kontrola logu
Napsal: 12 led 2017 16:42
Dobrý den,
prosím o kontrolu logu, dochází k ukončení prohlížeče chrome při zadání "chrome://settings" + sami se mi otvírají v chromu okna "hitsnews.ru"
Díky J.Táborský
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-01-2017
Ran by taborsky (administrator) on TABORSKY-W7 (12-01-2017 16:34:46)
Running from C:\Users\taborsky\Desktop
Loaded Profiles: taborsky (Available Profiles: kpsag & UpdatusUser & taborsky)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
() C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManager64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Bdrive Inc.) C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C. Ghisler & Co.) C:\Program Files (x86)\WinCmd601\Totalcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.18314_none_7b179df5c2cc57fc\iexplore.exe
(forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [pdfFactory Pro Dispatcher v3] => C:\Windows\system32\spool\DRIVERS\x64\3\fppdis3a.exe [754688 2009-12-15] (FinePrint Software, LLC)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1566200 2015-11-09] (FileOpen Systems Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4431848 2015-12-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2012-12-03] (ICQ, LLC.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2035acce-b5b2-11e4-812b-50e549305d87} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\InstallPVElite.html
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2970e612-b2d3-11e5-9438-50e549305d87} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {8e7e81ea-b2ee-11e2-9802-50e549305d87} - G:\Startme.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2012-07-24]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.4.180
Tcpip\..\Interfaces\{025972D8-045C-4547-B75E-CFA624D169E3}: [DhcpNameServer] 192.168.4.180
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={D44514EA-E4AC-11E2-B199-50E549305D87}&&st=23&ptr=100
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B158C4843-7CE9-4189-AB0A-96AEF66FAFE5%7D&gp=811041
BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: Ďîčńę@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\taborsky\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll [2017-01-12] (Mail.Ru)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll [2012-12-07] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll [2012-12-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2645362398-634994700-1304489594-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\taborsky\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-07-20] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\taborsky\AppData\Roaming\mozilla\plugins\npatgpc.dll [2015-04-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.idnes.cz/
CHR StartupUrls: Default -> "hxxp://www.idnes.cz/"
CHR Profile: C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default [2017-01-12]
CHR Extension: (Prezentace Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-12]
CHR Extension: (Dokumenty Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-12]
CHR Extension: (Disk Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-12]
CHR Extension: (YouTube) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-12]
CHR Extension: (Java API Search) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm [2017-01-12]
CHR Extension: (Tabulky Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-12]
CHR Extension: (Cisco WebEx Extension) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2017-01-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-12]
CHR Extension: (Gmail) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-12]
CHR Extension: (Chrome Media Router) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-12]
CHR HKLM-x32\...\Chrome\Extension: [nbdbmopeebalgaeghmjoegpkngglikgn] - C:\Program Files (x86)\FreeHDSport.TV\freehdsporttv10.crx [2013-06-30]
StartMenuInternet: Google Chrome.FIRPS77TRSXZA4DHYIAU3YPSIQ - C:\Users\kpsag\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\winx64\ansysli_server.exe [4856320 2014-01-07] (ANSYS, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4948456 2015-10-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 CHEMCAD System Authorization; C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe [451592 2015-06-22] ()
R2 FileOpenManager; C:\Program Files\FileOpen\Services\FileOpenManager64.exe [380920 2015-11-09] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-07-17] (SafeNet Inc.)
R2 ndsvc; C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe [2791424 2013-02-01] (Bdrive Inc.) [File not signed]
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [376832 2013-01-09] (SafeNet, Inc.) [File not signed]
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259872 2013-01-09] (SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [293216 2013-01-09] (SafeNet, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2013-03-15] (SafeNet Inc.)
S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2013-08-01] (SafeNet Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [158160 2015-05-21] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-03] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360400 2015-05-21] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [204192 2016-03-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [249296 2015-05-26] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-04-24] (DT Soft Ltd)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-07-17] (SafeNet Inc.)
