﻿Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by cierna (administrator) on PC on 15-03-2015 11:24:34
Running from C:\Documents and Settings\cierna\Dokumenty\Preberanie
Loaded Profiles: cierna & UpdatusUser (Available profiles: cierna & UpdatusUser & Administrator)
Platform: Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 7 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
() C:\WINDOWS\system32\PnkBstrA.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.exe
(Hewlett-Packard Company) C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
(Hewlett-Packard Company) C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
() C:\Program Files\DivX\DivX Update\DivXUpdate.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
(BitTorrent Inc.) C:\Documents and Settings\cierna\Data aplikací\BitTorrent\BitTorrent.exe
(ICQ) C:\Documents and Settings\cierna\Data aplikací\ICQM\icq.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
(Hewlett-Packard Co.) C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [16861184 2008-04-10] (Realtek Semiconductor Corp.)
HKLM\...\Run: [Alcmtr] => C:\WINDOWS\ALCMTR.EXE [69632 2005-05-03] (Realtek Semiconductor Corp.)
HKLM\...\Run: [HP Software Update] => C:\Program Files\HP\HP Software Update\HPWuSchd2.exe [49152 2004-02-12] (Hewlett-Packard Company)
HKLM\...\Run: [HP Component Manager] => C:\Program Files\HP\hpcoretech\hpcmpmgr.exe [241664 2004-05-12] (Hewlett-Packard Company)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [3080264 2011-09-22] (ESET)
HKLM\...\Run: [DivXUpdate] => C:\Program Files\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] => RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
HKLM\...\Run: [nwiz] => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1634112 2012-08-30] ()
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\...\Run: [EA Core] => "C:\Program Files\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\...\Run: [Google Update] => C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [116648 2014-02-04] (Google Inc.)
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\...\Run: [BitTorrent] => C:\Documents and Settings\cierna\Data aplikací\BitTorrent\BitTorrent.exe [1388888 2014-11-27] (BitTorrent Inc.)
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\...\Run: [icq] => C:\Documents and Settings\cierna\Data aplikací\ICQM\icq.exe [36705800 2015-01-09] (ICQ)
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\...\MountPoints2: {26a12fd8-39e4-11e1-b234-002421a9fa8e} - E:\Startme.exe
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\scrnsave.scr [9216 2008-04-14] (Microsoft Corporation)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\HP Digital Imaging Monitor.lnk
ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\HP Image Zone Fast Start.lnk
ShortcutTarget: HP Image Zone Fast Start.lnk -> C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe (Hewlett-Packard Co.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1177238915-1078081533-682003330-1005\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
URLSearchHook: [S-1-5-21-1177238915-1078081533-682003330-1008] ATTENTION ==> Default URLSearchHook is missing.
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "http://www.google.com" <======= ATTENTION
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1177238915-1078081533-682003330-1008 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
Toolbar: HKU\S-1-5-21-1177238915-1078081533-682003330-1005 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1290850109578
Handler: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll [2004-05-12] (Hewlett-Packard Company)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-10-09] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Documents and Settings\cierna\Data aplikací\Mozilla\Firefox\Profiles\m3hzca5d.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-13] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll [2011-09-16] (Adobe Systems, Inc.)
FF Plugin: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files\DivX\DivX Plus Web Player\npdivx32.dll [2011-12-13] (DivX, LLC)
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll [2011-06-20] (DivX, LLC.)
