nejde spustit Avast, služba neběží, pokud ji spustím, spadne
Napsal: 26 črc 2016 21:54
Dobrý večer,
nemohu spustit AVAST. Program hlásí, že 3 štíty jsou vypnuty. Zkoušel jsem odinstalovat, novou instalaci a nic. Spustil jsem CCleaner, vyčistil pomocí SuperAntiSpywaru, pomocí HiJackThisu povypínal všechno, co se mi zdálo podezřelé, ale Avast stejně nespustím. Zkoušel jsem spustit online scanování od Esetu nebo něco podobného od Kaspersky Lab - nic mi nefunguje. Pokud se podívám na služby, je služba AVAST vypnutá. Pokud se ji pokusím spustit ručně, hned spadne. Prosím o kontrolu logu z FRST.
Díky.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-07-2016
Ran by A (administrator) on DELL (26-07-2016 22:45:37)
Running from C:\Documents and Settings\A\Dokumenty\Stažené soubory
Loaded Profiles: A (Available Profiles: A & Maminka & zalohaAcer)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\WINDOWS\system32\IPROSetMonitor.exe
(Lavasoft Limited) C:\Program Files\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(Intel) C:\Program Files\Intel\AMT\LMS.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Canon Inc.) C:\Program Files\Canon\CAL\CALMAIN.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\a58aeee3-2e91-4a1e-a24b-04d64fcb86f0.com
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-07-26] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2012-11-16] (ATI Technologies Inc.)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-07-25] (AVAST Software)
ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{B73A713A-F8D6-4991-A9CB-25B1898A2CA5}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> DefaultScope {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-07-25] (AVAST Software)
Toolbar: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2013-08-01] (Společnost Microsoft)
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1424000104375
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab
FireFox:
========
FF ProfilePath: C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-18] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2016-03-04] (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1957994488-1336601894-839522115-1003: @spoon.net/Spoon Plugin 3.33 -> C:\Documents and Settings\A\Local Settings\Data aplikací\Spoon\3.33.8.488\npMozillaSpoonPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-1957994488-1336601894-839522115-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\A\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF SearchPlugin: C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\searchplugins\heurekacz.xml [2015-12-09]
FF Extension: ClipConverter - C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\Extensions\clipconverter@clipconverter.cc.xpi [2016-06-08]
FF Extension: Adblock Plus - C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-05-08] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-26]
Chrome:
=======
CHR HomePage: Default -> about:blank
CHR StartupUrls: Default -> "hxxp://gameknot.com/play-chess.pl?iu=frankweb63&rnd=31045"
CHR Profile: C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-29]
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]
CHR Extension: (Disk Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-24]
CHR Extension: (YouTube) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-17]
CHR Extension: (Vyhledávání Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-24]
CHR Extension: (Tabulky Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-29]
CHR Extension: (Dokumenty Google offline) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-13]
CHR Extension: (AdBlock) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-13]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-13]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-11-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-13]
CHR Extension: (Gmail) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-29]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-23] (SUPERAntiSpyware.com)
S4 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [183064 2007-05-29] (Intel Corporation)
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-25] (AVAST Software)
R2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96341 2005-09-30] (Canon Inc.) [File not signed]
S4 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
R2 Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [121600 2013-04-05] (Intel Corporation)
R2 LavasoftTcpService; C:\Program Files\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751760 2015-11-22] (Lavasoft Limited)
R2 LMS; C:\Program Files\Intel\AMT\LMS.exe [105240 2007-05-29] (Intel)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [84624 2013-06-10] (Microsoft Corporation)
S4 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43130032 2015-03-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [45568 2014-04-28] (Hewlett-Packard) [File not signed]
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [55808 2014-04-28] (Hewlett-Packard) [File not signed]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34008 2016-07-25] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [91680 2016-07-25] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-07-25] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [60424 2016-07-25] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [816304 2016-07-25] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [438296 2016-07-26] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [184592 2016-07-25] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [66688 2016-07-25] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [222056 2016-07-25] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\System32\drivers\AtihdXP3.sys [103040 2012-05-14] (Advanced Micro Devices)
