﻿Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-12-2013 01
Ran by Pospa (administrator) on ACER on 13-12-2013 07:16:14
Running from C:\Documents and Settings\Pospa\Plocha
Systém Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Czech
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Intel Corporation) C:\WINDOWS\system32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCui.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel Corporation) C:\WINDOWS\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(CASIO COMPUTER CO.,LTD.) C:\Program Files\CASIO\Photo Loader\Plauto.exe
(Microsoft Corporation) C:\Program Files\Windows Desktop Search\WindowsSearch.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(Kenonic Controls Ltd.) C:\WINDOWS\system32\Crypserv.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre6\bin\jqs.exe
() C:\Program Files\CyberLink\Shared Files\RichVideo.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [HotKeysCmds] - C:\WINDOWS\system32\hkcmd.exe [ ] ()
HKLM\...\Run: [Apoint] - C:\Program Files\Apoint2K\Apoint.exe [172032 2006-07-04] (Alps Electric Co., Ltd.)
HKLM\...\Run: [Windows Defender] - C:\Program Files\Windows Defender\MSASCui.exe [866584 2006-11-03] (Microsoft Corporation)
HKLM\...\Run: [avast] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [4858968 2013-08-30] (AVAST Software)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [20131121] - C:\Program Files\AVAST Software\Avast\Setup\emupdate\21b363ca-e984-412f-82e3-dfcfa4063777.exe [180184 2013-11-24] (AVAST Software)
HKLM\...\Policies\Explorer\Run: [RTHDBPL] - C:\Documents and Settings\Pospa\Data aplikací\SystemProc\lsass.exe No File
HKCU\...\Run: [swg] - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2011-03-18] (Google Inc.)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKCU\...\Winlogon: [Shell] C:\Documents and Settings\Pospa\Data aplikací\hotfix.exe <==== ATTENTION 
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Photo Loader supervisory.lnk
ShortcutTarget: Photo Loader supervisory.lnk -> C:\Program Files\CASIO\Photo Loader\Plauto.exe (CASIO COMPUTER CO.,LTD.)
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\Windows Search.lnk
ShortcutTarget: Windows Search.lnk -> C:\Program Files\Windows Desktop Search\WindowsSearch.exe (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www2.inbox.com/search/dispatcher.aspx?tp=aus&qkw=%s&tbid=%tb_id&%language
URLSearchHook: HKCU - (No Name) - {D3D233D5-9F6D-436C-B6C7-E63F77503B30} -  No File
SearchScopes: HKCU - DefaultScope {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://www2.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80096&lng=cs
SearchScopes: HKCU - {C04B7D22-5AEC-4561-8F49-27F6269208F6} URL = http://www2.inbox.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=80096&lng=cs
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.7.9012.1008\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO: JQSIEStartDetectorImpl Class - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
Toolbar: HKCU - Google Toolbar - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKCU - No Name - {D7E97865-918F-41E4-9CD0-25AB1C574CE8} -  No File
DPF: {1C11B948-582A-433F-A98D-A8C4D5CC64F2} http://kitchenplanner.ikea.com/CZ/Core/Player/2020PlayerAX_Win32.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-0015-0000-0004-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinstall-1_5_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_05-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0017-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_17-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
ShellExecuteHooks: Microsoft AntiMalware ShellExecuteHook - {091EB208-39DD-417D-A5DD-7E2C2D8FB9CB} - C:\Program Files\Windows Defender\MpShHook.dll [83224 2006-11-03] (Microsoft Corporation)
ShellExecuteHooks: Windows Desktop Search Namespace Manager - {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Program Files\Windows Desktop Search\MsnlNamespaceMgr.dll [304128 2009-05-24] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Chrome: 
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://www.google.com"
CHR DefaultSearchKeyword: seznam.cz
CHR DefaultSearchProvider: Seznam
CHR DefaultSearchURL: http://search.seznam.cz/?q={searchTerms}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Java Deployment Toolkit 6.0.170.4) - C:\Program Files\Java\jre6\bin\new_plugin\npdeploytk.dll (Sun Microsystems, Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U17) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npdrmv2.dll (Microsoft Corporation)
CHR Plugin: (Microsoft\u00AE DRM) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corporation)
CHR Plugin: (Windows Media Player Plug-in Dynamic Link Library) - C:\Program Files\Windows Media Player\npdsplay.dll (Microsoft Corporation (written by Digital Renaissance Inc.))
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (Yahoo! activeX Plug-in Bridge) - C:\Program Files\Yahoo!\Common\npyaxmpb.dll (Yahoo! Inc.)
CHR Plugin: (Windows Presentation Foundation) - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (Chrome In-App Payments service) - C:\Documents and Settings\Pospa\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 Crypkey License; C:\Windows\System32\crypserv.exe [52224 2000-06-29] (Kenonic Controls Ltd.)
R2 RichVideo; C:\Program Files\CyberLink\Shared Files\RichVideo.exe [167936 2005-08-08] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [13592 2006-11-03] (Microsoft Corporation)
R2 JavaQuickStarterService; "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"