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\WINDOWS\system32\npDeployJava1.dll [2013-07-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-07-20] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.7\npGoogleUpdate3.dll [2015-02-13] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.7\npGoogleUpdate3.dll [2015-02-13] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2012-07-19] (VideoLAN)
FF Plugin HKU\S-1-5-21-1177238915-1078081533-682003330-1005: @talk.google.com/GoogleTalkPlugin -> C:\Documents and Settings\cierna\Data aplikací\Mozilla\plugins\npgoogletalk.dll [2014-03-14] (Google)
FF Plugin HKU\S-1-5-21-1177238915-1078081533-682003330-1005: @talk.google.com/O1DPlugin -> C:\Documents and Settings\cierna\Data aplikací\Mozilla\plugins\npo1d.dll [2014-03-14] (Google)
FF Plugin HKU\S-1-5-21-1177238915-1078081533-682003330-1005: @tools.google.com/Google Update;version=3 -> C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-1177238915-1078081533-682003330-1005: @tools.google.com/Google Update;version=9 -> C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Update\1.3.22.5\npGoogleUpdate3.dll [2014-02-16] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\cierna\Data aplikací\mozilla\plugins\npgoogletalk.dll [2014-03-14] (Google)
FF Plugin ProgramFiles/Appdata: C:\Documents and Settings\cierna\Data aplikací\mozilla\plugins\npo1d.dll [2014-03-14] (Google)
FF Extension: CinemaP-1.9c - C:\Documents and Settings\cierna\Data aplikací\Mozilla\Firefox\Profiles\m3hzca5d.default\Extensions\OIBMBKA115048682@HYKFIU97176590.com [2015-02-28]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-03-14]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-03-14]
FF HKLM\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 &lt;video&gt; - C:\Program Files\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2012-02-24]

Chrome: 
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default
CHR Extension: (Awesome Color Picker) - C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\flkdgmgdgnpdecpaaoggnbjcdmbnagbj [2015-03-08]
CHR Extension: (AdBlock) - C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-02-22]
CHR Extension: (Deezer Mediakeys Reloaded) - C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\jcjacdgelmcehgcakabkobhgiamfklah [2015-03-14]
CHR Extension: (My IMDb) - C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\ngicopfkgbodejbbfalbmobdpjebhhmb [2015-03-14]
CHR Extension: (Google Wallet) - C:\Documents and Settings\cierna\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
CHR HKLM\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx [2011-12-12]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [974944 2011-09-22] (ESET)
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182184 2013-07-20] (Oracle Corporation)
S3 Pml Driver HPZ12; C:\WINDOWS\system32\HPZipm12.exe [65536 2004-03-18] (HP) [File not signed]
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [75136 2012-05-07] ()
R2 Skype C2C Service; C:\Documents and Settings\All Users\Data aplikací\Skype\Toolbars\Skype C2C Service\c2c_service.exe [3275136 2013-10-09] (Skype Technologies S.A.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R2 eamon; C:\WINDOWS\System32\DRIVERS\eamon.sys [154136 2011-08-09] (ESET)
R1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [118104 2011-08-04] (ESET)
R2 epfw; C:\WINDOWS\System32\DRIVERS\epfw.sys [147480 2011-08-04] (ESET)
R3 Epfwndis; C:\WINDOWS\System32\DRIVERS\Epfwndis.sys [39824 2011-08-09] (ESET)
R1 epfwtdi; C:\WINDOWS\System32\DRIVERS\epfwtdi.sys [61936 2011-08-04] (ESET)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [51088 2004-06-21] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2004-06-21] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21744 2004-06-21] (HP)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
R3 NVENETFD; C:\WINDOWS\System32\DRIVERS\NVENETFD.sys [54016 2008-01-29] (NVIDIA Corporation)
R0 nvgts; C:\WINDOWS\System32\DRIVERS\nvgts.sys [132096 2008-01-25] (NVIDIA Corporation)
R3 nvnetbus; C:\WINDOWS\System32\DRIVERS\nvnetbus.sys [22016 2008-01-29] (NVIDIA Corporation)
R1 prodrv06; C:\WINDOWS\System32\drivers\prodrv06.sys [52224 2004-01-26] (Protection Technology) [File not signed]
R0 prohlp02; C:\WINDOWS\System32\drivers\prohlp02.sys [95552 2004-01-26] (Protection Technology) [File not signed]
R0 prosync1; C:\WINDOWS\System32\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
S3 s1039mdm; C:\WINDOWS\System32\DRIVERS\s1039mdm.sys [124016 2010-03-01] (MCCI Corporation)
R0 sfhlp01; C:\WINDOWS\System32\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S4 IntelIde; No ImagePath
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [X]
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-15 11:24 - 2015-03-15 11:24 - 00000000 ____D () C:\FRST
2015-03-15 11:03 - 2015-03-15 11:03 - 01388333 _____ (Thisisu) C:\Documents and Settings\cierna\Plocha\JRT.exe
2015-03-15 10:46 - 2015-03-15 10:56 - 00000000 ____D () C:\AdwCleaner
2015-03-15 10:46 - 2015-03-15 10:46 - 02171392 _____ () C:\Documents and Settings\cierna\Plocha\AdwCleaner.exe
2015-03-14 17:07 - 2015-03-14 17:07 - 00000000 ____D () C:\Program Files\Deezer Mediakeys Reloaded
