Kontrola logu - reklamy a vyskakování oken

Zpráva

svitovec · #1 Příspěvek od **svitovec** » 13 bře 2014 07:27

Prosím o kontrolu tohoto Logu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Start at 2014-03-13 06:59:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 74 GB (51%) free of 144 GB
Total RAM: 1979 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:59:25, on 13.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe
C:\Windows\sysWow64\SearchProtocolHost.exe
C:\Users\Start\Downloads\RSIT-1.06.exe
C:\Program Files (x86)\trend micro\Start.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {5BFEFF94-6411-4B74-A947-4969134B24DE} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 216.239.32.20 google.com http://www.google.com
O1 - Hosts: 216.239.32.20 google.com http://www.google.ad
O1 - Hosts: 216.239.32.20 google.com http://www.google.ae
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.af
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ag
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ai
O1 - Hosts: 216.239.32.20 google.com http://www.google.al
O1 - Hosts: 216.239.32.20 google.com http://www.google.am
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ao
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ar
O1 - Hosts: 216.239.32.20 google.com http://www.google.as
O1 - Hosts: 216.239.32.20 google.com http://www.google.at
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.au
O1 - Hosts: 216.239.32.20 google.com http://www.google.az
O1 - Hosts: 216.239.32.20 google.com http://www.google.ba
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bd
O1 - Hosts: 216.239.32.20 google.com http://www.google.be
O1 - Hosts: 216.239.32.20 google.com http://www.google.bf
O1 - Hosts: 216.239.32.20 google.com http://www.google.bg
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bh
O1 - Hosts: 216.239.32.20 google.com http://www.google.bi
O1 - Hosts: 216.239.32.20 google.com http://www.google.bj
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bn
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bo
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.br
O1 - Hosts: 216.239.32.20 google.com http://www.google.bs
O1 - Hosts: 216.239.32.20 google.com http://www.google.bt
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.bw
O1 - Hosts: 216.239.32.20 google.com http://www.google.by
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bz
O1 - Hosts: 216.239.32.20 google.com http://www.google.ca
O1 - Hosts: 216.239.32.20 google.com http://www.google.cd
O1 - Hosts: 216.239.32.20 google.com http://www.google.cf
O1 - Hosts: 216.239.32.20 google.com http://www.google.cg
O1 - Hosts: 216.239.32.20 google.com http://www.google.ch
O1 - Hosts: 216.239.32.20 google.com http://www.google.ci
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ck
O1 - Hosts: 216.239.32.20 google.com http://www.google.cl
O1 - Hosts: 216.239.32.20 google.com http://www.google.cm
O1 - Hosts: 216.239.32.20 google.com http://www.google.cn
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.co
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.cr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.cu
O1 - Hosts: 216.239.32.20 google.com http://www.google.cv
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.cy
O1 - Hosts: 216.239.32.20 google.com http://www.google.cz
O1 - Hosts: 216.239.32.20 google.com http://www.google.de
O1 - Hosts: 216.239.32.20 google.com http://www.google.dj
O1 - Hosts: 216.239.32.20 google.com http://www.google.dk
O1 - Hosts: 216.239.32.20 google.com http://www.google.dm
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.do
O1 - Hosts: 216.239.32.20 google.com http://www.google.dz
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ec
O1 - Hosts: 216.239.32.20 google.com http://www.google.ee
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.eg
O1 - Hosts: 216.239.32.20 google.com http://www.google.es
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.et
O1 - Hosts: 216.239.32.20 google.com http://www.google.fi
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.fj
O1 - Hosts: 216.239.32.20 google.com http://www.google.fm
O1 - Hosts: 216.239.32.20 google.com http://www.google.fr
O1 - Hosts: 216.239.32.20 google.com http://www.google.ga
O1 - Hosts: 216.239.32.20 google.com http://www.google.ge
O1 - Hosts: 216.239.32.20 google.com http://www.google.gg
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gh
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gi
O1 - Hosts: 216.239.32.20 google.com http://www.google.gl
O1 - Hosts: 216.239.32.20 google.com http://www.google.gm
O1 - Hosts: 216.239.32.20 google.com http://www.google.gp
O1 - Hosts: 216.239.32.20 google.com http://www.google.gr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gt
O1 - Hosts: 216.239.32.20 google.com http://www.google.gy
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.hk
O1 - Hosts: 216.239.32.20 google.com http://www.google.hn
O1 - Hosts: 216.239.32.20 google.com http://www.google.hr
O1 - Hosts: 216.239.32.20 google.com http://www.google.ht
O1 - Hosts: 216.239.32.20 google.com http://www.google.hu
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.id
O1 - Hosts: 216.239.32.20 google.com http://www.google.ie
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.il
O1 - Hosts: 216.239.32.20 google.com http://www.google.im
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.in
O1 - Hosts: 216.239.32.20 google.com http://www.google.iq
O1 - Hosts: 216.239.32.20 google.com http://www.google.is
O1 - Hosts: 216.239.32.20 google.com http://www.google.it
O1 - Hosts: 216.239.32.20 google.com http://www.google.je
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.jm
O1 - Hosts: 216.239.32.20 google.com http://www.google.jo
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.jp
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ke
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.kh
O1 - Hosts: 216.239.32.20 google.com http://www.google.ki
O1 - Hosts: 216.239.32.20 google.com http://www.google.kg
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.kr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.kw
O1 - Hosts: 216.239.32.20 google.com http://www.google.kz
O1 - Hosts: 216.239.32.20 google.com http://www.google.la
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.lb
O1 - Hosts: 216.239.32.20 google.com http://www.google.li
O1 - Hosts: 216.239.32.20 google.com http://www.google.lk
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ls
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {5BFEFF94-6411-4B74-A947-4969134B24DE} - (no file)
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\Advanced SystemCare 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Session Launcher Service (FUSServices) - Unknown owner - C:\Windows\SysWOW64\FUSServices.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14426 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\AutoKMSDaily.job
C:\Windows\tasks\Check for updates (Spybot - Search & Destroy).job
C:\Windows\tasks\DriverToolkit Autorun.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Refresh immunization (Spybot - Search & Destroy).job
C:\Windows\tasks\Scan the system (Spybot - Search & Destroy).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-13 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-13 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5BFEFF94-6411-4B74-A947-4969134B24DE}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 7"=C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe [2014-02-11 2288928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-03-13 06:59:13 ----D---- C:\rsit
2014-03-13 06:59:13 ----D---- C:\Program Files (x86)\trend micro
2014-03-13 06:50:21 ----D---- C:\AdwCleaner
2014-03-12 23:47:58 ----D---- C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:42:04 ----D---- C:\ProgramData\Licenses
2014-03-12 23:38:57 ----AD---- C:\ProgramData\TEMP
2014-03-12 23:38:37 ----A---- C:\Windows\SysWOW64\MSSTDFMT.DLL
2014-03-12 14:43:08 ----A---- C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 14:11:02 ----A---- C:\Windows\wininit.ini
2014-03-12 13:59:01 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-12 06:02:59 ----A---- C:\Windows\SysWOW64\wer.dll
2014-03-12 06:02:56 ----A---- C:\Windows\SysWOW64\iernonce.dll
2014-03-12 06:02:55 ----A---- C:\Windows\SysWOW64\urlmon.dll
2014-03-12 06:02:55 ----A---- C:\Windows\SysWOW64\iertutil.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\mshtml.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\ieui.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\iesetup.dll
2014-03-12 06:02:49 ----A---- C:\Windows\SysWOW64\ieframe.dll
2014-03-12 06:02:46 ----A---- C:\Windows\SysWOW64\jscript9.dll
2014-03-12 06:02:46 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 06:02:45 ----A---- C:\Windows\SysWOW64\wininet.dll
2014-03-12 06:02:45 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 06:02:44 ----A---- C:\Windows\SysWOW64\msrating.dll
2014-03-12 06:00:30 ----A---- C:\Windows\SysWOW64\qedit.dll
2014-03-12 06:00:29 ----A---- C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 07:22:04 ----A---- C:\Windows\KMSEmulator.exe
2014-03-08 10:05:51 ----D---- C:\sh4ldr
2014-03-08 10:05:51 ----D---- C:\Program Files (x86)\Enigma Software Group
2014-03-08 09:47:56 ----A---- C:\autoexec.bat
2014-03-08 09:45:51 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2014-03-07 20:51:50 ----D---- C:\ProgramData\Razer
2014-03-07 19:54:28 ----D---- C:\Program Files (x86)\Vtools Toolbar
2014-03-07 19:53:27 ----D---- C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 19:53:00 ----D---- C:\Program Files (x86)\Vtools
2014-03-07 19:52:15 ----D---- C:\Program Files (x86)\Free Window Registry Repair
2014-03-06 17:53:12 ----D---- C:\Program Files (x86)\Common Files\PDF Architect
2014-03-06 17:44:00 ----D---- C:\Program Files (x86)\WinRST
2014-03-06 17:42:14 ----D---- C:\output
2014-03-06 15:43:19 ----D---- C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:28:05 ----D---- C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-05 18:22:43 ----D---- C:\Windows\rescache
2014-03-04 08:10:02 ----D---- C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 15:25:28 ----A---- C:\Windows\SysWOW64\mstscax.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\wksprtPS.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\tsgqec.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-03 15:01:36 ----A---- C:\Windows\SysWOW64\mstsc.exe
2014-03-03 15:01:34 ----A---- C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-03 12:28:34 ----A---- C:\Windows\SysWOW64\vbscript.dll
2014-03-03 12:24:33 ----A---- C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-03 08:20:51 ----D---- C:\Program Files (x86)\Google
2014-02-27 06:35:11 ----D---- C:\ProgramData\Auslogics
2014-02-26 19:39:29 ----D---- C:\Program Files (x86)\Common Files\NetDragon
2014-02-26 19:37:04 ----D---- C:\Program Files (x86)\NetDragon
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\drivers\CBUSB.SYS
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-25 15:47:34 ----D---- C:\Windows\SysWOW64\Temp
2014-02-24 17:08:38 ----D---- C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:07:43 ----D---- C:\Program Files (x86)\Common Files\Adobe AIR
2014-02-18 17:09:11 ----D---- C:\Program Files (x86)\Schrift 2 DXF und G-Code 3
2014-02-18 17:09:11 ----A---- C:\Windows\cadkasdeinst01.exe
2014-02-18 15:36:02 ----D---- C:\Program Files (x86)\CNC Editor 2002v1.5
2014-02-17 11:06:55 ----D---- C:\Programme
2014-02-17 10:17:38 ----D---- C:\Program Files (x86)\Advanced SystemCare 7
2014-02-16 19:00:59 ----D---- C:\ProgramData\Real
2014-02-16 12:10:42 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 months======