S3 ndfs; C:\Program Files\MacroData Inc\NetDrive\ndfs.sys [63712 2013-02-01] (Bdrive Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-12 16:34 - 2017-01-12 16:34 - 00016631 _____ C:\Users\taborsky\Desktop\FRST.txt
2017-01-12 16:30 - 2017-01-12 16:30 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 72477.crdownload
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 289372.crdownload
2017-01-12 16:25 - 2017-01-12 16:34 - 00000000 ____D C:\FRST
2017-01-12 16:24 - 2017-01-12 16:24 - 02419200 _____ (Farbar) C:\Users\taborsky\Desktop\FRST64.exe
2017-01-12 15:39 - 2017-01-12 15:45 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-12 15:39 - 2017-01-12 15:45 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-12 15:39 - 2017-01-12 15:39 - 00002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-12 15:39 - 2017-01-12 15:39 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-12 14:00 - 2017-01-12 14:00 - 00006222 _____ C:\Users\taborsky\Documents\cc_20170112_140006.reg
2017-01-12 14:00 - 2017-01-12 14:00 - 00000396 _____ C:\Users\taborsky\Documents\cc_20170112_140021.reg
2017-01-12 12:29 - 2017-01-12 12:34 - 418352476 _____ C:\Users\taborsky\Downloads\shop_lyfter__.mp4
2017-01-12 12:26 - 2017-01-12 12:34 - 321860544 _____ C:\Users\taborsky\Downloads\shop_lyfter_.mp4
2017-01-12 12:21 - 2017-01-12 12:33 - 1624215456 _____ C:\Users\taborsky\Downloads\let_me_suck_you-5.mp4
2017-01-12 12:21 - 2017-01-12 12:25 - 709237916 _____ C:\Users\taborsky\Downloads\let_me_suck_you-4.mp4
2017-01-12 12:20 - 2017-01-12 12:24 - 268839289 _____ C:\Users\taborsky\Downloads\tushy_adria.mp4
2017-01-12 11:18 - 2017-01-12 13:54 - 00000000 ____D C:\Users\taborsky\AppData\Local\Amigo
2017-01-12 11:18 - 2017-01-12 11:18 - 00003638 _____ C:\Windows\System32\Tasks\hitsnews
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\Users\taborsky\AppData\Local\Mail.Ru
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\ProgramData\Mail.Ru
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Windows\hsperfdata_taborsky
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Users\taborsky\AppData\Local\eclipse
2017-01-12 10:54 - 2017-01-12 10:57 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Zona
2017-01-11 13:08 - 2017-01-11 13:29 - 1529951430 _____ C:\Users\taborsky\Downloads\HeOnHo_karol_lilien.mp4
2017-01-11 13:05 - 2017-01-11 13:31 - 1682998918 _____ C:\Users\taborsky\Downloads\HeOnHo_lady_dee.mp4
2017-01-09 10:05 - 2017-01-09 11:40 - 1688200783 _____ C:\Users\taborsky\Downloads\POVBitch_mea.melone.and.wendy.moon.mp4
2017-01-06 13:58 - 2017-01-06 13:58 - 00064259 _____ C:\Users\taborsky\Desktop\SEZNAM_2016.pdf
2017-01-04 08:58 - 2017-01-04 08:58 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-04 08:58 - 2017-01-04 08:58 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-04 08:58 - 2017-01-04 08:55 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2016-12-21 17:37 - 2016-12-21 17:37 - 00435181 _____ C:\Users\taborsky\Downloads\Doklad_163924500PV.pdf
2016-12-21 17:31 - 2016-12-21 17:31 - 02455868 _____ C:\Users\taborsky\Downloads\2617010400_31-EV104.pdf
2016-12-20 16:25 - 2016-12-20 16:25 - 07204056 _____ C:\Users\taborsky\Downloads\cela_pisen-data.mp3
2016-12-15 17:45 - 2016-12-15 17:45 - 07632896 _____ C:\Users\taborsky\Downloads\ATOMEX_GROUP_PREZENTACE_201211.pps
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-12 16:29 - 2012-11-28 11:19 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Skype
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:09 - 2015-03-18 15:16 - 00720302 _____ C:\Windows\system32\perfh019.dat