R3 CamSuiteVAC; C:\WINDOWS\System32\DRIVERS\CamSuiteVAC.sys [37560 2008-09-20] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()
R1 EIO_XP; C:\WINDOWS\system32\drivers\EIO_XP.sys [12288 2006-06-14] (ASUSTeK Computer Inc.) [File not signed]
S3 HPFXBULK; C:\WINDOWS\System32\drivers\hpfxbulk.sys [9344 2006-06-12] (Hewlett Packard)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [22560 2013-09-15] (REALiX(tm))
S3 mgau; C:\WINDOWS\System32\DRIVERS\mgaum.sys [320384 2001-10-24] (Matrox Graphics Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PAC7302; C:\WINDOWS\System32\DRIVERS\PAC7302.SYS [461824 2009-04-28] (PixArt Imaging Inc.) [File not signed]
S3 pneteth; C:\WINDOWS\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.) [File not signed]
S3 pnetmdm; C:\WINDOWS\System32\DRIVERS\pnetmdm.sys [9472 2006-09-28] (June Fabrics Technology) [File not signed]
S4 RsFx0153; C:\WINDOWS\System32\DRIVERS\RsFx0153.sys [250152 2015-03-30] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 eapihdrv; \??\C:\DOCUME~1\A\LOCALS~1\Temp\ehdrv.sys [X]
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S4 IntelIde; no ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-26 22:26 - 2016-07-26 22:45 - 00000000 ____D C:\FRST
2016-07-26 21:56 - 2016-07-26 21:56 - 00014216 _____ C:\Documents and Settings\A\Dokumenty\cc_20160726_215637.reg
2016-07-26 21:53 - 2016-07-26 21:53 - 00024556 _____ C:\Documents and Settings\A\Dokumenty\cc_20160726_215305.reg
2016-07-26 21:41 - 2016-07-26 21:43 - 00000140 _____ C:\WINDOWS\Reimage.ini
2016-07-26 21:30 - 2016-07-26 21:30 - 00000000 ___SD C:\ComboFix
2016-07-26 07:45 - 2016-07-26 07:45 - 00000000 ____D C:\Documents and Settings\A\Nabídka Start\Programy\Dropbox
2016-07-26 00:46 - 2016-07-26 00:46 - 00000000 ____D C:\Program Files\CrystalDiskInfo
2016-07-26 00:36 - 2016-07-26 00:36 - 00000000 ____D C:\Program Files\HD Tune
2016-07-26 00:36 - 2016-07-26 00:36 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\HD Tune
2016-07-26 00:13 - 2016-07-26 00:21 - 00000000 _____ C:\WINDOWS\system32\last.dump
2016-07-26 00:11 - 2016-07-26 00:11 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\AVAST Software
2016-07-26 00:06 - 2016-07-25 23:49 - 00319248 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-07-26 00:05 - 2016-07-26 00:05 - 00001813 _____ C:\Documents and Settings\Default User\Plocha\Google Chrome.lnk
2016-07-26 00:04 - 2016-07-26 00:10 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\Seznam.cz
2016-07-25 23:53 - 2016-07-26 00:08 - 00001507 _____ C:\Documents and Settings\All Users\Plocha\Avast Free Antivirus.lnk
2016-07-25 23:53 - 2016-07-25 23:53 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\AVAST Software
2016-07-25 23:50 - 2016-07-26 21:58 - 00000306 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-07-25 23:50 - 2016-07-26 00:02 - 00438296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00816304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00222056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00184592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00091680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00066688 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00060424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00034008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-07-25 23:49 - 2016-07-25 23:49 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-07-25 23:47 - 2016-07-25 23:47 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2016-07-25 23:44 - 2016-07-25 23:44 - 00005330 _____ C:\Documents and Settings\A\Dokumenty\cc_20160725_234436.reg
2016-07-25 23:35 - 2016-07-25 23:35 - 00019620 _____ C:\Documents and Settings\A\Dokumenty\cc_20160725_233511.reg
2016-07-25 23:15 - 2016-07-25 23:16 - 07200704 _____ (AVAST Software) C:\Documents and Settings\A\Dokumenty\avastclear.exe
2016-07-25 23:03 - 2016-07-25 23:03 - 00000000 ____D C:\SUPERDelete
2016-07-25 22:45 - 2016-07-25 22:45 - 00000000 ____D C:\Documents and Settings\All Users\Kaspersky Lab
2016-07-25 22:39 - 2016-07-25 23:29 - 00000000 ____D C:\Documents and Settings\All Users\Kaspersky Lab Setup Files
2016-07-25 22:09 - 2016-07-25 22:09 - 00000886 _____ C:\avenger.txt
2016-07-25 22:04 - 2016-07-26 22:16 - 00000000 ____D C:\Program Files\trend micro
2016-07-25 22:04 - 2016-07-25 22:05 - 00000000 ____D C:\rsit
2016-07-25 21:51 - 2016-07-26 22:45 - 00000000 ____D C:\Documents and Settings\A\Local Settings\temp
2016-07-25 21:51 - 2016-07-26 20:29 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00026108 _____ C:\ComboFix.txt
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\zalohaAcer\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2016-07-23 20:10 - 2016-07-23 20:10 - 00020614 _____ C:\ZB20160723200837001.xml
2016-07-13 17:39 - 2016-07-13 17:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3168965$
2016-07-13 17:29 - 2016-07-13 17:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3170455$
