﻿Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
Ran by Brano (administrator) on BRANO-PC (20-09-2015 15:52:32)
Running from C:\Users\Brano\Downloads
Loaded Profiles: Brano (Available Profiles: Brano & Oco)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Slovenčina (Slovensko)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office12\WINWORD.EXE
(Microsoft Corporation) C:\Windows\splwow64.exe
(Nullsoft, Inc.) C:\Program Files (x86)\Winamp\winamp.exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595848 2015-01-28] (ESET)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [676608 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [PowerDVD13Agent] => C:\Program Files (x86)\CyberLink\PowerDVD13\PowerDVD13Agent.exe [517144 2013-07-05] (CyberLink Corp.)
HKLM-x32\...\runonceex: [Flags] => 
HKU\S-1-5-21-1572061999-2087841598-3217571495-1000\...\Run: [CD Bremse] => [X]
HKU\S-1-5-21-1572061999-2087841598-3217571495-1000\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
Startup: C:\Users\Brano\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Setup.lnk [2015-03-11]
ShortcutTarget: Setup.lnk -> C:\ProgramData\{a9adfca5-ed52-380d-a9ad-dfca5ed5f297}\Setup.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 8.8.8.8 8.8.4.4 172.16.1.17
Tcpip\..\Interfaces\{9B9F017D-318D-4653-90E8-C8604C546AC6}: [DhcpNameServer] 8.8.8.8 8.8.4.4 172.16.1.17
Tcpip\..\Interfaces\{E3DF3D7D-4BAF-48EC-AE63-2096B45D5CF1}: [DhcpNameServer] 8.8.8.8 8.8.4.4 172.17.16.1

Internet Explorer:
==================
URLSearchHook: HKU\S-1-5-21-1572061999-2087841598-3217571495-1000 -> Default = {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE}
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-1572061999-2087841598-3217571495-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
SearchScopes: HKU\S-1-5-21-1572061999-2087841598-3217571495-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1572061999-2087841598-3217571495-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?FORM=WLETDF&PC=WLEM&q={searchTerms}&src=IE-SearchBox
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2013-08-14] (RealDownloader)

FireFox:
========
FF ProfilePath: C:\Users\Brano\AppData\Roaming\Mozilla\Firefox\Profiles\64t8iywu.default-1411029687930
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll [2013-12-23] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [No File]
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll [2013-12-23] ()
FF Plugin-x32: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\SysWOW64\npDeployJava1.dll [2014-01-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2013-02-05] (Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll [2014-09-28] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll [2013-08-14] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 -> C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll [2014-09-28] (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 -> C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll [2013-08-14] (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2013-12-09] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppl3260.dll [2014-09-28] (RealNetworks, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpplugin.dll [2014-09-28] (RealPlayer)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll [2010-12-02] (Nullsoft, Inc.)
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2014-09-28]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome: 
=======
CHR Profile: C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-09-15]
CHR Extension: (Disk Google) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-09-15]
CHR Extension: (YouTube) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-12-18]
CHR Extension: (Google Search) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-12-18]
CHR Extension: (Dokumenty Google v režime offline) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-16]
CHR Extension: (RealDownloader) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-09-28]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-12-19]
CHR Extension: (Gmail) - C:\Users\Brano\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-12-18]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ElevationManager\AdobeUpdateService.exe [710320 2015-02-15] (Adobe Systems Incorporated)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-08-30] (Advanced Micro Devices, Inc.) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 CyberLink PowerDVD 13 Media Server Monitor Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSMonitorServicePDVD13.exe [77576 2013-07-05] (CyberLink)
R2 CyberLink PowerDVD 13 Media Server Service; C:\Program Files (x86)\CyberLink\PowerDVD13\Kernel\DMS\CLMSServerPDVD13.exe [327432 2013-07-05] (CyberLink)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2015-01-28] (ESET)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [246000 2015-03-10] (ESET)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241880 2015-03-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169792 2015-03-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2015-03-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2015-03-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [64208 2015-03-10] (ESET)
R2 npf; C:\Windows\System32\drivers\npf.sys [47632 2010-01-27] (CACE Technologies, Inc.)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [62720 2003-10-10] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [51712 2009-06-10] (Realtek Semiconductor Corporation                           )
S3 s1039bus; C:\Windows\System32\DRIVERS\s1039bus.sys [127600 2009-11-19] (MCCI Corporation)
S3 s1039mdfl; C:\Windows\System32\DRIVERS\s1039mdfl.sys [19568 2009-11-19] (MCCI Corporation)
S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [161904 2009-11-19] (MCCI Corporation)
S3 s1039mgmt; C:\Windows\System32\DRIVERS\s1039mgmt.sys [141424 2009-11-19] (MCCI Corporation)
S3 s1039nd5; C:\Windows\System32\DRIVERS\s1039nd5.sys [34416 2009-11-19] (MCCI Corporation)
S3 s1039obex; C:\Windows\System32\DRIVERS\s1039obex.sys [137328 2009-11-19] (MCCI Corporation)
S3 s1039unic; C:\Windows\System32\DRIVERS\s1039unic.sys [158320 2009-11-19] (MCCI Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-19] (Duplex Secure Ltd.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
R2 {09F57980-3432-4AFC-957D-27AC45FAE1F5}; C:\Program Files (x86)\CyberLink\PowerDVD13\Common\NavFilter\000.fcl [130320 2013-07-06] (CyberLink Corp.)