2017-01-12 16:09 - 2015-03-18 15:16 - 00152548 _____ C:\Windows\system32\perfc019.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00674234 _____ C:\Windows\system32\perfh005.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00143782 _____ C:\Windows\system32\perfc005.dat
2017-01-12 16:09 - 2009-07-14 06:13 - 02466190 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-12 16:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-12 16:08 - 2012-06-21 07:04 - 00005731 _____ C:\Windows\WINCMD.INI
2017-01-12 16:06 - 2012-06-21 08:14 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001218 _____ C:\Windows\Tasks\FreeHDSport TV-updater.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001212 _____ C:\Windows\Tasks\FreeHDSport TV-codedownloader.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001122 _____ C:\Windows\Tasks\FreeHDSport TV-enabler.job
2017-01-12 16:05 - 2012-11-28 10:36 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\ICQ
2017-01-12 16:03 - 2012-06-21 06:34 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-12 16:03 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Google
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Deployment
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-12 12:34 - 2012-06-21 06:52 - 00000000 ____D C:\ProgramData\MFAData
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-01-12 11:06 - 2012-06-21 08:14 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job
2017-01-12 10:55 - 2012-12-12 14:58 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Mozilla
2017-01-11 09:22 - 2014-11-07 08:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-10 21:14 - 2015-01-05 08:36 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 08:25 - 2016-04-04 09:36 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-06 12:59 - 2016-09-24 11:16 - 00000000 ____D C:\Users\taborsky\Downloads\00
2017-01-06 10:19 - 2016-07-25 14:14 - 00000000 ____D C:\Users\taborsky\Downloads\0
2017-01-06 08:29 - 2009-07-14 06:08 - 00032618 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-05 15:07 - 2013-05-15 15:07 - 00053721 _____ C:\Windows\VVD.INI
2017-01-05 10:29 - 2013-05-15 15:07 - 00001057 _____ C:\Windows\CADCNTRL.INI
2017-01-04 08:58 - 2014-11-07 08:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-04 08:58 - 2013-12-06 08:40 - 00000000 ____D C:\ProgramData\Oracle
2017-01-04 08:57 - 2016-04-21 08:37 - 00000000 ____D C:\Program Files\Java
2017-01-04 08:55 - 2016-04-21 08:37 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-12-18 05:27 - 2013-06-19 12:27 - 00000000 ____D C:\Users\taborsky\AppData\Local\ElevatedDiagnostics
2016-12-15 17:41 - 2016-02-08 10:20 - 00000000 ____D C:\Program Files (x86)\VVD_16
2016-12-14 08:16 - 2016-01-04 12:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-14 08:16 - 2012-11-28 11:19 - 00000000 ____D C:\ProgramData\Skype
==================== Files in the root of some directories =======
2012-12-20 08:52 - 2016-09-16 13:32 - 0000033 _____ () C:\Users\taborsky\AppData\Roaming\PV_ACAD.bin
2015-08-14 14:06 - 2015-08-14 14:09 - 0007680 _____ () C:\Users\taborsky\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-27 12:30 - 2015-01-16 14:04 - 0007599 _____ () C:\Users\taborsky\AppData\Local\Resmon.ResmonCfg
Some files in TEMP:
====================
C:\Users\kpsag\AppData\Local\Temp\AcDeltree.exe
C:\Users\kpsag\AppData\Local\Temp\JavaIC.dll
C:\Users\kpsag\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\msscct32.dll
C:\Users\kpsag\AppData\Local\Temp\_isE81.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-01-07 06:54
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:195.21 GB) (Free:21.16 GB) NTFS
Drive d: () (Fixed) (Total:736.2 GB) (Free:35.56 GB) NTFS