2016-07-13 16:30 - 2016-06-11 00:56 - 02006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00630784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll
2016-07-02 19:40 - 2016-07-02 19:40 - 00061957 _____ C:\Documents and Settings\A\Dokumenty\mt-69413-02-Jul-16.pgn
2016-06-30 20:23 - 2016-06-30 20:23 - 00000000 ____D C:\Documents and Settings\A\Local Settings\Data aplikací\CEF
2016-06-30 14:59 - 2016-06-30 14:59 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-26 22:45 - 2015-11-28 22:30 - 00000000 ____D C:\Documents and Settings\A\Dokumenty\Stažené soubory
2016-07-26 22:39 - 2015-11-22 22:35 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-07-26 22:33 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A
2016-07-26 22:06 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2016-07-26 22:03 - 2013-09-15 07:54 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2016-07-26 22:00 - 2004-08-18 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2016-07-26 21:57 - 2013-09-15 06:05 - 00032510 ____N C:\WINDOWS\SchedLgU.Txt
2016-07-26 21:57 - 2013-09-15 06:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-26 21:56 - 2013-09-15 06:06 - 00000178 ___SH C:\Documents and Settings\A\ntuser.ini
2016-07-26 21:56 - 2013-09-15 06:06 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty
2016-07-26 21:53 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2016-07-26 21:53 - 2013-09-15 06:06 - 00000000 __RHD C:\Documents and Settings\A\Data aplikací
2016-07-26 21:30 - 2014-05-29 16:52 - 00000000 ____D C:\Qoobox
2016-07-26 21:22 - 2013-09-20 18:40 - 00000000 ____D C:\Program Files\Inno Setup 5
2016-07-26 21:22 - 2013-09-20 18:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Inno Setup 5
2016-07-26 20:13 - 2013-09-15 08:26 - 00000207 _____ C:\WINDOWS\ChssBase.ini
2016-07-26 07:46 - 2013-09-15 14:20 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty\Dropbox
2016-07-26 07:45 - 2013-09-15 14:14 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\Dropbox
2016-07-26 07:45 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A\Nabídka Start\Programy
2016-07-26 00:26 - 2013-09-15 20:12 - 00000000 ____D C:\Program Files\_bez_instalace
2016-07-26 00:05 - 2013-09-15 07:54 - 00000000 ___HD C:\Documents and Settings\Default User
2016-07-26 00:04 - 2015-12-03 12:47 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\Data aplikací\Google
2016-07-25 23:56 - 2013-09-15 07:53 - 00000327 __RSH C:\boot.ini
2016-07-25 23:56 - 2004-08-18 14:00 - 00001470 _____ C:\WINDOWS\win.ini
2016-07-25 23:56 - 2004-08-18 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2016-07-25 23:53 - 2013-09-15 07:49 - 00000000 ___HD C:\WINDOWS\inf
2016-07-25 23:40 - 2014-12-16 15:57 - 00000000 ____D C:\Documents and Settings\A\Local Settings\Data aplikací\Avg
2016-07-25 23:37 - 2013-09-15 08:02 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-25 23:37 - 2013-09-15 08:02 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-25 23:28 - 2013-09-15 07:54 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2016-07-25 23:25 - 2015-01-18 00:11 - 00000000 __RHD C:\Documents and Settings\zalohaAcer\Data aplikací
2016-07-25 23:25 - 2013-09-15 08:48 - 00000000 __RHD C:\Documents and Settings\Maminka\Data aplikací
2016-07-25 23:22 - 2013-09-15 08:01 - 00000000 ____D C:\Program Files\AVAST Software
2016-07-25 22:45 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users
2016-07-25 22:21 - 2015-11-23 20:21 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2016-07-25 22:20 - 2013-10-18 18:39 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty\Obrázky
2016-07-25 22:10 - 2013-09-15 06:05 - 00000000 __SHD C:\Documents and Settings\LocalService
2016-07-23 20:15 - 2013-09-15 12:49 - 00016384 _____ C:\Documents and Settings\A\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-07-23 20:12 - 2015-12-06 10:59 - 00000000 ____D C:\Documents and Settings\A\Plocha\blbost
2016-07-23 20:12 - 2014-04-24 19:14 - 00022016 ___SH C:\Documents and Settings\A\Plocha\Thumbs.db
2016-07-23 20:02 - 2016-03-22 16:12 - 00000756 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast SafeZone 1 Browser.lnk
2016-07-22 19:54 - 2014-10-08 22:59 - 00036448 _____ C:\Documents and Settings\A\Plocha\Nový objekt - Textový dokument.txt
2016-07-21 12:49 - 2013-09-15 20:30 - 00002503 _____ C:\Documents and Settings\A\Plocha\Microsoft Excel.lnk
2016-07-18 12:39 - 2013-09-15 22:31 - 04786882 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-1957994488-1336601894-839522115-1003-0.dat
2016-07-18 12:39 - 2013-09-15 22:31 - 00249494 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
2016-07-18 12:18 - 2013-11-29 22:33 - 00000000 ____D C:\Documents and Settings\A\Dokumenty\Visual Studio 2010
2016-07-14 15:25 - 2013-09-15 07:54 - 00279744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-07-13 17:39 - 2013-09-15 07:49 - 00000000 RSHDC C:\WINDOWS\system32\dllcache
2016-07-13 17:35 - 2013-09-15 07:55 - 01390144 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-13 17:35 - 2004-08-18 14:00 - 00563794 _____ C:\WINDOWS\system32\perfh005.dat
2016-07-13 17:35 - 2004-08-18 14:00 - 00127724 _____ C:\WINDOWS\system32\perfc005.dat
2016-07-13 17:25 - 2013-09-15 13:25 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2016-07-13 17:04 - 2013-11-13 15:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-07-13 16:54 - 2013-09-15 09:31 - 141983760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-07-08 19:28 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A\Plocha
