Už je to sice staré železo ale snad ještě vydrží abych dopsal bakalářku

díky
- při prvním skenování mi FIRST 2x spadl (neodesílat zprávu o chybách) log se mi podařilo vytvořit až na
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 17-01-2014 03
Ran by Honza (administrator) on QWERTZ on 18-01-2014 11:50:30
Running from C:\Documents and Settings\Honza\Plocha
Microsoft Windows XP Home Edition Service Pack 2 (X86) OS Language: Czech
Internet Explorer Version 6
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) ===================
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Sun Microsystems, Inc.) C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
(Intel Corporation) C:\WINDOWS\system32\igfxtray.exe
(Intel Corporation) C:\WINDOWS\system32\hkcmd.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Synaptics, Inc.) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(VŠB-TU Ostrava) C:\Program Files\SafeQ\SafeQ_cli.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(Highresolution Enterprises) C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe
(PortableApps.com) D:\install\SkypePortable\SkypePortable.exe
(SafeNet Inc.) C:\WINDOWS\system32\hasplms.exe
(Flexera Software, Inc.) C:\Program Files\Common Files\Scia\LicenceServer\FlexnetServer\lmadmin.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer_Service.exe
(Skype Technologies S.A.) D:\install\SkypePortable\App\Skype\Phone\Skype.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version9\tv_w32.exe
(Flexera Software, Inc.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Nemetschek SCIA) C:\Program Files\Common Files\Scia\LicenceServer\FlexnetServer\scia\SCIA.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\WINDOWS\system32\taskmgr.exe
(Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Realtek Semiconductor Corp.) C:\Program Files\REALTEK\USB Wireless LAN Utility\RtWLan.exe
(Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
(Google) C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Google Talk Plugin\googletalkplugin.exe
(forum.viry.cz) C:\Documents and Settings\Honza\Plocha\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Zástupce stránky vlastností sběrnice High Definition Audio] - C:\Windows\system32\HDAShCut.exe [61952 2005-01-07] (Windows (R) Server 2003 DDK provider)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [36975 2005-11-10] (Sun Microsystems, Inc.)
HKLM\...\Run: [SMSERIAL] - C:\Windows\sm56hlpr.exe [544768 2005-04-26] (Motorola Inc.)
HKLM\...\Run: [SynTPLpr] - C:\Program Files\Synaptics\SynTP\SynTPLpr.exe [98394 2004-10-05] (Synaptics, Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [688218 2004-10-05] (Synaptics, Inc.)
HKLM\...\Run: [SafeQClient] - C:\Program Files\SafeQ\SafeQ_cli.exe [493056 2013-09-18] (VŠB-TU Ostrava)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
HKLM\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2014-01-12] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxsrvc.dll (Intel Corporation)
HKCU\...\Run: [Google Update] - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe [116648 2013-10-18] (Google Inc.)
HKCU\...\Run: [GoogleChromeAutoLaunch_BF058E5DC45404DBFB94F54EFA6335B9] - C:\Program Files\Google\Chrome\Application\chrome.exe [866584 2014-01-11] (Google Inc.)
HKCU\...\Run: [Zoner Photo Studio Autoupdate] - C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [774680 2013-06-07] (ZONER software)
MountPoints2: {bfd16451-68e4-11e3-b03d-000ae4ba6c2d} - G:\StartPortableApps.exe
Startup: C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění\X-Mouse Button Control.lnk
ShortcutTarget: X-Mouse Button Control.lnk -> C:\Program Files\Highresolution Enterprises\X-Mouse Button Control\XMouseButtonControl.exe (Highresolution Enterprises)
Startup: C:\Documents and Settings\Honza\Nabídka Start\Programy\Po spuštění\Zástupce - SkypePortable.lnk
ShortcutTarget: Zástupce - SkypePortable.lnk -> D:\install\SkypePortable\SkypePortable.exe (PortableApps.com)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.microsoft.com/isapi/redir.dl ... ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.microsoft.com/isapi/redir.dl ... R}&ar=home
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\Windows\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\Windows\system32\SHELL32.dll (Microsoft Corporation)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.5.0/jinsta ... s-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Chrome:
=======
CHR HomePage: hxxp://qip.ru
CHR Extension: (Dokumenty Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-09-21]
CHR Extension: (Disk Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-09-21]
CHR Extension: (YouTube) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-09-21]
CHR Extension: (Vyhled\u00E1v\u00E1n\u00ED Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-09-21]
CHR Extension: (AdBlock) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2013-09-21]
CHR Extension: (goo.gl URL Shortener) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\iblijlcdoidgdpfknkckljiocdbnlagk [2013-09-21]
CHR Extension: (Kontrola e-mailu Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2013-09-21]
CHR Extension: (Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2013-10-17]
CHR Extension: (Pen\u011B\u017Eenka Google) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-21]
CHR Extension: (Gmail) - C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-09-21]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-01-12]
========================== Services (Whitelisted) =================
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-01-12] (AVAST Software)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1528616 2010-09-27] (Cisco Systems, Inc.)