2015-03-14 15:16 - 2015-03-14 15:16 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-03-14 13:07 - 2015-03-14 13:07 - 00000000 ____D () C:\Program Files\My IMDb
2015-03-14 12:39 - 2015-03-14 12:42 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha\BODET
2015-03-14 12:34 - 2015-03-14 12:42 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha\KANAPA
2015-03-08 21:47 - 2015-03-08 21:47 - 00000000 ____D () C:\Program Files\Awesome Color Picker
2015-03-08 17:47 - 2015-03-14 17:07 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\12280393897937154176UL
2015-02-22 12:38 - 2015-02-22 12:38 - 00000777 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2015-02-22 12:38 - 2015-02-22 12:38 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes Anti-Malware
2015-02-22 12:37 - 2015-02-22 12:38 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2015-02-22 12:37 - 2015-02-22 12:37 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2015-02-22 12:37 - 2014-11-21 06:14 - 00054360 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-02-22 12:37 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-15 11:25 - 2010-03-01 08:51 - 00000000 ____D () C:\Documents and Settings\cierna\Local Settings\Temp
2015-03-15 11:24 - 2013-06-16 12:31 - 00000000 ____D () C:\Documents and Settings\cierna\Data aplikací\BitTorrent
2015-03-15 11:24 - 2011-10-04 15:04 - 00000000 ____D () C:\Documents and Settings\cierna\Dokumenty\Preberanie
2015-03-15 11:19 - 2009-09-21 07:25 - 01466611 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-15 11:18 - 2012-10-30 19:57 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-03-15 11:16 - 2010-03-07 13:44 - 00000924 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-03-15 11:03 - 2010-03-01 08:51 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha
2015-03-15 10:59 - 2014-06-19 09:14 - 00000378 _____ () C:\WINDOWS\Tasks\Opera scheduled Autoupdate 1398015538.job
2015-03-15 10:59 - 2011-10-04 16:56 - 00000000 ____D () C:\Program Files\Opera
2015-03-15 10:58 - 2015-01-30 10:17 - 00001716 _____ () C:\WINDOWS\Tasks\GRICHKA.job
2015-03-15 10:58 - 2015-01-30 10:17 - 00001372 _____ () C:\WINDOWS\Tasks\GZFZAAT.job
2015-03-15 10:58 - 2012-08-15 17:00 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2015-03-15 10:58 - 2010-03-07 13:44 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-03-15 10:58 - 2010-03-01 08:51 - 00000272 ___SH () C:\Documents and Settings\cierna\ntuser.ini
2015-03-15 10:58 - 2010-03-01 08:51 - 00000000 ____D () C:\Documents and Settings\cierna
2015-03-15 10:58 - 2009-09-21 09:19 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2015-03-15 10:58 - 2009-09-21 09:19 - 00000051 _____ () C:\WINDOWS\wiaservc.log
2015-03-15 10:58 - 2009-09-21 07:32 - 00032618 _____ () C:\WINDOWS\SchedLgU.Txt
2015-03-15 10:58 - 2009-09-21 07:32 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-15 10:56 - 2014-02-04 16:46 - 00001014 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1078081533-682003330-1005UA.job
2015-03-15 10:56 - 2014-02-04 16:46 - 00000962 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-1078081533-682003330-1005Core.job
2015-03-15 10:56 - 2012-09-22 11:55 - 00000178 ___SH () C:\Documents and Settings\UpdatusUser\ntuser.ini
2015-03-15 10:55 - 2010-03-01 17:22 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ICQ
2015-03-15 10:55 - 2010-03-01 08:51 - 00000000 __RHD () C:\Documents and Settings\cierna\Data aplikací
2015-03-15 10:55 - 2010-03-01 08:51 - 00000000 ___RD () C:\Documents and Settings\cierna\Dokumenty
2015-03-15 10:55 - 2010-03-01 08:51 - 00000000 ___HD () C:\Documents and Settings\cierna\Local Settings\Data aplikací
2015-03-15 10:55 - 2009-09-21 09:15 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2015-03-15 10:21 - 2015-01-28 19:38 - 00000020 _____ () C:\Documents and Settings\cierna\Data aplikací\appdataFr3.bin
2015-03-14 12:43 - 2012-03-11 13:56 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha\11.03.2012, piesne
2015-03-14 12:43 - 2010-02-25 13:48 - 00000000 ___RD () C:\Documents and Settings\cierna\Plocha\Alena
2015-03-14 12:42 - 2010-05-07 18:41 - 00000069 _____ () C:\WINDOWS\NeroDigital.ini
2015-03-14 12:41 - 2015-01-01 20:33 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha\Gelové nechty
2015-03-14 12:40 - 2012-01-24 18:29 - 00000000 ___RD () C:\Documents and Settings\cierna\Plocha\recepty
2015-03-14 12:38 - 2014-11-27 17:29 - 00000000 ____D () C:\Documents and Settings\cierna\Plocha\Hasag
2015-03-14 12:26 - 2001-10-25 15:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-02-28 16:19 - 2014-07-04 06:13 - 00000000 ____D () C:\Documents and Settings\cierna\Local Settings\Data aplikací\Facebook
2015-02-22 13:06 - 2013-04-07 14:47 - 00000000 ____D () C:\Documents and Settings\cierna\Nabídka Start\Programy\Image-Line
2015-02-22 13:03 - 2013-04-01 16:22 - 00000000 ____D () C:\Program Files\Amazon
2015-02-22 13:02 - 2009-09-21 09:16 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2015-02-22 13:02 - 2009-09-21 09:16 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy
2015-02-22 11:04 - 2010-03-24 19:27 - 00070144 _____ () C:\Documents and Settings\cierna\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-02-22 10:50 - 2012-08-07 08:05 - 00000000 ____D () C:\Documents and Settings\cierna\Data aplikací\vlc
2015-02-13 20:18 - 2012-10-30 19:57 - 00701616 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-02-13 20:18 - 2011-09-12 14:29 - 00071344 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2015-01-28 19:38 - 2015-03-15 10:21 - 0000020 _____ () C:\Documents and Settings\cierna\Data aplikací\appdataFr3.bin
2015-01-25 17:12 - 2015-01-25 17:12 - 0001248 _____ () C:\Documents and Settings\cierna\Data aplikací\GRICHKA
2015-01-30 10:17 - 2015-01-30 10:17 - 1945560 _____ (Cinema PlusV30.01) C:\Documents and Settings\cierna\Data aplikací\GRICHKA.exe
2015-01-25 17:12 - 2015-01-25 17:12 - 0002086 _____ () C:\Documents and Settings\cierna\Data aplikací\GZFZAAT
2015-01-30 10:17 - 2015-01-30 10:17 - 1469400 _____ (Cinema PlusV30.01) C:\Documents and Settings\cierna\Data aplikací\GZFZAAT.exe
2012-02-06 19:15 - 2012-02-06 19:15 - 0000600 _____ () C:\Documents and Settings\cierna\Data aplikací\winscp.rnd
2010-03-24 19:27 - 2015-02-22 11:04 - 0070144 _____ () C:\Documents and Settings\cierna\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2010-03-01 15:51 - 2010-03-01 15:51 - 0000126 _____ () C:\Documents and Settings\cierna\Local Settings\Data aplikací\fusioncache.dat

Some content of TEMP:
====================
C:\Documents and Settings\cierna\Local Settings\Temp\10.exe
C:\Documents and Settings\cierna\Local Settings\Temp\11.exe
C:\Documents and Settings\cierna\Local Settings\Temp\12.exe
C:\Documents and Settings\cierna\Local Settings\Temp\13.exe
C:\Documents and Settings\cierna\Local Settings\Temp\14.exe
C:\Documents and Settings\cierna\Local Settings\Temp\15.exe
C:\Documents and Settings\cierna\Local Settings\Temp\16.exe
C:\Documents and Settings\cierna\Local Settings\Temp\17.exe
C:\Documents and Settings\cierna\Local Settings\Temp\1E4F.exe
C:\Documents and Settings\cierna\Local Settings\Temp\9.exe
C:\Documents and Settings\cierna\Local Settings\Temp\A.exe
C:\Documents and Settings\cierna\Local Settings\Temp\AutoRun.exe
C:\Documents and Settings\cierna\Local Settings\Temp\AutoRunGUI.dll
C:\Documents and Settings\cierna\Local Settings\Temp\B.exe
C:\Documents and Settings\cierna\Local Settings\Temp\BackupSetup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\BundleSweetIMSetup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\D.exe
C:\Documents and Settings\cierna\Local Settings\Temp\Delta.exe
C:\Documents and Settings\cierna\Local Settings\Temp\DeltaTB.exe
C:\Documents and Settings\cierna\Local Settings\Temp\DivXWebPlayerInstaller.exe
C:\Documents and Settings\cierna\Local Settings\Temp\down.5896.helper_setup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD10.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD10E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD11.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD12.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD13.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD132.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD134.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD136.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD138.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD14.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD14A.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD14C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD15.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD16.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD165.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD17.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD179.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD17F.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD18.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD184.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD19.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD192.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1A.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1A9.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1AC.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1B.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1C2.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1D.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1D8.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1D9.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1DE.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1DF.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD1F6.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2A.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2B.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2D.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD2E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD32.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD35.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD36.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD37.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD3C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD3E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD3F.