2016-06-30 20:23 - 2013-09-15 06:06 - 00000000 ___HD C:\Documents and Settings\A\Local Settings\Data aplikací
2016-06-29 19:20 - 2016-06-08 15:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
==================== Files in the root of some directories =======
2015-05-02 13:03 - 2015-05-02 13:03 - 0000109 _____ () C:\Documents and Settings\A\Data aplikací\settings.xml
2013-09-15 12:49 - 2016-07-23 20:15 - 0016384 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-23 21:26 - 2015-08-29 07:23 - 0201229 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\debuggee.mdmp
2013-09-15 13:11 - 2013-09-15 13:23 - 0000066 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\FASTWiz.log
2013-09-19 18:57 - 2013-09-19 18:57 - 0000121 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\fusioncache.dat
2015-01-21 18:54 - 2015-01-21 19:49 - 0002189 _____ () C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
2016-05-04 20:53 - 2016-05-04 21:11 - 0003817 _____ () C:\Documents and Settings\All Users\Data aplikací\lpm.dat
Some files in TEMP:
====================
C:\Documents and Settings\A\Local Settings\temp\ReimagePackage.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
nemohu spustit AVAST. Program hlásí, že 3 štíty jsou vypnuty. Zkoušel jsem odinstalovat, novou instalaci a nic. Spustil jsem CCleaner, vyčistil pomocí SuperAntiSpywaru, pomocí HiJackThisu povypínal všechno, co se mi zdálo podezřelé, ale Avast stejně nespustím. Zkoušel jsem spustit online scanování od Esetu nebo něco podobného od Kaspersky Lab - nic mi nefunguje. Pokud se podívám na služby, je služba AVAST vypnutá. Pokud se ji pokusím spustit ručně, hned spadne. Prosím o kontrolu logu z FRST.
Díky.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 25-07-2016
Ran by A (administrator) on DELL (26-07-2016 22:45:37)
Running from C:\Documents and Settings\A\Dokumenty\Stažené soubory
Loaded Profiles: A (Available Profiles: A & Maminka & zalohaAcer)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) Language: Čeština
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\WINDOWS\system32\IPROSetMonitor.exe
(Lavasoft Limited) C:\Program Files\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe
(Intel) C:\Program Files\Intel\AMT\LMS.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
() C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Canon Inc.) C:\Program Files\Canon\CAL\CALMAIN.exe
(Microsoft Corporation) C:\WINDOWS\system32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\a58aeee3-2e91-4a1e-a24b-04d64fcb86f0.com
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [8900328 2016-07-26] (AVAST Software)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2012-11-16] (ATI Technologies Inc.)
ShellExecuteHooks: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [115440 2013-05-08] (SuperAdBlocker.com)
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync32.dll [2016-05-17] (Google)
ShellIconOverlayIdentifiers: [ DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt3] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt4] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt5] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt6] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt7] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt8] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Documents and Settings\A\Data aplikací\Dropbox\bin\DropboxExt.34.dll [2016-07-05] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2016-07-25] (AVAST Software)
ShellIconOverlayIdentifiers: [HubicBackupRootOverlayHandler] -> {2DF0C6DB-1E85-4894-9D4F-63CB0EAB17EA} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicPublishedItemOverlayHandler] -> {7C76B697-27DF-4CFF-9909-863905561298} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicSyncItemOverlayHandler] -> {9B497753-D273-4A80-9DE8-72248D7FA595} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [HubicUnsyncItemOverlayHandler] -> {D5454A6E-0904-4BA3-9E4A-240A5080259D} => C:\WINDOWS\system32\mscoree.dll [2010-03-18] (Microsoft Corporation)
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
CHR HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{B73A713A-F8D6-4991-A9CB-25B1898A2CA5}: [DhcpNameServer] 8.8.8.8 8.8.4.4
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=msnhome
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-1957994488-1336601894-839522115-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
SearchScopes: HKLM -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = hxxps://www.google.com/search?trackid=sp-006&q={searchTerms}
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> DefaultScope {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> {85A60A59-D3D8-468F-B598-FB4393789EF4} URL = hxxps://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-07-25] (AVAST Software)
Toolbar: HKU\S-1-5-21-1957994488-1336601894-839522115-1003 -> &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll [2013-08-01] (Společnost Microsoft)
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1424000104375
DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} hxxp://content.systemrequirementslab.com/bin/srldetect_intel_4.5.15.0.cab
FireFox:
========
FF ProfilePath: C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_22_0_0_192.dll [2016-06-18] ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2014-05-22] (DivX, LLC.)