U3 alj71usy; C:\Windows\System32\Drivers\alj71usy.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-20 15:52 - 2015-09-20 15:53 - 00015808 _____ C:\Users\Brano\Downloads\FRST.txt
2015-09-20 15:52 - 2015-09-20 15:52 - 00000000 ____D C:\FRST
2015-09-20 15:51 - 2015-09-20 15:51 - 02191360 _____ (Farbar) C:\Users\Brano\Downloads\FRST64.exe
2015-09-20 15:50 - 2015-09-20 15:50 - 00015327 _____ C:\Users\Brano\Desktop\LM.bat
2015-09-20 15:46 - 2015-09-20 15:50 - 00029696 _____ C:\Users\Brano\AppData\Local\MSGBOX.EXE
2015-09-20 15:46 - 2015-09-20 15:46 - 00112640 _____ (forum.viry.cz) C:\Users\Brano\Desktop\FRSTLauncher.exe
2015-09-20 08:42 - 2015-09-20 08:42 - 00003340 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-1572061999-2087841598-3217571495-1000
2015-09-20 08:42 - 2015-09-20 08:42 - 00003206 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-1572061999-2087841598-3217571495-1000
2015-09-19 18:46 - 2015-09-19 18:46 - 00000000 ____D C:\Users\Oco\AppData\Roaming\CyberLink
2015-09-19 18:46 - 2015-09-19 18:46 - 00000000 ____D C:\Users\Oco\AppData\Local\MediaServer
2015-09-19 18:46 - 2015-09-19 18:46 - 00000000 ____D C:\Users\Oco\AppData\Local\Cyberlink SoftDMA
2015-09-19 18:45 - 2015-09-19 18:45 - 00000000 ____D C:\Users\Oco\AppData\Local\CyberLink
2015-09-18 18:13 - 2015-09-18 18:13 - 00001157 _____ C:\Users\Public\Desktop\Day of Defeat Source.lnk
2015-09-18 18:13 - 2015-09-18 18:13 - 00001117 _____ C:\Users\Public\Desktop\Update Day of Defeat Source.lnk
2015-09-18 18:13 - 2015-09-18 18:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Strogino CS Portal
2015-09-17 19:34 - 2015-09-17 21:09 - 1624535040 _____ C:\Users\Brano\Downloads\Kralovstvo-nebeske-SK-Dabing.avi
2015-09-17 18:53 - 2015-09-17 18:54 - 00000000 ____D C:\Users\Brano\Desktop\Nový priečinok (6)
2015-09-17 15:30 - 2015-09-19 19:25 - 00003362 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-1572061999-2087841598-3217571495-1000
2015-09-17 15:30 - 2015-09-19 19:25 - 00003228 _____ C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-1572061999-2087841598-3217571495-1000
2015-09-15 20:52 - 2015-09-15 20:52 - 00013036 _____ C:\Users\Brano\Desktop\Nový textový dokument.txt
2015-09-15 20:25 - 2015-09-15 20:25 - 00003612 _____ C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Brano
2015-09-15 20:25 - 2015-09-15 20:25 - 00003198 _____ C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Brano
2015-09-15 18:39 - 2015-09-15 18:39 - 00000205 _____ C:\folders.txt
2015-09-15 18:39 - 2015-09-15 18:39 - 00000077 _____ C:\files.log
2015-09-15 18:39 - 2015-09-15 18:15 - 00024064 _____ C:\Windows\zoek-delete.exe
2015-09-15 18:32 - 2015-09-15 18:39 - 00000000 ____D C:\zoek
2015-09-15 18:18 - 2015-09-15 18:40 - 00012725 _____ C:\zoek-results.log
2015-09-15 18:15 - 2015-09-15 18:34 - 00000000 ____D C:\zoek_backup
2015-09-15 18:14 - 2015-09-15 18:15 - 01308672 _____ C:\Users\Brano\Downloads\zoek.exe
2015-09-14 19:42 - 2015-09-14 19:45 - 00000000 ____D C:\Users\Brano\Desktop\Nový priečinok (5)
2015-09-13 23:26 - 2015-09-14 21:04 - 00000217 _____ C:\Users\Brano\Desktop\ukf.txt