Drive f: (ctyrka-1) (Fixed) (Total:1863.14 GB) (Free:1616.96 GB) NTFS
Drive g: (terka) (Fixed) (Total:931.51 GB) (Free:3.24 GB) NTFS
Drive h: (ctyrka-2) (Fixed) (Total:1862.76 GB) (Free:1018.08 GB) NTFS
Drive n: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive x: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive y: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive z: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Available physical RAM: 12904.14 MB
Total physical RAM: 16367.12 MB
Percentage of memory in use: 21%
==================== MBR and Partition Table ==================
Reduce PDF Size (HKLM-x32\...\{32BD8FD9-8990-46A0-B86B-857F11014DF6}_is1) (Version: - reducepdfsize.com)
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3C90B3EA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=736.2 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 3726 GB) (Disk ID: 00000000)
Disk: 6 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 00021631)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\FreeHDSport TV-codedownloader.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-codedownloader.exe
Task: C:\Windows\Tasks\FreeHDSport TV-enabler.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-enabler.exe
Task: C:\Windows\Tasks\FreeHDSport TV-updater.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: AVG AntiVirus Business Edition (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: AVG update module (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG update module (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
AS: AVG AntiVirus Business Edition (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\taborsky\Desktop" je 64 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
prosím o kontrolu logu, dochází k ukončení prohlížeče chrome při zadání "chrome://settings" + sami se mi otvírají v chromu okna "hitsnews.ru"
Díky J.Táborský
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 11-01-2017
Ran by taborsky (administrator) on TABORSKY-W7 (12-01-2017 16:34:46)
Running from C:\Users\taborsky\Desktop
Loaded Profiles: taborsky (Available Profiles: kpsag & UpdatusUser & taborsky)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe
() C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenManager64.exe
(SafeNet Inc.) C:\Windows\System32\hasplms.exe
(Bdrive Inc.) C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe
(SafeNet, Inc) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe
(SafeNet, Inc.) C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(FileOpen Systems Inc.) C:\Program Files\FileOpen\Services\FileOpenBroker64.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2013\avgui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C. Ghisler & Co.) C:\Program Files (x86)\WinCmd601\Totalcmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\winsxs\amd64_microsoft-windows-i..etexplorer-optional_31bf3856ad364e35_11.2.9600.18314_none_7b179df5c2cc57fc\iexplore.exe
(forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11776104 2011-02-11] (Realtek Semiconductor)
HKLM\...\Run: [pdfFactory Pro Dispatcher v3] => C:\Windows\system32\spool\DRIVERS\x64\3\fppdis3a.exe [754688 2009-12-15] (FinePrint Software, LLC)
HKLM\...\Run: [FileOpenBroker] => C:\Program Files\FileOpen\Services\FileOpenBroker64.exe [1566200 2015-11-09] (FileOpen Systems Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2013\avgui.exe [4431848 2015-12-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle Corporation)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2012-12-03] (ICQ, LLC.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27226072 2016-11-15] (Skype Technologies S.A.)