R3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2013-11-11] (Flexera Software, Inc.)
R2 hasplms; C:\WINDOWS\system32\hasplms.exe [4466120 2013-01-11] (SafeNet Inc.)
R2 lmadmin; C:\Program Files\Common Files\Scia\LicenceServer\FlexnetServer\lmadmin.exe [6587728 2011-08-05] (Flexera Software, Inc.)
==================== Drivers (Whitelisted) ====================
R2 AegisP; C:\Windows\System32\DRIVERS\AegisP.sys [21361 2013-12-16] (Cisco Systems, Inc.)
R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [376200 2013-02-19] (SafeNet Inc.)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-01-12] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [54832 2014-01-12] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49944 2014-01-12] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [775952 2014-01-12] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [410528 2014-01-12] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57672 2014-01-12] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [180248 2014-01-12] ()
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\WINDOWS\system32\Drivers\CVPNDRVA.sys [308859 2010-09-27] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [131984 2008-11-16] (Deterministic Networks, Inc.)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [608136 2013-03-07] (SafeNet Inc.)
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [145920 2005-01-07] (Windows (R) Server 2003 DDK provider)
R3 RTL8023xp; C:\Windows\System32\DRIVERS\Rtlnicxp.sys [74496 2005-03-04] (Realtek Semiconductor Corporation )
S3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1343760 2012-11-07] (Realtek Semiconductor Corporation )
S3 Secdrv; C:\Windows\System32\DRIVERS\secdrv.sys [27440 2004-08-18] ()
R3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [26624 2011-04-26] (The OpenVPN Project)
S3 vsdatant; C:\WINDOWS\system32\vsdatant.sys [394952 2007-11-14] (Zone Labs, LLC)
R3 w29n51; C:\Windows\System32\DRIVERS\w29n51.sys [3298432 2005-09-12] (Intel® Corporation)
S3 olfqtuec; No ImagePath
U1 WS2IFSL;
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-01-18 11:50 - 2014-01-18 11:50 - 00013297 _____ C:\Documents and Settings\Honza\Plocha\FRST.txt
2014-01-18 11:49 - 2014-01-18 11:49 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Mozilla
2014-01-18 11:43 - 2014-01-18 11:43 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Honza\Plocha\FRSTLauncher.exe
2014-01-18 11:32 - 2014-01-18 11:32 - 00000000 ____D C:\FRST
2014-01-18 11:28 - 2014-01-18 11:28 - 01220608 _____ (Farbar) C:\Documents and Settings\Honza\Plocha\FRST.exe
2014-01-18 11:03 - 2014-01-18 11:03 - 00000110 ____H C:\Documents and Settings\Honza\Plocha\DSC_1429.JPG.uid-zps
2014-01-17 16:50 - 2014-01-17 16:50 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\SkypePM
2014-01-15 16:38 - 2014-01-15 16:38 - 00000815 _____ C:\Documents and Settings\All Users\Plocha\TeamViewer 9.lnk
2014-01-15 16:38 - 2014-01-15 16:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2014-01-13 14:39 - 2014-01-13 14:39 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Google
2014-01-13 14:36 - 2014-01-13 14:36 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2014-01-13 12:45 - 2014-01-14 15:25 - 00021956 _____ C:\WINDOWS\setupapi.log
2014-01-13 12:44 - 2014-01-14 08:06 - 00000000 ____D C:\Program Files\n2n Gui
2014-01-13 12:44 - 2014-01-13 12:44 - 00000663 _____ C:\Documents and Settings\All Users\Plocha\n2n Gui.lnk
2014-01-13 12:44 - 2014-01-13 12:44 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\n2n Gui
