-07-22 08:09 - 2016-06-10 20:26 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2016-07-22 08:09 - 2016-06-10 20:24 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2016-07-22 08:09 - 2016-06-10 20:23 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2016-07-22 08:09 - 2016-06-10 20:21 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2016-07-22 08:09 - 2016-06-10 20:19 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2016-07-22 08:09 - 2016-06-10 20:14 - 04608000 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2016-07-22 08:09 - 2016-06-10 20:12 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2016-07-22 08:09 - 2016-06-10 20:10 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2016-07-22 08:09 - 2016-06-10 20:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2016-07-22 08:09 - 2016-06-10 20:09 - 02055680 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2016-07-22 08:09 - 2016-06-10 20:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2016-07-22 08:09 - 2016-06-10 19:58 - 13806080 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2016-07-22 08:09 - 2016-06-10 19:45 - 02392576 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2016-07-22 08:09 - 2016-06-10 19:42 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2016-07-22 08:09 - 2016-06-10 19:41 - 01315840 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2016-07-22 08:07 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2016-07-22 08:07 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2016-07-22 08:07 - 2016-04-09 08:57 - 01310528 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2016-07-22 08:07 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2016-07-22 08:07 - 2016-04-09 07:42 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2016-07-22 08:07 - 2016-04-09 07:42 - 00050688 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2016-07-22 08:07 - 2016-04-09 07:42 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2016-07-22 08:07 - 2016-04-09 07:42 - 00016896 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2016-07-22 08:07 - 2016-04-09 07:40 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2016-07-22 08:07 - 2016-04-09 07:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2016-07-22 08:05 - 2016-05-18 18:10 - 00306688 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2016-07-22 08:05 - 2016-05-12 17:18 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2016-07-22 08:05 - 2016-05-11 17:19 - 00351744 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2016-07-22 08:05 - 2016-05-11 17:19 - 00231424 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2016-07-22 08:05 - 2016-05-11 17:19 - 00206336 _____ (Microsoft Corporation) C:\Windows\system32\ws2_32.dll
2016-07-22 08:05 - 2016-05-11 17:01 - 00026624 _____ (Microsoft Corporation) C:\Windows\system32\netbtugc.exe
2016-07-22 08:05 - 2016-05-11 16:52 - 00188928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netbt.sys
2016-07-22 08:05 - 2016-04-14 17:38 - 00105192 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2016-07-22 08:05 - 2016-04-14 17:33 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2016-07-22 08:05 - 2016-04-14 17:33 - 01806848 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2016-07-22 08:05 - 2016-04-14 17:33 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2016-07-22 08:05 - 2016-04-14 17:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2016-07-22 08:05 - 2016-04-14 17:33 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2016-07-22 08:05 - 2016-04-14 17:11 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2016-07-22 01:31 - 2016-07-22 01:31 - 00007604 _____ C:\Users\uživatel\AppData\Local\Resmon.ResmonCfg
2016-07-22 01:26 - 2016-07-22 01:26 - 00003566 _____ C:\Users\uživatel\Documents\install.txt
2016-07-21 23:47 - 2016-07-21 23:47 - 01196752 _____ (Adobe Systems Incorporated) C:\Users\uživatel\Downloads\flashplayer22au_ha_install.exe
2016-07-21 23:46 - 2016-07-21 23:48 - 01196752 _____ (Adobe Systems Incorporated) C:\Users\uživatel\Downloads\flashplayer22au_ha_install(1).exe
2016-07-21 23:31 - 2016-07-21 23:31 - 00000000 ____D C:\Users\uživatel\Documents\Add-in Express
2016-07-21 23:25 - 2016-07-21 23:25 - 00000965 _____ C:\Users\Public\Desktop\CCleaner.lnk
2016-07-21 23:25 - 2016-07-21 23:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2016-07-21 23:25 - 2016-07-21 23:25 - 00000000 ____D C:\Program Files\CCleaner
2016-07-21 23:16 - 2016-07-21 23:22 - 08136664 _____ (Piriform Ltd) C:\Users\uživatel\Downloads\ccsetup520.exe
2016-07-06 17:25 - 2016-07-22 16:55 - 00009546 _____ C:\Users\uživatel\Desktop\Ondra 07.xlsx
2016-07-05 09:05 - 2016-07-05 09:05 - 00084232 _____ C:\Users\uživatel\Downloads\Vodafone Vyúčtování číslo 456355071.pdf