FF Plugin: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files\DivX\DivX Web Player\npdivx32.dll [2016-03-04] (DivX, LLC)
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-22] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.0 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: @videolan.org/vlc,version=2.2.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [No File]
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1957994488-1336601894-839522115-1003: @spoon.net/Spoon Plugin 3.33 -> C:\Documents and Settings\A\Local Settings\Data aplikací\Spoon\3.33.8.488\npMozillaSpoonPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-1957994488-1336601894-839522115-1003: @unity3d.com/UnityPlayer,version=1.0 -> C:\Documents and Settings\A\Local Settings\Data aplikací\Unity\WebPlayer\loader\npUnity3D32.dll [2009-11-30] (Unity Technologies ApS)
FF SearchPlugin: C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\searchplugins\heurekacz.xml [2015-12-09]
FF Extension: ClipConverter - C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\Extensions\clipconverter@clipconverter.cc.xpi [2016-06-08]
FF Extension: Adblock Plus - C:\Documents and Settings\A\Data aplikací\Mozilla\Firefox\Profiles\g06xyz70.default-1448391752625\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-04-28]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2015-05-08] [not signed]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-07-26]
Chrome:
=======
CHR HomePage: Default -> about:blank
CHR StartupUrls: Default -> "hxxp://gameknot.com/play-chess.pl?iu=frankweb63&rnd=31045"
CHR Profile: C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-05-29]
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-24]
CHR Extension: (Disk Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-24]
CHR Extension: (YouTube) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-17]
CHR Extension: (Vyhledávání Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-24]
CHR Extension: (Tabulky Google) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-05-29]
CHR Extension: (Dokumenty Google offline) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-13]
CHR Extension: (AdBlock) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-05-13]
CHR Extension: (Avast Online Security) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-13]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2015-11-24]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-13]
CHR Extension: (Gmail) - C:\Documents and Settings\A\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-05-29]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-1957994488-1336601894-839522115-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE.EXE [142648 2014-07-23] (SUPERAntiSpyware.com)
S4 atchksrv; C:\Program Files\Intel\AMT\atchksrv.exe [183064 2007-05-29] (Intel Corporation)
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2010-02-10] () [File not signed]
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-07-25] (AVAST Software)
R2 CCALib8; C:\Program Files\Canon\CAL\CALMAIN.exe [96341 2005-09-30] (Canon Inc.) [File not signed]
S4 HPSupportSolutionsFrameworkService; C:\Program Files\Hp\Common\HPSupportSolutionsFrameworkService.exe [89864 2014-12-11] (Hewlett-Packard Company)
R2 Intel(R) PROSet Monitoring Service; C:\WINDOWS\system32\IProsetMonitor.exe [121600 2013-04-05] (Intel Corporation)
R2 LavasoftTcpService; C:\Program Files\Lavasoft\Web Companion\TcpService\2.3.4.7\LavasoftTcpService.exe [2751760 2015-11-22] (Lavasoft Limited)
R2 LMS; C:\Program Files\Intel\AMT\LMS.exe [105240 2007-05-29] (Intel)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [84624 2013-06-10] (Microsoft Corporation)
S4 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [43130032 2015-03-30] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\WINDOWS\system32\HPZinw12.dll [45568 2014-04-28] (Hewlett-Packard) [File not signed]
R2 PassThru Service; C:\Program Files\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.dll [55808 2014-04-28] (Hewlett-Packard) [File not signed]
