vir policie

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Zamčeno
Zpráva
Autor
ondrejs
Návštěvník
Návštěvník
Příspěvky: 43
Registrován: 20 Kvě 2009 14:07

vir policie

#1 Příspěvek od ondrejs »

Dobrý den,
prosím o radu.

log z FRST:


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-10-2013
Ran by s (administrator) on ONDREJ-PC on 19-10-2013 15:01:42
Running from C:\Users\s\Desktop
Windows 7 Ultimate Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.165\GoogleCrashHandler64.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Graphisoft SE) C:\Program Files\GRAPHISOFT\BIM Server\Server Modules\1600\TeamworkServer\TeamworkServerMonitorService.exe
(BitTorrent Inc.) C:\Users\s\AppData\Roaming\uTorrent\uTorrent.exe
(Informer Technologies, Inc.) C:\Program Files (x86)\Software Informer\softinfo.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATICDE.EXE
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATICDE.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Akamai Technologies, Inc.) C:\Users\s\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Akamai Technologies, Inc.) C:\Users\s\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
() C:\Windows\inf\mswvydq\mswvydq.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Program Files (x86)\WarThunder\aces.exe
(Microsoft Corporation) C:\Windows\system32\taskmgr.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(RealNetworks, Inc.) C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe
(Adobe Systems Incorporated) C:\Windows\system32\Macromed\Flash\FlashUtil64_11_9_900_117_ActiveX.exe
() C:\Users\s\Downloads\RogueKiller.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(forum.viry.cz) C:\Users\s\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKCU\...\Run: [uTorrent] - C:\Users\s\AppData\Roaming\uTorrent\uTorrent.exe [802136 2013-05-26] (BitTorrent Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Software Informer] - C:\Program Files (x86)\Software Informer\softinfo.exe [2011205 2009-11-25] (Informer Technologies, Inc.)
HKCU\...\Run: [fsm] - [x]
HKCU\...\Run: [EPSON Stylus DX7400 Series (kopie 1)] - C:\Users\s\AppData\Local\Temp\E_SFA9A.tmp [146 2013-08-10] ()
HKCU\...\Run: [EPSON Stylus DX7400 Series] - C:\Users\s\AppData\Local\Temp\E_S715F.tmp [124 2013-08-10] ()
HKCU\...\Run: [Infium] - "C:\Users\s\Desktop\qip\qip.exe" /isolated /autorun
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\s\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
MountPoints2: {4af5d9c8-a518-11e2-a6a2-506313ee5a68} - 1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-04-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [884 2013-06-14] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\Ondrej\...\Run: [Hoolapp Android] - "C:\Users\s\AppData\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized
HKU\Ondrej\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKU\Ondrej\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Ondrej\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\Ondrej\...\Run: [AdobeBridge] - [x]

==================== Internet (Whitelisted) ====================

BHO-x32: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: SmartSelect Class - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\s\AppData\Roaming\Mozilla\Firefox\Profiles\wkz4qya4.default
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @graphisoft.com/GDL Web Plug-in - C:\Program Files (x86)\GRAPHISOFT\GDLWebControl\npGDLMozilla.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @ngm.nexoneu.com/NxGame - C:\ProgramData\NexonEU\NGM\npNxGameEU.dll (Nexon)
FF Plugin-x32: @real.com/nppl3260;version=16.0.1.18 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.1.18 - C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Acrobat - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\s\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Battlefield Play4Free - C:\Users\s\AppData\Roaming\Mozilla\Firefox\Profiles\wkz4qya4.default\Extensions\battlefieldplay4free@ea.com
FF Extension: No Name - C:\Users\s\AppData\Roaming\Mozilla\Firefox\Profiles\wkz4qya4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\s\AppData\Roaming\Mozilla\Firefox\Profiles\wkz4qya4.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi
FF HKLM-x32\...\Firefox\Extensions: [{DAC3F861-B30D-40dd-9166-F4E75327FAC7}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext

Chrome:
=======
CHR Extension: (Docs) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0
CHR Extension: (Google Drive) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0
CHR Extension: (YouTube) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0
CHR Extension: (Google Search) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR Extension: (RealDownloader) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.1_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_0
CHR Extension: (Gmail) - C:\Users\s\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx

==================== Services (Whitelisted) =================

R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-10-12] ()
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-03-06] ()
S3 TeamworkMessagingServer-v16.0; C:\Program Files\GRAPHISOFT\BIM Server\Server Modules\1600\TeamworkMessagingServer\bin\win32\wrapper.exe [204800 2012-06-13] ()
S3 TeamworkServerManager-v16.0; C:\Program Files\GRAPHISOFT\BIM Server\Server Modules\1600\TeamworkServer\TeamworkServerManager.exe [1521152 2013-02-19] (Graphisoft SE)
R2 TeamworkServerMonitor-v16.0; C:\Program Files\GRAPHISOFT\BIM Server\Server Modules\1600\TeamworkServer\TeamworkServerMonitorService.exe [232448 2013-02-19] (Graphisoft SE)