2015-09-13 18:17 - 2015-09-13 18:19 - 00000000 ____D C:\AdwCleaner
2015-09-13 18:16 - 2015-09-13 18:16 - 01660416 _____ C:\Users\Brano\Downloads\adwcleaner_5.007.exe
2015-09-13 18:14 - 2015-09-20 09:29 - 00003488 _____ C:\Windows\System32\Tasks\ReclaimerUpdateXML_Brano
2015-09-13 18:14 - 2015-09-17 19:25 - 00003494 _____ C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Brano
2015-09-13 15:36 - 2015-09-13 15:36 - 01222144 _____ C:\Users\Brano\Downloads\RSITx64.exe
2015-09-09 23:06 - 2015-09-09 23:06 - 00082046 _____ C:\Users\Brano\Downloads\dd9a10a2.zip
2015-09-09 22:42 - 2015-09-09 22:42 - 01224319 _____ C:\Users\Brano\Downloads\fusiontube_v109.zip
2015-09-09 14:29 - 2015-09-09 14:33 - 101200016 _____ C:\Users\Brano\Desktop\Premietanie videa - Pavol Demitra - by Branislav Kysucký.wmv
2015-09-09 14:27 - 2015-09-09 14:33 - 01464928 _____ C:\Users\Brano\Desktop\Finalna verzia 2.wmv.sfk1
2015-09-09 14:27 - 2015-09-09 14:27 - 281250296 _____ C:\Users\Brano\Desktop\Finalna verzia 2.wmv.sfap1
2015-09-09 14:26 - 2015-09-09 14:27 - 93750200 _____ C:\Users\Brano\Desktop\Finalna verzia 2.wmv.sfap0
2015-09-09 14:26 - 2015-09-09 14:26 - 00979152 _____ C:\Users\Brano\Desktop\Demitra.wmv.sfk0
2015-09-09 13:38 - 2015-09-09 13:38 - 00488528 _____ C:\Users\Brano\Desktop\32 bit.wmv.sfk0
2015-09-09 13:09 - 2015-09-09 13:13 - 101463112 _____ C:\Users\Brano\Desktop\PAVOL DEMITRA rozlucka s repre premiera by Branislav Kysucký.wmv
2015-09-09 10:27 - 2015-09-09 10:31 - 1213069704 _____ C:\Users\Brano\Desktop\Edit Comp! Render Me!_6.avi
2015-09-08 21:51 - 2015-09-08 21:51 - 00000000 ____D C:\Users\Brano\Desktop\Film Music, Ambiance
2015-09-08 20:22 - 2015-09-08 20:44 - 543045079 _____ C:\Users\Brano\Downloads\Film Music ONLY.rar
2015-09-08 19:39 - 2015-09-08 19:39 - 00510768 _____ C:\Users\Brano\Desktop\FlashPlayerPlugin_11_9_900_170 2015-09-08 19-30-25-50.avi.sfk
2015-09-08 19:30 - 2015-09-08 19:36 - 1382484624 _____ C:\Users\Brano\Desktop\FlashPlayerPlugin_11_9_900_170 2015-09-08 19-30-25-50.avi
2015-09-08 19:22 - 2015-09-08 19:22 - 00000572 _____ C:\Users\Public\Desktop\Fraps.lnk
2015-09-08 19:22 - 2015-09-08 19:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-09-08 19:21 - 2015-09-08 19:24 - 52939111 _____ C:\Users\Brano\Downloads\Fraps-plná-verze-3.4.7-od-herní-skup..rar
2015-09-08 19:17 - 2015-09-08 19:17 - 02628149 _____ C:\Users\Brano\Downloads\Fraps-plná-verze.zip
2015-09-07 22:41 - 2015-09-07 22:41 - 00000000 ____D C:\Users\Brano\AppData\Local\Cyberlink SoftDMA
2015-09-07 22:36 - 2015-09-07 22:36 - 00000000 ____D C:\Users\Brano\AppData\Local\MediaServer
2015-09-07 22:36 - 2015-09-07 22:36 - 00000000 ____D C:\MediaServer
2015-09-07 22:35 - 2015-09-07 22:35 - 00001415 _____ C:\Users\Public\Desktop\CyberLink PowerDVD 13.lnk
2015-09-07 22:35 - 2015-09-07 22:35 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 13
2015-09-07 22:34 - 2015-09-07 22:34 - 00000000 ____D C:\Program Files (x86)\CyberLink
2015-09-07 22:33 - 2015-09-07 22:34 - 00000000 ____D C:\ProgramData\Temp