2014-01-13 12:44 - 2011-04-26 11:21 - 00026624 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tap0901.sys
2014-01-12 18:02 - 2014-01-12 18:02 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\AVAST Software
2014-01-12 18:01 - 2014-01-12 18:01 - 00001733 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-12 18:01 - 2014-01-12 18:01 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2014-01-12 18:00 - 2014-01-17 16:49 - 00000362 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-01-12 18:00 - 2014-01-12 18:00 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-12 18:00 - 2014-01-12 18:00 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-12 17:55 - 2014-01-12 17:55 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-12 17:54 - 2014-01-12 17:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-01-09 14:37 - 2014-01-09 14:37 - 00045158 _____ C:\Documents and Settings\Honza\Dokumenty\cc_20140109_143703.reg
2014-01-09 14:37 - 2014-01-09 14:37 - 00001590 _____ C:\Documents and Settings\Honza\Dokumenty\cc_20140109_143718.reg
2014-01-09 14:33 - 2014-01-09 14:33 - 00000682 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Program Files\CCleaner
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2014-01-09 13:10 - 2014-01-13 14:33 - 00001527 _____ C:\WINDOWS\swiproject.INI
2014-01-09 11:45 - 2014-01-13 14:26 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\BAKALAŠKA PRÁCE
2014-01-08 18:50 - 2014-01-08 19:01 - 00000000 ____D C:\Documents and Settings\Honza\Dokumenty\ZPS15
2014-01-08 18:50 - 2014-01-08 19:00 - 00001704 _____ C:\Documents and Settings\All Users\Plocha\Zoner Photo Studio 15.lnk
2014-01-08 18:50 - 2014-01-08 19:00 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Zoner Photo Studio 15
2014-01-08 18:50 - 2014-01-08 18:51 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\Zoner
2014-01-08 18:50 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Zoner
2014-01-08 18:50 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Zoner
2014-01-08 18:49 - 2014-01-08 18:49 - 00000000 ____D C:\Program Files\Zoner
2014-01-08 18:48 - 2013-12-17 12:54 - 69853617 _____ C:\Documents and Settings\Honza\Plocha\Setup.gcd
2014-01-08 18:48 - 2013-12-17 12:54 - 03294328 _____ (giveawayoftheday.com) C:\Documents and Settings\Honza\Plocha\Setup.exe
2014-01-08 18:48 - 2013-11-15 15:15 - 00000781 _____ C:\Documents and Settings\Honza\Plocha\readme.txt
2014-01-04 18:36 - 2012-03-26 14:24 - 01840770 _____ C:\Documents and Settings\Honza\Plocha\340AXJ5D0.bin
2014-01-04 18:06 - 2013-01-10 22:08 - 930073072 _____ C:\Documents and Settings\Honza\Plocha\film 1920.wmv
2014-01-04 16:42 - 2014-01-16 20:44 - 00000000 ____D C:\Program Files\CS Poker
2014-01-04 16:42 - 2014-01-04 16:42 - 00004096 _____ C:\WINDOWS\d3dx.dat
2014-01-04 16:42 - 2014-01-04 16:42 - 00001371 _____ C:\Documents and Settings\Honza\Plocha\CS Poker.lnk
2013-12-19 21:28 - 2013-12-19 21:28 - 00000694 _____ C:\Documents and Settings\Honza\Plocha\Zástupce - YuriScreenResolution.exe.lnk
2013-12-19 21:22 - 2008-01-15 09:45 - 67826994 _____ C:\Documents and Settings\Honza\Plocha\Portable_CS1.6.exe
2013-12-19 21:19 - 2013-12-19 20:37 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\C&C - Red Alert 2
2013-12-19 21:07 - 2009-03-18 17:35 - 00026176 ____H (LogMeIn, Inc.) C:\WINDOWS\system32\hamachi.sys
2013-12-19 21:05 - 2014-01-13 12:48 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-19 21:05 - 2014-01-13 12:48 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\LogMeIn Hamachi
