﻿Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 08-03-2014 01
Ran by Jakub (administrator) on KUBEK on 09-03-2014 10:22:57
Running from C:\Users\Jakub\Desktop
Windows 8 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/ 
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/ 
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Advanced Audio v2\pcee4.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics) C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe
(Realtek semiconductor) C:\Windows\RTFTrack.exe
(Lenovo (Beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe
(Lenovo(beijing) Limited) C:\Program Files (x86)\Lenovo\Energy Management\utility.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(CyberLink) C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(CyberLink Corp.) C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe
(APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(APN LLC.) C:\Users\Jakub\AppData\Local\VNT\vntldr.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(ZONER software) C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE
(Naturpic Software) C:\Program Files (x86)\High Quality Photo Resizer\Resizer.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Jakub\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynLenovoGestureMgr] - C:\Program Files\Synaptics\SynTP\SynLenovoGestureMgr.exe [665400 2012-08-27] (Synaptics)
HKLM\...\Run: [RtsFT] - C:\windows\RTFTrack.exe [6334096 2012-08-27] (Realtek semiconductor)
HKLM\...\Run: [BTMTrayAgent] - C:\Program Files (x86)\Intel\Bluetooth\btmshellex.dll [11577216 2012-08-27] (Motorola Solutions, Inc.)
HKLM\...\Run: [Energy Management] - C:\Program Files (x86)\Lenovo\Energy Management\Energy Management.exe [17080376 2013-02-17] (Lenovo (Beijing) Limited)
HKLM\...\Run: [EnergyUtility] - C:\Program Files (x86)\Lenovo\Energy Management\Utility.exe [191544 2013-02-17] (Lenovo(beijing) Limited)
HKLM\...\Run: [MouseDriver] - C:\windows\system32\TiltWheelMouse.exe [241152 2013-04-09] (Pixart Imaging Inc)
HKLM-x32\...\Run: [YouCam Mirage] - C:\Program Files (x86)\Lenovo\YouCam\YCMMirage.exe [136488 2012-07-27] (CyberLink)
HKLM-x32\...\Run: [YouCam Tray] - C:\Program Files (x86)\Lenovo\YouCam\YouCamTray.exe [167024 2012-07-27] (CyberLink Corp.)
HKLM-x32\...\Run: [Intel AppUp(SM) center] - C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe [155488 2012-07-12] (Intel Corporation)
HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1757648 2014-02-08] (APN)
HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [195536 2014-02-08] (APN LLC.)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\Run: [NextLive] - C:\windows\SysWOW64\rundll32.exe "C:\Users\Jakub\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\Run: [FixMyRegistry] - C:\Program Files (x86)\SmartTweak\FixMyRegistry\FixMyRegistry.exe [1886840 2013-07-22] ()
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2144088 2009-01-26] (Safer Networking Limited)
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\Run: [Zoner Photo Studio Autoupdate] - C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [773728 2012-12-04] (ZONER software)
HKU\S-1-5-21-1590769430-2290388610-2074737809-1001\...\MountPoints2: {88731706-41a3-11e3-be77-6036ddeb1a76} - "E:\unlock.exe" autoplay=true
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSource=10&CUI=UN77939536719671131&UM=1&ctid=CT1750559
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://lenovo13.msn.com
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com
SearchScopes: HKLM - DefaultScope {21653EF1-C077-4F23-9F37-EA89E6570913} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM - {21653EF1-C077-4F23-9F37-EA89E6570913} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKLM-x32 - DefaultScope {9B1E40BC-8AD5-47E1-A020-1F95400EED14} URL = 
SearchScopes: HKLM-x32 - {21653EF1-C077-4F23-9F37-EA89E6570913} URL = http://www.bing.com/search?q={searchTerms}&form=IE10TR&src=IE10TR&pc=MALNJS
SearchScopes: HKCU - DefaultScope {9B1E40BC-8AD5-47E1-A020-1F95400EED14} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559&CUI=UN77939536719671131&UM=1
SearchScopes: HKCU - {21653EF1-C077-4F23-9F37-EA89E6570913} URL = 
SearchScopes: HKCU - {9B1E40BC-8AD5-47E1-A020-1F95400EED14} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559&CUI=UN77939536719671131&UM=1
BHO: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\PTV-RG\Passport_x64.dll (APN LLC.)
BHO-x32: Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll (APN LLC.)
BHO-x32: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
Toolbar: HKLM - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\PTV-RG\Passport_x64.dll (APN LLC.)
Toolbar: HKLM-x32 - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\PTV-RG\Passport.dll (APN LLC.)
Toolbar: HKCU - Ask Toolbar - {5054562D-5247-006A-76A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\PTV-RG\Passport_x64.dll (APN LLC.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha1984.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha1984\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha1984\ff [2014-02-28]