2014-03-13 06:59:16 ----D---- C:\Windows\Temp
2014-03-13 06:59:13 ----RD---- C:\Program Files (x86)
2014-03-13 06:54:11 ----D---- C:\Windows
2014-03-12 23:49:03 ----SHD---- C:\Windows\Installer
2014-03-12 23:48:54 ----D---- C:\Config.Msi
2014-03-12 23:48:12 ----D---- C:\Windows\Prefetch
2014-03-12 23:48:00 ----SHD---- C:\System Volume Information
2014-03-12 23:46:53 ----RD---- C:\Program Files
2014-03-12 23:46:45 ----HD---- C:\ProgramData
2014-03-12 23:46:45 ----D---- C:\Windows\Tasks
2014-03-12 23:46:28 ----D---- C:\Windows\System32
2014-03-12 23:46:25 ----SD---- C:\ProgramData\Microsoft
2014-03-12 23:38:37 ----D---- C:\Windows\SysWOW64
2014-03-12 14:44:10 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 12:50:45 ----SHD---- C:\BOOT
2014-03-12 12:34:50 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 12:24:32 ----D---- C:\Windows\inf
2014-03-12 10:06:59 ----D---- C:\Windows\winsxs
2014-03-12 10:04:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 09:57:07 ----D---- C:\Qoobox
2014-03-10 11:34:51 ----D---- C:\ProgramData\ProductData
2014-03-08 11:33:58 ----D---- C:\Program Files (x86)\Companion Suite Pro LL2
2014-03-08 11:33:49 ----D---- C:\Program Files (x86)\Common Files
2014-03-08 06:21:06 ----D---- C:\Windows\debug
2014-03-08 06:17:34 ----D---- C:\Program Files (x86)\IObit
2014-03-08 06:15:14 ----D---- C:\Users\Start\AppData\Roaming\IObit
2014-03-07 22:29:25 ----D---- C:\ProgramData\IObit
2014-03-07 20:18:37 ----D---- C:\Program Files (x86)\Common Files\Apple
2014-03-06 18:54:56 ----D---- C:\Users\Start\AppData\Roaming\Apple Computer
2014-03-06 15:41:34 ----D---- C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-04 10:51:16 ----D---- C:\Windows\Panther
2014-03-04 10:51:16 ----D---- C:\Windows\Logs
2014-03-04 10:20:42 ----D---- C:\Windows\SysWOW64\cs-CZ
2014-03-04 10:08:02 ----D---- C:\Windows\SysWOW64\wbem
2014-03-03 10:32:55 ----SD---- C:\Users\Start\AppData\Roaming\Microsoft
2014-03-03 10:10:20 ----D---- C:\Windows\SysWOW64\migration
2014-03-03 10:10:20 ----D---- C:\Windows\SysWOW64\en-US
2014-03-03 10:10:20 ----D---- C:\Windows\PolicyDefinitions
2014-02-26 19:37:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-26 17:23:06 ----D---- C:\Program Files (x86)\NsPro
2014-02-26 16:10:02 ----D---- C:\Users\Start\AppData\Roaming\MOBILedit
2014-02-25 15:47:49 ----D---- C:\Windows\SysWOW64\drivers
2014-02-24 17:08:24 ----D---- C:\ProgramData\Adobe
2014-02-24 17:07:51 ----D---- C:\Program Files (x86)\Adobe
2014-02-24 17:06:42 ----D---- C:\Users\Start\AppData\Roaming\Adobe
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Windows Media Player
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Common Files\System
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2014-02-24 07:13:21 ----D---- C:\ProgramData\redistpart
2014-02-24 07:13:21 ----D---- C:\ProgramData\launcher
2014-02-24 07:13:21 ----D---- C:\ProgramData\explauncher
2014-02-24 07:13:21 ----D---- C:\ProgramData\DriverGenius
2014-02-24 07:13:21 ----D---- C:\ProgramData\Atheros
2014-02-18 16:03:04 ----D---- C:\Windows\Microsoft.NET
2014-02-17 10:00:25 ----RSD---- C:\Windows\assembly
2014-02-17 09:07:34 ----D---- C:\Windows\Minidump
2014-02-16 19:49:45 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 19:29:20 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
R3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys []
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys []
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys []
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\NETw1v64.sys []
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys []
S3 cxbu1x64;OEM USB Smart Card Reader; C:\Windows\system32\DRIVERS\cxbu1x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys []
S3 DrvSnSht;DrvSnSht; \??\C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys []
S3 eGateUSB;eGateUSB; C:\Windows\System32\Drivers\eGateUSB.sys []
S3 euccihr;plug'n'crypt CCID token reader; C:\Windows\System32\Drivers\euccihr-amd64.sys []
S3 FTDIBUS;NsPro Converter Driver; C:\Windows\system32\drivers\ftdibus.sys []
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys []
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys []
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys []
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys []
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys []
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys []
S3 NTIDrvr;NTIDrvr; \??\C:\Users\Start\NTIDrvr.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 pneteth;PdaNet Broadband; C:\Windows\system32\DRIVERS\pneteth.sys []
S3 pwdrvio;pwdrvio; \??\C:\Windows\system32\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\system32\pwdspio.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 R-ImageDisk;R-ImageDisk; \??\C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys []
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys []
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys []
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys []
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys []
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys []
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys []
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys []
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys []
S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys []
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-09-12 1337752]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-07-01 1463056]
R2 FUSServices;Session Launcher Service; C:\Windows\SysWOW64\FUSServices.exe [2010-01-08 10752]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 MSSQL$SFN;SQL Server (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [2010-04-03 61913952]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-07-01 830224]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 146272]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-03 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-03 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-16 118896]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 59744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 SQLAgent$SFN;SQL Server Agent (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [2010-04-03 428384]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 13 bře 2014 09:08

