zamrzá počítač

[lukulus3]

Dobrý den.prosím o kontrolu.Zamrzá mi počítač.
Log z RSIT.



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:13:05, on 8.1.2014
Platform: Unknown Windows (WinNT 6.01.3505 SP1)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Launch Manager\LManager.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Netbook\Downloads\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\LManager.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [NextLive] C:\Windows\system32\rundll32.exe "C:\Users\Netbook\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Stáhnout pomocí &BitSpiritu - C:\Program Files\BitSpirit\bsurl.htm
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{AA248307-BF0C-40B7-AE03-7D55BD880097}: NameServer = 10.10.10.1,10.10.10.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files\Launch Manager\dsiwmis.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe

--
End of file - 5455 bytes

[Rudy]

Zdravím!
Zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

[lukulus3]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 08-01-2014
Ran by Netbook (administrator) on NETBOOK-PC on 08-01-2014 18:59:07
Running from C:\Users\Netbook\Downloads
Microsoft Windows 7 Starter Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LManager.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\dsiwmis.exe
(Dritek System Inc.) C:\Program Files\Launch Manager\LMworker.exe
() C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(RealNetworks, Inc.) C:\Program Files\RealNetworks\RealDownloader\recordingmanager.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [LManager] - C:\Program Files\Launch Manager\LManager.exe [1025616 2010-12-09] (Dritek System Inc.)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-25] (AVAST Software)
HKCU\...\Run: [NextLive] - C:\Windows\system32\rundll32.exe "C:\Users\Netbook\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.windowsxlive.net
SearchScopes: HKCU - DefaultScope {3A7E6170-4809-4FD7-A691-BDB9F6310782} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {3A7E6170-4809-4FD7-A691-BDB9F6310782} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://pandasecurityr.mystart.com/?sour ... earchTerms}
BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\..\Interfaces\{AA248307-BF0C-40B7-AE03-7D55BD880097}: [NameServer]10.10.10.1,10.10.10.2

FireFox:
========
FF ProfilePath: C:\Users\Netbook\AppData\Roaming\Mozilla\Firefox\Profiles\1uf6zxke.default
FF user.js: detected! => C:\Users\Netbook\AppData\Roaming\Mozilla\Firefox\Profiles\1uf6zxke.default\user.js
FF DefaultSearchEngine: Yahoo
FF Homepage: hxxp://www.windowsxlive.net
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_39.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @real.com/nppl3260;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpplugin;version=16.0.3.51 - c:\program files\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.8 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\adawaretb.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Adblock Plus - C:\Users\Netbook\AppData\Roaming\Mozilla\Firefox\Profiles\1uf6zxke.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF HKLM\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext\
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF

Chrome:
=======
CHR HomePage: hxxp://www.windowsxlive.net/
CHR RestoreOnStartup: "hxxp://seznam.cz/"
CHR DefaultSearchKeyword: seznam.cz
CHR DefaultSearchProvider: Seznam
CHR DefaultSearchURL: http://search.seznam.cz/?q={searchTerms}
CHR DefaultNewTabURL:
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\31.0.1650.63\pdf.dll ()
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Foxit Reader Plugin for Mozilla) - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll No File
CHR Plugin: (Java(TM) Platform SE 7 U13) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_7_700_224.dll No File
CHR Plugin: (Java Deployment Toolkit 7.0.250.17) - C:\Windows\system32\npDeployJava1.dll No File
CHR Extension: (Google Drive) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Adblock Plus) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.7.2_0
CHR Extension: (Google Search) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (avast! Online Security) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\8.0.8_0
CHR Extension: (RealDownloader) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji\1.3.3_0
CHR Extension: (Google Wallet) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR Extension: (Gmail) - C:\Users\Netbook\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.0.crx
CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx
CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-25] (AVAST Software)
R2 RealNetworks Downloader Resolver Service; C:\Program Files\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2013-12-25] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [79720 2013-11-23] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2013-11-23] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [775952 2013-12-25] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [410528 2013-12-25] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [64168 2013-12-25] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2013-12-25] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2013-09-14] (Disc Soft Ltd)
S3 EUCR; C:\Windows\System32\DRIVERS\EUCR6SK.SYS [82768 2013-07-03] (ENE Technology Inc.)
S3 Huawei; C:\Windows\System32\DRIVERS\ewdcsc.sys [23424 2009-12-15] (Huawei Tech. Co., Ltd.)
U5 ewusbnet; C:\Windows\System32\Drivers\ewusbnet.sys [198656 2009-12-15] (Huawei Technologies Co., Ltd.)
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [x]
S3 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [x]
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [x]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [x]
S3 huawei_ext_ctrl; system32\DRIVERS\ew_juextctrl.sys [x]
S3 huawei_wwanecm; system32\DRIVERS\ew_juwwanecm.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-01-08 18:54 - 2014-01-08 18:55 - 00023998 _____ C:\Users\Netbook\Downloads\Addition.txt
2014-01-08 18:52 - 2014-01-08 18:59 - 00013351 _____ C:\Users\Netbook\Downloads\FRST.txt
2014-01-08 18:52 - 2014-01-08 18:52 - 00000000 ____D C:\FRST
2014-01-08 18:50 - 2014-01-08 18:50 - 01065719 _____ (Farbar) C:\Users\Netbook\Downloads\FRST.exe
2014-01-08 16:29 - 2014-01-08 16:29 - 00005010 _____ C:\Users\Netbook\Downloads\dxerror.log
2014-01-08 16:28 - 2014-01-08 16:28 - 00118858 _____ C:\Users\Netbook\Downloads\directx.log
2014-01-08 15:47 - 2014-01-08 15:47 - 00000000 ____D C:\ProgramData\Firefly Studios
2014-01-08 15:46 - 2014-01-08 15:47 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold Legends
2014-01-08 15:41 - 2014-01-08 15:41 - 00000056 _____ C:\Windows\setupact.log
2014-01-08 15:41 - 2014-01-08 15:41 - 00000000 _____ C:\Windows\setuperr.log
2014-01-08 15:37 - 2014-01-08 15:37 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-08 15:32 - 2014-01-08 16:33 - 00150055 _____ C:\Windows\DirectX.log
2014-01-08 15:32 - 2014-01-08 15:32 - 00002160 _____ C:\Users\Public\Desktop\Play Stronghold Legends.lnk
2014-01-08 15:19 - 2014-01-08 15:22 - 00000000 ____D C:\Users\Netbook\Downloads\stronghold legends
2014-01-08 13:16 - 2014-01-08 13:16 - 00000000 ____D C:\rsit
2014-01-08 13:16 - 2014-01-08 13:16 - 00000000 ____D C:\Program Files\trend micro
2014-01-08 13:15 - 2014-01-08 13:15 - 00781383 _____ C:\Users\Netbook\Desktop\RSIT.exe
2014-01-08 13:09 - 2014-01-08 13:09 - 00401720 _____ (Trend Micro Inc.) C:\Users\Netbook\Desktop\HijackThis.exe
2014-01-08 13:01 - 2014-01-08 18:48 - 00016117 _____ C:\Windows\WindowsUpdate.log
2014-01-08 12:51 - 2014-01-08 12:51 - 00063504 _____ C:\Users\Netbook\Downloads\Autorun.exe
2014-01-08 12:32 - 2014-01-08 12:32 - 00002064 _____ C:\Users\Public\Desktop\Play Stronghold 2.lnk
2014-01-08 12:26 - 2014-01-08 15:24 - 00000000 ____D C:\Program Files\Firefly Studios
2014-01-08 10:25 - 2014-01-08 12:18 - 1652551680 _____ C:\Users\Netbook\Downloads\Stronghold-2.iso
2014-01-07 14:06 - 2014-01-07 14:08 - 00000000 ____D C:\Users\Netbook\Downloads\Stronghold 2
2014-01-06 08:40 - 2014-01-06 08:40 - 00000000 ____D C:\Program Files\Common Files\SWF Studio
2014-01-06 07:30 - 2014-01-06 07:30 - 00000000 ____D C:\ProgramData\RELOADED
2014-01-05 22:08 - 2014-01-06 07:30 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold 3
2014-01-05 22:08 - 2014-01-05 22:08 - 00000000 ____D C:\Users\Netbook\AppData\Local\SKIDROW
2014-01-05 21:58 - 2014-01-05 21:58 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-01-05 21:57 - 2013-11-25 14:44 - 00017344 _____ (Dll-Files.com) C:\Windows\system32\roboot.exe
2014-01-05 21:55 - 2014-01-05 21:55 - 05341472 _____ (Dll-Files.com ) C:\Users\Netbook\Downloads\dffsetup-d3dx9_43.exe