Chrome: 
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=13415
CHR Extension: (Disk Google) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-10-30]
CHR Extension: (YouTube) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-10-30]
CHR Extension: (Chrome YouTube Downloader) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbdjiinahkdjdcdlgfimlcolkjpbooja [2014-01-28]
CHR Extension: (VyhledÃÂ¡vÃÂ¡nÃÂ­ Google) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-10-30]
CHR Extension: (Media View) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\iglfdakmigkmaemiccbhbjemmcppaldi [2014-02-28]
CHR Extension: (PenÃÂÃÂ¾enka Google) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-30]
CHR Extension: (Gmail) - C:\Users\Jakub\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-10-30]
CHR HKLM-x32\...\Chrome\Extension: [aaaahnibljmklpljnbpgfobmfpfhplch] - C:\ProgramData\AskPartnerNetwork\Toolbar\PTV-RG\CRX\ToolbarCR.crx [2014-02-08]
CHR HKLM-x32\...\Chrome\Extension: [iglfdakmigkmaemiccbhbjemmcppaldi] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha1984\ch\MediaViewV1alpha1984.crx [2014-02-26]

==================== Services (Whitelisted) =================

R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2014-02-08] (APN LLC.)
R2 ExpressCache; C:\Program Files\Diskeeper Corporation\ExpressCache\ExpressCache.exe [79664 2012-03-30] (Diskeeper Corporation)
R2 irstrtsv; C:\windows\SysWOW64\irstrtsv.exe [193576 2012-07-20] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-08-28] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3378416 2013-08-28] (Intel® Corporation)