Zdravim

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam, ze ten ESET jak ma byt = zakoupena licence?? Nebo je cinknuty stejne jako ty Office?

svitovec · #3 Příspěvek od **svitovec** » 13 bře 2014 09:32

Eset je ofic.

Děkuji.
¨info.txt logfile of random's system information tool 1.08 2014-03-13 06:59:29

======Uninstall list======

Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{B92C2C6C-F70E-497B-88A7-1FEF9888272B}
Adobe Flash Player 12 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe -maintain activex
Adobe Flash Player 12 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.06) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Advanced SystemCare 7-->"C:\Program Files (x86)\Advanced SystemCare 7\unins000.exe"
Apple Application Support-->MsiExec.exe /I{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
Companion Suite Pro LL2 Drivers-->MsiExec.exe /X{4ACE3E86-78B6-43A1-B104-E3F3006FC576}
Companion Suite Pro LL2-->MsiExec.exe /x {ABDB5A8F-A163-4FD7-A8AE-E2695ACFEA90} /qb
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
IObit Uninstaller-->"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe" uninstall_start
IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe
iTNC530 (606424)-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{EC28CE20-D196-4604-9145-11CD48F10E11}\Setup.exe" -l0x0009
Java 7 Update 51-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217051FF}
Malwarebytes Anti-Malware verze 1.75.0.1300-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office 2010 Aktivator version for Windows-->"C:\Program Files (x86)\Microsoft Office 2010 Aktivator\unins000.exe"
Microsoft Office Access MUI (Czech) 2010-->MsiExec.exe /X{90140000-0015-0405-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2010-->MsiExec.exe /X{90140000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2010-->MsiExec.exe /X{90140000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2010-->MsiExec.exe /X{90140000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2010-->MsiExec.exe /X{90140000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2010-->MsiExec.exe /X{90140000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2010-->MsiExec.exe /X{90140000-0018-0405-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2010-->MsiExec.exe /X{90140000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2010-->MsiExec.exe /X{90140000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2010-->MsiExec.exe /X{90140000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2010-->MsiExec.exe /X{90140000-001B-0405-0000-0000000FF1CE}
Microsoft SQL Server Browser-->MsiExec.exe /X{BF9BF038-FE03-429D-9B26-2FA0FD756052}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft_VC100_CRT_SP1_x86-->MsiExec.exe /I{E3B64CC5-C011-40C0-92BC-7316CD5E5688}
MOBILedit! Enterprise ver. 7.5.1.4181-->"C:\Program Files (x86)\MOBILedit! Enterprise\Setup\unins000.exe"
MOBILedit! Support Libraries-->MsiExec.exe /I{1A834332-A9EE-440C-9505-2D07F445F05A}
Mozilla Firefox 27.0.1 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{29373274-977E-413C-A4DE-DC0F8E80C429}
PC Connectivity Solution-->MsiExec.exe /I{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}
PCSMS Free Client v1.0-->MsiExec.exe /X{9F32412C-90C6-4FA1-847A-61FD087DE2A4}
Samsung Kies-->"C:\Program Files (x86)\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly
Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A}
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {BD0F9F7E-62B2-3971-9E2E-B87B832CE89D}
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {513BC47F-0560-33C2-A029-C5387642233A}
SMS Performer 1.3-->C:\Program Files (x86)\SMSPerformer\Uninstall.exe

======Hosts File======

216.239.32.20 google.com www.google.com
216.239.32.20 google.com www.google.ad
216.239.32.20 google.com www.google.ae
216.239.32.20 google.com www.google.com.af
216.239.32.20 google.com www.google.com.ag
216.239.32.20 google.com www.google.com.ai
216.239.32.20 google.com www.google.al
216.239.32.20 google.com www.google.am
216.239.32.20 google.com www.google.co.ao
216.239.32.20 google.com www.google.com.ar

======System event log======

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Distributed Link Tracking Client byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Desktop Window Manager Session Manager byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Power byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Diagnostic Policy Service byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247F27-25
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20131213063154.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20131213063146.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.

Record Number: 3
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20131213063139.162564-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 2
Source Name: Microsoft-Windows-EventSystem
Time Written: 20131213063139.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.