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [381104 2015-03-30] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [34008 2016-07-25] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [91680 2016-07-25] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [64272 2016-07-25] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [60424 2016-07-25] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [816304 2016-07-25] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [438296 2016-07-26] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [184592 2016-07-25] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [66688 2016-07-25] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [222056 2016-07-25] (AVAST Software)
R3 AtiHDAudioService; C:\WINDOWS\System32\drivers\AtihdXP3.sys [103040 2012-05-14] (Advanced Micro Devices)
R3 CamSuiteVAC; C:\WINDOWS\System32\DRIVERS\CamSuiteVAC.sys [37560 2008-09-20] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
S3 cpudrv; C:\Program Files\SystemRequirementsLab\cpudrv.sys [11336 2011-06-02] ()
R1 EIO_XP; C:\WINDOWS\system32\drivers\EIO_XP.sys [12288 2006-06-14] (ASUSTeK Computer Inc.) [File not signed]
S3 HPFXBULK; C:\WINDOWS\System32\drivers\hpfxbulk.sys [9344 2006-06-12] (Hewlett Packard)
R1 HWiNFO32; C:\WINDOWS\system32\drivers\HWiNFO32.SYS [22560 2013-09-15] (REALiX(tm))
S3 mgau; C:\WINDOWS\System32\DRIVERS\mgaum.sys [320384 2001-10-24] (Matrox Graphics Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 PAC7302; C:\WINDOWS\System32\DRIVERS\PAC7302.SYS [461824 2009-04-28] (PixArt Imaging Inc.) [File not signed]
S3 pneteth; C:\WINDOWS\System32\DRIVERS\pneteth.sys [13440 2011-11-25] (June Fabrics Technology Inc.) [File not signed]
S3 pnetmdm; C:\WINDOWS\System32\DRIVERS\pnetmdm.sys [9472 2006-09-28] (June Fabrics Technology) [File not signed]
S4 RsFx0153; C:\WINDOWS\System32\DRIVERS\RsFx0153.sys [250152 2015-03-30] (Microsoft Corporation)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS [12880 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS [67664 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 eapihdrv; \??\C:\DOCUME~1\A\LOCALS~1\Temp\ehdrv.sys [X]
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S4 IntelIde; no ImagePath
U5 ScsiPort; C:\WINDOWS\system32\drivers\scsiport.sys [96384 2008-04-14] (Microsoft Corporation)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-26 22:26 - 2016-07-26 22:45 - 00000000 ____D C:\FRST
2016-07-26 21:56 - 2016-07-26 21:56 - 00014216 _____ C:\Documents and Settings\A\Dokumenty\cc_20160726_215637.reg
2016-07-26 21:53 - 2016-07-26 21:53 - 00024556 _____ C:\Documents and Settings\A\Dokumenty\cc_20160726_215305.reg
2016-07-26 21:41 - 2016-07-26 21:43 - 00000140 _____ C:\WINDOWS\Reimage.ini
2016-07-26 21:30 - 2016-07-26 21:30 - 00000000 ___SD C:\ComboFix
2016-07-26 07:45 - 2016-07-26 07:45 - 00000000 ____D C:\Documents and Settings\A\Nabídka Start\Programy\Dropbox
2016-07-26 00:46 - 2016-07-26 00:46 - 00000000 ____D C:\Program Files\CrystalDiskInfo
2016-07-26 00:36 - 2016-07-26 00:36 - 00000000 ____D C:\Program Files\HD Tune
2016-07-26 00:36 - 2016-07-26 00:36 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\HD Tune
2016-07-26 00:13 - 2016-07-26 00:21 - 00000000 _____ C:\WINDOWS\system32\last.dump
2016-07-26 00:11 - 2016-07-26 00:11 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\AVAST Software
2016-07-26 00:06 - 2016-07-25 23:49 - 00319248 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2016-07-26 00:05 - 2016-07-26 00:05 - 00001813 _____ C:\Documents and Settings\Default User\Plocha\Google Chrome.lnk
2016-07-26 00:04 - 2016-07-26 00:10 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\Seznam.cz
2016-07-25 23:53 - 2016-07-26 00:08 - 00001507 _____ C:\Documents and Settings\All Users\Plocha\Avast Free Antivirus.lnk
2016-07-25 23:53 - 2016-07-25 23:53 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\AVAST Software
2016-07-25 23:50 - 2016-07-26 21:58 - 00000306 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2016-07-25 23:50 - 2016-07-26 00:02 - 00438296 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00816304 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00222056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00184592 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00091680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00066688 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00064272 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00060424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2016-07-25 23:50 - 2016-07-25 23:49 - 00034008 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2016-07-25 23:49 - 2016-07-25 23:49 - 00053208 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2016-07-25 23:47 - 2016-07-25 23:47 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2016-07-25 23:44 - 2016-07-25 23:44 - 00005330 _____ C:\Documents and Settings\A\Dokumenty\cc_20160725_234436.reg