==================== Drivers (Whitelisted) ====================

S3 AR5211; C:\Windows\System32\DRIVERS\ar5211.sys [547072 2007-06-21] (Atheros Communications, Inc.)
R3 AR5416; C:\Windows\System32\DRIVERS\athw.sys [1985824 2012-01-10] (Atheros Communications, Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-08-30] (AVAST Software)
R0 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21576 2013-10-31] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [66336 2013-08-30] (AVAST Software)
R1 AswRdr; C:\Windows\System32\Drivers\AswRdr.sys [49760 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [177864 2013-08-30] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2012-05-06] ()
S3 EverestDriver; C:\Program Files\Lavalys\EVEREST Ultimate Edition\kerneld.wnt [20856 2007-04-05] ()
S3 FsUsbExDisk; C:\WINDOWS\system32\FsUsbExDisk.SYS [36608 2009-03-31] ()
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [53184 2007-06-27] (FTDI Ltd.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2012-05-06] ()
R1 NetworkX; C:\Windows\system32\ckldrv.sys [24608 2000-02-03] ()
S3 QV2KUX; C:\Windows\System32\DRIVERS\qv2kux.sys [3328 2001-08-17] (Microsoft Corporation)
R3 WSIMD; C:\Windows\System32\DRIVERS\wsimd.sys [58208 2009-03-16] (Atheros Communications, Inc.)
S1 DritekPortIO; \??\C:\PROGRA~1\LAUNCH~1\DPortIO.sys [x]
S4 IntelIde; No ImagePath
U5 ScsiPort; C:\Windows\system32\drivers\scsiport.sys [96384 2008-04-13] (Microsoft Corporation)
S3 ss_bbus; system32\DRIVERS\ss_bbus.sys [x]
S3 ss_bmdfl; system32\DRIVERS\ss_bmdfl.sys [x]
S3 ss_bmdm; system32\DRIVERS\ss_bmdm.sys [x]
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-12-13 07:16 - 2013-12-13 07:16 - 00009253 _____ C:\Documents and Settings\Pospa\Plocha\FRST.txt
2013-12-13 07:16 - 2013-12-13 07:16 - 00000000 ____D C:\Documents and Settings\Pospa\Plocha\FRST-OlderVersion
2013-12-13 07:15 - 2013-12-13 07:16 - 01060575 ____C (Farbar) C:\Documents and Settings\Pospa\Plocha\FRST.exe
2013-12-13 07:15 - 2013-12-13 07:15 - 00015327 _____ C:\Documents and Settings\Pospa\Plocha\LM.bat
2013-12-13 07:02 - 2013-12-13 07:15 - 00029696 _____ C:\Documents and Settings\Pospa\Local Settings\Data aplikací\MSGBOX.EXE
2013-12-12 21:47 - 2013-12-12 21:41 - 00401720 _____ (Trend Micro Inc.) C:\Documents and Settings\Pospa\Plocha\HijackThis.exe
2013-12-12 21:17 - 2013-12-12 21:17 - 00001695 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-12-12 21:17 - 2013-12-12 21:17 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-12-12 20:47 - 2013-12-13 07:16 - 00000000 ___DC C:\FRST
2013-12-12 19:49 - 2013-12-12 21:16 - 00012476 _____ C:\WINDOWS\setupapi.log
2013-12-12 11:47 - 2013-12-12 09:28 - 00000028 _____ C:\Documents and Settings\Pospa\Plocha\Novjjjý textový dokument.txt
2013-12-11 17:48 - 2013-12-11 17:49 - 08699272 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-12-11 16:48 - 2013-12-13 07:15 - 00000330 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2013-12-11 16:41 - 2013-12-13 07:13 - 00174132 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-11 16:41 - 2013-12-13 07:12 - 00000299 _____ C:\WINDOWS\wiadebug.log
2013-12-11 16:41 - 2013-12-13 07:12 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-12-11 16:41 - 2013-12-11 16:41 - 00000000 ____N C:\WINDOWS\Sti_Trace.log
2013-12-11 15:45 - 2013-12-11 16:45 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\Nový objekt - Aktovka
2013-11-30 17:28 - 2013-11-30 17:42 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\toyota repas
2013-11-30 17:26 - 2013-11-30 17:43 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\toyota bj40
2013-11-14 04:30 - 2013-11-14 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 04:30 - 2013-11-14 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 04:29 - 2013-11-14 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 04:29 - 2013-11-14 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$