2014-01-05 18:35 - 2014-01-05 18:35 - 00000961 _____ C:\Users\Public\Desktop\O2 Průvodce připojením.lnk
2014-01-05 18:35 - 2014-01-05 18:35 - 00000000 ____D C:\Program Files\O2
2014-01-05 18:35 - 2009-12-15 13:05 - 00198656 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbnet.sys
2014-01-05 18:35 - 2009-12-15 13:05 - 00102912 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbmdm.sys
2014-01-05 18:35 - 2009-12-15 13:05 - 00101120 _____ (Huawei Technologies Co., Ltd.) C:\Windows\system32\Drivers\ewusbdev.sys
2014-01-05 18:35 - 2009-12-15 13:05 - 00023424 _____ (Huawei Tech. Co., Ltd.) C:\Windows\system32\Drivers\ewdcsc.sys
2014-01-05 17:25 - 2014-01-06 07:35 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\TuneUp Software
2014-01-05 12:50 - 2014-01-05 12:50 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold 2
2014-01-05 08:25 - 2014-01-06 08:48 - 00000000 ____D C:\Users\Netbook\Downloads\Stronghold.3.crack.100%.funkcni
2014-01-04 20:22 - 2014-01-04 20:22 - 00000000 ____D C:\ProgramData\PopCap Games
2014-01-04 20:06 - 2014-01-04 20:06 - 00001035 _____ C:\Users\Netbook\Desktop\Plants vs. Zombies GOTY Edition final.lnk
2014-01-04 20:06 - 2014-01-04 20:06 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies GOTY Edition final
2014-01-04 20:06 - 2014-01-04 20:06 - 00000000 ____D C:\Dhax
2014-01-04 19:37 - 2014-01-04 19:37 - 00000000 ____D C:\Users\Netbook\Downloads\Plants-Vs-Zombies
2013-12-30 18:03 - 2013-12-30 18:11 - 00000000 ____D C:\Windows\UXBackup
2013-12-30 18:03 - 2013-10-04 02:56 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2013-12-30 18:03 - 2013-07-26 02:56 - 12872704 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2013-12-30 18:03 - 2011-02-25 06:30 - 02616320 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2013-12-30 18:03 - 2010-11-20 22:29 - 01750528 _____ (Microsoft Corporation) C:\Windows\system32\pnidui.dll
2013-12-30 18:03 - 2010-11-20 22:29 - 01493504 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2013-12-30 18:03 - 2010-11-20 22:29 - 00740864 _____ (Microsoft Corporation) C:\Windows\system32\batmeter.dll
2013-12-30 18:03 - 2010-11-20 22:29 - 00228352 _____ (Microsoft Corporation) C:\Windows\system32\stobject.dll
2013-12-30 18:03 - 2010-11-20 22:29 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\SndVolSSO.dll
2013-12-30 18:03 - 2010-11-20 22:29 - 00010752 _____ (Microsoft Corporation) C:\Windows\system32\browseui.dll
2013-12-30 18:03 - 2009-07-14 02:14 - 01140736 _____ (Microsoft Corporation) C:\Windows\system32\wscui.cpl
2013-12-30 18:03 - 2009-07-14 02:06 - 20268032 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2013-12-30 18:02 - 2006-12-03 17:15 - 00069632 _____ C:\Windows\system32\moveex.exe
2013-12-30 15:39 - 2014-01-08 15:42 - 00336152 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-30 15:16 - 2014-01-08 15:43 - 00086432 _____ C:\Users\Netbook\AppData\Local\GDIPFONTCACHEV1.DAT
2013-12-30 15:15 - 2013-12-30 15:37 - 00000000 ___HD C:\Windows\Icons
2013-12-30 10:49 - 2014-01-05 17:25 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-12-30 10:22 - 2013-12-30 11:00 - 00000000 __HDC C:\ProgramData\{7D93B3B9-36B7-4383-9666-CFAD7F2AC87E}
2013-12-30 10:21 - 2013-12-30 10:21 - 00000000 ____D C:\Users\Public\Documents\Stardock
2013-12-30 09:36 - 2013-12-30 18:01 - 00000000 ____D C:\Users\Netbook\Downloads\tuneup
2013-12-28 21:43 - 2013-12-28 21:43 - 00000000 ____D C:\Users\Netbook\Downloads\14
2013-12-25 14:43 - 2013-12-25 14:43 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2013-12-23 09:31 - 2013-12-23 21:19 - 00007606 _____ C:\Users\Netbook\AppData\Local\Resmon.ResmonCfg
2013-12-22 18:03 - 2013-12-28 21:07 - 00103736 _____ C:\Windows\system32\PnkBstrB.exe
2013-12-22 18:03 - 2013-12-28 20:35 - 00066872 _____ C:\Windows\system32\PnkBstrA.exe
2013-12-22 18:03 - 2013-12-28 20:35 - 00022328 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-22 18:03 - 2013-12-26 13:18 - 00000000 ____D C:\Users\Netbook\Documents\NFS ProStreet
2013-12-22 18:03 - 2013-12-22 18:03 - 00000000 ____D C:\Users\Netbook\AppData\Local\PunkBuster
2013-12-22 16:54 - 2014-01-08 15:43 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\newnext.me
2013-12-22 16:54 - 2013-12-22 17:01 - 00000000 ____D C:\Users\Netbook\AppData\Local\Mobogenie
2013-12-22 16:54 - 2013-12-22 16:56 - 00000000 ____D C:\Users\Netbook\AppData\Local\genienext
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\Documents\Mobogenie
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\AppData\Local\cache
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 _____ C:\Users\Netbook\daemonprocess.txt
2013-12-22 16:53 - 2013-12-22 17:01 - 00000000 ____D C:\Program Files\Mobogenie
2013-12-22 13:35 - 2013-12-26 14:11 - 00000000 ____D C:\Users\Netbook\Downloads\Need.For.Speed.Pro.Street-RELOADED
2013-12-22 13:33 - 2013-12-22 13:33 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\BitSpirit
2013-12-22 13:32 - 2013-12-22 13:32 - 00001771 _____ C:\Users\Netbook\Desktop\BitSpirit.lnk
2013-12-22 13:32 - 2013-12-22 13:32 - 00000000 ____D C:\Program Files\Common Files\BitSpirit
2013-12-22 13:32 - 2013-12-22 13:32 - 00000000 ____D C:\Program Files\BitSpirit
2013-12-22 08:35 - 2013-12-22 08:35 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll
2013-12-22 08:35 - 2013-12-22 08:35 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll
2013-12-22 08:25 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-12-22 08:25 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-12-22 08:25 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-12-22 08:25 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-12-22 08:25 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-12-22 08:25 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-12-22 08:25 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-12-22 08:25 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-12-22 08:25 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-12-22 08:25 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-12-22 08:25 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2013-12-22 08:25 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2013-12-22 08:25 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2013-12-22 08:25 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2013-12-22 08:25 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2013-12-22 08:25 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2013-12-22 08:25 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2013-12-22 08:25 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2013-12-22 08:25 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2013-12-22 08:25 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2013-12-22 08:25 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2013-12-22 08:25 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2013-12-22 08:25 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2013-12-22 08:25 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2013-12-22 08:25 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2013-12-22 08:25 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2013-12-22 08:25 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2013-12-22 08:25 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2013-12-22 08:25 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2013-12-22 08:25 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2013-12-22 08:25 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2013-12-22 08:25 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2013-12-22 08:25 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2013-12-22 08:24 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2013-12-22 08:24 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2013-12-22 08:24 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2013-12-22 08:24 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2013-12-22 08:24 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2013-12-22 08:24 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2013-12-22 08:24 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2013-12-22 08:24 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2013-12-22 08:24 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2013-12-22 08:24 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2013-12-22 08:24 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2013-12-22 08:24 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2013-12-22 08:24 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2013-12-22 08:24 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2013-12-22 08:24 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2013-12-21 17:59 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-12-21 17:59 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-12-21 17:59 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-12-21 17:59 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2013-12-20 03:06 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-20 03:06 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-20 03:06 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-20 03:06 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-20 03:06 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-20 03:06 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-20 03:06 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-20 03:06 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-20 03:06 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-20 03:06 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-20 03:06 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-20 03:06 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-20 03:06 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-20 03:06 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-20 03:06 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-20 03:06 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-20 03:05 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-20 03:05 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-20 03:05 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-20 03:00 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-20 03:00 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-19 20:25 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-19 20:18 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-19 20:13 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-19 20:13 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-19 20:13 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-19 20:13 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-19 20:13 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-19 20:13 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-19 20:09 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-19 20:07 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-19 20:07 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys

==================== One Month Modified Files and Folders =======

2014-01-08 18:59 - 2014-01-08 18:52 - 00013351 _____ C:\Users\Netbook\Downloads\FRST.txt
2014-01-08 18:55 - 2014-01-08 18:54 - 00023998 _____ C:\Users\Netbook\Downloads\Addition.txt
2014-01-08 18:54 - 2013-08-09 16:14 - 00000942 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-08 18:52 - 2014-01-08 18:52 - 00000000 ____D C:\FRST
2014-01-08 18:50 - 2014-01-08 18:50 - 01065719 _____ (Farbar) C:\Users\Netbook\Downloads\FRST.exe
2014-01-08 18:48 - 2014-01-08 13:01 - 00016117 _____ C:\Windows\WindowsUpdate.log
2014-01-08 18:16 - 2013-08-07 15:04 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-01-08 17:54 - 2013-08-09 16:14 - 00000938 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-08 16:33 - 2014-01-08 15:32 - 00150055 _____ C:\Windows\DirectX.log
2014-01-08 16:33 - 2013-08-05 19:57 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\DAEMON Tools Lite
2014-01-08 16:29 - 2014-01-08 16:29 - 00005010 _____ C:\Users\Netbook\Downloads\dxerror.log
2014-01-08 16:28 - 2014-01-08 16:28 - 00118858 _____ C:\Users\Netbook\Downloads\directx.log
2014-01-08 15:50 - 2009-07-14 05:34 - 00017328 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-08 15:50 - 2009-07-14 05:34 - 00017328 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-08 15:47 - 2014-01-08 15:47 - 00000000 ____D C:\ProgramData\Firefly Studios
2014-01-08 15:47 - 2014-01-08 15:46 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold Legends
2014-01-08 15:43 - 2013-12-30 15:16 - 00086432 _____ C:\Users\Netbook\AppData\Local\GDIPFONTCACHEV1.DAT
2014-01-08 15:43 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\newnext.me
2014-01-08 15:43 - 2013-07-04 00:23 - 00000000 ____D C:\ProgramData\boost_interprocess
2014-01-08 15:42 - 2013-12-30 15:39 - 00336152 _____ C:\Windows\system32\FNTCACHE.DAT
2014-01-08 15:42 - 2013-08-09 08:27 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2014-01-08 15:41 - 2014-01-08 15:41 - 00000056 _____ C:\Windows\setupact.log
2014-01-08 15:41 - 2014-01-08 15:41 - 00000000 _____ C:\Windows\setuperr.log
2014-01-08 15:37 - 2014-01-08 15:37 - 00000000 ____D C:\Windows\Downloaded Installations
2014-01-08 15:32 - 2014-01-08 15:32 - 00002160 _____ C:\Users\Public\Desktop\Play Stronghold Legends.lnk
2014-01-08 15:24 - 2014-01-08 12:26 - 00000000 ____D C:\Program Files\Firefly Studios
2014-01-08 15:24 - 2013-07-03 20:04 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2014-01-08 15:22 - 2014-01-08 15:19 - 00000000 ____D C:\Users\Netbook\Downloads\stronghold legends
2014-01-08 13:16 - 2014-01-08 13:16 - 00000000 ____D C:\rsit
2014-01-08 13:16 - 2014-01-08 13:16 - 00000000 ____D C:\Program Files\trend micro
2014-01-08 13:15 - 2014-01-08 13:15 - 00781383 _____ C:\Users\Netbook\Desktop\RSIT.exe
2014-01-08 13:12 - 2013-07-03 19:40 - 00000000 ____D C:\Users\Netbook\AppData\Local\VirtualStore
2014-01-08 13:09 - 2014-01-08 13:09 - 00401720 _____ (Trend Micro Inc.) C:\Users\Netbook\Desktop\HijackThis.exe
2014-01-08 12:51 - 2014-01-08 12:51 - 00063504 _____ C:\Users\Netbook\Downloads\Autorun.exe
2014-01-08 12:32 - 2014-01-08 12:32 - 00002064 _____ C:\Users\Public\Desktop\Play Stronghold 2.lnk
2014-01-08 12:18 - 2014-01-08 10:25 - 1652551680 _____ C:\Users\Netbook\Downloads\Stronghold-2.iso
2014-01-07 14:08 - 2014-01-07 14:06 - 00000000 ____D C:\Users\Netbook\Downloads\Stronghold 2