==================== Drivers (Whitelisted) ====================

R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2013-04-14] (DT Soft Ltd)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [97792 2011-09-22] (WIBU-SYSTEMS AG)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x64.sys [395264 2010-02-25] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [x]
S3 tsusbhub; system32\drivers\tsusbhub.sys [x]
S3 VGPU; System32\drivers\rdvgkmd.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher (1).exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Desktop\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00000000 ____D C:\FRST
2013-10-19 15:00 - 2013-10-19 15:01 - 01954124 _____ (Farbar) C:\Users\s\Desktop\FRST64.exe
2013-10-19 14:58 - 2013-10-19 14:58 - 00000000 ____D C:\AdwCleaner
2013-10-19 14:55 - 2013-10-19 14:55 - 00002136 _____ C:\Users\s\Desktop\RKreport[0]_S_10192013_145532.txt
2013-10-19 14:52 - 2013-10-19 14:55 - 00000000 ____D C:\Users\s\Desktop\RK_Quarantine
2013-10-19 14:50 - 2013-10-19 14:58 - 01050644 _____ C:\Users\s\Downloads\adwcleaner.exe
2013-10-19 14:50 - 2013-10-19 14:52 - 00951808 _____ C:\Users\s\Downloads\RogueKiller.exe
2013-10-19 10:38 - 2013-10-19 10:38 - 00273968 _____ C:\Windows\Minidump\101913-25022-01.dmp
2013-10-19 10:37 - 2013-10-19 10:37 - 336882546 _____ C:\Windows\MEMORY.DMP
2013-10-19 10:02 - 2013-10-19 10:02 - 00000219 _____ C:\Users\s\Desktop\Team Fortress 2.url
2013-10-19 10:02 - 2013-10-19 10:02 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-10-19 09:16 - 2013-10-19 13:08 - 00000000 ____D C:\Users\s\Downloads\Star Wars Episode IV A New Hope (1977) [1080p]
2013-10-19 00:03 - 2013-10-19 00:03 - 00108871 _____ C:\Users\s\Desktop\Cold-Fish-dvd-by-r.rickie-titl-cz_(www.KinoTip.cz).srt
2013-10-18 20:43 - 2013-10-18 21:36 - 930507522 _____ C:\Users\s\Desktop\Cold-Fish-dvd-by-r.rickie-titl-cz_(www.KinoTip.cz).avi
2013-10-18 15:45 - 2013-10-18 16:32 - 00000000 ____D C:\Users\s\Desktop\vass
2013-10-18 14:26 - 2013-10-18 20:26 - 39167052 _____ C:\Users\s\Desktop\vasek2.3dm
2013-10-18 14:26 - 2013-10-18 17:05 - 38796561 _____ C:\Users\s\Desktop\vasek2.3dm.bak
2013-10-18 14:26 - 2013-10-18 14:26 - 07170300 _____ C:\Users\s\Desktop\RhinoCrashDump.dmp
2013-10-18 14:26 - 2013-10-18 14:26 - 00000000 _____ C:\Users\s\Desktop\RhinoCrashDump.3dm
2013-10-18 12:17 - 2013-10-18 13:34 - 00000038 _____ C:\Users\s\Desktop\VASEk.3dm.rhl
2013-10-17 22:34 - 2013-10-17 22:34 - 00387399 _____ C:\Users\s\Downloads\dum_01(1).skp
2013-10-17 22:01 - 2013-10-17 22:01 - 00409963 _____ C:\Users\s\Downloads\20131017_02.dwg
2013-10-17 21:43 - 2013-10-17 21:47 - 131712889 _____ C:\Users\s\Downloads\GIN & PLATONIC - mixtape_podzim.rar
2013-10-17 21:17 - 2013-10-17 21:17 - 00367193 _____ C:\Users\s\Downloads\dum_01.skp
2013-10-17 19:35 - 2013-10-18 13:34 - 01876897 _____ C:\Users\s\Desktop\VASEk.3dm
2013-10-17 19:35 - 2013-10-18 13:29 - 01819930 _____ C:\Users\s\Desktop\VASEk.3dm.bak
2013-10-17 19:26 - 2013-10-17 19:26 - 00182945 _____ C:\Users\s\Desktop\20131017_00_rhino.dwg
2013-10-17 16:39 - 2013-10-17 15:24 - 00000000 ____D C:\Users\s\Desktop\xx
2013-10-17 16:37 - 2013-10-17 16:37 - 13953729 _____ C:\Users\s\Downloads\xx 2.zip
2013-10-17 15:27 - 2013-10-17 15:27 - 00357327 _____ C:\Users\s\Desktop\20131017_00.dwg
2013-10-16 15:24 - 2013-10-16 15:24 - 00000042 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013_moje.pln.lck
2013-10-16 14:21 - 2013-10-16 14:21 - 128140544 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013_moje.pln
2013-10-16 11:44 - 2013-10-15 19:11 - 127174016 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013.pln
2013-10-13 22:59 - 2013-10-13 22:59 - 00000967 _____ C:\Users\Public\Desktop\rajče průvodce.lnk
2013-10-13 22:59 - 2013-10-13 22:59 - 00000000 ____D C:\Program Files (x86)\rajce
2013-10-13 22:53 - 2013-10-13 22:54 - 08279024 _____ (rajče.net ) C:\Users\s\Downloads\rajce-263.exe
2013-10-13 22:35 - 2013-10-14 18:10 - 00000000 ____D C:\Users\s\Desktop\Brdo
2013-10-12 23:25 - 2013-10-19 13:34 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2835141970-1125355131-2285905467-1000
2013-10-12 23:16 - 2013-10-12 23:22 - 00000000 ____D C:\Users\s\Documents\Battlefield Play4Free
2013-10-12 20:24 - 2013-10-12 20:24 - 01189552 _____ (AMD Inc.) C:\Users\s\Downloads\catalyst_mobility_64-bit_util.exe
2013-10-12 18:54 - 2013-10-18 23:14 - 00000000 ____D C:\ProgramData\WarThunder
2013-10-12 18:54 - 2013-10-18 22:04 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-10-12 18:54 - 2013-10-12 18:54 - 00001105 _____ C:\Users\Public\Desktop\WarThunder.lnk
2013-10-12 18:54 - 2013-10-12 18:54 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2013-10-12 18:54 - 2013-10-12 18:54 - 00000000 ____D C:\Users\s\AppData\Local\WarThunder
2013-10-12 18:48 - 2013-10-12 18:48 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\s\Downloads\wt_launcher_1.0.1.278.exe
2013-10-12 18:21 - 2013-10-12 18:21 - 00000000 ____D C:\ProgramData\Nexon
2013-10-12 18:00 - 2013-10-12 19:18 - 837187585 _____ C:\Users\s\Downloads\sileni-2005-dvdrip-xvid-ac3-cz.avi
2013-10-12 17:29 - 2013-10-12 18:48 - 00000000 ____D C:\Nexon
2013-10-12 17:15 - 2013-10-12 18:24 - 00000000 ____D C:\ProgramData\NexonEU
2013-10-12 14:49 - 2013-10-12 14:49 - 00000000 ____D C:\Users\s\AppData\Local\Akamai
2013-10-12 14:48 - 2013-10-12 14:48 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\s\Downloads\NexonEU_Installer.exe
2013-10-11 21:10 - 2013-10-19 13:34 - 00003192 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2835141970-1125355131-2285905467-1000
2013-10-11 12:55 - 2013-10-11 13:10 - 01085805 _____ C:\Users\s\Downloads\Spaced-s02e07-Leaves(1).avi.part
2013-10-11 11:34 - 2013-10-11 11:34 - 00000000 _____ C:\Users\s\Desktop\2000372815.txt
2013-10-11 10:18 - 2013-10-11 11:49 - 1583620614 _____ C:\Users\s\Downloads\Cold-Fever(1).avi
2013-10-11 10:16 - 2013-10-11 10:16 - 00048952 _____ C:\Users\s\Downloads\Meek's-Cutoff-(2010)-eng-DVDRip.XviD-DoNE-.srt
2013-10-11 10:10 - 2013-10-11 10:10 - 00065746 _____ C:\Users\s\Downloads\En-gang-i-Phuket(1).srt
2013-10-10 09:59 - 2013-09-23 01:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-10 09:59 - 2013-09-23 01:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-10 09:59 - 2013-09-23 01:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-10 09:59 - 2013-09-23 00:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-10 09:59 - 2013-09-23 00:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-10 09:59 - 2013-09-23 00:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-10 09:59 - 2013-09-23 00:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-10 09:59 - 2013-09-23 00:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-10 09:59 - 2013-09-21 05:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-10 09:59 - 2013-09-21 05:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-10 09:59 - 2013-09-21 04:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-10 09:59 - 2013-09-21 04:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-10 09:58 - 2013-09-23 01:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 21:50 - 2013-10-09 14:43 - 42895229 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY (2).skb
2013-10-09 21:46 - 2004-08-14 14:37 - 00254976 _____ C:\Users\s\Desktop\CoolShutdown.exe
2013-10-09 21:44 - 2013-10-09 21:44 - 00237220 _____ C:\Users\s\Downloads\cool_shutdown.zip
2013-10-09 21:25 - 2013-09-14 03:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 21:25 - 2013-09-08 04:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 21:25 - 2013-09-08 04:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 21:25 - 2013-09-08 04:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 21:25 - 2013-09-04 14:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 21:25 - 2013-09-04 14:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 21:25 - 2013-08-29 04:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 21:25 - 2013-08-29 04:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 21:25 - 2013-08-29 04:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 21:25 - 2013-08-29 04:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 21:25 - 2013-08-29 04:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 21:25 - 2013-08-29 03:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 21:25 - 2013-08-29 03:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 21:25 - 2013-08-29 03:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 21:25 - 2013-08-29 03:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 21:25 - 2013-08-29 03:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 21:25 - 2013-08-29 03:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 21:25 - 2013-08-29 02:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 21:25 - 2013-08-29 02:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 21:25 - 2013-08-29 02:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 21:25 - 2013-08-29 02:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 21:25 - 2013-08-28 03:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 21:25 - 2013-08-28 03:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 21:25 - 2013-08-01 14:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 21:25 - 2013-07-20 12:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 21:25 - 2013-07-20 12:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 21:25 - 2013-07-12 12:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbvideo.sys
2013-10-09 21:25 - 2013-07-12 12:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 21:25 - 2013-07-04 14:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 21:25 - 2013-07-04 14:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 21:25 - 2013-07-04 14:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 21:25 - 2013-07-04 13:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 21:25 - 2013-07-04 13:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 21:25 - 2013-07-04 13:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 21:25 - 2013-07-04 12:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 21:25 - 2013-07-03 06:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 21:25 - 2013-07-03 06:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 21:25 - 2013-07-03 06:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 21:25 - 2013-06-26 00:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 21:25 - 2013-06-06 07:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 21:25 - 2013-06-06 07:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 21:25 - 2013-06-06 07:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 21:25 - 2013-06-06 07:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 21:25 - 2013-06-06 06:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 21:25 - 2013-06-06 06:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 21:25 - 2013-06-06 06:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 21:25 - 2013-06-06 05:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 21:25 - 2013-06-06 05:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 21:25 - 2013-06-06 05:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-09 21:24 - 2013-10-09 21:24 - 10589835 _____ C:\Users\s\Desktop\foto_namestiTGM.zip
2013-10-09 20:40 - 2013-10-09 20:34 - 216016393 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL.obj
2013-10-09 20:29 - 2013-10-09 20:29 - 00000172 _____ C:\Users\s\Desktop\acad.err
2013-10-09 20:29 - 2013-10-09 20:27 - 26459402 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL_cad.dwg
2013-10-09 20:19 - 2013-10-09 20:19 - 00000188 ____H C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwl2
2013-10-09 20:19 - 2013-10-09 20:19 - 00000036 ____H C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwl
2013-10-09 20:18 - 2013-10-09 20:18 - 26515390 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwg
2013-10-09 15:04 - 2013-10-09 21:50 - 42902546 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY (2).skp
2013-10-09 15:03 - 2013-10-09 15:03 - 42893316 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY_M1.skp
2013-10-09 13:51 - 2013-10-09 13:51 - 42884173 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY.skp
2013-10-09 13:22 - 2013-10-09 13:32 - 42845760 _____ C:\Users\s\Desktop\AutoSave_AutoSave_NÁMĚSTÍ MODEL 2013_10_9.skp