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2035acce-b5b2-11e4-812b-50e549305d87} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL F:\InstallPVElite.html
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {2970e612-b2d3-11e5-9438-50e549305d87} - F:\Lenovo_Suite.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\...\MountPoints2: {8e7e81ea-b2ee-11e2-9802-50e549305d87} - G:\Startme.exe
HKU\S-1-5-21-2645362398-634994700-1304489594-1002\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\ssText3d.scr [333824 2010-11-21] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2012-07-24]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
GroupPolicy: Restriction <======= ATTENTION
GroupPolicy\User: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.4.180
Tcpip\..\Interfaces\{025972D8-045C-4547-B75E-CFA624D169E3}: [DhcpNameServer] 192.168.4.180
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={D44514EA-E4AC-11E2-B199-50E549305D87}&&st=23&ptr=100
SearchScopes: HKU\S-1-5-21-2645362398-634994700-1304489594-1002 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = hxxp://go.mail.ru/distib/ep/?q={SearchTerms}&product_id=%7B158C4843-7CE9-4189-AB0A-96AEF66FAFE5%7D&gp=811041
BHO: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: No Name -> {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} -> No File
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2017-01-04] (Oracle Corporation)
BHO-x32: Ďîčńę@Mail.Ru -> {8E8F97CD-60B5-456F-A201-73065652D099} -> C:\Users\taborsky\AppData\Local\Mail.Ru\Sputnik\IESearchPlugin.dll [2017-01-12] (Mail.Ru)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2017-01-04] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_5_502_110.dll [2012-12-07] ()
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_5_502_110.dll [2012-12-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2017-01-04] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll [2012-06-21] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2013-01-18] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-12] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-12-17] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2645362398-634994700-1304489594-1002: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\taborsky\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2013-07-20] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\taborsky\AppData\Roaming\mozilla\plugins\npatgpc.dll [2015-04-13] (Cisco WebEx LLC)
Chrome:
=======
CHR HomePage: Default -> hxxp://www.idnes.cz/
CHR StartupUrls: Default -> "hxxp://www.idnes.cz/"
CHR Profile: C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default [2017-01-12]
CHR Extension: (Prezentace Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-12]
CHR Extension: (Dokumenty Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-12]
CHR Extension: (Disk Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-12]
CHR Extension: (YouTube) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-12]
CHR Extension: (Java API Search) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\dphfngjamcomlehblpblaacingmaojnm [2017-01-12]
CHR Extension: (Tabulky Google) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-12]
CHR Extension: (Dokumenty Google offline) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-12]
CHR Extension: (Cisco WebEx Extension) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2017-01-12]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-12]
CHR Extension: (Gmail) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-12]
CHR Extension: (Chrome Media Router) - C:\Users\taborsky\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-01-12]
CHR HKLM-x32\...\Chrome\Extension: [nbdbmopeebalgaeghmjoegpkngglikgn] - C:\Program Files (x86)\FreeHDSport.TV\freehdsporttv10.crx [2013-06-30]
StartMenuInternet: Google Chrome.FIRPS77TRSXZA4DHYIAU3YPSIQ - C:\Users\kpsag\AppData\Local\Google\Chrome\Application\chrome.exe
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\winx64\ansysli_server.exe [4856320 2014-01-07] (ANSYS, Inc.) [File not signed]
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe [4948456 2015-10-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe [283136 2013-11-20] (AVG Technologies CZ, s.r.o.)
R2 CHEMCAD System Authorization; C:\Program Files (x86)\Chemstations\CHEMCAD\sysauth_service.exe [451592 2015-06-22] ()
R2 FileOpenManager; C:\Program Files\FileOpen\Services\FileOpenManager64.exe [380920 2015-11-09] (FileOpen Systems Inc.)
R2 hasplms; C:\Windows\system32\hasplms.exe [4683144 2014-07-17] (SafeNet Inc.)
R2 ndsvc; C:\Program Files\MacroData Inc\NetDrive\ndsvc.exe [2791424 2013-02-01] (Bdrive Inc.) [File not signed]
R2 SentinelKeysServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Keys Server\sntlkeyssrvr.exe [376832 2013-01-09] (SafeNet, Inc.) [File not signed]
R2 SentinelProtectionServer; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Protection Server\WinNT\spnsrvnt.exe [1259872 2013-01-09] (SafeNet, Inc)
R2 SentinelSecurityRuntime; C:\Program Files (x86)\Common Files\SafeNet Sentinel\Sentinel Security Runtime\sntlsrtsrvr.exe [293216 2013-01-09] (SafeNet, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 akshasp; C:\Windows\System32\DRIVERS\akshasp.sys [60488 2013-03-15] (SafeNet Inc.)