==================== One Month Modified Files and Folders =======

2013-12-13 07:16 - 2013-12-13 07:16 - 00009253 _____ C:\Documents and Settings\Pospa\Plocha\FRST.txt
2013-12-13 07:16 - 2013-12-13 07:16 - 00000000 ____D C:\Documents and Settings\Pospa\Plocha\FRST-OlderVersion
2013-12-13 07:16 - 2013-12-13 07:15 - 01060575 ____C (Farbar) C:\Documents and Settings\Pospa\Plocha\FRST.exe
2013-12-13 07:16 - 2013-12-12 20:47 - 00000000 ___DC C:\FRST
2013-12-13 07:16 - 2008-06-25 14:31 - 00000000 ____D C:\Documents and Settings\Pospa\Plocha
2013-12-13 07:15 - 2013-12-13 07:15 - 00015327 _____ C:\Documents and Settings\Pospa\Plocha\LM.bat
2013-12-13 07:15 - 2013-12-13 07:02 - 00029696 _____ C:\Documents and Settings\Pospa\Local Settings\Data aplikací\MSGBOX.EXE
2013-12-13 07:15 - 2013-12-11 16:48 - 00000330 ____H C:\WINDOWS\Tasks\MP Scheduled Scan.job
2013-12-13 07:15 - 2008-06-25 14:31 - 00000000 ___HD C:\Documents and Settings\Pospa\Local Settings\Data aplikací
2013-12-13 07:13 - 2013-12-11 16:41 - 00174132 _____ C:\WINDOWS\WindowsUpdate.log
2013-12-13 07:13 - 2012-07-12 15:41 - 00000314 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2013-12-13 07:12 - 2013-12-11 16:41 - 00000299 _____ C:\WINDOWS\wiadebug.log
2013-12-13 07:12 - 2013-12-11 16:41 - 00000050 _____ C:\WINDOWS\wiaservc.log
2013-12-13 07:12 - 2011-03-18 04:30 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2013-12-13 07:12 - 2008-06-25 14:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2013-12-13 07:12 - 2001-10-25 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2013-12-13 07:11 - 2008-06-25 14:31 - 00000178 ___SH C:\Documents and Settings\Pospa\ntuser.ini
2013-12-13 07:11 - 2008-06-25 14:30 - 00032610 _____ C:\WINDOWS\SchedLgU.Txt
2013-12-13 07:10 - 2011-03-18 04:30 - 00000938 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2013-12-12 21:48 - 2012-08-11 17:32 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2013-12-12 21:41 - 2013-12-12 21:47 - 00401720 _____ (Trend Micro Inc.) C:\Documents and Settings\Pospa\Plocha\HijackThis.exe
2013-12-12 21:18 - 2008-06-25 14:31 - 00000000 ____D C:\Documents and Settings\Pospa
2013-12-12 21:17 - 2013-12-12 21:17 - 00001695 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2013-12-12 21:17 - 2013-12-12 21:17 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\avast! Free Antivirus
2013-12-12 21:17 - 2008-06-25 16:14 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2013-12-12 21:17 - 2008-06-25 16:14 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2013-12-12 21:17 - 2008-06-25 14:27 - 00002504 ____C C:\WINDOWS\system32\CONFIG.NT
2013-12-12 21:16 - 2013-12-12 19:49 - 00012476 _____ C:\WINDOWS\setupapi.log
2013-12-12 19:40 - 2008-06-25 15:14 - 00000000 __SHD C:\Documents and Settings\Pospa\UserData
2013-12-12 12:03 - 2008-06-28 12:17 - 00000116 ____C C:\WINDOWS\NeroDigital.ini
2013-12-12 11:59 - 2010-01-06 07:53 - 00076288 _____ C:\Documents and Settings\Pospa\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-12-12 09:28 - 2013-12-12 11:47 - 00000028 _____ C:\Documents and Settings\Pospa\Plocha\Novjjjý textový dokument.txt
2013-12-11 17:49 - 2013-12-11 17:48 - 08699272 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerInstaller.exe
2013-12-11 16:45 - 2013-12-11 15:45 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\Nový objekt - Aktovka
2013-12-11 16:41 - 2013-12-11 16:41 - 00000000 ____N C:\WINDOWS\Sti_Trace.log
2013-12-10 04:10 - 2011-01-01 17:07 - 00027648 _____ C:\Documents and Settings\Pospa\Plocha\domek 08.xls
2013-12-09 18:35 - 2010-11-18 12:53 - 00000000 ____D C:\Documents and Settings\Pospa\Data aplikací\vlc
2013-12-05 18:50 - 2010-11-18 14:04 - 00000000 ____D C:\Documents and Settings\Pospa\Data aplikací\dvdcss
2013-12-04 15:58 - 2012-10-20 18:28 - 00546816 ____R C:\Documents and Settings\Pospa\Local Settings\Data aplikací\vvddata.wrt
2013-12-03 17:59 - 2012-05-01 14:14 - 00000000 ____D C:\Documents and Settings\Pospa\Plocha\Nová složka
2013-12-01 14:59 - 2012-12-31 13:49 - 00012511 _____ C:\Documents and Settings\Pospa\Plocha\2013.xlsx
2013-11-30 17:43 - 2013-11-30 17:26 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\toyota bj40
2013-11-30 17:42 - 2013-11-30 17:28 - 00000000 ___RD C:\Documents and Settings\Pospa\Plocha\toyota repas
2013-11-26 18:46 - 2008-06-25 14:31 - 00000000 ___RD C:\Documents and Settings\Pospa\Oblíbené položky
2013-11-14 04:30 - 2013-11-14 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2900986$
2013-11-14 04:30 - 2013-11-14 04:30 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2868626$
2013-11-14 04:29 - 2013-11-14 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2876331$
2013-11-14 04:29 - 2013-11-14 04:29 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2862152$
2013-11-14 04:29 - 2010-11-17 21:53 - 00000000 ____D C:\WINDOWS\ie8updates
2013-11-14 04:27 - 2013-08-15 17:04 - 00000000 ____D C:\WINDOWS\system32\MRT
2013-11-14 04:22 - 2008-06-25 15:30 - 80340640 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2013-11-13 16:27 - 2008-06-25 16:15 - 01680034 _____ C:\WINDOWS\system32\PerfStringBackup.INI