==================== Drivers (Whitelisted) ====================

R3 BthLEEnum; C:\Windows\system32\DRIVERS\BthLEEnum.sys [202752 2012-07-26] (Microsoft Corporation)
R3 btmaux; C:\Windows\system32\DRIVERS\btmaux.sys [121728 2012-08-27] (Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\system32\DRIVERS\btmhsf.sys [857472 2012-08-29] (Motorola Solutions, Inc.)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2013-10-30] (Disc Soft Ltd)
R1 excfs; C:\Windows\System32\DRIVERS\excfs.sys [23344 2012-03-30] (Diskeeper Corporation)
R0 excsd; C:\Windows\System32\DRIVERS\excsd.sys [95024 2012-03-30] (Diskeeper Corporation)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-20] (Intel Corporation)
R3 LAD; C:\Windows\System32\drivers\LAD.sys [8704 2012-06-08] (TODO: <Company name>)
R3 NETwNe64; C:\Windows\system32\DRIVERS\NETwew00.sys [3345376 2013-10-08] (Intel Corporation)
R3 rtsuvc; C:\Windows\system32\DRIVERS\rtsuvc.sys [8227216 2012-08-27] (Realtek Semiconductor Corp.)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [43832 2012-08-27] (Synaptics Incorporated)
S3 t_mouse.sys; C:\Windows\system32\DRIVERS\t_mouse.sys [6144 2013-04-09] ()
R3 usb3Hub; C:\Windows\System32\drivers\usb3Hub.sys [47072 2012-11-30] (Windows (R) Win 7 DDK provider)
S3 wsvd; C:\Windows\system32\DRIVERS\wsvd.sys [102376 2012-06-14] ("CyberLink)
R3 XHCIPort; C:\Windows\System32\drivers\XHCIPort.sys [188896 2012-11-30] (Windows (R) Win 7 DDK provider)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-09 10:22 - 2014-03-09 10:23 - 00014863 _____ () C:\Users\Jakub\Desktop\FRST.txt
2014-03-09 10:22 - 2014-03-09 10:22 - 00000000 ____D () C:\FRST
2014-03-09 10:20 - 2014-03-09 10:20 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Desktop\FRSTLauncher.exe
2014-03-09 10:19 - 2014-03-09 10:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Downloads\Nepotvrzeno 362992.crdownload
2014-03-09 10:19 - 2014-03-09 10:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Desktop\Nepotvrzeno 825596.crdownload
2014-03-09 10:16 - 2014-03-09 10:16 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Downloads\Nepotvrzeno 540688.crdownload
2014-03-09 10:15 - 2014-03-09 10:15 - 02156544 _____ (Farbar) C:\Users\Jakub\Desktop\FRST64.exe
2014-03-08 15:52 - 2014-03-08 16:39 - 1662502912 _____ () C:\Users\Jakub\Downloads\Kurs sebeovládání.avi
2014-03-08 15:51 - 2014-03-08 16:01 - 740252236 _____ () C:\Users\Jakub\Downloads\Kurz sebeovládání.mp4
2014-03-08 15:51 - 2014-03-08 15:51 - 00016408 _____ () C:\Users\Jakub\Downloads\[CzT]Kurs_sebeovladani_Anger_Management_2003_.torrent
2014-03-08 15:49 - 2014-03-08 15:49 - 00014666 _____ () C:\Users\Jakub\Downloads\[CzT]Kurz_sebeovladani_Anger_Management.torrent
2014-03-06 14:41 - 2014-03-06 14:48 - 00000000 ____D () C:\Users\Jakub\Desktop\Nová složka
2014-03-06 14:37 - 2014-03-06 14:37 - 00000788 _____ () C:\windows\setupact.log
2014-03-06 14:37 - 2014-03-06 14:37 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 21:23 - 2014-03-09 09:51 - 00453193 _____ () C:\windows\WindowsUpdate.log
2014-03-05 17:48 - 2014-03-05 17:48 - 00002772 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-03-05 17:47 - 2014-03-05 17:48 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-05 17:45 - 2014-03-05 17:45 - 00001227 _____ () C:\Users\Jakub\Desktop\FixMyRegistry.lnk
2014-03-05 17:39 - 2014-03-05 17:40 - 11183515 _____ () C:\Users\Jakub\Downloads\cc-setup (1).exe
2014-03-02 13:30 - 2014-03-03 11:40 - 00000000 ____D () C:\Users\Jakub\Desktop\cvic
2014-02-28 11:31 - 2014-02-28 11:31 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-28 10:29 - 2014-02-28 10:29 - 00000110 ____H () C:\Users\Jakub\Desktop\ryb1.jpg.uid-zps
2014-02-26 13:38 - 2014-02-26 13:38 - 00001780 _____ () C:\Users\Jakub\Downloads\Schéma trasy DSO - 0100250413.zip
2014-02-26 10:26 - 2014-03-05 17:52 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-26 10:26 - 2014-02-26 10:26 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-02-26 10:25 - 2014-02-26 10:26 - 11140364 _____ () C:\Users\Jakub\Downloads\cc-setup.exe
2014-02-26 10:24 - 2014-02-26 10:25 - 16409960 _____ (Safer Networking Limited ) C:\Users\Jakub\Downloads\spybotsd162.exe
2014-02-26 10:13 - 2014-02-26 10:13 - 00000000 ____D () C:\Users\Jakub\AppData\Local\AskPartnerNetwork
2014-02-24 11:31 - 2014-02-26 10:20 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-19 14:46 - 2014-02-19 14:47 - 39042128 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\FileFormatConverters.exe
2014-02-19 14:46 - 2014-02-19 14:47 - 24793312 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\Windows-KB890830-V5.9.exe