2013-10-09 13:15 - 2013-10-09 13:15 - 42645246 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9.skp
2013-10-09 11:47 - 2013-10-09 11:44 - 00070821 _____ C:\Users\s\Desktop\naměsti tgm .bak
2013-10-09 11:44 - 2013-10-09 11:47 - 00144704 _____ C:\Users\s\Desktop\naměsti tgm .dwg
2013-10-09 11:44 - 2013-10-09 11:44 - 00001051 _____ C:\Users\s\Desktop\naměsti tgm 1.Shx
2013-10-09 11:00 - 2013-10-09 12:51 - 42659582 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_2b.skp
2013-10-08 23:19 - 2013-10-08 23:32 - 154309540 _____ C:\Users\s\Downloads\loudQUIETloud-A-Film-About-the-Pixies.avi
2013-10-08 15:46 - 2013-10-04 17:49 - 42394329 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_2b.skp
2013-10-08 13:55 - 2013-10-08 13:55 - 127089264 _____ C:\Users\s\Desktop\PLN_hodiny.pln
2013-10-07 00:59 - 2013-10-08 13:27 - 00014153 _____ C:\Users\s\Desktop\inventarizace.xlsx
2013-10-06 13:07 - 2013-10-06 13:07 - 00000533 _____ C:\Users\s\Desktop\hajecek [ANDY-PC-ondra]1.Shx
2013-10-04 13:28 - 2013-10-04 15:17 - 405138555 _____ C:\Users\s\Downloads\Meek's-Cutoff-(2010)-eng-DVDRip.XviD-DoNE-.avi
2013-10-03 16:25 - 2013-10-03 16:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 16:25 - 2013-10-03 16:25 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 16:23 - 2013-10-03 16:23 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-10-03 16:23 - 2013-10-03 16:23 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 16:00 - 2013-10-03 16:00 - 00000000 ____D C:\Users\s\AppData\Local\LogMeIn
2013-10-03 16:00 - 2013-10-03 16:00 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-03 12:16 - 2013-10-03 12:16 - 55269221 _____ C:\Users\s\Desktop\_1axo2op3.psd
2013-10-03 10:40 - 2013-10-03 10:40 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-03 10:40 - 2009-03-18 18:35 - 00033856 ____H (LogMeIn, Inc.) C:\Windows\system32\hamachi.sys
2013-10-02 22:48 - 2013-10-03 10:43 - 20389959 _____ C:\Users\s\Desktop\_1axo.psd
2013-10-02 22:37 - 2013-10-02 22:37 - 00426877 _____ C:\Users\s\Downloads\CoD MW2 iwnet invalid verison fix.rar
2013-10-02 20:48 - 2013-10-02 20:48 - 00000017 _____ C:\Users\s\Desktop\hmoty_rino.3dm.rhl
2013-10-02 20:37 - 2013-10-02 20:39 - 09081014 _____ C:\Users\s\Desktop\dub vyssi kmen svetly2.psd
2013-10-02 20:28 - 2013-10-02 20:31 - 11796922 _____ C:\Users\s\Desktop\dub vyssi kmen svetly.psd
2013-10-02 20:26 - 2013-10-02 20:26 - 00883089 _____ C:\Users\s\Desktop\vez5.3dm
2013-10-02 20:23 - 2013-10-02 19:56 - 04766030 _____ C:\Users\s\Desktop\VEZ_5.skb
2013-10-02 19:56 - 2013-10-02 20:23 - 04777078 _____ C:\Users\s\Desktop\VEZ_5.skp
2013-10-02 14:39 - 2013-10-02 14:39 - 00329983 _____ C:\Users\s\Desktop\dum3.3dm
2013-10-02 14:29 - 2013-10-02 14:25 - 06576089 _____ C:\Users\s\Desktop\AutoSave_obydli_rimske bez lany.skb
2013-10-02 14:24 - 2013-10-02 14:30 - 06533748 _____ C:\Users\s\Desktop\AutoSave_obydli_rimske bez lany.skp
2013-10-02 13:59 - 2013-10-02 14:37 - 32451200 _____ C:\Users\s\Desktop\VIZ ROZHLEDNA.psd
2013-10-02 12:53 - 2013-10-02 12:53 - 01075718 _____ C:\Users\s\Desktop\dum2_lazne.3dm
2013-10-01 22:36 - 2013-10-01 22:37 - 11753192 _____ C:\Users\s\Downloads\IW4M.rar
2013-10-01 22:25 - 2013-10-01 22:28 - 12338461 _____ C:\Users\s\Downloads\iw4mpMW2LAN.rar
2013-10-01 22:25 - 2013-10-01 22:25 - 01662639 _____ C:\Users\s\Downloads\iw4mp.rar
2013-10-01 21:10 - 2013-10-01 21:10 - 00000000 ____D C:\Users\s\.android
2013-10-01 20:55 - 2013-10-01 21:04 - 00001145 _____ C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play IW4M (Modern Warfare 2).lnk
2013-10-01 20:55 - 2013-10-01 20:56 - 00000000 ____D C:\Users\s\AppData\Local\IW4M
2013-10-01 20:54 - 2013-10-01 20:54 - 00156672 _____ (Microsoft) C:\Users\s\Downloads\InstallIW4M.exe
2013-10-01 20:45 - 2013-10-03 18:24 - 00000000 ____D C:\Users\s\Desktop\A3plus
2013-10-01 20:32 - 2013-10-01 20:32 - 00065746 _____ C:\Users\s\Downloads\En-gang-i-Phuket.srt
2013-10-01 13:22 - 2013-10-15 19:51 - 00000000 ___RD C:\Users\s\Desktop\stromy
2013-10-01 13:14 - 2013-10-12 14:48 - 00000000 ____D C:\Users\s\Desktop\Spaced
2013-09-30 23:22 - 2013-09-30 23:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 22:07 - 2013-09-30 22:07 - 00030830 _____ C:\Users\s\Downloads\Breaking.Bad.S05E16.Felina.zip
2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Users\s\Downloads\MW2 DLC
2013-09-30 17:00 - 2013-10-19 14:07 - 00000000 ____D C:\Program Files (x86)\Steam
2013-09-30 16:57 - 2013-09-30 16:57 - 01669632 _____ C:\Users\s\Downloads\SteamInstall.msi
2013-09-30 16:16 - 2013-10-19 12:30 - 00000000 ____D C:\Program Files (x86)\Call of Duty Modern Warfare 2
2013-09-30 15:57 - 2013-09-30 15:57 - 00130260 _____ C:\Users\s\Downloads\NÁMĚSTÍ T.G.M. - beton.dwf
2013-09-29 21:11 - 2013-10-16 15:23 - 00000000 ___RD C:\Users\s\Desktop\portfolio
2013-09-29 19:08 - 2013-09-29 19:09 - 33843968 _____ C:\Users\s\Downloads\gobotree.c308d6a056901175b382dc1856a355d2.zip
2013-09-29 17:34 - 2013-09-29 17:34 - 00000000 ____D C:\Users\s\AppData\Roaming\SketchUp
2013-09-29 14:13 - 2013-09-29 14:13 - 00003120 _____ C:\Windows\SysWOW64\ALLFSAF13a.ocx
2013-09-29 14:12 - 2013-09-29 14:12 - 00000000 ____D C:\ProgramData\SketchUp
2013-09-29 14:12 - 2013-09-29 14:12 - 00000000 ____D C:\Program Files (x86)\SketchUp
2013-09-29 14:09 - 2013-10-10 09:57 - 01556704 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-09-29 14:02 - 2013-09-29 14:04 - 75726696 _____ (Trimble Navigation Limited) C:\Users\s\Downloads\SketchUpWEN.exe
2013-09-27 21:45 - 2011-03-29 14:38 - 00368640 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\ReWire.dll
2013-09-27 21:45 - 2011-03-29 14:38 - 00233472 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\REX Shared Library.dll
2013-09-27 18:45 - 2013-09-27 18:46 - 00000000 ____D C:\Users\s\Documents\Ableton
2013-09-27 18:45 - 2013-09-27 18:45 - 00000000 ____D C:\ProgramData\Ableton
2013-09-27 18:43 - 2013-09-27 18:45 - 00000000 ____D C:\Users\s\AppData\Roaming\Ableton
2013-09-27 18:38 - 2013-09-27 18:38 - 00000000 ____D C:\Program Files (x86)\Ableton
2013-09-27 17:20 - 2013-09-27 17:50 - 00000000 ____D C:\Users\s\Downloads\Ableton Live 8.2.2 (CRACKED) [theLEAK]
2013-09-27 00:59 - 2013-09-27 01:10 - 56005871 _____ C:\Users\s\Desktop\Video.wmv
2013-09-27 00:26 - 2013-09-27 00:26 - 00000030 _____ C:\Users\s\Documents\pokus.avi.sfl
2013-09-27 00:18 - 2013-09-27 00:52 - 00028936 _____ C:\Users\s\Desktop\pokus.veg
2013-09-26 18:49 - 2013-09-30 22:25 - 00000000 ____D C:\Users\s\Desktop\ctvrtek-patek
2013-09-26 14:25 - 2013-09-26 14:26 - 00000051 _____ C:\Users\s\Desktop\knizky.txt
2013-09-25 18:13 - 2013-09-25 18:13 - 00000130 _____ C:\Users\s\Desktop\sony vegas Baru.txt
2013-09-25 16:59 - 2013-10-19 09:18 - 00000000 ____D C:\Users\s\Downloads\Call_Of_Duty_Modern_Warfare_2-Razor1911
2013-09-25 15:37 - 2013-09-25 15:38 - 13328352 _____ (Sony Creative Software Inc.) C:\Users\s\Downloads\presetmngr20k.exe
2013-09-25 15:36 - 2013-09-25 15:36 - 00005258 _____ C:\Users\s\Downloads\Preset pack 4 (CC Mega Pack).rar
2013-09-25 15:28 - 2013-09-25 15:28 - 00000000 ____D C:\ProgramData\Sony
2013-09-25 15:27 - 2013-09-25 15:27 - 00000000 ____D C:\Users\s\AppData\Roaming\Publish Providers
2013-09-25 15:26 - 2013-09-25 15:26 - 00017108 _____ C:\Windows\SysWOW64\CCCInstall_201309251526016477.log
2013-09-25 15:18 - 2013-09-25 15:18 - 00143792 _____ C:\Users\pokus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-25 15:18 - 2013-09-25 15:18 - 00001397 _____ C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Sony
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Real
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\ATI
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Apple Computer
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Adobe
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\Sony
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\LogMeIn Hamachi
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\ATI
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\Adobe
2013-09-25 15:17 - 2013-09-25 15:22 - 00000000 ____D C:\Users\pokus
2013-09-25 15:17 - 2013-09-25 15:17 - 00000020 ___SH C:\Users\pokus\ntuser.ini
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Šablony
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Soubory cookie
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Poslední
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Okolní tiskárny
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Okolní síť
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Nabídka Start
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Dokumenty
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Data aplikací
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\AppData\Local\Data aplikací
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 ____D C:\Users\pokus\AppData\Local\VirtualStore
2013-09-25 15:17 - 2013-06-21 20:10 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Macromedia
2013-09-25 15:17 - 2013-04-18 01:36 - 00000000 ____D C:\Users\pokus\AppData\Local\Microsoft Help
2013-09-25 15:17 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2013-09-25 15:17 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2013-09-25 14:08 - 2013-09-25 15:39 - 00000000 ____D C:\Program Files (x86)\Sony
2013-09-25 14:08 - 2013-09-25 14:08 - 00000000 ____D C:\Program Files\Sony
2013-09-25 13:38 - 2013-09-25 13:38 - 00000000 ____D C:\Users\s\AppData\Roaming\Sony Creative Software Inc
2013-09-25 13:35 - 2013-09-25 13:35 - 00000000 ____D C:\Windows\SysWOW64\spool
2013-09-25 12:24 - 2013-09-25 14:08 - 00000000 ____D C:\Users\s\AppData\Local\Sony
2013-09-25 12:23 - 2013-09-27 00:18 - 00000000 ____D C:\Users\s\AppData\Roaming\Sony
2013-09-25 11:05 - 2013-09-25 12:30 - 732072538 _____ C:\Users\s\Downloads\En-gang-i-Phuket.avi
2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-09-24 15:57 - 2013-09-24 15:59 - 21142125 _____ C:\Users\s\Downloads\SO-23-Sadove-upravy.rar
2013-09-24 15:55 - 2013-09-24 15:56 - 26306876 _____ C:\Users\s\Downloads\SO-03,SO-04.02-Sadové-úpravy.rar
2013-09-24 15:37 - 2013-10-08 17:09 - 00000000 ____D C:\Users\s\Desktop\SOčka
2013-09-24 14:39 - 2013-09-24 14:46 - 118845344 _____ C:\Users\s\Downloads\DPS.zip
2013-09-23 16:17 - 2013-10-12 20:25 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-09-23 16:13 - 2013-09-30 16:27 - 00000000 ____D C:\Users\s\Documents\Battlefield 2
2013-09-20 12:50 - 2013-10-08 19:53 - 00000000 ____D C:\Users\s\Desktop\ŽÁDOST O KÁCENÍ
2013-09-20 12:48 - 2013-09-20 14:20 - 07887285 _____ C:\Users\s\Desktop\1_300 SITUAČNÍ ZÁKRES KÁCENÍ DŘ.psd
2013-09-19 22:19 - 2013-09-20 13:47 - 74764976 _____ C:\Users\s\Desktop\navykres [ANDY-PC-ondra].pln
2013-09-19 22:19 - 2013-09-19 22:59 - 73082544 _____ C:\Users\s\Desktop\navykres [ANDY-PC-ondra].bpn
2013-09-19 17:24 - 2013-09-19 17:24 - 00000000 ____D C:\Users\Public\Documents\Lands
2013-09-19 17:17 - 2013-09-19 17:18 - 00785024 _____ (Google Inc.) C:\Users\s\Downloads\googleupdatesetup.exe
2013-09-19 17:15 - 2013-09-19 17:15 - 00000000 ____D C:\Users\s\AppData\Roaming\AsuniCAD
2013-09-19 17:14 - 2013-09-19 17:14 - 00000000 ____D C:\Users\s\AppData\Local\3dmouse
2013-09-19 17:09 - 2013-09-19 17:09 - 00000000 ____D C:\Users\s\AppData\Local\McNeel
2013-09-19 17:09 - 2013-09-19 17:09 - 00000000 ____D C:\Program Files (x86)\Flamingo nXt
2013-09-19 17:05 - 2013-09-19 17:06 - 00000000 ____D C:\Program Files\Lands Design WIP (64-bit)
2013-09-19 17:05 - 2013-09-19 17:05 - 00000000 ____D C:\ProgramData\AsuniCAD
2013-09-19 17:05 - 2013-09-19 17:05 - 00000000 ____D C:\Program Files\Common Files\AsuniCAD
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\SysWOW64\Drivers\igxkxz_431.set
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\SysWOW64\Drivers\diusvhm193.dat
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\d_oirotq169.ini
2013-09-19 16:50 - 2013-10-19 09:12 - 00000000 ____D C:\Program Files\Rhinoceros 5.0 Evaluation (64-bit)
2013-09-19 16:36 - 2013-09-19 16:36 - 01315563 _____ C:\Users\s\Downloads\DIO_11_2_Kácení_dřevin.zip
2013-09-19 14:47 - 2013-09-19 14:47 - 00000000 ____D C:\Program Files (x86)\AsuniCAD
2013-09-19 11:28 - 2013-09-19 11:30 - 30879978 _____ C:\Users\s\Downloads\SO-12-SADOVE-UPRAVY.rar