2016-07-25 23:35 - 2016-07-25 23:35 - 00019620 _____ C:\Documents and Settings\A\Dokumenty\cc_20160725_233511.reg
2016-07-25 23:15 - 2016-07-25 23:16 - 07200704 _____ (AVAST Software) C:\Documents and Settings\A\Dokumenty\avastclear.exe
2016-07-25 23:03 - 2016-07-25 23:03 - 00000000 ____D C:\SUPERDelete
2016-07-25 22:45 - 2016-07-25 22:45 - 00000000 ____D C:\Documents and Settings\All Users\Kaspersky Lab
2016-07-25 22:39 - 2016-07-25 23:29 - 00000000 ____D C:\Documents and Settings\All Users\Kaspersky Lab Setup Files
2016-07-25 22:09 - 2016-07-25 22:09 - 00000886 _____ C:\avenger.txt
2016-07-25 22:04 - 2016-07-26 22:16 - 00000000 ____D C:\Program Files\trend micro
2016-07-25 22:04 - 2016-07-25 22:05 - 00000000 ____D C:\rsit
2016-07-25 21:51 - 2016-07-26 22:45 - 00000000 ____D C:\Documents and Settings\A\Local Settings\temp
2016-07-25 21:51 - 2016-07-26 20:29 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00026108 _____ C:\ComboFix.txt
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\zalohaAcer\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\temp
2016-07-25 21:51 - 2016-07-25 21:51 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\temp
2016-07-23 20:10 - 2016-07-23 20:10 - 00020614 _____ C:\ZB20160723200837001.xml
2016-07-13 17:39 - 2016-07-13 17:39 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3168965$
2016-07-13 17:29 - 2016-07-13 17:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB3170455$
2016-07-13 16:30 - 2016-06-11 00:56 - 02006528 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\iertutil.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00630784 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\mstime.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00424448 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\licmgr10.dll
2016-07-13 16:30 - 2016-06-11 00:56 - 00019456 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\corpol.dll
2016-07-02 19:40 - 2016-07-02 19:40 - 00061957 _____ C:\Documents and Settings\A\Dokumenty\mt-69413-02-Jul-16.pgn
2016-06-30 20:23 - 2016-06-30 20:23 - 00000000 ____D C:\Documents and Settings\A\Local Settings\Data aplikací\CEF
2016-06-30 14:59 - 2016-06-30 14:59 - 00921280 _____ (Microsoft Corporation) C:\WINDOWS\ucrtbase.dll
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-07-26 22:45 - 2015-11-28 22:30 - 00000000 ____D C:\Documents and Settings\A\Dokumenty\Stažené soubory
2016-07-26 22:39 - 2015-11-22 22:35 - 00000000 ____D C:\Program Files\SUPERAntiSpyware
2016-07-26 22:33 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A
2016-07-26 22:06 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy
2016-07-26 22:03 - 2013-09-15 07:54 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2016-07-26 22:00 - 2004-08-18 14:00 - 00013646 _____ C:\WINDOWS\system32\wpa.dbl
2016-07-26 21:57 - 2013-09-15 06:05 - 00032510 ____N C:\WINDOWS\SchedLgU.Txt
2016-07-26 21:57 - 2013-09-15 06:05 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-07-26 21:56 - 2013-09-15 06:06 - 00000178 ___SH C:\Documents and Settings\A\ntuser.ini
2016-07-26 21:56 - 2013-09-15 06:06 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty
2016-07-26 21:53 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2016-07-26 21:53 - 2013-09-15 06:06 - 00000000 __RHD C:\Documents and Settings\A\Data aplikací
2016-07-26 21:30 - 2014-05-29 16:52 - 00000000 ____D C:\Qoobox
2016-07-26 21:22 - 2013-09-20 18:40 - 00000000 ____D C:\Program Files\Inno Setup 5
2016-07-26 21:22 - 2013-09-20 18:40 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Inno Setup 5
2016-07-26 20:13 - 2013-09-15 08:26 - 00000207 _____ C:\WINDOWS\ChssBase.ini
2016-07-26 07:46 - 2013-09-15 14:20 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty\Dropbox
2016-07-26 07:45 - 2013-09-15 14:14 - 00000000 ____D C:\Documents and Settings\A\Data aplikací\Dropbox
2016-07-26 07:45 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A\Nabídka Start\Programy
2016-07-26 00:26 - 2013-09-15 20:12 - 00000000 ____D C:\Program Files\_bez_instalace
2016-07-26 00:05 - 2013-09-15 07:54 - 00000000 ___HD C:\Documents and Settings\Default User
2016-07-26 00:04 - 2015-12-03 12:47 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\Data aplikací\Google