2014-02-19 14:46 - 2014-02-19 14:46 - 00961736 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\SaveAsPDFandXPS.exe
2014-02-17 11:19 - 2014-02-17 11:19 - 00000000 ____D () C:\ProgramData\RegClean
2014-02-13 23:29 - 2013-12-05 00:43 - 00583680 _____ (Microsoft Corporation) C:\windows\system32\msdrm.dll
2014-02-13 23:29 - 2013-12-05 00:37 - 00451072 _____ (Microsoft Corporation) C:\windows\SysWOW64\msdrm.dll
2014-02-13 16:31 - 2014-02-13 16:31 - 00000110 ____H () C:\Users\Jakub\Desktop\skotnica.jpg.uid-zps
2014-02-13 12:18 - 2014-02-01 10:20 - 00051712 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-02-13 12:18 - 2014-02-01 10:19 - 02241536 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-02-13 12:18 - 2014-02-01 10:19 - 01365504 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-02-13 12:18 - 2014-02-01 10:19 - 00915968 _____ (Microsoft Corporation) C:\windows\system32\uxtheme.dll
2014-02-13 12:18 - 2014-02-01 10:19 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\UXInit.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 19274240 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 15403520 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 03960320 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 02648576 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00603136 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00197120 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00136704 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00067072 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-02-13 12:18 - 2014-02-01 10:18 - 00039936 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-02-13 12:18 - 2014-02-01 08:58 - 01767936 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2014-02-13 12:18 - 2014-02-01 08:58 - 01140736 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2014-02-13 12:18 - 2014-02-01 08:58 - 00044032 _____ (Microsoft Corporation) C:\windows\SysWOW64\UXInit.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 13760512 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00493056 _____ (Microsoft Corporation) C:\windows\SysWOW64\msfeeds.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\msrating.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00109056 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesysprep.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00061440 _____ (Microsoft Corporation) C:\windows\SysWOW64\iesetup.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00039936 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2014-02-13 12:18 - 2014-02-01 08:57 - 00033280 _____ (Microsoft Corporation) C:\windows\SysWOW64\iernonce.dll
2014-02-13 12:18 - 2014-02-01 08:40 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-02-13 12:18 - 2014-02-01 08:34 - 02706432 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2014-02-13 12:18 - 2014-02-01 06:08 - 00534528 _____ (Microsoft Corporation) C:\windows\SysWOW64\uxtheme.dll
2014-02-13 12:18 - 2013-12-09 01:45 - 00523776 _____ (Microsoft Corporation) C:\windows\SysWOW64\vbscript.dll
2014-02-13 12:18 - 2013-12-09 00:59 - 00600064 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-02-13 12:18 - 2013-12-05 00:43 - 01845248 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-02-13 12:18 - 2013-12-05 00:37 - 01419264 _____ (Microsoft Corporation) C:\windows\SysWOW64\msxml3.dll
2014-02-13 12:18 - 2013-11-27 01:19 - 00385614 _____ () C:\windows\system32\ApnDatabase.xml
2014-02-13 12:18 - 2013-11-26 00:17 - 00083968 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2014-02-13 12:18 - 2013-11-01 06:53 - 02232664 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-02-13 12:17 - 2014-02-01 08:57 - 14359040 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2014-02-13 12:17 - 2014-02-01 08:57 - 02877952 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2014-02-13 12:17 - 2014-02-01 08:57 - 02049024 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2014-02-13 12:17 - 2014-02-01 08:57 - 00690688 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript.dll
2014-02-13 12:17 - 2014-01-13 00:30 - 02238976 _____ (Microsoft Corporation) C:\windows\system32\d3d10warp.dll
2014-02-13 12:17 - 2014-01-13 00:30 - 02032640 _____ (Microsoft Corporation) C:\windows\SysWOW64\d3d10warp.dll
2014-02-13 12:17 - 2013-11-20 01:15 - 03842560 _____ (Microsoft Corporation) C:\windows\system32\d2d1.dll
2014-02-13 12:17 - 2013-11-20 00:57 - 03288576 _____ (Microsoft Corporation) C:\windows\SysWOW64\d2d1.dll
2014-02-10 22:00 - 2014-03-02 11:52 - 00022683 _____ () C:\Users\Jakub\Desktop\Seznam_kontaktu-Jakub_Roman.xlsx