==================== One Month Modified Files and Folders =======

2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher (1).exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Desktop\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00000000 ____D C:\FRST
2013-10-19 15:01 - 2013-10-19 15:00 - 01954124 _____ (Farbar) C:\Users\s\Desktop\FRST64.exe
2013-10-19 15:01 - 2013-05-18 01:21 - 00000000 ____D C:\Users\s\AppData\Roaming\uTorrent
2013-10-19 14:59 - 2013-04-14 15:34 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-10-19 14:58 - 2013-10-19 14:58 - 00000000 ____D C:\AdwCleaner
2013-10-19 14:58 - 2013-10-19 14:50 - 01050644 _____ C:\Users\s\Downloads\adwcleaner.exe
2013-10-19 14:55 - 2013-10-19 14:55 - 00002136 _____ C:\Users\s\Desktop\RKreport[0]_S_10192013_145532.txt
2013-10-19 14:55 - 2013-10-19 14:52 - 00000000 ____D C:\Users\s\Desktop\RK_Quarantine
2013-10-19 14:52 - 2013-10-19 14:50 - 00951808 _____ C:\Users\s\Downloads\RogueKiller.exe
2013-10-19 14:35 - 2013-04-18 11:37 - 00000000 ____D C:\Users\s\AppData\Roaming\Skype
2013-10-19 14:25 - 2013-05-16 11:01 - 00000942 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-19 14:07 - 2013-09-30 17:00 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-19 13:42 - 2009-07-14 06:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-19 13:42 - 2009-07-14 06:45 - 00014416 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-19 13:41 - 2009-07-14 17:18 - 00666672 _____ C:\Windows\system32\perfh005.dat
2013-10-19 13:41 - 2009-07-14 17:18 - 00140336 _____ C:\Windows\system32\perfc005.dat
2013-10-19 13:41 - 2009-07-14 07:13 - 01577482 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-19 13:39 - 2013-04-14 01:13 - 01319943 _____ C:\Windows\WindowsUpdate.log
2013-10-19 13:36 - 2013-07-04 21:06 - 00000000 ____D C:\Users\s\AppData\Roaming\Software Informer
2013-10-19 13:35 - 2013-09-09 16:37 - 00000000 ____D C:\Users\s\AppData\Local\LogMeIn Hamachi
2013-10-19 13:34 - 2013-10-12 23:25 - 00003334 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-2835141970-1125355131-2285905467-1000
2013-10-19 13:34 - 2013-10-11 21:10 - 00003192 _____ C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-2835141970-1125355131-2285905467-1000
2013-10-19 13:34 - 2013-05-16 11:01 - 00000938 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-19 13:34 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-10-19 13:34 - 2009-07-14 06:51 - 00050416 _____ C:\Windows\setupact.log
2013-10-19 13:08 - 2013-10-19 09:16 - 00000000 ____D C:\Users\s\Downloads\Star Wars Episode IV A New Hope (1977) [1080p]
2013-10-19 12:30 - 2013-09-30 16:16 - 00000000 ____D C:\Program Files (x86)\Call of Duty Modern Warfare 2
2013-10-19 10:38 - 2013-10-19 10:38 - 00273968 _____ C:\Windows\Minidump\101913-25022-01.dmp
2013-10-19 10:38 - 2013-06-21 19:50 - 00000000 ____D C:\Windows\Minidump
2013-10-19 10:37 - 2013-10-19 10:37 - 336882546 _____ C:\Windows\MEMORY.DMP
2013-10-19 10:02 - 2013-10-19 10:02 - 00000219 _____ C:\Users\s\Desktop\Team Fortress 2.url
2013-10-19 10:02 - 2013-10-19 10:02 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-10-19 09:56 - 2013-09-01 10:11 - 00000000 ____D C:\Program Files (x86)\Funcom
2013-10-19 09:55 - 2013-09-01 10:11 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Funcom
2013-10-19 09:55 - 2013-04-16 18:50 - 00000000 ____D C:\instalace
2013-10-19 09:18 - 2013-09-25 16:59 - 00000000 ____D C:\Users\s\Downloads\Call_Of_Duty_Modern_Warfare_2-Razor1911
2013-10-19 09:12 - 2013-09-19 16:50 - 00000000 ____D C:\Program Files\Rhinoceros 5.0 Evaluation (64-bit)
2013-10-19 00:03 - 2013-10-19 00:03 - 00108871 _____ C:\Users\s\Desktop\Cold-Fish-dvd-by-r.rickie-titl-cz_(www.KinoTip.cz).srt
2013-10-18 23:14 - 2013-10-12 18:54 - 00000000 ____D C:\ProgramData\WarThunder
2013-10-18 22:04 - 2013-10-12 18:54 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-10-18 21:36 - 2013-10-18 20:43 - 930507522 _____ C:\Users\s\Desktop\Cold-Fish-dvd-by-r.rickie-titl-cz_(www.KinoTip.cz).avi
2013-10-18 20:26 - 2013-10-18 14:26 - 39167052 _____ C:\Users\s\Desktop\vasek2.3dm
2013-10-18 19:54 - 2013-04-18 13:17 - 00000000 ____D C:\Users\s\AppData\Local\Last.fm
2013-10-18 17:05 - 2013-10-18 14:26 - 38796561 _____ C:\Users\s\Desktop\vasek2.3dm.bak
2013-10-18 16:32 - 2013-10-18 15:45 - 00000000 ____D C:\Users\s\Desktop\vass
2013-10-18 14:26 - 2013-10-18 14:26 - 07170300 _____ C:\Users\s\Desktop\RhinoCrashDump.dmp
2013-10-18 14:26 - 2013-10-18 14:26 - 00000000 _____ C:\Users\s\Desktop\RhinoCrashDump.3dm
2013-10-18 13:34 - 2013-10-18 12:17 - 00000038 _____ C:\Users\s\Desktop\VASEk.3dm.rhl
2013-10-18 13:34 - 2013-10-17 19:35 - 01876897 _____ C:\Users\s\Desktop\VASEk.3dm
2013-10-18 13:29 - 2013-10-17 19:35 - 01819930 _____ C:\Users\s\Desktop\VASEk.3dm.bak
2013-10-18 09:59 - 2013-04-18 10:10 - 00000000 ____D C:\Users\s\AppData\Local\Adobe
2013-10-17 22:34 - 2013-10-17 22:34 - 00387399 _____ C:\Users\s\Downloads\dum_01(1).skp
2013-10-17 22:01 - 2013-10-17 22:01 - 00409963 _____ C:\Users\s\Downloads\20131017_02.dwg
2013-10-17 21:47 - 2013-10-17 21:43 - 131712889 _____ C:\Users\s\Downloads\GIN & PLATONIC - mixtape_podzim.rar
2013-10-17 21:17 - 2013-10-17 21:17 - 00367193 _____ C:\Users\s\Downloads\dum_01.skp
2013-10-17 19:26 - 2013-10-17 19:26 - 00182945 _____ C:\Users\s\Desktop\20131017_00_rhino.dwg
2013-10-17 16:37 - 2013-10-17 16:37 - 13953729 _____ C:\Users\s\Downloads\xx 2.zip
2013-10-17 15:27 - 2013-10-17 15:27 - 00357327 _____ C:\Users\s\Desktop\20131017_00.dwg
2013-10-17 15:24 - 2013-10-17 16:39 - 00000000 ____D C:\Users\s\Desktop\xx
2013-10-17 01:15 - 2013-09-14 05:32 - 00000000 ____D C:\Windows\rescache
2013-10-16 15:24 - 2013-10-16 15:24 - 00000042 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013_moje.pln.lck
2013-10-16 15:24 - 2013-06-14 15:16 - 00000000 ____D C:\Users\s\Graphisoft
2013-10-16 15:23 - 2013-09-29 21:11 - 00000000 ___RD C:\Users\s\Desktop\portfolio
2013-10-16 14:21 - 2013-10-16 14:21 - 128140544 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013_moje.pln
2013-10-15 19:51 - 2013-10-01 13:22 - 00000000 ___RD C:\Users\s\Desktop\stromy
2013-10-15 19:11 - 2013-10-16 11:44 - 127174016 _____ C:\Users\s\Desktop\naměsti tgm 11_10_2013.pln
2013-10-14 19:22 - 2013-06-29 00:36 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-10-14 19:22 - 2013-06-28 18:43 - 00282104 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-10-14 19:22 - 2013-06-28 18:43 - 00234768 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-10-14 18:10 - 2013-10-13 22:35 - 00000000 ____D C:\Users\s\Desktop\Brdo
2013-10-13 22:59 - 2013-10-13 22:59 - 00000967 _____ C:\Users\Public\Desktop\rajče průvodce.lnk
2013-10-13 22:59 - 2013-10-13 22:59 - 00000000 ____D C:\Program Files (x86)\rajce
2013-10-13 22:54 - 2013-10-13 22:53 - 08279024 _____ (rajče.net ) C:\Users\s\Downloads\rajce-263.exe
2013-10-12 23:56 - 2013-06-28 18:43 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-10-12 23:32 - 2013-06-29 00:35 - 00000000 ____D C:\Users\s\AppData\Local\PunkBuster
2013-10-12 23:24 - 2013-04-17 03:17 - 00011770 _____ C:\Windows\PFRO.log
2013-10-12 23:22 - 2013-10-12 23:16 - 00000000 ____D C:\Users\s\Documents\Battlefield Play4Free
2013-10-12 20:25 - 2013-09-23 16:17 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2013-10-12 20:24 - 2013-10-12 20:24 - 01189552 _____ (AMD Inc.) C:\Users\s\Downloads\catalyst_mobility_64-bit_util.exe
2013-10-12 20:22 - 2013-05-26 11:24 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-10-12 20:22 - 2013-05-26 11:24 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-10-12 19:18 - 2013-10-12 18:00 - 837187585 _____ C:\Users\s\Downloads\sileni-2005-dvdrip-xvid-ac3-cz.avi
2013-10-12 18:54 - 2013-10-12 18:54 - 00001105 _____ C:\Users\Public\Desktop\WarThunder.lnk
2013-10-12 18:54 - 2013-10-12 18:54 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2013-10-12 18:54 - 2013-10-12 18:54 - 00000000 ____D C:\Users\s\AppData\Local\WarThunder
2013-10-12 18:54 - 2013-06-14 12:07 - 00000000 ____D C:\Users\s\Documents\My Games
2013-10-12 18:48 - 2013-10-12 18:48 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\s\Downloads\wt_launcher_1.0.1.278.exe
2013-10-12 18:48 - 2013-10-12 17:29 - 00000000 ____D C:\Nexon
2013-10-12 18:24 - 2013-10-12 17:15 - 00000000 ____D C:\ProgramData\NexonEU