2014-01-07 01:25 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2014-01-06 20:31 - 2010-11-20 22:01 - 01566672 _____ C:\Windows\system32\PerfStringBackup.INI
2014-01-06 08:52 - 2013-08-09 22:46 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2014-01-06 08:48 - 2014-01-05 08:25 - 00000000 ____D C:\Users\Netbook\Downloads\Stronghold.3.crack.100%.funkcni
2014-01-06 08:40 - 2014-01-06 08:40 - 00000000 ____D C:\Program Files\Common Files\SWF Studio
2014-01-06 07:35 - 2014-01-05 17:25 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\TuneUp Software
2014-01-06 07:30 - 2014-01-06 07:30 - 00000000 ____D C:\ProgramData\RELOADED
2014-01-06 07:30 - 2014-01-05 22:08 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold 3
2014-01-05 22:08 - 2014-01-05 22:08 - 00000000 ____D C:\Users\Netbook\AppData\Local\SKIDROW
2014-01-05 21:58 - 2014-01-05 21:58 - 01998168 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-01-05 21:55 - 2014-01-05 21:55 - 05341472 _____ (Dll-Files.com ) C:\Users\Netbook\Downloads\dffsetup-d3dx9_43.exe
2014-01-05 18:35 - 2014-01-05 18:35 - 00000961 _____ C:\Users\Public\Desktop\O2 Průvodce připojením.lnk
2014-01-05 18:35 - 2014-01-05 18:35 - 00000000 ____D C:\Program Files\O2
2014-01-05 18:33 - 2013-09-03 08:47 - 00000000 ____D C:\ProgramData\DatacardService
2014-01-05 17:25 - 2013-12-30 10:49 - 00000000 __SHD C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2014-01-05 12:50 - 2014-01-05 12:50 - 00000000 ____D C:\Users\Netbook\Documents\Stronghold 2
2014-01-05 12:50 - 2013-09-16 09:53 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-01-04 20:22 - 2014-01-04 20:22 - 00000000 ____D C:\ProgramData\PopCap Games
2014-01-04 20:06 - 2014-01-04 20:06 - 00001035 _____ C:\Users\Netbook\Desktop\Plants vs. Zombies GOTY Edition final.lnk
2014-01-04 20:06 - 2014-01-04 20:06 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Plants vs. Zombies GOTY Edition final
2014-01-04 20:06 - 2014-01-04 20:06 - 00000000 ____D C:\Dhax
2014-01-04 19:37 - 2014-01-04 19:37 - 00000000 ____D C:\Users\Netbook\Downloads\Plants-Vs-Zombies
2014-01-04 17:17 - 2013-09-14 12:48 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\Seznam.cz
2014-01-04 17:16 - 2013-09-14 12:49 - 00000000 ____D C:\Program Files\Seznam.cz
2014-01-04 17:05 - 2013-10-28 19:48 - 00000000 ____D C:\Users\Netbook\Downloads\plants-vs-zombies-sk
2014-01-03 20:18 - 2013-09-03 21:40 - 00000000 ___RD C:\Users\Netbook\Desktop\filmy
2013-12-30 18:11 - 2013-12-30 18:03 - 00000000 ____D C:\Windows\UXBackup
2013-12-30 18:10 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Cursors
2013-12-30 18:01 - 2013-12-30 09:36 - 00000000 ____D C:\Users\Netbook\Downloads\tuneup
2013-12-30 15:37 - 2013-12-30 15:15 - 00000000 ___HD C:\Windows\Icons
2013-12-30 15:01 - 2013-07-03 20:32 - 00000000 ____D C:\Windows\Panther
2013-12-30 14:59 - 2013-07-03 23:31 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-30 11:00 - 2013-12-30 10:22 - 00000000 __HDC C:\ProgramData\{7D93B3B9-36B7-4383-9666-CFAD7F2AC87E}
2013-12-30 11:00 - 2013-09-05 19:53 - 00000000 ___RD C:\Users\Netbook\Desktop\hudba
2013-12-30 10:48 - 2013-09-16 09:49 - 00000000 ____D C:\Users\Netbook\Downloads\soft
2013-12-30 10:21 - 2013-12-30 10:21 - 00000000 ____D C:\Users\Public\Documents\Stardock
2013-12-29 23:16 - 2013-11-01 06:12 - 00000000 ____D C:\Users\Netbook\AppData\Local\Deployment
2013-12-29 17:42 - 2013-09-28 14:01 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\BSplayer