2013-12-19 21:05 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\LogMeIn
2013-12-19 21:05 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2013-12-19 20:40 - 2013-12-19 20:40 - 00000760 _____ C:\Documents and Settings\Honza\Plocha\Zástupce - UnrealTournament.exe.lnk
2013-12-19 20:39 - 2013-12-19 20:40 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\UnrealTournament
2013-12-19 20:34 - 2013-12-19 20:34 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\Quake-3-arena--p.o.r.t.a.b.l.e
2013-12-19 20:33 - 2013-12-19 20:33 - 00000694 _____ C:\Documents and Settings\Honza\Plocha\Zástupce (2) - YuriScreenResolution.exe.lnk
==================== One Month Modified Files and Folders =======
2014-01-18 11:50 - 2014-01-18 11:50 - 00013297 _____ C:\Documents and Settings\Honza\Plocha\FRST.txt
2014-01-18 11:50 - 2013-09-21 13:31 - 00000000 ___HD C:\Documents and Settings\Honza\Local Settings\Data aplikací
2014-01-18 11:50 - 2013-09-21 13:31 - 00000000 ____D C:\Documents and Settings\Honza\Plocha
2014-01-18 11:49 - 2014-01-18 11:49 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Mozilla
2014-01-18 11:49 - 2013-10-18 10:35 - 00001026 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2145269213-1801674531-1004UA.job
2014-01-18 11:49 - 2013-09-21 13:31 - 00000000 __RHD C:\Documents and Settings\Honza\Data aplikací
2014-01-18 11:43 - 2014-01-18 11:43 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Honza\Plocha\FRSTLauncher.exe
2014-01-18 11:32 - 2014-01-18 11:32 - 00000000 ____D C:\FRST
2014-01-18 11:28 - 2014-01-18 11:28 - 01220608 _____ (Farbar) C:\Documents and Settings\Honza\Plocha\FRST.exe
2014-01-18 11:06 - 2013-09-21 07:49 - 00000938 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-18 11:05 - 2013-09-05 15:28 - 00000480 _____ C:\WINDOWS\wiadebug.log
2014-01-18 11:03 - 2014-01-18 11:03 - 00000110 ____H C:\Documents and Settings\Honza\Plocha\DSC_1429.JPG.uid-zps
2014-01-17 17:32 - 2013-09-21 13:30 - 00032526 _____ C:\WINDOWS\SchedLgU.Txt
2014-01-17 17:31 - 2013-09-21 13:31 - 00000178 ___SH C:\Documents and Settings\Honza\ntuser.ini
2014-01-17 16:56 - 2013-09-21 13:34 - 00552841 _____ C:\WINDOWS\WindowsUpdate.log
2014-01-17 16:50 - 2014-01-17 16:50 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\SkypePM
2014-01-17 16:50 - 2013-09-05 15:28 - 00000049 _____ C:\WINDOWS\wiaservc.log
2014-01-17 16:49 - 2014-01-12 18:00 - 00000362 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
2014-01-17 16:49 - 2013-09-21 13:30 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2014-01-17 16:49 - 2013-09-21 07:49 - 00000934 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-16 20:44 - 2014-01-04 16:42 - 00000000 ____D C:\Program Files\CS Poker
2014-01-16 17:57 - 2004-08-18 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2014-01-16 08:47 - 2013-10-18 10:35 - 00000974 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2145269213-1801674531-1004Core.job
2014-01-15 20:09 - 2013-09-21 13:31 - 00000000 ____D C:\Documents and Settings\Honza
2014-01-15 17:41 - 2013-09-05 15:24 - 00348992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2014-01-15 16:38 - 2014-01-15 16:38 - 00000815 _____ C:\Documents and Settings\All Users\Plocha\TeamViewer 9.lnk
2014-01-15 16:38 - 2014-01-15 16:38 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\TeamViewer 8
2014-01-15 16:38 - 2013-10-27 14:45 - 00000000 ____D C:\Program Files\TeamViewer
2014-01-15 16:38 - 2013-09-05 15:25 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-01-15 16:38 - 2013-09-05 15:25 - 00000000 ____D C:\Documents and Settings\All Users\Plocha