2016-07-25 23:56 - 2013-09-15 07:53 - 00000327 __RSH C:\boot.ini
2016-07-25 23:56 - 2004-08-18 14:00 - 00001470 _____ C:\WINDOWS\win.ini
2016-07-25 23:56 - 2004-08-18 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2016-07-25 23:53 - 2013-09-15 07:49 - 00000000 ___HD C:\WINDOWS\inf
2016-07-25 23:40 - 2014-12-16 15:57 - 00000000 ____D C:\Documents and Settings\A\Local Settings\Data aplikací\Avg
2016-07-25 23:37 - 2013-09-15 08:02 - 00000940 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-07-25 23:37 - 2013-09-15 08:02 - 00000936 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-07-25 23:28 - 2013-09-15 07:54 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2016-07-25 23:25 - 2015-01-18 00:11 - 00000000 __RHD C:\Documents and Settings\zalohaAcer\Data aplikací
2016-07-25 23:25 - 2013-09-15 08:48 - 00000000 __RHD C:\Documents and Settings\Maminka\Data aplikací
2016-07-25 23:22 - 2013-09-15 08:01 - 00000000 ____D C:\Program Files\AVAST Software
2016-07-25 22:45 - 2013-09-15 07:54 - 00000000 ____D C:\Documents and Settings\All Users
2016-07-25 22:21 - 2015-11-23 20:21 - 00035064 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2016-07-25 22:20 - 2013-10-18 18:39 - 00000000 ___RD C:\Documents and Settings\A\Dokumenty\Obrázky
2016-07-25 22:10 - 2013-09-15 06:05 - 00000000 __SHD C:\Documents and Settings\LocalService
2016-07-23 20:15 - 2013-09-15 12:49 - 00016384 _____ C:\Documents and Settings\A\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-07-23 20:12 - 2015-12-06 10:59 - 00000000 ____D C:\Documents and Settings\A\Plocha\blbost
2016-07-23 20:12 - 2014-04-24 19:14 - 00022016 ___SH C:\Documents and Settings\A\Plocha\Thumbs.db
2016-07-23 20:02 - 2016-03-22 16:12 - 00000756 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast SafeZone 1 Browser.lnk
2016-07-22 19:54 - 2014-10-08 22:59 - 00036448 _____ C:\Documents and Settings\A\Plocha\Nový objekt - Textový dokument.txt
2016-07-21 12:49 - 2013-09-15 20:30 - 00002503 _____ C:\Documents and Settings\A\Plocha\Microsoft Excel.lnk
2016-07-18 12:39 - 2013-09-15 22:31 - 04786882 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-S-1-5-21-1957994488-1336601894-839522115-1003-0.dat
2016-07-18 12:39 - 2013-09-15 22:31 - 00249494 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\WPFFontCache_v0400-System.dat
2016-07-18 12:18 - 2013-11-29 22:33 - 00000000 ____D C:\Documents and Settings\A\Dokumenty\Visual Studio 2010
2016-07-14 15:25 - 2013-09-15 07:54 - 00279744 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-07-13 17:39 - 2013-09-15 07:49 - 00000000 RSHDC C:\WINDOWS\system32\dllcache
2016-07-13 17:35 - 2013-09-15 07:55 - 01390144 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-07-13 17:35 - 2004-08-18 14:00 - 00563794 _____ C:\WINDOWS\system32\perfh005.dat
2016-07-13 17:35 - 2004-08-18 14:00 - 00127724 _____ C:\WINDOWS\system32\perfc005.dat
2016-07-13 17:25 - 2013-09-15 13:25 - 00000000 ____D C:\WINDOWS\system32\XPSViewer
2016-07-13 17:04 - 2013-11-13 15:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2016-07-13 16:54 - 2013-09-15 09:31 - 141983760 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2016-07-08 19:28 - 2013-09-15 06:06 - 00000000 ____D C:\Documents and Settings\A\Plocha
2016-06-30 20:23 - 2013-09-15 06:06 - 00000000 ___HD C:\Documents and Settings\A\Local Settings\Data aplikací
2016-06-29 19:20 - 2016-06-08 15:36 - 00000000 ____D C:\Program Files\Mozilla Firefox
==================== Files in the root of some directories =======
2015-05-02 13:03 - 2015-05-02 13:03 - 0000109 _____ () C:\Documents and Settings\A\Data aplikací\settings.xml
2013-09-15 12:49 - 2016-07-23 20:15 - 0016384 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-11-23 21:26 - 2015-08-29 07:23 - 0201229 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\debuggee.mdmp
2013-09-15 13:11 - 2013-09-15 13:23 - 0000066 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\FASTWiz.log
2013-09-19 18:57 - 2013-09-19 18:57 - 0000121 _____ () C:\Documents and Settings\A\Local Settings\Data aplikací\fusioncache.dat
2015-01-21 18:54 - 2015-01-21 19:49 - 0002189 _____ () C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
2016-05-04 20:53 - 2016-05-04 21:11 - 0003817 _____ () C:\Documents and Settings\All Users\Data aplikací\lpm.dat
Some files in TEMP:
====================
C:\Documents and Settings\A\Local Settings\temp\ReimagePackage.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================