2015-09-07 22:28 - 2015-09-07 22:32 - 133066052 ____R C:\Users\Brano\Downloads\PowerDVD-13.0.3105.58-Ultra-CZ.rar
2015-09-07 22:14 - 2015-09-07 22:24 - 171241156 _____ C:\Users\Brano\Downloads\PowerDVD_15.0.1804.58_Patch_DVD150508-01_cz.exe
2015-09-06 21:17 - 2015-09-06 21:23 - 00000000 ____D C:\Users\Brano\Desktop\Nový priečinok (3)
2015-09-06 20:45 - 2015-09-12 14:22 - 00000000 ____D C:\Users\Brano\Downloads\Felon (2008)
2015-09-04 14:40 - 2013-12-26 18:43 - 1592217600 _____ C:\Users\Brano\Desktop\smrtonosna_zbran_4.avi
2015-09-04 11:40 - 2013-12-26 18:45 - 1581174784 _____ C:\Users\Brano\Desktop\smrtonosna_zbran_3.avi
2015-09-03 18:12 - 2015-09-03 20:05 - 1575856128 _____ C:\Users\Brano\Desktop\Smrtonosná-zbraň-2-SK.avi
2015-09-03 17:00 - 2013-12-26 18:44 - 1575022592 _____ C:\Users\Brano\Desktop\smrtonosna_zbran_1.avi
2015-09-03 11:48 - 2015-09-12 14:19 - 00000000 ____D C:\Users\Brano\Downloads\SMRTONOSNÁ PAST 1-4
2015-09-02 22:27 - 2015-09-02 23:55 - 1566407599 _____ C:\Users\Brano\Desktop\Forest-Gump.mp4
2015-09-01 13:07 - 2015-09-15 20:49 - 00000000 ____D C:\Users\Brano\Desktop\Pivoo
2015-08-31 12:19 - 2015-09-09 14:26 - 00057024 _____ C:\Users\Brano\Desktop\Untitled.veg
2015-08-31 09:54 - 2015-08-31 09:54 - 00000000 ____D C:\Program Files\Sony
2015-08-31 09:22 - 2015-07-23 19:43 - 00000000 ____D C:\Users\Brano\Desktop\Sony Vegas Pro 13.0 Build 453 + Crack [Kedar_CZ]
2015-08-31 09:17 - 2015-08-31 09:18 - 00785840 _____ C:\Users\Brano\Desktop\Pavol Demitra - Uvedenie do siene slávy.avi.sfk
2015-08-31 09:16 - 2015-08-31 10:03 - 00000000 ____D C:\Users\Brano\Desktop\Vegas
2015-08-26 18:16 - 2015-08-26 18:28 - 741850200 _____ C:\Users\Brano\Desktop\960x540_2.avi
2015-08-26 17:58 - 2015-08-26 17:58 - 1617021320 _____ C:\Users\Brano\Desktop\LOGO_2.avi
2015-08-26 16:17 - 2015-08-26 16:17 - 00015085 _____ C:\Users\Brano\Downloads\intro 3(2).rar
2015-08-25 21:14 - 2015-08-25 21:42 - 486246603 _____ C:\Users\Brano\Desktop\Sony-Vegas-Pro-13.0-Build-453-(64-bit)-+-Crack-[Kedar_CZ].rar
2015-08-25 20:24 - 2015-08-25 20:24 - 00002008 _____ C:\Users\Public\Desktop\Preset Manager 2.0.lnk
2015-08-25 15:12 - 2015-08-25 15:12 - 00002171 _____ C:\Users\Public\Desktop\Preset Manager 1.0.lnk
2015-08-25 15:12 - 2015-08-25 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sonic Foundry
2015-08-25 15:12 - 2015-08-25 15:12 - 00000000 ____D C:\Program Files (x86)\Sonic Foundry
2015-08-25 15:11 - 2015-08-25 15:11 - 00000000 ____D C:\Program Files\Sonic Foundry Setup
2015-08-24 13:43 - 2015-08-24 13:48 - 00308800 _____ C:\Users\Brano\Downloads\ITS BODYBUILDING MOTHERFUCKER ___.mp3.sfk
2015-08-21 22:49 - 2015-08-22 10:29 - 1528677889 _____ C:\Users\Brano\Downloads\Sileny.Max.Zbesila.cesta.2015.BRRip.XviD.AC3.CZ.titulky.avi

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-20 15:48 - 2015-05-16 13:43 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d08fcd839de28e.job
2015-09-20 15:48 - 2014-11-14 10:37 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cfffe641e69724.job