2014-01-15 14:19 - 2013-09-22 14:12 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\vlc
2014-01-14 15:25 - 2014-01-13 12:45 - 00021956 _____ C:\WINDOWS\setupapi.log
2014-01-14 08:06 - 2014-01-13 12:44 - 00000000 ____D C:\Program Files\n2n Gui
2014-01-13 16:46 - 2013-09-05 15:25 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2014-01-13 14:39 - 2014-01-13 14:39 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Google
2014-01-13 14:39 - 2013-09-21 07:49 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google
2014-01-13 14:36 - 2014-01-13 14:36 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Earth
2014-01-13 14:36 - 2013-09-21 07:49 - 00000000 ____D C:\Program Files\Google
2014-01-13 14:33 - 2014-01-09 13:10 - 00001527 _____ C:\WINDOWS\swiproject.INI
2014-01-13 14:26 - 2014-01-09 11:45 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\BAKALAŠKA PRÁCE
2014-01-13 12:48 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Data aplikací\LogMeIn Hamachi
2014-01-13 12:48 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\LogMeIn Hamachi
2014-01-13 12:44 - 2014-01-13 12:44 - 00000663 _____ C:\Documents and Settings\All Users\Plocha\n2n Gui.lnk
2014-01-13 12:44 - 2014-01-13 12:44 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\n2n Gui
2014-01-12 18:02 - 2014-01-12 18:02 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\AVAST Software
2014-01-12 18:01 - 2014-01-12 18:01 - 00001733 _____ C:\Documents and Settings\All Users\Plocha\avast! Free Antivirus.lnk
2014-01-12 18:01 - 2014-01-12 18:01 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Avast
2014-01-12 18:00 - 2014-01-12 18:00 - 00775952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00410528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00270240 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2014-01-12 18:00 - 2014-01-12 18:00 - 00180248 _____ C:\WINDOWS\system32\Drivers\aswVmm.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00067824 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00057672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00054832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00049944 _____ C:\WINDOWS\system32\Drivers\aswRvrt.sys
2014-01-12 18:00 - 2014-01-12 18:00 - 00043152 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2014-01-12 17:55 - 2014-01-12 17:55 - 00000000 ____D C:\Program Files\AVAST Software
2014-01-12 17:54 - 2014-01-12 17:54 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\AVAST Software
2014-01-12 17:54 - 2013-09-05 15:24 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2014-01-09 14:37 - 2014-01-09 14:37 - 00045158 _____ C:\Documents and Settings\Honza\Dokumenty\cc_20140109_143703.reg
2014-01-09 14:37 - 2014-01-09 14:37 - 00001590 _____ C:\Documents and Settings\Honza\Dokumenty\cc_20140109_143718.reg
2014-01-09 14:37 - 2013-09-21 13:31 - 00000000 ___RD C:\Documents and Settings\Honza\Dokumenty
2014-01-09 14:35 - 2013-11-03 20:58 - 00000000 ___SD C:\Documents and Settings\Honza\UserData
2014-01-09 14:34 - 2013-10-14 15:44 - 00000000 ____D C:\Program Files\Steam
2014-01-09 14:33 - 2014-01-09 14:33 - 00000682 _____ C:\Documents and Settings\All Users\Plocha\CCleaner.lnk
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Program Files\CCleaner
2014-01-09 14:33 - 2014-01-09 14:33 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2014-01-08 19:01 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\Honza\Dokumenty\ZPS15
2014-01-08 19:00 - 2014-01-08 18:50 - 00001704 _____ C:\Documents and Settings\All Users\Plocha\Zoner Photo Studio 15.lnk