==================== One Month Modified Files and Folders =======

2014-03-09 10:23 - 2014-03-09 10:22 - 00014863 _____ () C:\Users\Jakub\Desktop\FRST.txt
2014-03-09 10:22 - 2014-03-09 10:22 - 00000000 ____D () C:\FRST
2014-03-09 10:20 - 2014-03-09 10:20 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Desktop\FRSTLauncher.exe
2014-03-09 10:19 - 2014-03-09 10:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Downloads\Nepotvrzeno 362992.crdownload
2014-03-09 10:19 - 2014-03-09 10:19 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Desktop\Nepotvrzeno 825596.crdownload
2014-03-09 10:16 - 2014-03-09 10:16 - 00112640 _____ (forum.viry.cz) C:\Users\Jakub\Downloads\Nepotvrzeno 540688.crdownload
2014-03-09 10:15 - 2014-03-09 10:15 - 02156544 _____ (Farbar) C:\Users\Jakub\Desktop\FRST64.exe
2014-03-09 10:10 - 2013-10-30 21:55 - 00000962 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-09 09:51 - 2014-03-05 21:23 - 00453193 _____ () C:\windows\WindowsUpdate.log
2014-03-09 09:40 - 2013-02-17 08:18 - 00727488 _____ () C:\windows\system32\perfh005.dat
2014-03-09 09:40 - 2013-02-17 08:18 - 00148006 _____ () C:\windows\system32\perfc005.dat
2014-03-09 09:40 - 2012-07-26 08:28 - 01714430 _____ () C:\windows\system32\PerfStringBackup.INI
2014-03-09 09:38 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\system32\sru
2014-03-08 23:10 - 2013-10-30 21:55 - 00000958 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-08 17:17 - 2013-11-11 09:38 - 00000000 ____D () C:\Users\Jakub\AppData\Roaming\uTorrent
2014-03-08 16:39 - 2014-03-08 15:52 - 1662502912 _____ () C:\Users\Jakub\Downloads\Kurs sebeovládání.avi
2014-03-08 16:31 - 2014-01-03 19:28 - 00000356 _____ () C:\windows\Tasks\AmiUpdXp.job
2014-03-08 16:01 - 2014-03-08 15:51 - 740252236 _____ () C:\Users\Jakub\Downloads\Kurz sebeovládání.mp4
2014-03-08 15:51 - 2014-03-08 15:51 - 00016408 _____ () C:\Users\Jakub\Downloads\[CzT]Kurs_sebeovladani_Anger_Management_2003_.torrent
2014-03-08 15:49 - 2014-03-08 15:49 - 00014666 _____ () C:\Users\Jakub\Downloads\[CzT]Kurz_sebeovladani_Anger_Management.torrent
2014-03-06 16:18 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\AUInstallAgent
2014-03-06 14:48 - 2014-03-06 14:41 - 00000000 ____D () C:\Users\Jakub\Desktop\Nová složka
2014-03-06 14:37 - 2014-03-06 14:37 - 00000788 _____ () C:\windows\setupact.log
2014-03-06 14:37 - 2014-03-06 14:37 - 00000000 _____ () C:\windows\setuperr.log
2014-03-05 17:53 - 2013-10-30 21:50 - 00000000 ____D () C:\Data
2014-03-05 17:52 - 2014-02-26 10:26 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-05 17:52 - 2013-12-21 12:38 - 00000000 ____D () C:\windows\Minidump
2014-03-05 17:52 - 2013-11-21 15:49 - 00000000 ____D () C:\Users\Jakub\AppData\Local\CrashDumps
2014-03-05 17:52 - 2013-10-30 22:03 - 00000000 ____D () C:\Users\Jakub\AppData\Roaming\DAEMON Tools Lite
2014-03-05 17:52 - 2012-10-10 01:08 - 00000000 ____D () C:\windows\Panther
2014-03-05 17:48 - 2014-03-05 17:48 - 00002772 _____ () C:\windows\System32\Tasks\CCleanerSkipUAC
2014-03-05 17:48 - 2014-03-05 17:47 - 00000000 ____D () C:\Program Files\CCleaner
2014-03-05 17:45 - 2014-03-05 17:45 - 00001227 _____ () C:\Users\Jakub\Desktop\FixMyRegistry.lnk
2014-03-05 17:45 - 2014-02-05 16:41 - 00000000 ____D () C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
2014-03-05 17:45 - 2014-02-05 16:40 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-03-05 17:40 - 2014-03-05 17:39 - 11183515 _____ () C:\Users\Jakub\Downloads\cc-setup (1).exe
2014-03-05 17:37 - 2014-01-03 19:28 - 00000000 ____D () C:\Users\Jakub\AppData\Roaming\newnext.me
2014-03-05 17:35 - 2012-07-26 08:22 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-03-03 11:40 - 2014-03-02 13:30 - 00000000 ____D () C:\Users\Jakub\Desktop\cvic
2014-03-02 11:52 - 2014-02-10 22:00 - 00022683 _____ () C:\Users\Jakub\Desktop\Seznam_kontaktu-Jakub_Roman.xlsx
2014-02-28 11:32 - 2014-01-19 22:52 - 00000311 _____ () C:\extensions.ini