2013-12-28 21:43 - 2013-12-28 21:43 - 00000000 ____D C:\Users\Netbook\Downloads\14
2013-12-28 21:07 - 2013-12-22 18:03 - 00103736 _____ C:\Windows\system32\PnkBstrB.exe
2013-12-28 20:35 - 2013-12-22 18:03 - 00066872 _____ C:\Windows\system32\PnkBstrA.exe
2013-12-28 20:35 - 2013-12-22 18:03 - 00022328 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2013-12-28 16:15 - 2013-08-17 11:40 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\vlc
2013-12-26 14:11 - 2013-12-22 13:35 - 00000000 ____D C:\Users\Netbook\Downloads\Need.For.Speed.Pro.Street-RELOADED
2013-12-26 13:18 - 2013-12-22 18:03 - 00000000 ____D C:\Users\Netbook\Documents\NFS ProStreet
2013-12-25 14:43 - 2013-12-25 14:43 - 00064168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2013-12-25 14:42 - 2013-11-23 13:15 - 00775952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2013-12-25 14:42 - 2013-11-23 13:15 - 00410528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2013-12-25 14:42 - 2013-11-23 13:15 - 00180248 _____ C:\Windows\system32\Drivers\aswVmm.sys
2013-12-25 14:42 - 2013-11-23 13:15 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2013-12-25 14:42 - 2013-11-23 13:14 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2013-12-25 14:42 - 2013-09-05 22:21 - 00270240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2013-12-23 21:19 - 2013-12-23 09:31 - 00007606 _____ C:\Users\Netbook\AppData\Local\Resmon.ResmonCfg
2013-12-22 20:27 - 2013-09-16 09:54 - 00000000 ____D C:\Users\Netbook\AppData\Local\NFS Underground 2
2013-12-22 18:03 - 2013-12-22 18:03 - 00000000 ____D C:\Users\Netbook\AppData\Local\PunkBuster
2013-12-22 17:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2013-12-22 17:11 - 2013-08-13 20:32 - 00000000 ____D C:\Program Files\Electronic Arts
2013-12-22 17:01 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\AppData\Local\Mobogenie
2013-12-22 17:01 - 2013-12-22 16:53 - 00000000 ____D C:\Program Files\Mobogenie
2013-12-22 16:56 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\AppData\Local\genienext
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\Documents\Mobogenie
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 ____D C:\Users\Netbook\AppData\Local\cache
2013-12-22 16:54 - 2013-12-22 16:54 - 00000000 _____ C:\Users\Netbook\daemonprocess.txt
2013-12-22 16:54 - 2013-07-03 19:40 - 00000000 ____D C:\Users\Netbook
2013-12-22 13:33 - 2013-12-22 13:33 - 00000000 ____D C:\Users\Netbook\AppData\Roaming\BitSpirit
2013-12-22 13:32 - 2013-12-22 13:32 - 00001771 _____ C:\Users\Netbook\Desktop\BitSpirit.lnk
2013-12-22 13:32 - 2013-12-22 13:32 - 00000000 ____D C:\Program Files\Common Files\BitSpirit
2013-12-22 13:32 - 2013-12-22 13:32 - 00000000 ____D C:\Program Files\BitSpirit
2013-12-22 10:23 - 2013-09-14 12:48 - 00000000 ____D C:\Program Files\LemurLeap
2013-12-22 08:35 - 2013-12-22 08:35 - 01700352 _____ (Microsoft Corporation) C:\Windows\system32\gdiplus.dll
2013-12-22 08:35 - 2013-12-22 08:35 - 01060864 _____ (Microsoft Corporation) C:\Windows\system32\mfc71.dll
2013-12-20 04:02 - 2013-10-26 15:34 - 00000000 ____D C:\Windows\rescache
2013-12-20 03:05 - 2013-08-04 20:27 - 00000000 ____D C:\Windows\system32\MRT
2013-12-20 03:01 - 2013-07-03 21:00 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-19 21:18 - 2013-07-04 00:32 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-19 21:18 - 2013-07-04 00:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-12-31 20:47