2014-01-08 19:00 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Zoner Photo Studio 15
2014-01-08 18:51 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\Zoner
2014-01-08 18:50 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\Honza\Data aplikací\Zoner
2014-01-08 18:50 - 2014-01-08 18:50 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Zoner
2014-01-08 18:49 - 2014-01-08 18:49 - 00000000 ____D C:\Program Files\Zoner
2014-01-04 18:06 - 2013-09-21 07:46 - 00015872 _____ C:\Documents and Settings\Honza\Local Settings\Data aplikací\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-01-04 16:42 - 2014-01-04 16:42 - 00004096 _____ C:\WINDOWS\d3dx.dat
2014-01-04 16:42 - 2014-01-04 16:42 - 00001371 _____ C:\Documents and Settings\Honza\Plocha\CS Poker.lnk
2013-12-19 21:28 - 2013-12-19 21:28 - 00000694 _____ C:\Documents and Settings\Honza\Plocha\Zástupce - YuriScreenResolution.exe.lnk
2013-12-19 21:13 - 2013-12-15 22:07 - 00010600 _____ C:\drwtsn32.log
2013-12-19 21:05 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\Honza\Local Settings\Data aplikací\LogMeIn
2013-12-19 21:05 - 2013-12-19 21:05 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\LogMeIn
2013-12-19 21:05 - 2013-09-21 13:30 - 00000000 ___HD C:\Documents and Settings\LocalService\Local Settings\Data aplikací
2013-12-19 20:40 - 2013-12-19 20:40 - 00000760 _____ C:\Documents and Settings\Honza\Plocha\Zástupce - UnrealTournament.exe.lnk
2013-12-19 20:40 - 2013-12-19 20:39 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\UnrealTournament
2013-12-19 20:37 - 2013-12-19 21:19 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\C&C - Red Alert 2
2013-12-19 20:34 - 2013-12-19 20:34 - 00000000 ____D C:\Documents and Settings\Honza\Plocha\Quake-3-arena--p.o.r.t.a.b.l.e
2013-12-19 20:33 - 2013-12-19 20:33 - 00000694 _____ C:\Documents and Settings\Honza\Plocha\Zástupce (2) - YuriScreenResolution.exe.lnk
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe
[2004-08-18 13:00] - [2004-08-18 13:00] - 1032704 ____A (Microsoft Corporation) 53114d57ab73a406ac7f602227781a99
C:\Windows\System32\winlogon.exe
[2004-08-18 13:00] - [2004-08-18 13:00] - 0502272 ____A (Microsoft Corporation) 221c29ae1b4cc61d11d8b27de78b2307
C:\Windows\System32\svchost.exe
[2004-08-18 13:00] - [2004-08-18 13:00] - 0014336 ____A (Microsoft Corporation) dfba2915b0bf58abb288cd4c9318cb3f
C:\Windows\System32\services.exe
[2004-08-18 13:00] - [2004-08-18 13:00] - 0108544 ____A (Microsoft Corporation) 6e401e61f952fbbf708afbecefafae81
C:\Windows\System32\User32.dll
[2004-08-18 13:00] - [2005-03-02 19:18] - 0577024 ____A (Microsoft Corporation) 9267bc598e271bc3fa69f36cf1c8bd36
C:\Windows\System32\userinit.exe
[2004-08-18 13:00] - [2004-08-18 13:00] - 0024576 ____A (Microsoft Corporation) 836f7960362ff95c5d49e40b891f2cfc
C:\Windows\System32\rpcss.dll
[2005-07-26 05:42] - [2005-07-26 05:42] - 0397824 ____A (Microsoft Corporation) dbde980506b54ae928d151d12419b425
ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2004-08-18 13:00] - [2004-08-18 13:00] - 0052480 ____A (Microsoft Corporation) cd8cce067f7e9cbd762c00bdddecaa34
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2145269213-1801674531-1004Core.job => C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-2145269213-1801674531-1004UA.job => C:\Documents and Settings\Honza\Local Settings\Data aplikací\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Documents and Settings\Honza\Plocha" je 7805 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"D:\\install\\SkypePortable\\App\\Skype\\Phone\\Skype.exe"="D:\\install\\SkypePortable\\App\\Skype\\Phone\\Skype.exe:*:Enabled:Skype "