2014-02-28 11:31 - 2014-02-28 11:31 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-28 11:31 - 2014-01-30 11:31 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-28 10:29 - 2014-02-28 10:29 - 00000110 ____H () C:\Users\Jakub\Desktop\ryb1.jpg.uid-zps
2014-02-26 13:45 - 2013-10-30 21:48 - 00003600 _____ () C:\windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1590769430-2290388610-2074737809-1001
2014-02-26 13:38 - 2014-02-26 13:38 - 00001780 _____ () C:\Users\Jakub\Downloads\Schéma trasy DSO - 0100250413.zip
2014-02-26 10:26 - 2014-02-26 10:26 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-02-26 10:26 - 2014-02-26 10:25 - 11140364 _____ () C:\Users\Jakub\Downloads\cc-setup.exe
2014-02-26 10:25 - 2014-02-26 10:24 - 16409960 _____ (Safer Networking Limited ) C:\Users\Jakub\Downloads\spybotsd162.exe
2014-02-26 10:21 - 2014-01-23 10:46 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-26 10:20 - 2014-02-24 11:31 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-26 10:15 - 2013-11-18 22:21 - 00000000 ____D () C:\Users\Jakub\AppData\Roaming\BSplayer
2014-02-26 10:15 - 2013-11-18 22:21 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-02-26 10:13 - 2014-02-26 10:13 - 00000000 ____D () C:\Users\Jakub\AppData\Local\AskPartnerNetwork
2014-02-20 11:00 - 2012-07-26 06:26 - 00262144 ___SH () C:\windows\system32\config\ELAM
2014-02-19 14:47 - 2014-02-19 14:46 - 39042128 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\FileFormatConverters.exe
2014-02-19 14:47 - 2014-02-19 14:46 - 24793312 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\Windows-KB890830-V5.9.exe
2014-02-19 14:47 - 2013-10-31 13:29 - 00000000 ____D () C:\Program Files (x86)\MSECache
2014-02-19 14:46 - 2014-02-19 14:46 - 00961736 _____ (Microsoft Corporation) C:\Users\Jakub\Downloads\SaveAsPDFandXPS.exe
2014-02-19 09:15 - 2012-07-26 09:12 - 00000000 ____D () C:\windows\rescache
2014-02-18 14:49 - 2013-11-01 22:52 - 00000000 ____D () C:\windows\system32\MRT
2014-02-18 14:46 - 2013-11-01 22:52 - 88567024 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-02-17 23:03 - 2013-11-16 22:09 - 00694240 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2014-02-17 23:03 - 2013-11-16 22:09 - 00078304 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-17 11:19 - 2014-02-17 11:19 - 00000000 ____D () C:\ProgramData\RegClean
2014-02-16 22:53 - 2012-07-26 06:26 - 00262144 ___SH () C:\windows\system32\config\BBI
2014-02-14 21:46 - 2013-10-31 17:05 - 00000000 ____D () C:\filmy
2014-02-14 10:02 - 2013-10-31 12:27 - 00000000 ____D () C:\Users\Jakub\AppData\Local\Microsoft Help
2014-02-13 16:31 - 2014-02-13 16:31 - 00000110 ____H () C:\Users\Jakub\Desktop\skotnica.jpg.uid-zps
2014-02-08 22:23 - 2013-11-10 21:10 - 00000000 ____D () C:\Users\Jakub\AppData\Local\VNT
2014-02-08 22:23 - 2013-11-10 21:10 - 00000000 ____D () C:\Program Files (x86)\VNT
2014-02-07 23:05 - 2013-10-30 21:55 - 00003934 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-07 23:05 - 2013-10-30 21:55 - 00003698 _____ () C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================

High Quality Photo Resizer 6.0 (HKLM-x32\...\High Quality Photo Resizer_is1) (Version:  - Naturpic Software)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\AmiUpdXp.job => C:\Users\Jakub\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

  
***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Jakub\Desktop" je 76 MB.
 
 
***** Startup Programs *****
 
 
***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
    EnableFirewall    REG_DWORD    0x1
    DisableNotifications    REG_DWORD    0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
    EnableFirewall    REG_DWORD    0x1
    DisableNotifications    REG_DWORD    0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
 
 
***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000

 
==================== End Of Log ==============================