S3 akshhl; C:\Windows\System32\DRIVERS\akshhl.sys [63944 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\Windows\System32\DRIVERS\aksusb.sys [303624 2013-08-01] (SafeNet Inc.)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [246072 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [158160 2015-05-21] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [209720 2014-11-03] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [360400 2015-05-21] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [204192 2016-03-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [45880 2013-10-23] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [249296 2015-05-26] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-04-24] (DT Soft Ltd)
R2 hardlock; C:\Windows\system32\drivers\hardlock.sys [331608 2014-07-17] (SafeNet Inc.)
S3 ndfs; C:\Program Files\MacroData Inc\NetDrive\ndfs.sys [63712 2013-02-01] (Bdrive Inc.)
R0 pwdrvio; C:\Windows\System32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc.)
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-12 16:34 - 2017-01-12 16:34 - 00016631 _____ C:\Users\taborsky\Desktop\FRST.txt
2017-01-12 16:30 - 2017-01-12 16:30 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Desktop\FRSTLauncher.exe
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 72477.crdownload
2017-01-12 16:28 - 2017-01-12 16:28 - 00112640 _____ (forum.viry.cz) C:\Users\taborsky\Downloads\Nepotvrzeno 289372.crdownload
2017-01-12 16:25 - 2017-01-12 16:34 - 00000000 ____D C:\FRST
2017-01-12 16:24 - 2017-01-12 16:24 - 02419200 _____ (Farbar) C:\Users\taborsky\Desktop\FRST64.exe
2017-01-12 15:39 - 2017-01-12 15:45 - 00003384 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2017-01-12 15:39 - 2017-01-12 15:45 - 00003256 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2017-01-12 15:39 - 2017-01-12 15:39 - 00002267 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-12 15:39 - 2017-01-12 15:39 - 00002255 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-12 14:00 - 2017-01-12 14:00 - 00006222 _____ C:\Users\taborsky\Documents\cc_20170112_140006.reg
2017-01-12 14:00 - 2017-01-12 14:00 - 00000396 _____ C:\Users\taborsky\Documents\cc_20170112_140021.reg
2017-01-12 12:29 - 2017-01-12 12:34 - 418352476 _____ C:\Users\taborsky\Downloads\shop_lyfter__.mp4
2017-01-12 12:26 - 2017-01-12 12:34 - 321860544 _____ C:\Users\taborsky\Downloads\shop_lyfter_.mp4
2017-01-12 12:21 - 2017-01-12 12:33 - 1624215456 _____ C:\Users\taborsky\Downloads\let_me_suck_you-5.mp4
2017-01-12 12:21 - 2017-01-12 12:25 - 709237916 _____ C:\Users\taborsky\Downloads\let_me_suck_you-4.mp4
2017-01-12 12:20 - 2017-01-12 12:24 - 268839289 _____ C:\Users\taborsky\Downloads\tushy_adria.mp4
2017-01-12 11:18 - 2017-01-12 13:54 - 00000000 ____D C:\Users\taborsky\AppData\Local\Amigo
2017-01-12 11:18 - 2017-01-12 11:18 - 00003638 _____ C:\Windows\System32\Tasks\hitsnews
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\Users\taborsky\AppData\Local\Mail.Ru
2017-01-12 11:18 - 2017-01-12 11:18 - 00000000 ____D C:\ProgramData\Mail.Ru
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Windows\hsperfdata_taborsky
2017-01-12 10:55 - 2017-01-12 10:55 - 00000000 ____D C:\Users\taborsky\AppData\Local\eclipse
2017-01-12 10:54 - 2017-01-12 10:57 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Zona
2017-01-11 13:08 - 2017-01-11 13:29 - 1529951430 _____ C:\Users\taborsky\Downloads\HeOnHo_karol_lilien.mp4
2017-01-11 13:05 - 2017-01-11 13:31 - 1682998918 _____ C:\Users\taborsky\Downloads\HeOnHo_lady_dee.mp4
2017-01-09 10:05 - 2017-01-09 11:40 - 1688200783 _____ C:\Users\taborsky\Downloads\POVBitch_mea.melone.and.wendy.moon.mp4