2015-09-20 15:42 - 2014-10-18 23:31 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4ab95c120830.job
2015-09-20 14:48 - 2014-10-18 23:31 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf4ab95ae36ed2.job
2015-09-20 10:08 - 2013-12-19 04:26 - 01682055 _____ C:\Windows\WindowsUpdate.log
2015-09-20 08:52 - 2013-12-18 22:11 - 00000000 ____D C:\Users\Brano\AppData\Local\Adobe
2015-09-20 08:42 - 2015-05-16 13:43 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d08fcd82e08338.job
2015-09-20 08:42 - 2014-07-12 15:52 - 00058343 _____ C:\Windows\setupact.log
2015-09-20 08:42 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-19 19:38 - 2014-08-28 18:38 - 00000240 _____ C:\Users\Brano\Desktop\CSFD UCTY.txt
2015-09-19 18:46 - 2013-12-18 22:15 - 00116368 _____ C:\Users\Oco\AppData\Local\GDIPFONTCACHEV1.DAT
2015-09-18 19:43 - 2015-05-16 13:43 - 00003932 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA1d08fcd839de28e
2015-09-18 19:43 - 2015-05-16 13:43 - 00003680 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore1d08fcd82e08338
2015-09-18 18:09 - 2014-05-21 23:10 - 00000000 ____D C:\Program Files\Strogino CS Portal
2015-09-16 16:48 - 2009-07-14 06:45 - 00016832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-16 16:48 - 2009-07-14 06:45 - 00016832 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-15 18:39 - 2014-08-24 08:36 - 00032784 _____ C:\Windows\PFRO.log
2015-09-13 18:23 - 2015-03-03 21:19 - 00000000 ____D C:\PHP FUSION
2015-09-13 15:36 - 2014-07-08 08:52 - 00000000 ____D C:\Program Files\trend micro
2015-09-12 14:22 - 2015-08-07 22:27 - 00000000 ____D C:\Users\Brano\Downloads\Schindlers.List.1993.1080p.BluRay.x264.anoXmous
2015-09-12 14:22 - 2015-06-09 22:22 - 00000000 ____D C:\Users\Brano\Downloads\w
2015-09-12 14:22 - 2015-03-12 11:46 - 00000000 ____D C:\Users\Brano\Downloads\Memory.Card.Recovery.v3.60.1012.With.Serial.Key-Kuttootta
2015-09-12 14:22 - 2015-02-15 09:31 - 00000000 ____D C:\Users\Brano\Downloads\Pearl.Harbor.2001.1080p.BluRay.x264.anoXmous
2015-09-12 14:22 - 2015-01-23 13:12 - 00000000 ____D C:\Users\Brano\Downloads\Adobe Photoshop CS5 CZ
2015-09-12 14:20 - 2015-06-10 11:51 - 00000000 ____D C:\Users\Brano\Downloads\My Bloody Valentine (2009) [1080p]
2015-09-12 14:20 - 2015-06-02 18:21 - 00000000 ____D C:\Users\Brano\Downloads\Pirates Of The Caribbean 4
2015-09-12 14:20 - 2015-06-01 08:47 - 00000000 ____D C:\Users\Brano\Downloads\Warrior.2011.1080p.BluRay.x264.anoXmous
2015-09-12 14:20 - 2015-05-31 19:42 - 00000000 ____D C:\Users\Brano\Downloads\The Flowers Of War (2011)
2015-09-12 14:20 - 2015-03-24 17:34 - 00000000 ____D C:\Users\Brano\Downloads\Adobe Premiere Pro CC 2014 v8.0.1
2015-09-12 14:19 - 2015-05-22 19:55 - 00000000 ____D C:\Users\Brano\Downloads\Die Mannschaft (The Team) (2014) [With the English Subtitles]
2015-09-12 14:19 - 2013-12-18 23:49 - 00000000 ___RD C:\Users\Brano\Filmy
2015-09-11 21:22 - 2013-12-18 22:18 - 00000000 ____D C:\Users\Brano\AppData\Roaming\uTorrent
2015-09-08 19:22 - 2014-02-21 12:57 - 00000000 ____D C:\Fraps