"C:\\Program Files\\Google\\Google Talk\\googletalk.exe"="C:\\Program Files\\Google\\Google Talk\\googletalk.exe:*:Enabled:Google Talk"
"C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
"C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE:*:Enabled:Microsoft Office Groove"
"C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE:*:Enabled:Microsoft Office OneNote"
"C:\\Program Files\\Steam\\Steam.exe"="C:\\Program Files\\Steam\\Steam.exe:*:Enabled:Steam"
"C:\\Program Files\\Steam\\SteamApps\\common\\Half-Life\\hl.exe"="C:\\Program Files\\Steam\\SteamApps\\common\\Half-Life\\hl.exe:*:Enabled:Counter-Strike"
"C:\\Documents and Settings\\Honza\\Local Settings\\Data aplikac\\Google\\Google Talk Plugin\\googletalkplugin.exe"="C:\\Documents and Settings\\Honza\\Local Settings\\Data aplikac\\Google\\Google Talk Plugin\\googletalkplugin.exe:*:Enabled:Google Talk Plugin"
"C:\\WINDOWS\\system32\\hasplms.exe"="C:\\WINDOWS\\system32\\hasplms.exe:*:Enabled:Sentinel License Manager"
"C:\\Program Files\\REALTEK\\USB Wireless LAN Utility\\RtWLan.exe"="C:\\Program Files\\REALTEK\\USB Wireless LAN Utility\\RtWLan.exe:*:Enabled:RtWlan"
"C:\\Program Files\\REALTEK\\USB Wireless LAN Utility\\RTLDHCP.exe"="C:\\Program Files\\REALTEK\\USB Wireless LAN Utility\\RTLDHCP.exe:*:Enabled:RTLDHCP"
"C:\\WINDOWS\\system32\\dplaysvr.exe"="C:\\WINDOWS\\system32\\dplaysvr.exe:*:Enabled:Microsoft DirectPlay Helper"
"C:\\Program Files\\Codemasters\\Colin McRae Rally 2\\CMR2.exe"="C:\\Program Files\\Codemasters\\Colin McRae Rally 2\\CMR2.exe:*:Enabled:Colin McRae Rally 2"
"C:\\Documents and Settings\\Honza\\Plocha\\red-alert2-portable\\red-alert2-portable\\GAME.EXE"="C:\\Documents and Settings\\Honza\\Plocha\\red-alert2-portable\\red-alert2-portable\\GAME.EXE:*:Enabled:Main executable for Red Alert 2"
"C:\\Documents and Settings\\Honza\\Plocha\\C&C - Red Alert 2\\Game.exe"="C:\\Documents and Settings\\Honza\\Plocha\\C&C - Red Alert 2\\Game.exe:*:Enabled:Main executable for Red Alert 2"
"C:\\Program Files\\Steam\\SteamApps\\common\\Team Fortress 2\\hl2.exe"="C:\\Program Files\\Steam\\SteamApps\\common\\Team Fortress 2\\hl2.exe:*:Enabled:Team Fortress 2"
"C:\\Documents and Settings\\Honza\\Local Settings\\Temp\\RarSFX0\\hl.exe"="C:\\Documents and Settings\\Honza\\Local Settings\\Temp\\RarSFX0\\hl.exe:*:Enabled:Half-Life Launcher"
"C:\\Documents and Settings\\Honza\\Local Settings\\Temp\\RarSFX0\\quake3.exe"="C:\\Documents and Settings\\Honza\\Local Settings\\Temp\\RarSFX0\\quake3.exe:*:Enabled:quake3"
"C:\\Documents and Settings\\Honza\\Plocha\\UnrealTournament\\System\\UnrealTournament.exe"="C:\\Documents and Settings\\Honza\\Plocha\\UnrealTournament\\System\\UnrealTournament.exe:*:Enabled:UnrealTournament"
"C:\\Program Files\\TeamViewer\\Version9\\TeamViewer.exe"="C:\\Program Files\\TeamViewer\\Version9\\TeamViewer.exe:*:Enabled:Teamviewer Remote Control Application"
"C:\\Program Files\\TeamViewer\\Version9\\TeamViewer_Service.exe"="C:\\Program Files\\TeamViewer\\Version9\\TeamViewer_Service.exe:*:Enabled:Teamviewer Remote Control Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1542:TCP"="1542:TCP:*:Enabled:Realtek WPS TCP Prot"
"1542:UDP"="1542:UDP:*:Enabled:Realtek WPS UDP Prot"
"53:UDP"="53:UDP:*:Enabled:Realtek AP UDP Prot"
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
==================== End Of Log ==============================