==================== End Of Log ============================

[Rudy]

Otevřte poznámkový blok a zkopírujte do něj:

Start
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://pandasecurityr.mystart.com/?sour ... 2584353&q={searchTerms}
C:\Windows\system32\moveex.exe
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
Task: {1DE35419-2760-43C9-A4CB-4D28D4A6C8B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-04] (Google Inc.)
End

Uložte do C:\Users\Netbook\Downloads jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

[lukulus3]

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 08-01-2014 01
Ran by Netbook at 2014-01-08 21:46:16 Run:1
Running from C:\Users\Netbook\Downloads
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://pandasecurityr.mystart.com/?sour ... 2584353&q={searchTerms}
C:\Windows\system32\moveex.exe
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
Task: {1DE35419-2760-43C9-A4CB-4D28D4A6C8B9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-04] (Google Inc.)
End
*****************

HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} => Key not found.
C:\Windows\system32\moveex.exe => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1DE35419-2760-43C9-A4CB-4D28D4A6C8B9} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1DE35419-2760-43C9-A4CB-4D28D4A6C8B9} => Key deleted successfully.
C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore => Key deleted successfully.

==== End of Fixlog ====

[Rudy]

Smazáno. Nastala nějaká změna?

[lukulus3]

vypadá to v pohodě,ale nejde vypnout počítač.Blokuje to sidebar.exe.Musím vynutit ukončení.

[Rudy]

Sidebar je systémová věc. Jestli ho nepotřebujete, vypněte. Pak ten problém pomine. Ještě můžete zkusit toto:

Stáhněte OTM: http://oldtimer.geekstogo.com/OTM.exe a uložte na plochu. Spusťte a do levého okna zkopírujte:

:commands
[Purity]
[Emptytemp]
[Emptyflash]

a klikněte na >MoveIt!<. Před skenem vypněte antivir a po něm restartujte PC.

[lukulus3]

All processes killed
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Netbook
->Temp folder emptied: 12910667 bytes
->Temporary Internet Files folder emptied: 1096210 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 3119389 bytes
->Google Chrome cache emptied: 24702669 bytes
->Flash cache emptied: 704 bytes

User: Public

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 1289016 bytes
%systemroot%\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33298 bytes
RecycleBin emptied: 1774581755 bytes

Total Files Cleaned = 1 734,00 mb


[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Netbook
->Flash cache emptied: 0 bytes

User: Public

Total Flash Files Cleaned = 0,00 mb


OTM by OldTimer - Version 3.1.21.0 log created on 01082014_222714

Files moved on Reboot...
C:\Users\Netbook\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat moved successfully.

Registry entries deleted on Reboot...

[Rudy]

Nastala nějaká změna?

[lukulus3]

Nenastala.Vypnu to.

[lukulus3]

Děkuju za pomoc.mějte se.

[Rudy]

Rádo se stalo!