2017-01-06 13:58 - 2017-01-06 13:58 - 00064259 _____ C:\Users\taborsky\Desktop\SEZNAM_2016.pdf
2017-01-04 08:58 - 2017-01-04 08:58 - 00097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-01-04 08:58 - 2017-01-04 08:58 - 00000000 ____D C:\Program Files (x86)\Java
2017-01-04 08:58 - 2017-01-04 08:55 - 00110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2016-12-21 17:37 - 2016-12-21 17:37 - 00435181 _____ C:\Users\taborsky\Downloads\Doklad_163924500PV.pdf
2016-12-21 17:31 - 2016-12-21 17:31 - 02455868 _____ C:\Users\taborsky\Downloads\2617010400_31-EV104.pdf
2016-12-20 16:25 - 2016-12-20 16:25 - 07204056 _____ C:\Users\taborsky\Downloads\cela_pisen-data.mp3
2016-12-15 17:45 - 2016-12-15 17:45 - 07632896 _____ C:\Users\taborsky\Downloads\ATOMEX_GROUP_PREZENTACE_201211.pps
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-01-12 16:29 - 2012-11-28 11:19 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Skype
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:12 - 2009-07-14 05:45 - 00032096 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-01-12 16:09 - 2015-03-18 15:16 - 00720302 _____ C:\Windows\system32\perfh019.dat
2017-01-12 16:09 - 2015-03-18 15:16 - 00152548 _____ C:\Windows\system32\perfc019.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00674234 _____ C:\Windows\system32\perfh005.dat
2017-01-12 16:09 - 2011-04-12 09:34 - 00143782 _____ C:\Windows\system32\perfc005.dat
2017-01-12 16:09 - 2009-07-14 06:13 - 02466190 _____ C:\Windows\system32\PerfStringBackup.INI
2017-01-12 16:09 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2017-01-12 16:08 - 2012-06-21 07:04 - 00005731 _____ C:\Windows\WINCMD.INI
2017-01-12 16:06 - 2012-06-21 08:14 - 00000962 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001218 _____ C:\Windows\Tasks\FreeHDSport TV-updater.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001212 _____ C:\Windows\Tasks\FreeHDSport TV-codedownloader.job
2017-01-12 16:05 - 2013-07-04 14:22 - 00001122 _____ C:\Windows\Tasks\FreeHDSport TV-enabler.job
2017-01-12 16:05 - 2012-11-28 10:36 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\ICQ
2017-01-12 16:03 - 2012-06-21 06:34 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-12 16:03 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Google
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Users\taborsky\AppData\Local\Deployment
2017-01-12 15:39 - 2012-11-27 15:31 - 00000000 ____D C:\Program Files (x86)\Google
2017-01-12 12:34 - 2012-06-21 06:52 - 00000000 ____D C:\ProgramData\MFAData
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-01-12 11:18 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-01-12 11:06 - 2012-06-21 08:14 - 00000910 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job
2017-01-12 10:55 - 2012-12-12 14:58 - 00000000 ____D C:\Users\taborsky\AppData\Roaming\Mozilla
2017-01-11 09:22 - 2014-11-07 08:22 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2017-01-10 21:14 - 2015-01-05 08:36 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-01-10 08:25 - 2016-04-04 09:36 - 00000000 ____D C:\ProgramData\boost_interprocess
2017-01-06 12:59 - 2016-09-24 11:16 - 00000000 ____D C:\Users\taborsky\Downloads\00
2017-01-06 10:19 - 2016-07-25 14:14 - 00000000 ____D C:\Users\taborsky\Downloads\0
2017-01-06 08:29 - 2009-07-14 06:08 - 00032618 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2017-01-05 15:07 - 2013-05-15 15:07 - 00053721 _____ C:\Windows\VVD.INI
2017-01-05 10:29 - 2013-05-15 15:07 - 00001057 _____ C:\Windows\CADCNTRL.INI
2017-01-04 08:58 - 2014-11-07 08:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-01-04 08:58 - 2013-12-06 08:40 - 00000000 ____D C:\ProgramData\Oracle