2016-06-28 19:13 - 2016-06-28 19:13 - 00001092 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-06-26 13:07 - 2016-06-26 13:07 - 01148964 _____ C:\Users\uživatel\Downloads\prilohy_3757.zip
2016-06-26 12:57 - 2016-06-26 13:08 - 00000000 ____D C:\Users\uživatel\Desktop\tenis foto areal
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-23 09:25 - 2009-07-14 06:34 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-07-23 09:25 - 2009-07-14 06:34 - 00014240 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-07-23 08:38 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2016-07-22 16:57 - 2016-04-20 17:08 - 00056772 _____ C:\Users\uživatel\Desktop\sezóna2016.xlsx
2016-07-22 15:48 - 2013-12-21 01:44 - 01591910 _____ C:\Windows\system32\PerfStringBackup.INI
2016-07-22 15:48 - 2009-07-14 10:44 - 00672084 _____ C:\Windows\system32\perfh005.dat
2016-07-22 15:48 - 2009-07-14 10:44 - 00142648 _____ C:\Windows\system32\perfc005.dat
2016-07-22 10:08 - 2009-07-14 06:33 - 00408328 _____ C:\Windows\system32\FNTCACHE.DAT
2016-07-22 10:07 - 2014-03-29 18:37 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2016-07-22 10:05 - 2009-07-14 11:20 - 00000000 ____D C:\Program Files\Windows Journal
2016-07-22 10:04 - 2014-12-21 18:14 - 00000000 ____D C:\Windows\system32\appraiser
2016-07-22 08:57 - 2014-03-29 18:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2016-07-22 08:31 - 2013-12-21 02:13 - 00000000 ____D C:\Windows\system32\MRT
2016-07-22 08:21 - 2013-12-21 02:13 - 141983760 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2016-07-22 01:01 - 2014-03-29 18:27 - 00000000 ____D C:\Users\uživatel\AppData\Local\Popajar
2016-07-22 00:02 - 2013-12-21 15:23 - 00000000 ____D C:\Users\uživatel\AppData\Roaming\DAEMON Tools Lite
2016-07-21 23:56 - 2014-02-14 13:15 - 00000000 ____D C:\Windows\Minidump
2016-07-21 23:51 - 2013-12-21 23:33 - 00000000 ____D C:\Users\uživatel\AppData\Roaming\Skype
2016-07-21 23:49 - 2014-02-17 21:15 - 00000000 ____D C:\Users\uživatel\AppData\Local\Adobe
2016-07-21 23:49 - 2013-12-21 04:16 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2016-07-21 23:49 - 2013-12-21 04:16 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2016-07-21 23:49 - 2013-12-21 04:16 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-07-21 23:48 - 2013-12-21 04:16 - 00000000 ____D C:\Windows\system32\Macromed
2016-07-21 23:30 - 2013-12-21 23:32 - 00000000 ___RD C:\Program Files\Skype
2016-07-21 23:28 - 2013-12-21 18:07 - 00000000 ____D C:\Users\uživatel\AppData\Local\Google
2016-07-14 09:19 - 2015-09-07 20:13 - 00000594 _____ C:\Windows\Tasks\Adobe Acrobat Update Task.job
2016-07-14 09:18 - 2015-09-07 20:12 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2016-06-29 09:30 - 2014-12-13 23:22 - 00000000 ____D C:\ProgramData\Package Cache
2016-06-28 19:13 - 2013-12-21 15:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
==================== Files in the root of some directories =======
2016-07-22 01:31 - 2016-07-22 01:31 - 0007604 _____ () C:\Users\uživatel\AppData\Local\Resmon.ResmonCfg
2014-02-22 12:03 - 2014-02-22 12:20 - 0877747 ____N () C:\Users\uživatel\AppData\Local\Tempmusic.ogg
Some files in TEMP:
====================
C:\Users\uživatel\AppData\Local\Temp\avgnt.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\Adobe Acrobat Update Task.job => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf95d1cb7bcc5f.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cff14a6d1f3802.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0171af640711f.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d05055c4e34fd7.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0e8da11fc60fd.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d0f306b4017ab6.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1a20ee9ce627b.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1ab58bd3223fa.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe
Task: C:\Windows\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013.job => C:\Program Files\TuneUp Utilities 2014\OneClick.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Avira Antivirus (Disabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Disabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\u�ivatel\Desktop" je 5874 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Akamai NetSession Interface
"C:\Users\u�ivatel\AppData\Local\Akamai\netsession_win.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
"C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NextLive
C:\Windows\system32\rundll32.exe "C:\Users\u�ivatel\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\UpdateChecker
C:\Users\u�ivatel\AppData\Local\Popajar\UpdateChecker\UpdateCheckerApp.exe [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Přispějete na provoz fóra?