Record Number: 1
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101121035831.124372-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: 37L4247F27-25
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063112.205717-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-25$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1e0
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063112.205717-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x309c8
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063057.541691-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063054.686886-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063054.484086-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files (x86)\Bitvise SSH Client;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=1
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"asl.log"=Destination=file
"ESET_OPTIONS"=

-----------------EOF-----------------

#4 Příspěvek od **vyosek** » 13 bře 2014 10:01

Odinstalujte Advanced SystemCare a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

Odinstalujte Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam

Ty nelegalni Office tez nejsou to prave orechove

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

svitovec · #5 Příspěvek od **svitovec** » 13 bře 2014 12:04

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Start on źt 13.03.2014 at 11:32:37,61.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Start\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.3.2014 11:34:19 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C93AE7C9-7019-40B8-BCC7-4D583A28E397} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ");
user_pref("browser.search.selectedEngine", "Google");

Added to C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default

user.js not found
---- Lines buenosearch removed from prefs.js ----
user_pref("extensions.buenosearch.admin", false);
user_pref("extensions.buenosearch.aflt", "babsst");
user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
user_pref("extensions.buenosearch.autoRvrt", "false");
user_pref("extensions.buenosearch.dfltLng", "en");
user_pref("extensions.buenosearch.excTlbr", false);
user_pref("extensions.buenosearch.ffxUnstlRst", true);
user_pref("extensions.buenosearch.id", "66c1a1c4000000000000001e101f8924");
user_pref("extensions.buenosearch.instlDay", "16100");
user_pref("extensions.buenosearch.instlRef", "sst");
user_pref("extensions.buenosearch.newTab", false);
user_pref("extensions.buenosearch.prdct", "buenosearch");
user_pref("extensions.buenosearch.prtnrId", "buenosearch");
user_pref("extensions.buenosearch.rvrt", "false");
user_pref("extensions.buenosearch.smplGrp", "none");
user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTe ... 5&tsp=5143");
user_pref("extensions.buenosearch.tlbrId", "base");
user_pref("extensions.buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTe ... 35&tsp=514
user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
user_pref("extensions.buenosearch.vrsnTs", "1.8.28.75:50:57");
---- Lines spigot removed from prefs.js ----
user_pref("startpage.ntsearch_url", "http://search.yahoo.com/search?fr=spigo ... earchTerms}");
---- Lines mybrowserbar modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program
---- FireFox user.js and prefs.js backups ----

prefs_13.03.2014_1153_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Users\Start\daemonprocess.txt deleted
C:\Users\Start\.android deleted
C:\PROGRA~3\ProductData deleted
C:\Users\Start\AppData\Local\cache deleted
C:\Users\Start\AppData\LocalLow\ADSRemoval deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\Windows\wininit.ini deleted
C:\windows\SysNative\tasks\YourFile DownloaderUpdate deleted
C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\searchplugins\buenosearch.xml deleted
C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\firefox@mega.co.nz.xpi deleted
"C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\vtools@mybrowserbar.com" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
- Start Page - %ProfilePath%\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
FD6ACD9D85177259D442A0C4AC15F7B8 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll - Shockwave Flash

==== Deleted Firefox Extensions ======================

C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} deleted

==== Chrome Look ======================

Ads Removal - Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen

==== Chrome Fix ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{C93AE7C9-7019-40B8-BCC7-4D583A28E397}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C93AE7C9-7019-40B8-BCC7-4D583A28E397}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Start\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Start\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Start\AppData\Local\Mozilla\Firefox\Profiles\xawll829.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1041 folders=36 24087809 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Start\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Start\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 13.03.2014 at 12:07:12,97 ======================

#6 Příspěvek od **vyosek** » 13 bře 2014 13:24

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

svitovec · #7 Příspěvek od **svitovec** » 13 bře 2014 14:07

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Start (administrator) on START-PC on 13-03-2014 14:07:45
Running from C:\Users\Start\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\FUSServices.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\Windows\system32\LFOGRPOW.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD.EXE
(forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5618456 2013-09-12] (ESET)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM-x32\...\Run: [] - [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-4108338615-47190094-49143065-1000\...\MountPoints2: {9b73a6a2-9793-11e3-bba1-001e101f2b52} - G:\AutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 85.13.80.80 85.13.80.90

FireFox:
========
FF ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-12-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-12-13]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-03]
CHR Extension: (Google Drive) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-03]
CHR Extension: (YouTube) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-03]
CHR Extension: (Google Search) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-03]
CHR Extension: (Google Wallet) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-03]
CHR Extension: (Gmail) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-03]

==================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 FUSServices; C:\Windows\SysWOW64\FUSServices.exe [10752 2010-01-08] ()
R2 MSSQL$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

==================== Drivers (Whitelisted) ====================

S3 cxbu1x64; C:\Windows\System32\DRIVERS\cxbu1x64.sys [128896 2009-08-28] ( )
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
S3 eGateUSB; C:\Windows\System32\Drivers\eGateUSB.sys [98816 2007-05-09] (Gemalto)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [157432 2013-09-17] (ESET)
S3 euccihr; C:\Windows\System32\Drivers\euccihr-amd64.sys [120360 2006-12-15] (Eutron)
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2013-12-13] (Huawei Technologies Co., Ltd.)
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [119680 2009-08-10] (Gemalto)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 XMLDIUSB; C:\Windows\System32\Drivers\XMLDIUSB.sys [55808 2010-01-29] (OEM)
S3 DrvSnSht; \??\C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys [X]
S3 NTIDrvr; \??\C:\Users\Start\NTIDrvr.sys [X]
S3 R-ImageDisk; \??\C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys [X]
U2 SBKUPNT;