2017-01-04 08:57 - 2016-04-21 08:37 - 00000000 ____D C:\Program Files\Java
2017-01-04 08:55 - 2016-04-21 08:37 - 00110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2016-12-18 05:27 - 2013-06-19 12:27 - 00000000 ____D C:\Users\taborsky\AppData\Local\ElevatedDiagnostics
2016-12-15 17:41 - 2016-02-08 10:20 - 00000000 ____D C:\Program Files (x86)\VVD_16
2016-12-14 08:16 - 2016-01-04 12:09 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-12-14 08:16 - 2012-11-28 11:19 - 00000000 ____D C:\ProgramData\Skype
==================== Files in the root of some directories =======
2012-12-20 08:52 - 2016-09-16 13:32 - 0000033 _____ () C:\Users\taborsky\AppData\Roaming\PV_ACAD.bin
2015-08-14 14:06 - 2015-08-14 14:09 - 0007680 _____ () C:\Users\taborsky\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-02-27 12:30 - 2015-01-16 14:04 - 0007599 _____ () C:\Users\taborsky\AppData\Local\Resmon.ResmonCfg
Some files in TEMP:
====================
C:\Users\kpsag\AppData\Local\Temp\AcDeltree.exe
C:\Users\kpsag\AppData\Local\Temp\JavaIC.dll
C:\Users\kpsag\AppData\Local\Temp\jre-6u33-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u7-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\jre-7u9-windows-i586-iftw.exe
C:\Users\kpsag\AppData\Local\Temp\msscct32.dll
C:\Users\kpsag\AppData\Local\Temp\_isE81.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-01-07 06:54
==================== End of FRST.txt ============================
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:195.21 GB) (Free:21.16 GB) NTFS
Drive d: () (Fixed) (Total:736.2 GB) (Free:35.56 GB) NTFS
Drive f: (ctyrka-1) (Fixed) (Total:1863.14 GB) (Free:1616.96 GB) NTFS
Drive g: (terka) (Fixed) (Total:931.51 GB) (Free:3.24 GB) NTFS
Drive h: (ctyrka-2) (Fixed) (Total:1862.76 GB) (Free:1018.08 GB) NTFS
Drive n: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive x: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive y: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Drive z: () (Network) (Total:1861.88 GB) (Free:824.76 GB)
Available physical RAM: 12904.14 MB
Total physical RAM: 16367.12 MB
Percentage of memory in use: 21%
==================== MBR and Partition Table ==================
Reduce PDF Size (HKLM-x32\...\{32BD8FD9-8990-46A0-B86B-857F11014DF6}_is1) (Version: - reducepdfsize.com)
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 3C90B3EA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=736.2 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 3726 GB) (Disk ID: 00000000)
Disk: 6 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 00021631)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\FreeHDSport TV-codedownloader.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-codedownloader.exe
Task: C:\Windows\Tasks\FreeHDSport TV-enabler.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-enabler.exe
Task: C:\Windows\Tasks\FreeHDSport TV-updater.job => C:\Program Files (x86)\FreeHDSport TV\FreeHDSport TV-updater.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000Core.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2645362398-634994700-1304489594-1000UA.job => C:\Users\kpsag\AppData\Local\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: AVG AntiVirus Business Edition (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: AVG update module (Disabled - Up to date) {4D41356F-32AD-7C42-C820-63775EE4F413}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG update module (Disabled - Up to date) {F620D48B-1497-73CC-F290-58052563BEAE}
AS: AVG AntiVirus Business Edition (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\taborsky\Desktop" je 64 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================