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD4.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD40.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD41.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD4E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD53.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD54.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD55.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD59.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD61.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD69.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD6C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD6D.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD70.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD71.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD72.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD73.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD74.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD75.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD8.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD83.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD8B.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD9.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD9A.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD9C.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EAD9E.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADA.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADAC.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADB.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADC.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADC7.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADCE.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADD.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADD0.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADD2.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADE.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADF.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EADF3.exe
C:\Documents and Settings\cierna\Local Settings\Temp\EdRush[Discography]freetorrents.org__10609_il1847087.exe
C:\Documents and Settings\cierna\Local Settings\Temp\F.exe
C:\Documents and Settings\cierna\Local Settings\Temp\FreeTwitTube-S-Setup_Suite1.exe
C:\Documents and Settings\cierna\Local Settings\Temp\GLF637.tmp.tbBfli.dll
C:\Documents and Settings\cierna\Local Settings\Temp\GoogleToolbarInstaller_en32_signed.exe
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll222000.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll225406.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll228000.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll231328.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll241328.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll247500.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll288203.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll294156.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll377546.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll382296.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll406359.dll
C:\Documents and Settings\cierna\Local Settings\Temp\installerdll412359.dll
C:\Documents and Settings\cierna\Local Settings\Temp\jre-7u25-windows-i586-iftw.exe
C:\Documents and Settings\cierna\Local Settings\Temp\mgsqlite3.dll
C:\Documents and Settings\cierna\Local Settings\Temp\MTP112D.exe
C:\Documents and Settings\cierna\Local Settings\Temp\MyBabylonTB.exe
C:\Documents and Settings\cierna\Local Settings\Temp\NEWC99.tmp.exe
C:\Documents and Settings\cierna\Local Settings\Temp\nst1F70.tmp.ConduitEngineEmbbed.exe
C:\Documents and Settings\cierna\Local Settings\Temp\project1.exe
C:\Documents and Settings\cierna\Local Settings\Temp\prxGLF637.tmp.tbBfli.dll
C:\Documents and Settings\cierna\Local Settings\Temp\Quarantine.exe
C:\Documents and Settings\cierna\Local Settings\Temp\Refresh.exe
C:\Documents and Settings\cierna\Local Settings\Temp\setup_wm.exe
C:\Documents and Settings\cierna\Local Settings\Temp\Shortcut_bundlesweetimsetup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\Shortcut_SweetImSetup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\SIMEEIInstaller.exe
C:\Documents and Settings\cierna\Local Settings\Temp\SkypeSetup.exe
C:\Documents and Settings\cierna\Local Settings\Temp\Softonic-Eng7.exe
C:\Documents and Settings\cierna\Local Settings\Temp\SQLite.dll
C:\Documents and Settings\cierna\Local Settings\Temp\sqlite3.dll
C:\Documents and Settings\cierna\Local Settings\Temp\tbSof0.dll
C:\Documents and Settings\cierna\Local Settings\Temp\TsuFD76CEA6.dll
C:\Documents and Settings\cierna\Local Settings\Temp\ubi232.tmp.exe
C:\Documents and Settings\cierna\Local Settings\Temp\UninstallEADM.dll
C:\Documents and Settings\cierna\Local Settings\Temp\uttA60.tmp.exe
C:\Documents and Settings\cierna\Local Settings\Temp\uttA7E.tmp.exe
C:\Documents and Settings\cierna\Local Settings\Temp\WSSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================