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-03-13 14:07 - 2014-03-13 14:09 - 00011763 _____ () C:\Users\Start\Desktop\FRST.txt
2014-03-13 14:07 - 2014-03-13 14:07 - 00000000 ____D () C:\FRST
2014-03-13 14:06 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Desktop\FRST64.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Downloads\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe
2014-03-13 14:05 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Downloads\FRST64.exe
2014-03-13 12:06 - 2014-03-13 12:06 - 00001656 _____ () C:\Windows\PFRO.log
2014-03-13 12:02 - 2014-03-13 11:32 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 11:33 - 2014-03-13 12:07 - 00011959 _____ () C:\zoek-results.log
2014-03-13 11:32 - 2014-03-13 11:58 - 00000000 ____D () C:\zoek_backup
2014-03-13 11:25 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Desktop\zoek.exe
2014-03-13 11:23 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Downloads\zoek.exe
2014-03-13 10:54 - 2014-03-13 12:06 - 00000112 _____ () C:\Windows\setupact.log
2014-03-13 10:54 - 2014-03-13 10:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 09:08 - 2014-03-13 09:08 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\hijackthis(1).exe
2014-03-13 08:48 - 2014-03-13 09:16 - 00000000 ____D () C:\Users\Start\Downloads\backups
2014-03-13 08:43 - 2014-03-13 09:19 - 00008366 _____ () C:\Users\Start\Downloads\hijackthis.log
2014-03-13 08:43 - 2014-03-13 08:43 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\HiJackThis.exe
2014-03-13 06:58 - 2014-03-13 06:58 - 00339991 _____ () C:\Users\Start\Downloads\RSIT-1.06.exe
2014-03-13 06:49 - 2014-03-13 06:49 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner(1).exe
2014-03-12 23:47 - 2014-03-12 23:48 - 00000000 ____D () C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:46 - 2014-03-12 23:46 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-03-12 23:42 - 2014-03-12 23:42 - 00000000 ____D () C:\ProgramData\Licenses
2014-03-12 23:41 - 2014-03-12 23:41 - 04095448 _____ (BrightFort LLC ) C:\Users\Start\Downloads\spywareblastersetup50.exe
2014-03-12 23:38 - 2010-01-10 18:40 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2014-03-12 14:43 - 2014-03-12 14:43 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 13:59 - 2014-03-12 23:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-12 13:58 - 2014-03-12 13:58 - 00000632 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-03-12 13:51 - 2014-03-12 13:52 - 03230781 _____ (Evonsoft ) C:\Users\Start\Downloads\ASRLSetup.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 18265192 _____ (SUPERAntiSpyware) C:\Users\Start\Downloads\SUPERAntiSpyware.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 08003752 _____ ( ) C:\Users\Start\Downloads\setupfree.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 05088576 _____ (Crawler, LLC ) C:\Users\Start\Downloads\SpywareTerminatorSetup.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 03255248 _____ (Javacool Software LLC ) C:\Users\Start\Downloads\spywareblastersetup46.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 00027898 _____ () C:\Users\Start\Downloads\lang.cesky.zip
2014-03-12 13:49 - 2014-03-12 13:53 - 55454464 _____ (Safer-Networking Ltd. ) C:\Users\Start\Downloads\SpybotSD2.exe
2014-03-12 11:50 - 2014-03-12 11:50 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner.exe
2014-03-12 09:56 - 2014-03-12 09:56 - 00448512 _____ (OldTimer Tools) C:\Users\Start\Downloads\TFC.exe
2014-03-12 09:55 - 2014-03-12 09:56 - 00165888 _____ () C:\Users\Start\Downloads\T-Cleaner.exe
2014-03-12 06:03 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 06:02 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 06:02 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 06:02 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 06:02 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 06:02 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 06:02 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 06:02 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 06:02 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 06:02 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 06:02 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 06:02 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 06:02 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 06:02 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 06:02 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 06:02 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 06:02 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 06:02 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 06:02 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 06:02 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 06:02 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 06:02 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 06:02 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 06:02 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 06:02 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 06:02 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 06:02 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 06:02 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 06:02 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 06:02 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 06:02 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 06:02 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 06:02 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 06:02 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 06:02 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 06:02 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 06:02 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 06:02 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 06:02 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 06:02 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 06:02 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 06:02 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 06:02 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 06:02 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 06:00 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:00 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 06:00 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 06:00 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-11 07:22 - 2014-03-13 07:26 - 00078848 _____ () C:\Windows\KMSEmulator.exe
2014-03-08 10:00 - 2014-03-08 10:02 - 24361384 _____ () C:\Users\Start\Downloads\SpyHunter-4.6.1.3664+patch.rar
2014-03-08 09:47 - 2014-03-08 09:47 - 00000000 _____ () C:\autoexec.bat
2014-03-08 09:46 - 2014-03-08 09:46 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-08 09:43 - 2014-03-08 09:43 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Start\Downloads\SpyHunter-Installer-k.exe
2014-03-07 20:51 - 2014-03-07 20:51 - 00000000 ____D () C:\ProgramData\Razer
2014-03-07 19:54 - 2014-03-07 19:54 - 00003168 _____ () C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2014-03-07 19:54 - 2014-03-07 19:54 - 00003098 _____ () C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2014-03-07 19:53 - 2014-03-07 19:53 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 19:50 - 2014-03-10 11:03 - 00000000 ____D () C:\Users\Start\Downloads\Download
2014-03-07 11:13 - 2014-03-07 11:13 - 00072256 _____ () C:\Users\Start\Documents\cc_20140307_111344.reg
2014-03-07 10:57 - 2014-03-07 10:59 - 04765152 _____ (Piriform Ltd) C:\Users\Start\Downloads\ccsetup411.exe