2013-10-12 18:21 - 2013-10-12 18:21 - 00000000 ____D C:\ProgramData\Nexon
2013-10-12 14:49 - 2013-10-12 14:49 - 00000000 ____D C:\Users\s\AppData\Local\Akamai
2013-10-12 14:48 - 2013-10-12 14:48 - 10028912 _____ (Akamai Technologies, Inc.) C:\Users\s\Downloads\NexonEU_Installer.exe
2013-10-12 14:48 - 2013-10-01 13:14 - 00000000 ____D C:\Users\s\Desktop\Spaced
2013-10-12 14:48 - 2013-09-18 11:57 - 00000000 ____D C:\film
2013-10-11 13:10 - 2013-10-11 12:55 - 01085805 _____ C:\Users\s\Downloads\Spaced-s02e07-Leaves(1).avi.part
2013-10-11 11:49 - 2013-10-11 10:18 - 1583620614 _____ C:\Users\s\Downloads\Cold-Fever(1).avi
2013-10-11 11:34 - 2013-10-11 11:34 - 00000000 _____ C:\Users\s\Desktop\2000372815.txt
2013-10-11 10:16 - 2013-10-11 10:16 - 00048952 _____ C:\Users\s\Downloads\Meek's-Cutoff-(2010)-eng-DVDRip.XviD-DoNE-.srt
2013-10-11 10:10 - 2013-10-11 10:10 - 00065746 _____ C:\Users\s\Downloads\En-gang-i-Phuket(1).srt
2013-10-10 15:20 - 2013-05-16 11:01 - 00003938 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-10 15:20 - 2013-05-16 11:01 - 00003686 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-10 14:19 - 2009-07-14 06:45 - 05129672 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-10 10:01 - 2013-04-16 17:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-10 09:57 - 2013-09-29 14:09 - 01556704 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-10 09:40 - 2013-04-14 17:38 - 00000000 ____D C:\ProgramData\Skype
2013-10-09 21:50 - 2013-10-09 15:04 - 42902546 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY (2).skp
2013-10-09 21:44 - 2013-10-09 21:44 - 00237220 _____ C:\Users\s\Downloads\cool_shutdown.zip
2013-10-09 21:24 - 2013-10-09 21:24 - 10589835 _____ C:\Users\s\Desktop\foto_namestiTGM.zip
2013-10-09 20:34 - 2013-10-09 20:40 - 216016393 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL.obj
2013-10-09 20:29 - 2013-10-09 20:29 - 00000172 _____ C:\Users\s\Desktop\acad.err
2013-10-09 20:27 - 2013-10-09 20:29 - 26459402 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL_cad.dwg
2013-10-09 20:19 - 2013-10-09 20:19 - 00000188 ____H C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwl2
2013-10-09 20:19 - 2013-10-09 20:19 - 00000036 ____H C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwl
2013-10-09 20:18 - 2013-10-09 20:18 - 26515390 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_9EXPORT.dwg
2013-10-09 18:59 - 2013-04-14 15:34 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-09 18:59 - 2013-04-14 15:34 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-09 18:59 - 2013-04-14 15:34 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-09 15:03 - 2013-10-09 15:03 - 42893316 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY_M1.skp
2013-10-09 14:43 - 2013-10-09 21:50 - 42895229 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY (2).skb
2013-10-09 13:51 - 2013-10-09 13:51 - 42884173 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9STROMY.skp
2013-10-09 13:32 - 2013-10-09 13:22 - 42845760 _____ C:\Users\s\Desktop\AutoSave_AutoSave_NÁMĚSTÍ MODEL 2013_10_9.skp
2013-10-09 13:15 - 2013-10-09 13:15 - 42645246 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_9.skp
2013-10-09 12:51 - 2013-10-09 11:00 - 42659582 _____ C:\Users\s\Desktop\AutoSave_NÁMĚSTÍ MODEL 2013_10_2b.skp
2013-10-09 11:47 - 2013-10-09 11:44 - 00144704 _____ C:\Users\s\Desktop\naměsti tgm .dwg
2013-10-09 11:44 - 2013-10-09 11:47 - 00070821 _____ C:\Users\s\Desktop\naměsti tgm .bak
2013-10-09 11:44 - 2013-10-09 11:44 - 00001051 _____ C:\Users\s\Desktop\naměsti tgm 1.Shx
2013-10-09 10:17 - 2013-04-14 17:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-10-08 23:32 - 2013-10-08 23:19 - 154309540 _____ C:\Users\s\Downloads\loudQUIETloud-A-Film-About-the-Pixies.avi
2013-10-08 19:53 - 2013-09-20 12:50 - 00000000 ____D C:\Users\s\Desktop\ŽÁDOST O KÁCENÍ
2013-10-08 17:09 - 2013-09-24 15:37 - 00000000 ____D C:\Users\s\Desktop\SOčka
2013-10-08 17:06 - 2013-04-29 20:50 - 00000000 ____D C:\jamor
2013-10-08 13:55 - 2013-10-08 13:55 - 127089264 _____ C:\Users\s\Desktop\PLN_hodiny.pln
2013-10-08 13:27 - 2013-10-07 00:59 - 00014153 _____ C:\Users\s\Desktop\inventarizace.xlsx
2013-10-08 13:13 - 2013-07-25 14:40 - 00000000 ____D C:\Users\s\Desktop\pl
2013-10-07 04:05 - 2013-09-18 21:46 - 73269520 _____ C:\Users\s\Desktop\hajecek [ANDY-PC-ondra].pln
2013-10-06 13:07 - 2013-10-06 13:07 - 00000533 _____ C:\Users\s\Desktop\hajecek [ANDY-PC-ondra]1.Shx
2013-10-05 21:21 - 2013-04-20 19:12 - 00000000 ____D C:\GOG
2013-10-04 17:49 - 2013-10-08 15:46 - 42394329 _____ C:\Users\s\Desktop\NÁMĚSTÍ MODEL 2013_10_2b.skp
2013-10-04 15:17 - 2013-10-04 13:28 - 405138555 _____ C:\Users\s\Downloads\Meek's-Cutoff-(2010)-eng-DVDRip.XviD-DoNE-.avi
2013-10-03 18:24 - 2013-10-01 20:45 - 00000000 ____D C:\Users\s\Desktop\A3plus
2013-10-03 16:25 - 2013-10-03 16:25 - 00000000 ____D C:\ProgramData\Apple Computer
2013-10-03 16:25 - 2013-10-03 16:25 - 00000000 ____D C:\Program Files (x86)\QuickTime
2013-10-03 16:23 - 2013-10-03 16:23 - 00000000 ____D C:\Windows\System32\Tasks\Apple
2013-10-03 16:23 - 2013-10-03 16:23 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2013-10-03 16:00 - 2013-10-03 16:00 - 00000000 ____D C:\Users\s\AppData\Local\LogMeIn
2013-10-03 16:00 - 2013-10-03 16:00 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-03 12:16 - 2013-10-03 12:16 - 55269221 _____ C:\Users\s\Desktop\_1axo2op3.psd
2013-10-03 10:43 - 2013-10-02 22:48 - 20389959 _____ C:\Users\s\Desktop\_1axo.psd
2013-10-03 10:40 - 2013-10-03 10:40 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-10-02 22:37 - 2013-10-02 22:37 - 00426877 _____ C:\Users\s\Downloads\CoD MW2 iwnet invalid verison fix.rar
2013-10-02 22:30 - 2013-05-02 16:13 - 00000000 ____D C:\ProgramData\ASGvis
2013-10-02 20:48 - 2013-10-02 20:48 - 00000017 _____ C:\Users\s\Desktop\hmoty_rino.3dm.rhl
2013-10-02 20:39 - 2013-10-02 20:37 - 09081014 _____ C:\Users\s\Desktop\dub vyssi kmen svetly2.psd
2013-10-02 20:31 - 2013-10-02 20:28 - 11796922 _____ C:\Users\s\Desktop\dub vyssi kmen svetly.psd
2013-10-02 20:26 - 2013-10-02 20:26 - 00883089 _____ C:\Users\s\Desktop\vez5.3dm
2013-10-02 20:23 - 2013-10-02 19:56 - 04777078 _____ C:\Users\s\Desktop\VEZ_5.skp
2013-10-02 19:56 - 2013-10-02 20:23 - 04766030 _____ C:\Users\s\Desktop\VEZ_5.skb
2013-10-02 14:39 - 2013-10-02 14:39 - 00329983 _____ C:\Users\s\Desktop\dum3.3dm
2013-10-02 14:37 - 2013-10-02 13:59 - 32451200 _____ C:\Users\s\Desktop\VIZ ROZHLEDNA.psd
2013-10-02 14:30 - 2013-10-02 14:24 - 06533748 _____ C:\Users\s\Desktop\AutoSave_obydli_rimske bez lany.skp
2013-10-02 14:25 - 2013-10-02 14:29 - 06576089 _____ C:\Users\s\Desktop\AutoSave_obydli_rimske bez lany.skb
2013-10-02 12:53 - 2013-10-02 12:53 - 01075718 _____ C:\Users\s\Desktop\dum2_lazne.3dm
2013-10-02 10:25 - 2013-04-14 11:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-10-01 22:37 - 2013-10-01 22:36 - 11753192 _____ C:\Users\s\Downloads\IW4M.rar
2013-10-01 22:28 - 2013-10-01 22:25 - 12338461 _____ C:\Users\s\Downloads\iw4mpMW2LAN.rar
2013-10-01 22:25 - 2013-10-01 22:25 - 01662639 _____ C:\Users\s\Downloads\iw4mp.rar
2013-10-01 21:10 - 2013-10-01 21:10 - 00000000 ____D C:\Users\s\.android
2013-10-01 21:10 - 2013-04-18 10:09 - 00000000 ____D C:\Users\s
2013-10-01 21:04 - 2013-10-01 20:55 - 00001145 _____ C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Play IW4M (Modern Warfare 2).lnk
2013-10-01 20:56 - 2013-10-01 20:55 - 00000000 ____D C:\Users\s\AppData\Local\IW4M
2013-10-01 20:54 - 2013-10-01 20:54 - 00156672 _____ (Microsoft) C:\Users\s\Downloads\InstallIW4M.exe
2013-10-01 20:32 - 2013-10-01 20:32 - 00065746 _____ C:\Users\s\Downloads\En-gang-i-Phuket.srt
2013-10-01 11:03 - 2013-04-18 10:18 - 00000000 ____D C:\Users\s\AppData\Local\Mozilla
2013-09-30 23:22 - 2013-09-30 23:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-09-30 22:25 - 2013-09-26 18:49 - 00000000 ____D C:\Users\s\Desktop\ctvrtek-patek
2013-09-30 22:07 - 2013-09-30 22:07 - 00030830 _____ C:\Users\s\Downloads\Breaking.Bad.S05E16.Felina.zip
2013-09-30 17:35 - 2013-09-30 17:35 - 00000000 ____D C:\Users\s\Downloads\MW2 DLC
2013-09-30 16:57 - 2013-09-30 16:57 - 01669632 _____ C:\Users\s\Downloads\SteamInstall.msi