2015-09-07 22:42 - 2015-05-18 18:53 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2015-09-07 22:42 - 2015-05-18 18:45 - 00000000 ____D C:\ProgramData\CyberLink
2015-09-07 22:41 - 2015-05-18 18:53 - 00000000 ____D C:\Users\Brano\Documents\CyberLink
2015-09-07 22:41 - 2015-05-18 18:53 - 00000000 ____D C:\Users\Brano\AppData\Roaming\CyberLink
2015-09-07 22:36 - 2015-05-18 18:45 - 00000000 ____D C:\ProgramData\install_clap
2015-09-07 22:35 - 2015-05-18 18:53 - 00000000 ____D C:\Users\Public\CyberLink
2015-09-07 22:35 - 2015-05-18 18:50 - 00000000 ____D C:\Users\Brano\AppData\Local\CyberLink
2015-09-07 22:33 - 2013-12-18 21:48 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-09-07 22:29 - 2015-05-18 18:45 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2015-09-01 23:11 - 2015-01-23 23:31 - 00000132 _____ C:\Users\Brano\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-08-31 17:11 - 2009-07-14 07:13 - 00781298 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-31 12:50 - 2013-12-18 22:37 - 00000000 ____D C:\Users\Brano\BStudio
2015-08-31 09:54 - 2013-12-19 20:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-08-31 09:54 - 2013-12-18 22:47 - 00000000 ____D C:\Users\Brano\AppData\Roaming\Sony
2015-08-31 09:20 - 2015-08-04 15:33 - 00000000 ____D C:\Users\Brano\Desktop\Posilka
2015-08-31 09:15 - 2015-06-30 11:57 - 00000000 ____D C:\Users\Brano\Desktop\Nový priečinok (4)
2015-08-28 08:29 - 2014-05-10 16:45 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-26 15:45 - 2009-07-14 06:45 - 05121248 _____ C:\Windows\system32\FNTCACHE.DAT
2015-08-26 13:34 - 2013-12-19 21:32 - 00116368 _____ C:\Users\Brano\AppData\Local\GDIPFONTCACHEV1.DAT
2015-08-26 10:23 - 2014-07-15 20:17 - 00000000 ____D C:\Users\Brano\Documents\OFX Presets
2015-08-25 20:24 - 2013-12-18 22:49 - 00000000 ____D C:\Program Files (x86)\Sony
2015-08-21 15:48 - 2015-08-02 14:33 - 00000000 ____D C:\Users\Brano\Desktop\Sofia
2015-08-21 14:47 - 2013-12-22 12:58 - 00000000 ____D C:\Program Files (x86)\Magic Video Converter

==================== Files in the root of some directories =======

2015-01-23 23:31 - 2015-09-01 23:11 - 0000132 _____ () C:\Users\Brano\AppData\Roaming\Adobe Formát PNG CS5 – předvolby
2015-05-18 18:24 - 2015-05-18 18:24 - 0000000 _____ () C:\Users\Brano\AppData\Roaming\AVSMediaPlayer.m3u
2002-08-29 19:33 - 2002-08-29 19:33 - 0319488 ____R () C:\Users\Brano\AppData\Roaming\MafiaSetup.exe
2014-08-22 14:57 - 2014-08-22 14:57 - 0003584 _____ () C:\Users\Brano\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-22 20:30 - 2014-11-22 20:34 - 0004096 ____H () C:\Users\Brano\AppData\Local\keyfile3.drm
2015-09-20 15:46 - 2015-09-20 15:50 - 0029696 _____ () C:\Users\Brano\AppData\Local\MSGBOX.EXE
2013-12-19 19:07 - 2013-12-24 23:21 - 0007597 _____ () C:\Users\Brano\AppData\Local\Resmon.ResmonCfg

Some files in TEMP:
====================
C:\Users\Brano\AppData\Local\Temp\lowproc.exe
C:\Users\Brano\AppData\Local\Temp\stubhelper.dll


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-09-12 19:58

==================== End of FRST.txt ============================