2014-03-06 17:44 - 2014-03-08 11:33 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-06 17:44 - 2014-03-06 17:44 - 00000000 ____D () C:\Users\Start\AppData\Local\WinRST
2014-03-06 17:41 - 2014-03-06 17:41 - 02513790 _____ () C:\Users\Start\Downloads\Free-JPG-To-PDF-Converter-Setup.rar
2014-03-06 17:38 - 2014-03-06 17:38 - 01119224 _____ (www.JPGPDF.net ) C:\Users\Start\Downloads\jpgtopdf.exe
2014-03-06 15:43 - 2014-03-06 15:43 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:28 - 2014-03-06 19:29 - 00000000 ____D () C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-06 15:12 - 2014-03-06 15:12 - 18277248 _____ (pdfforge ) C:\Users\Start\Downloads\PDFCreator-1_7_2_setup.exe
2014-03-06 15:10 - 2014-03-06 15:10 - 03921526 _____ () C:\Users\Start\Documents\scan.zip
2014-03-05 18:22 - 2014-03-05 18:42 - 00000000 ____D () C:\Windows\rescache
2014-03-05 09:56 - 2014-03-05 10:07 - 00050688 _____ () C:\Users\Start\Documents\Kopie - optimalizace 11 2 2014.xls
2014-03-05 09:21 - 2014-03-05 10:02 - 626820112 _____ () C:\Users\Start\Downloads\SinuTrainTrialV0705ED2.zip
2014-03-04 10:36 - 2014-03-04 10:37 - 381034498 _____ () C:\Users\Start\Documents\backup.reg
2014-03-04 08:10 - 2014-03-04 08:10 - 00000000 ____D () C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 15:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-03 15:25 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-03 15:01 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-03 15:01 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-03 15:01 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-03 15:01 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-03 15:01 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-03 15:01 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-03 15:01 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-03 15:01 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-03 15:01 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-03 15:01 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-03-03 15:01 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-03 15:01 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-03 15:01 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-03 15:01 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-03 15:01 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-03 15:01 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-03-03 12:28 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-03 12:28 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-03 12:24 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-03 12:24 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-03 12:17 - 2014-03-03 12:17 - 00003274 _____ () C:\Windows\System32\Tasks\{6BEC8282-6298-4687-8ACA-597D87B0AC87}
2014-03-03 08:21 - 2014-03-04 12:58 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-03 08:20 - 2014-03-13 13:25 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-03 08:20 - 2014-03-13 12:06 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-03 08:20 - 2014-03-03 08:22 - 00000000 ____D () C:\Users\Start\AppData\Local\Google
2014-03-03 08:20 - 2014-03-03 08:21 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-03 08:20 - 2014-03-03 08:20 - 00003946 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-03 08:20 - 2014-03-03 08:20 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-03 08:19 - 2014-03-03 08:20 - 00000000 ____D () C:\Users\Start\AppData\Local\Deployment
2014-03-03 08:19 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Apps\2.0
2014-03-02 09:51 - 2012-01-10 06:27 - 09666048 _____ (The Private Dev Team) C:\Users\Start\Downloads\Bluefreeze.exe
2014-03-02 09:51 - 2011-12-22 23:40 - 00000224 _____ () C:\Users\Start\Downloads\README.txt
2014-03-02 09:51 - 2010-11-13 20:25 - 00346624 _____ (Microsoft) C:\Users\Start\Downloads\Ionic.Zip.dll
2014-03-02 09:51 - 2010-11-13 20:25 - 00192512 _____ (ICSharpCode.net) C:\Users\Start\Downloads\ICSharpCode.SharpZipLib.dll
2014-02-27 15:16 - 2013-11-19 16:52 - 00034080 _____ (IObit) C:\Windows\system32\SmartDefragBootTime.exe
2014-02-27 15:14 - 2014-01-26 17:55 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll20140307222920.dll
2014-02-27 15:14 - 2014-01-08 15:54 - 00121856 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll20140307222933.dll
2014-02-27 15:14 - 2014-01-08 15:54 - 00121856 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-27 06:35 - 2014-02-27 06:35 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-26 19:39 - 2014-02-26 19:39 - 00000000 ____D () C:\Users\Start\AppData\Local\NetDragon
2014-02-26 19:37 - 2014-02-26 19:37 - 00000000 ____D () C:\Program Files (x86)\NetDragon
2014-02-26 16:28 - 2014-02-26 16:28 - 00004608 _____ () C:\Users\Start\Documents\Apple iPhone 4S.med
2014-02-25 15:47 - 2014-02-25 15:47 - 00376832 _____ (MARX CryptoTech LP ) C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47 - 2014-02-25 15:47 - 00045056 _____ (MARX CryptoTech LP) C:\Windows\SysWOW64\Drivers\CBUSB.SYS
2014-02-25 15:47 - 2014-02-25 15:47 - 00043520 _____ () C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-24 17:08 - 2014-02-24 17:08 - 00000000 ____D () C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-24 07:45 - 2014-03-13 12:59 - 01062033 _____ () C:\Windows\WindowsUpdate.log
2014-02-24 07:36 - 2014-02-24 07:37 - 11140364 _____ () C:\Users\Start\Downloads\cc-setup.exe
2014-02-20 19:58 - 2014-02-22 05:59 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InfinityBox
2014-02-20 18:51 - 2014-02-20 18:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ZuneDriver_01_09_00.Wdf
2014-02-20 18:49 - 2014-02-20 18:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-02-18 17:09 - 2014-02-18 17:09 - 00087704 _____ () C:\Windows\cadkasdeinst01.exe
2014-02-18 15:36 - 2014-03-07 20:54 - 00000000 ____D () C:\Program Files (x86)\CNC Editor 2002v1.5
2014-02-17 11:49 - 2014-02-17 11:49 - 00000000 ____D () C:\Users\Start\AppData\Local\#Bqb
2014-02-17 11:45 - 2014-02-17 11:45 - 00000000 ____D () C:\Users\Start\AppData\Local\IsolatedStorage
2014-02-17 11:09 - 2014-02-17 11:09 - 00001545 _____ () C:\Users\Public\Desktop\iTNC530 (606424).lnk
2014-02-17 11:06 - 2014-02-17 11:06 - 00000000 ____D () C:\Programme
2014-02-17 10:22 - 2014-02-17 10:22 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-17 09:17 - 2014-02-17 09:22 - 41640395 _____ (diakov.net) C:\Users\Start\Downloads\Advanced-SystemCare-PRO-v7.2.0.431-Final-RePack-by-D!akov---aktivovaný.exe
2014-02-16 19:00 - 2014-02-16 19:00 - 00000000 ____D () C:\ProgramData\Real
2014-02-16 18:07 - 2014-02-17 10:57 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2014-02-16 12:10 - 2014-02-16 12:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 15:25 - 2014-02-13 15:25 - 00000000 ____D () C:\ProgramData\Sun
2014-02-13 15:24 - 2014-02-13 15:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-13 15:24 - 2014-02-13 15:23 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-13 15:18 - 2014-02-16 19:29 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-12 17:04 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:04 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:04 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:04 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:04 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:04 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:04 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:03 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:03 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 06:34 - 2014-02-17 09:07 - 00000000 ____D () C:\Windows\Minidump