2013-09-30 16:27 - 2013-09-23 16:13 - 00000000 ____D C:\Users\s\Documents\Battlefield 2
2013-09-30 16:24 - 2013-05-02 16:13 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-09-30 15:57 - 2013-09-30 15:57 - 00130260 _____ C:\Users\s\Downloads\NÁMĚSTÍ T.G.M. - beton.dwf
2013-09-29 21:00 - 2013-05-04 14:17 - 00000000 ____D C:\foto
2013-09-29 19:09 - 2013-09-29 19:08 - 33843968 _____ C:\Users\s\Downloads\gobotree.c308d6a056901175b382dc1856a355d2.zip
2013-09-29 17:34 - 2013-09-29 17:34 - 00000000 ____D C:\Users\s\AppData\Roaming\SketchUp
2013-09-29 14:13 - 2013-09-29 14:13 - 00003120 _____ C:\Windows\SysWOW64\ALLFSAF13a.ocx
2013-09-29 14:12 - 2013-09-29 14:12 - 00000000 ____D C:\ProgramData\SketchUp
2013-09-29 14:12 - 2013-09-29 14:12 - 00000000 ____D C:\Program Files (x86)\SketchUp
2013-09-29 14:04 - 2013-09-29 14:02 - 75726696 _____ (Trimble Navigation Limited) C:\Users\s\Downloads\SketchUpWEN.exe
2013-09-27 18:46 - 2013-09-27 18:45 - 00000000 ____D C:\Users\s\Documents\Ableton
2013-09-27 18:45 - 2013-09-27 18:45 - 00000000 ____D C:\ProgramData\Ableton
2013-09-27 18:45 - 2013-09-27 18:43 - 00000000 ____D C:\Users\s\AppData\Roaming\Ableton
2013-09-27 18:38 - 2013-09-27 18:38 - 00000000 ____D C:\Program Files (x86)\Ableton
2013-09-27 17:50 - 2013-09-27 17:20 - 00000000 ____D C:\Users\s\Downloads\Ableton Live 8.2.2 (CRACKED) [theLEAK]
2013-09-27 01:10 - 2013-09-27 00:59 - 56005871 _____ C:\Users\s\Desktop\Video.wmv
2013-09-27 00:52 - 2013-09-27 00:18 - 00028936 _____ C:\Users\s\Desktop\pokus.veg
2013-09-27 00:26 - 2013-09-27 00:26 - 00000030 _____ C:\Users\s\Documents\pokus.avi.sfl
2013-09-27 00:18 - 2013-09-25 12:23 - 00000000 ____D C:\Users\s\AppData\Roaming\Sony
2013-09-26 14:26 - 2013-09-26 14:25 - 00000051 _____ C:\Users\s\Desktop\knizky.txt
2013-09-25 18:13 - 2013-09-25 18:13 - 00000130 _____ C:\Users\s\Desktop\sony vegas Baru.txt
2013-09-25 15:39 - 2013-09-25 14:08 - 00000000 ____D C:\Program Files (x86)\Sony
2013-09-25 15:38 - 2013-09-25 15:37 - 13328352 _____ (Sony Creative Software Inc.) C:\Users\s\Downloads\presetmngr20k.exe
2013-09-25 15:36 - 2013-09-25 15:36 - 00005258 _____ C:\Users\s\Downloads\Preset pack 4 (CC Mega Pack).rar
2013-09-25 15:28 - 2013-09-25 15:28 - 00000000 ____D C:\ProgramData\Sony
2013-09-25 15:27 - 2013-09-25 15:27 - 00000000 ____D C:\Users\s\AppData\Roaming\Publish Providers
2013-09-25 15:26 - 2013-09-25 15:26 - 00017108 _____ C:\Windows\SysWOW64\CCCInstall_201309251526016477.log
2013-09-25 15:22 - 2013-09-25 15:17 - 00000000 ____D C:\Users\pokus
2013-09-25 15:18 - 2013-09-25 15:18 - 00143792 _____ C:\Users\pokus\AppData\Local\GDIPFONTCACHEV1.DAT
2013-09-25 15:18 - 2013-09-25 15:18 - 00001397 _____ C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ___RD C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Sony
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Real
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\ATI
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Apple Computer
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Roaming\Adobe
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\Sony
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\LogMeIn Hamachi
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\ATI
2013-09-25 15:18 - 2013-09-25 15:18 - 00000000 ____D C:\Users\pokus\AppData\Local\Adobe
2013-09-25 15:17 - 2013-09-25 15:17 - 00000020 ___SH C:\Users\pokus\ntuser.ini
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Šablony
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Soubory cookie
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Poslední
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Okolní tiskárny
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Okolní síť
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Nabídka Start
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Dokumenty
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\Data aplikací
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 _SHDL C:\Users\pokus\AppData\Local\Data aplikací
2013-09-25 15:17 - 2013-09-25 15:17 - 00000000 ____D C:\Users\pokus\AppData\Local\VirtualStore
2013-09-25 14:08 - 2013-09-25 14:08 - 00000000 ____D C:\Program Files\Sony
2013-09-25 14:08 - 2013-09-25 12:24 - 00000000 ____D C:\Users\s\AppData\Local\Sony
2013-09-25 13:38 - 2013-09-25 13:38 - 00000000 ____D C:\Users\s\AppData\Roaming\Sony Creative Software Inc
2013-09-25 13:35 - 2013-09-25 13:35 - 00000000 ____D C:\Windows\SysWOW64\spool
2013-09-25 12:30 - 2013-09-25 11:05 - 732072538 _____ C:\Users\s\Downloads\En-gang-i-Phuket.avi
2013-09-24 18:26 - 2013-09-24 18:26 - 00000000 ____D C:\Program Files (x86)\GOG.com
2013-09-24 15:59 - 2013-09-24 15:57 - 21142125 _____ C:\Users\s\Downloads\SO-23-Sadove-upravy.rar
2013-09-24 15:56 - 2013-09-24 15:55 - 26306876 _____ C:\Users\s\Downloads\SO-03,SO-04.02-Sadové-úpravy.rar
2013-09-24 14:46 - 2013-09-24 14:39 - 118845344 _____ C:\Users\s\Downloads\DPS.zip
2013-09-23 16:24 - 2013-05-19 16:31 - 00000000 ____D C:\Users\s\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2013-09-23 16:22 - 2013-04-14 21:40 - 00091898 _____ C:\Windows\DirectX.log
2013-09-23 01:28 - 2013-10-10 09:59 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-09-23 01:28 - 2013-10-10 09:59 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-09-23 01:27 - 2013-10-10 09:59 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-09-23 01:27 - 2013-10-10 09:58 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-09-23 00:55 - 2013-10-10 09:59 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-09-23 00:55 - 2013-10-10 09:59 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-09-23 00:55 - 2013-10-10 09:59 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-09-23 00:54 - 2013-10-10 09:59 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-09-23 00:54 - 2013-10-10 09:59 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-09-21 05:38 - 2013-10-10 09:59 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-09-21 05:30 - 2013-10-10 09:59 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-09-21 04:48 - 2013-10-10 09:59 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-09-21 04:39 - 2013-10-10 09:59 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-09-20 14:20 - 2013-09-20 12:48 - 07887285 _____ C:\Users\s\Desktop\1_300 SITUAČNÍ ZÁKRES KÁCENÍ DŘ.psd
2013-09-20 13:47 - 2013-09-19 22:19 - 74764976 _____ C:\Users\s\Desktop\navykres [ANDY-PC-ondra].pln
2013-09-19 22:59 - 2013-09-19 22:19 - 73082544 _____ C:\Users\s\Desktop\navykres [ANDY-PC-ondra].bpn
2013-09-19 17:38 - 2013-05-16 11:01 - 00000000 ____D C:\Program Files (x86)\Google
2013-09-19 17:24 - 2013-09-19 17:24 - 00000000 ____D C:\Users\Public\Documents\Lands
2013-09-19 17:22 - 2013-05-16 11:01 - 00000000 ____D C:\Users\s\AppData\Local\Google
2013-09-19 17:18 - 2013-09-19 17:17 - 00785024 _____ (Google Inc.) C:\Users\s\Downloads\googleupdatesetup.exe
2013-09-19 17:15 - 2013-09-19 17:15 - 00000000 ____D C:\Users\s\AppData\Roaming\AsuniCAD
2013-09-19 17:14 - 2013-09-19 17:14 - 00000000 ____D C:\Users\s\AppData\Local\3dmouse
2013-09-19 17:11 - 2013-04-17 13:04 - 00000000 ____D C:\ProgramData\McNeel
2013-09-19 17:09 - 2013-09-19 17:09 - 00000000 ____D C:\Users\s\AppData\Local\McNeel
2013-09-19 17:09 - 2013-09-19 17:09 - 00000000 ____D C:\Program Files (x86)\Flamingo nXt
2013-09-19 17:09 - 2013-09-18 15:31 - 00000000 ____D C:\Users\s\AppData\Roaming\McNeel
2013-09-19 17:06 - 2013-09-19 17:05 - 00000000 ____D C:\Program Files\Lands Design WIP (64-bit)
2013-09-19 17:05 - 2013-09-19 17:05 - 00000000 ____D C:\ProgramData\AsuniCAD
2013-09-19 17:05 - 2013-09-19 17:05 - 00000000 ____D C:\Program Files\Common Files\AsuniCAD
2013-09-19 16:55 - 2013-07-27 23:43 - 00000000 ____D C:\Windows\system32\appmgmt
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\SysWOW64\Drivers\igxkxz_431.set
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\SysWOW64\Drivers\diusvhm193.dat
2013-09-19 16:51 - 2013-09-19 16:51 - 00000400 _____ C:\Windows\d_oirotq169.ini
2013-09-19 16:36 - 2013-09-19 16:36 - 01315563 _____ C:\Users\s\Downloads\DIO_11_2_Kácení_dřevin.zip
2013-09-19 14:47 - 2013-09-19 14:47 - 00000000 ____D C:\Program Files (x86)\AsuniCAD
2013-09-19 11:30 - 2013-09-19 11:28 - 30879978 _____ C:\Users\s\Downloads\SO-12-SADOVE-UPRAVY.rar