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe
[2004-08-17 14:49] - [2008-04-14 07:52] - 1034240 ____A (Microsoft Corporation) 27afd587c462e280ee046b8cca3c2cd1 

C:\Windows\System32\winlogon.exe
[2004-08-17 14:49] - [2008-04-14 07:52] - 0507904 ____A (Microsoft Corporation) cddb1f8e1aea356f3ad106f2cf9b7fea 

C:\Windows\System32\svchost.exe
[2004-08-17 14:49] - [2008-04-14 07:52] - 0014336 ____A (Microsoft Corporation) be4a520e29b6391f49e79ccc52044d93 

C:\Windows\System32\services.exe
[2004-08-17 14:49] - [2009-02-09 12:25] - 0111104 ____A (Microsoft Corporation) 9ef697af07bb8dd82c3b02ca953a95b7 

C:\Windows\System32\User32.dll
[2004-08-17 14:49] - [2008-04-14 07:52] - 0578560 ____A (Microsoft Corporation) e16e0990967374e76f3e40cacafd3d53 

C:\Windows\System32\userinit.exe
[2004-08-17 14:49] - [2008-04-14 07:52] - 0026112 ____A (Microsoft Corporation) 7dc1830f22e7d275b438127b68030239 

C:\Windows\System32\Drivers\volsnap.sys
[2004-08-17 14:44] - [2008-04-14 06:42] - 0052480 ___AC (Microsoft Corporation) 28a4b296b47782173c346e376cb374d1 


==================== End Of Log ============================