==================== One Month Modified Files and Folders =======

2014-03-13 14:09 - 2014-03-13 14:07 - 00011763 _____ () C:\Users\Start\Desktop\FRST.txt
2014-03-13 14:07 - 2014-03-13 14:07 - 00000000 ____D () C:\FRST
2014-03-13 14:07 - 2013-12-13 14:12 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1C1FF3F2-C7BD-41C7-A7CE-A2505EC78A63}
2014-03-13 14:06 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Desktop\FRST64.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Downloads\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:05 - 02157056 _____ (Farbar) C:\Users\Start\Downloads\FRST64.exe
2014-03-13 13:42 - 2013-12-13 15:19 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 13:25 - 2014-03-03 08:20 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-13 12:59 - 2014-02-24 07:45 - 01062033 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 12:14 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 12:14 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 12:07 - 2014-03-13 11:33 - 00011959 _____ () C:\zoek-results.log
2014-03-13 12:06 - 2014-03-13 12:06 - 00001656 _____ () C:\Windows\PFRO.log
2014-03-13 12:06 - 2014-03-13 10:54 - 00000112 _____ () C:\Windows\setupact.log
2014-03-13 12:06 - 2014-03-03 08:20 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-13 12:06 - 2014-01-13 06:32 - 00000358 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-03-13 12:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 11:58 - 2014-03-13 11:32 - 00000000 ____D () C:\zoek_backup
2014-03-13 11:54 - 2013-12-13 09:31 - 00000000 ____D () C:\Users\Start
2014-03-13 11:32 - 2014-03-13 12:02 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 11:23 - 2014-03-13 11:25 - 01285120 _____ () C:\Users\Start\Desktop\zoek.exe
2014-03-13 11:23 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Downloads\zoek.exe
2014-03-13 10:54 - 2014-03-13 10:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 09:19 - 2014-03-13 08:43 - 00008366 _____ () C:\Users\Start\Downloads\hijackthis.log
2014-03-13 09:16 - 2014-03-13 08:48 - 00000000 ____D () C:\Users\Start\Downloads\backups
2014-03-13 09:08 - 2014-03-13 09:08 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\hijackthis(1).exe
2014-03-13 08:43 - 2014-03-13 08:43 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\HiJackThis.exe
2014-03-13 07:26 - 2014-03-11 07:22 - 00078848 _____ () C:\Windows\KMSEmulator.exe
2014-03-13 07:26 - 2014-02-10 19:55 - 00002740 _____ () C:\Windows\System32\Tasks\AutoKMSDaily
2014-03-13 07:26 - 2014-02-10 19:55 - 00000202 _____ () C:\Windows\Tasks\AutoKMSDaily.job
2014-03-13 06:58 - 2014-03-13 06:58 - 00339991 _____ () C:\Users\Start\Downloads\RSIT-1.06.exe
2014-03-13 06:49 - 2014-03-13 06:49 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner(1).exe
2014-03-12 23:57 - 2014-03-12 13:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-12 23:48 - 2014-03-12 23:47 - 00000000 ____D () C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:46 - 2014-03-12 23:46 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-03-12 23:42 - 2014-03-12 23:42 - 00000000 ____D () C:\ProgramData\Licenses
2014-03-12 23:41 - 2014-03-12 23:41 - 04095448 _____ (BrightFort LLC ) C:\Users\Start\Downloads\spywareblastersetup50.exe
2014-03-12 14:44 - 2013-12-13 15:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 14:44 - 2013-12-13 15:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 14:44 - 2013-12-13 15:19 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 14:43 - 2014-03-12 14:43 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 13:58 - 2014-03-12 13:58 - 00000632 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-03-12 13:53 - 2014-03-12 13:49 - 55454464 _____ (Safer-Networking Ltd. ) C:\Users\Start\Downloads\SpybotSD2.exe
2014-03-12 13:52 - 2014-03-12 13:51 - 03230781 _____ (Evonsoft ) C:\Users\Start\Downloads\ASRLSetup.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 18265192 _____ (SUPERAntiSpyware) C:\Users\Start\Downloads\SUPERAntiSpyware.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 08003752 _____ ( ) C:\Users\Start\Downloads\setupfree.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 05088576 _____ (Crawler, LLC ) C:\Users\Start\Downloads\SpywareTerminatorSetup.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 03255248 _____ (Javacool Software LLC ) C:\Users\Start\Downloads\spywareblastersetup46.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 00027898 _____ () C:\Users\Start\Downloads\lang.cesky.zip
2014-03-12 12:50 - 2013-12-16 17:38 - 72790016 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00290816 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00028672 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-03-12 11:50 - 2014-03-12 11:50 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner.exe
2014-03-12 10:06 - 2009-07-14 05:45 - 00416952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-12 09:57 - 2013-09-14 10:14 - 00000000 ____D () C:\Qoobox
2014-03-12 09:56 - 2014-03-12 09:56 - 00448512 _____ (OldTimer Tools) C:\Users\Start\Downloads\TFC.exe
2014-03-12 09:56 - 2014-03-12 09:55 - 00165888 _____ () C:\Users\Start\Downloads\T-Cleaner.exe
2014-03-10 19:47 - 2011-04-12 09:34 - 00737334 _____ () C:\Windows\system32\perfh005.dat
2014-03-10 19:47 - 2011-04-12 09:34 - 00166428 _____ () C:\Windows\system32\perfc005.dat
2014-03-10 19:47 - 2009-07-14 06:13 - 01773764 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-10 11:03 - 2014-03-07 19:50 - 00000000 ____D () C:\Users\Start\Downloads\Download
2014-03-10 09:49 - 2013-12-13 15:34 - 00000000 ____D () C:\Program Files\totalcmd
2014-03-08 11:33 - 2014-03-06 17:44 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-08 11:33 - 2013-12-16 14:25 - 00000000 ____D () C:\Program Files (x86)\Companion Suite Pro LL2
2014-03-08 10:02 - 2014-03-08 10:00 - 24361384 _____ () C:\Users\Start\Downloads\SpyHunter-4.6.1.3664+patch.rar
2014-03-08 09:47 - 2014-03-08 09:47 - 00000000 _____ () C:\autoexec.bat
2014-03-08 09:46 - 2014-03-08 09:46 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-08 09:43 - 2014-03-08 09:43 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Start\Downloads\SpyHunter-Installer-k.exe
2014-03-08 06:15 - 2013-12-16 16:37 - 00000000 ____D () C:\Users\Start\AppData\Roaming\IObit
2014-03-08 06:15 - 2013-12-13 14:30 - 00000000 ____D () C:\Program Files\TNod User & Password Finder
2014-03-08 05:35 - 2013-12-16 17:38 - 44064768 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2014-03-07 22:29 - 2013-12-16 16:41 - 00000000 ____D () C:\ProgramData\IObit
2014-03-07 20:54 - 2014-02-18 15:36 - 00000000 ____D () C:\Program Files (x86)\CNC Editor 2002v1.5
2014-03-07 20:51 - 2014-03-07 20:51 - 00000000 ____D () C:\ProgramData\Razer
2014-03-07 19:54 - 2014-03-07 19:54 - 00003168 _____ () C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2014-03-07 19:54 - 2014-03-07 19:54 - 00003098 _____ () C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2014-03-07 19:53 - 2014-03-07 19:53 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 11:13 - 2014-03-07 11:13 - 00072256 _____ () C:\Users\Start\Documents\cc_20140307_111344.reg
2014-03-07 10:59 - 2014-03-07 10:57 - 04765152 _____ (Piriform Ltd) C:\Users\Start\Downloads\ccsetup411.exe
2014-03-06 19:29 - 2014-03-06 15:28 - 00000000 ____D () C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-06 18:54 - 2013-12-16 16:42 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Apple Computer
2014-03-06 17:44 - 2014-03-06 17:44 - 00000000 ____D () C:\Users\Start\AppData\Local\WinRST
2014-03-06 17:41 - 2014-03-06 17:41 - 02513790 _____ () C:\Users\Start\Downloads\Free-JPG-To-PDF-Converter-Setup.rar
2014-03-06 17:38 - 2014-03-06 17:38 - 01119224 _____ (www.JPGPDF.net ) C:\Users\Start\Downloads\jpgtopdf.exe
2014-03-06 15:43 - 2014-03-06 15:43 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:41 - 2011-04-12 09:34 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-06 15:12 - 2014-03-06 15:12 - 18277248 _____ (pdfforge ) C:\Users\Start\Downloads\PDFCreator-1_7_2_setup.exe
2014-03-06 15:10 - 2014-03-06 15:10 - 03921526 _____ () C:\Users\Start\Documents\scan.zip
2014-03-05 18:42 - 2014-03-05 18:22 - 00000000 ____D () C:\Windows\rescache
2014-03-05 10:07 - 2014-03-05 09:56 - 00050688 _____ () C:\Users\Start\Documents\Kopie - optimalizace 11 2 2014.xls
2014-03-05 10:02 - 2014-03-05 09:21 - 626820112 _____ () C:\Users\Start\Downloads\SinuTrainTrialV0705ED2.zip
2014-03-04 12:58 - 2014-03-03 08:21 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 10:51 - 2013-12-13 07:29 - 00000000 ____D () C:\Windows\Panther
2014-03-04 10:37 - 2014-03-04 10:36 - 381034498 _____ () C:\Users\Start\Documents\backup.reg
2014-03-04 08:10 - 2014-03-04 08:10 - 00000000 ____D () C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 12:17 - 2014-03-03 12:17 - 00003274 _____ () C:\Windows\System32\Tasks\{6BEC8282-6298-4687-8ACA-597D87B0AC87}
2014-03-03 10:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-03 08:22 - 2014-03-03 08:20 - 00000000 ____D () C:\Users\Start\AppData\Local\Google
2014-03-03 08:21 - 2014-03-03 08:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-03 08:20 - 2014-03-03 08:20 - 00003946 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-03 08:20 - 2014-03-03 08:20 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-03 08:20 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Deployment