Some content of TEMP:
====================
C:\Users\Ondrej\AppData\Local\Temp\AcDeltree.exe
C:\Users\Ondrej\AppData\Local\Temp\BitLord_Installer.exe
C:\Users\Ondrej\AppData\Local\Temp\bitool.dll
C:\Users\Ondrej\AppData\Local\Temp\KMP_3.5.0.77.exe
C:\Users\Ondrej\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Ondrej\AppData\Local\Temp\sfamcc00002.dll
C:\Users\Ondrej\AppData\Local\Temp\sfamcc00003.dll
C:\Users\Ondrej\AppData\Local\Temp\sfamcc00004.dll
C:\Users\Ondrej\AppData\Local\Temp\sfamcc00005.dll
C:\Users\Ondrej\AppData\Local\Temp\sfareca00003.dll
C:\Users\Ondrej\AppData\Local\Temp\sfextra.dll
C:\Users\s\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\s\AppData\Local\Temp\KMP_3.6.0.87.exe
C:\Users\s\AppData\Local\Temp\KMP_3.7.0.109.exe
C:\Users\s\AppData\Local\Temp\KMP_3.7.0.113.exe
C:\Users\s\AppData\Local\Temp\LEGOLOTR.exe
C:\Users\s\AppData\Local\Temp\lowproc.exe
C:\Users\s\AppData\Local\Temp\msvcr80.dll
C:\Users\s\AppData\Local\Temp\NGMDll.dll
C:\Users\s\AppData\Local\Temp\NGMResource.dll
C:\Users\s\AppData\Local\Temp\NGMSetup.exe
C:\Users\s\AppData\Local\Temp\ntdll_dump.dll
C:\Users\s\AppData\Local\Temp\rhrdk_20080527.exe
C:\Users\s\AppData\Local\Temp\SimPack.exe
C:\Users\s\AppData\Local\Temp\SkypeSetup.exe
C:\Users\s\AppData\Local\Temp\stubhelper.dll
C:\Users\s\AppData\Local\Temp\unicows.dll
C:\Users\s\AppData\Local\Temp\WiseShell32Utils.dll
C:\Users\s\AppData\Local\Temp\zlib1.dll


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-10-15 18:03




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:232.79 GB) (Free:5.28 GB) NTFS
Drive e: (Disk_2) (CDROM) (Total:3.36 GB) (Free:0 GB) CDFS

Available physical RAM: 1524.18 MB
Total physical RAM: 3950.1 MB
Percentage of memory in use: 61%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 233 GB) (Disk ID: A8B4B626)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\s\Desktop" je 49137 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vir policie

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna. :?:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ondrejs
Návštěvník
Návštěvník
Příspěvky: 43
Registrován: 20 Kvě 2009 14:07

Re: vir policie

#3 Příspěvek od ondrejs »

Jojo,
mám ho z druhé ruky, ale štítek sedí:
http://imgup.cz/image/18r
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vir policie

#4 Příspěvek od vyosek »

:arrow: OK, diky. Zamazani SN naprosto v poradku

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKCU\...\Run: [uTorrent] - C:\Users\s\AppData\Roaming\uTorrent\uTorrent.exe [802136 2013-05-26] (BitTorrent Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Software Informer] - C:\Program Files (x86)\Software Informer\softinfo.exe [2011205 2009-11-25] (Informer Technologies, Inc.)
HKCU\...\Run: [fsm] - [x]
HKCU\...\Run: [EPSON Stylus DX7400 Series (kopie 1)] - C:\Users\s\AppData\Local\Temp\E_SFA9A.tmp [146 2013-08-10] ()
HKCU\...\Run: [EPSON Stylus DX7400 Series] - C:\Users\s\AppData\Local\Temp\E_S715F.tmp [124 2013-08-10] ()
HKCU\...\Run: [Infium] - "C:\Users\s\Desktop\qip\qip.exe" /isolated /autorun
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\s\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
MountPoints2: {4af5d9c8-a518-11e2-a6a2-506313ee5a68} - 1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-04-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [884 2013-06-14] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\Ondrej\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKU\Ondrej\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Ondrej\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\Ondrej\...\Run: [AdobeBridge] - [x]

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher (1).exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Windows\inf\ntvdm.vbe

Hosts:

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ondrejs
Návštěvník
Návštěvník
Příspěvky: 43
Registrován: 20 Kvě 2009 14:07

Re: vir policie

#5 Příspěvek od ondrejs »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-10-2013
Ran by s at 2013-10-19 17:27:36 Run:1
Running from C:\Users\s\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKCU\...\Run: [uTorrent] - C:\Users\s\AppData\Roaming\uTorrent\uTorrent.exe [802136 2013-05-26] (BitTorrent Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKCU\...\Run: [AdobeBridge] - [x]
HKCU\...\Run: [Software Informer] - C:\Program Files (x86)\Software Informer\softinfo.exe [2011205 2009-11-25] (Informer Technologies, Inc.)
HKCU\...\Run: [fsm] - [x]
HKCU\...\Run: [EPSON Stylus DX7400 Series (kopie 1)] - C:\Users\s\AppData\Local\Temp\E_SFA9A.tmp [146 2013-08-10] ()
HKCU\...\Run: [EPSON Stylus DX7400 Series] - C:\Users\s\AppData\Local\Temp\E_S715F.tmp [124 2013-08-10] ()
HKCU\...\Run: [Infium] - "C:\Users\s\Desktop\qip\qip.exe" /isolated /autorun
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1813928 2013-10-09] (Valve Corporation)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\s\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
MountPoints2: {4af5d9c8-a518-11e2-a6a2-506313ee5a68} - 1
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [TkBellExe] - C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe [295512 2013-04-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [SwitchBoard] - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2011-09-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [2904984 2011-09-05] (Adobe Systems Inc.)
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [884 2013-06-14] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.)
HKU\Ondrej\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20684656 2013-07-25] (Skype Technologies S.A.)
HKU\Ondrej\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672640 2013-03-14] (Disc Soft Ltd)
HKU\Ondrej\...\Run: [RESTART_STICKY_NOTES] - C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\Ondrej\...\Run: [AdobeBridge] - [x]

Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File

FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File

2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher.exe
2013-10-19 15:01 - 2013-10-19 15:01 - 00112128 _____ (forum.viry.cz) C:\Users\s\Downloads\FRSTLauncher (1).exe

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Windows\inf\ntvdm.vbe

Hosts:

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\uTorrent => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Software Informer => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\fsm => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\EPSON Stylus DX7400 Series (kopie 1) => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\EPSON Stylus DX7400 Series => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Infium => Value not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4af5d9c8-a518-11e2-a6a2-506313ee5a68} => Key deleted successfully.
HKCR\CLSID\{4af5d9c8-a518-11e2-a6a2-506313ee5a68} => Key not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\TkBellExe => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe Acrobat Speed Launcher => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Acrobat Assistant 8.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\APSDaemon => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\QuickTime Task => Value deleted successfully.
HKU\Ondrej\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\Ondrej\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\Ondrej\Software\Microsoft\Windows\CurrentVersion\Run\\RESTART_STICKY_NOTES => Value deleted successfully.
HKU\Ondrej\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
HKCR\CLSID\{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
HKLM\Software\Wow6432Node\MozillaPlugins\FF Plugin-x32: @microsoft.com/GENUINE - disabled No File => Key not found.
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File not found.
C:\Users\s\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\s\Downloads\FRSTLauncher (1).exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\inf\ntvdm.vbe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vir policie

#6 Příspěvek od vyosek »

Fajn, je s PC nejaky problem??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ondrejs
Návštěvník
Návštěvník
Příspěvky: 43
Registrován: 20 Kvě 2009 14:07

Re: vir policie

#7 Příspěvek od ondrejs »

Úplně na začátku jsem měl problém s prohlížečem Firefox, objevila se zpráva Váš počítač je zablokován, bla bla zmíněna byla policie a jak jsem se dočetl na fórech, mé podezření o viru bylo správné. Jiné prohlížeče fungovaly bez problémů, a tak jsem se rozhodl založit zde téma.

Před tím posledním logem jsem stáhl a pustil podle jiného vlákna zde na fóru RogueKiller, vyčistil a vše se zatím zdá v pořádku.

Děkuju za reakce.
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vir policie

#8 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
ondrejs
Návštěvník
Návštěvník
Příspěvky: 43
Registrován: 20 Kvě 2009 14:07

Re: vir policie

#9 Příspěvek od ondrejs »

Děkuju. :idea:
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: vir policie

#10 Příspěvek od vyosek »

Nemate zac, rad jsem pomohl :worship: Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat :lock:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Zamčeno

Vrátit se na „Řešení problémů, logy“