2014-03-03 08:19 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Apps\2.0
2014-03-01 07:05 - 2014-03-12 06:02 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-12 06:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-12 06:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-12 06:02 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-12 06:02 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-12 06:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-12 06:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-12 06:02 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-12 06:02 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-12 06:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-12 06:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-12 06:02 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-12 06:02 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-12 06:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-12 06:02 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-12 06:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-12 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-12 06:02 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-12 06:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-12 06:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-12 06:02 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-12 06:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-12 06:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-12 06:02 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-12 06:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-12 06:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-12 06:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-12 06:02 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-12 06:02 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-12 06:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-12 06:02 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-12 06:02 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-12 06:02 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-12 06:02 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-12 06:02 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-12 06:02 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-12 06:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-12 06:02 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-12 06:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-12 06:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 06:45 - 2013-12-17 15:07 - 00000000 ____D () C:\Users\Start\Documents\zálohy telefonů
2014-02-27 06:35 - 2014-02-27 06:35 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-26 20:03 - 2013-12-18 14:36 - 00000000 ____D () C:\Users\Start\AppData\Local\Apple Computer
2014-02-26 19:57 - 2013-12-18 14:07 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-26 19:39 - 2014-02-26 19:39 - 00000000 ____D () C:\Users\Start\AppData\Local\NetDragon
2014-02-26 19:37 - 2014-02-26 19:37 - 00000000 ____D () C:\Program Files (x86)\NetDragon
2014-02-26 19:37 - 2013-12-13 12:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-26 17:23 - 2014-01-01 14:40 - 00000000 ____D () C:\Program Files (x86)\NsPro
2014-02-26 16:28 - 2014-02-26 16:28 - 00004608 _____ () C:\Users\Start\Documents\Apple iPhone 4S.med
2014-02-26 16:10 - 2014-01-11 17:41 - 00000000 ____D () C:\Users\Start\AppData\Roaming\MOBILedit
2014-02-25 15:47 - 2014-02-25 15:47 - 00376832 _____ (MARX CryptoTech LP ) C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47 - 2014-02-25 15:47 - 00045056 _____ (MARX CryptoTech LP) C:\Windows\SysWOW64\Drivers\CBUSB.SYS
2014-02-25 15:47 - 2014-02-25 15:47 - 00043520 _____ () C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-24 17:08 - 2014-02-24 17:08 - 00000000 ____D () C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:08 - 2013-12-17 16:18 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2013-12-17 16:18 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-24 17:06 - 2013-12-13 15:19 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Adobe
2014-02-24 09:42 - 2013-12-13 17:36 - 00000000 ____D () C:\Users\Start\AppData\Local\Adobe
2014-02-24 07:37 - 2014-02-24 07:36 - 11140364 _____ () C:\Users\Start\Downloads\cc-setup.exe
2014-02-24 07:23 - 2014-02-09 09:44 - 00000200 _____ () C:\Windows\Tasks\AutoKMS.job
2014-02-24 07:20 - 2013-12-16 06:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-24 07:20 - 2013-12-13 17:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-24 07:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-24 07:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-24 07:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-24 07:13 - 2014-01-13 06:36 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-02-24 07:13 - 2013-12-17 15:54 - 00000000 ____D () C:\Users\Start\Documents\Soubory aplikace Outlook
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\redistpart
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\launcher
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\explauncher
2014-02-24 07:13 - 2013-12-13 12:47 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-24 07:13 - 2013-12-13 09:32 - 00000000 ____D () C:\Users\Start\AppData\Local\VirtualStore
2014-02-24 07:13 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-24 07:11 - 2014-02-09 09:44 - 00002434 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-02-22 06:05 - 2013-12-13 17:45 - 00000000 ____D () C:\Users\Start\AppData\Local\GHISLER
2014-02-22 05:59 - 2014-02-20 19:58 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InfinityBox
2014-02-20 18:51 - 2014-02-20 18:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ZuneDriver_01_09_00.Wdf
2014-02-20 18:49 - 2014-02-20 18:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-02-18 17:09 - 2014-02-18 17:09 - 00087704 _____ () C:\Windows\cadkasdeinst01.exe
2014-02-17 11:49 - 2014-02-17 11:49 - 00000000 ____D () C:\Users\Start\AppData\Local\#Bqb
2014-02-17 11:45 - 2014-02-17 11:45 - 00000000 ____D () C:\Users\Start\AppData\Local\IsolatedStorage
2014-02-17 11:09 - 2014-02-17 11:09 - 00001545 _____ () C:\Users\Public\Desktop\iTNC530 (606424).lnk
2014-02-17 11:06 - 2014-02-17 11:06 - 00000000 ____D () C:\Programme
2014-02-17 10:57 - 2014-02-16 18:07 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2014-02-17 10:33 - 2013-12-13 19:53 - 00000000 ____D () C:\Users\Start\AppData\Local\Microsoft Help
2014-02-17 10:22 - 2014-02-17 10:22 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-17 09:22 - 2014-02-17 09:17 - 41640395 _____ (diakov.net) C:\Users\Start\Downloads\Advanced-SystemCare-PRO-v7.2.0.431-Final-RePack-by-D!akov---aktivovaný.exe
2014-02-17 09:07 - 2014-02-11 06:34 - 00000000 ____D () C:\Windows\Minidump
2014-02-17 06:20 - 2013-12-13 15:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 19:58 - 2013-12-13 14:59 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 19:49 - 2013-12-15 07:16 - 01748742 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 19:29 - 2014-02-13 15:18 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-16 19:00 - 2014-02-16 19:00 - 00000000 ____D () C:\ProgramData\Real
2014-02-16 12:11 - 2014-02-16 12:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 15:26 - 2014-01-10 11:56 - 00000000 ____D () C:\Program Files\Java
2014-02-13 15:25 - 2014-02-13 15:25 - 00000000 ____D () C:\ProgramData\Sun
2014-02-13 15:24 - 2014-02-13 15:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-13 15:23 - 2014-02-13 15:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Start\Desktop" je 13 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files (x86)\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eps_Reg.exe
c:\users\start\appdata\local\temp\eps_reg.exe /l /nsmartcard2000 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService
c:\acer\empowering technology\erecovery\monitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
c:\program files (x86)\itunes\ituneshelper.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
c:\program files (x86)\samsung\kies\kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
c:\program files (x86)\samsung\kies\kiestrayagent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files (x86)\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center
%windir%\windowsmobile\wmdc.exe [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#8 Příspěvek od **vyosek** » 13 bře 2014 14:32

svitovec píše:Eset je ofic.

Proc je tedy v logu zcela jasne patrny crack

Myslite si ze je nectu nebo jak??

svitovec · #9 Příspěvek od **svitovec** » 13 bře 2014 15:13

OK. Omlovám se. Odinstaluji.

#10 Příspěvek od **vyosek** » 13 bře 2014 15:45

Omlouvate se za co? Za to ze se tu ze me snazite delat vola?? My jsme tu zdarma a ve svem volnem case a toto je "odmena" pro nas? ze se tu z nas snazite delat hlupaky, nejsme tu prvni den a nejezdime tu na kolobezce ve tricku s napisem nazdar...

VIRY.CZ

Kontrola logu - reklamy a vyskakování oken

Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken

Re: Kontrola logu - reklamy a vyskakování oken