Zdravím prosím o kontrolu logu z FRST děkuji .
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by GEORG (administrator) on GEORG-HP on 15-03-2014 12:16:10
Running from C:\Users\GEORG\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(Validity Sensors, Inc.) C:\Windows\system32\vcsFPService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(EasyBits Software AS) C:\Windows\SysWOW64\ezSharedSvcHost.exe
(Garmin Ltd or its subsidiaries) C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
() C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\wdm\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
() C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DPAgent.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
(Symantec Corporation) C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe
(Microsoft Corporation.) C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\SeaPort.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
() C:\Program Files (x86)\Opera\20.0.1387.77\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-06-09] (IDT, Inc.)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [] - [X]
HKLM\...\Run: [AdAwareTray] - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [4114264 2014-01-23] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [HP Quick Launch] - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [602168 2010-06-29] (Hewlett-Packard Company)
HKLM-x32\...\Run: [SDTray] - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [3830224 2013-05-16] (Safer-Networking Ltd.)
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-02] (AVAST Software)
HKLM-x32\...\Run: [QuickTime Task] - C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [iTunesHelper] - C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-21-1321875999-3521709362-3586832015-1000\...\MountPoints2: F - F:\Startme.exe
Lsa: [Notification Packages] DPPassFilter scecli
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: localhost:21320
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?sourc ... 51A3696AFB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
URLSearchHook: HKLM-x32 - (No Name) - {77e8143b-6759-416e-b521-82cfed75150b} - No File
URLSearchHook: HKCU - (No Name) - {77e8143b-6759-416e-b521-82cfed75150b} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {9C89CC2B-BAB2-4398-8326-157A03A70FFE} URL = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {9C89CC2B-BAB2-4398-8326-157A03A70FFE} URL = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://lavasoft.blekko.com/ws/?source=f ... earchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://lavasoft.blekko.com/ws/?source=f ... earchTerms}
SearchScopes: HKCU - {9C89CC2B-BAB2-4398-8326-157A03A70FFE} URL = http://sk.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKCU - {AB8484E6-0F96-4CA2-994D-DB5D250CCB3C} URL = http://search.conduit.com/ResultsExt.as ... 40618&UM=2
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Toolbar: HKCU - No Name - {77E8143B-6759-416E-B521-82CFED75150B} - No File
DPF: HKLM-x32 {DE625294-70E6-45ED-B895-CFFA13AEB044} http://78.41.175.170/activex/AMC.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks-x32: EasyBits ShellExecute Hook - {E54729E8-BB3D-4270-9D49-7389EA579090} - C:\Windows\SysWOW64\ezUPBHook.dll [52920 2010-08-18] (EasyBits Software Corp.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.9
FireFox:
========
FF ProfilePath: C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default
FF NewTab: www.google.com
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.centrum.sk/
FF Keyword.URL: https://www.google.com/search
FF NetworkProxy: "type", 4
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer - C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @SonyCreativeSoftware.com/Media Go,version=1.0 - C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Media Software and Services Inc)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll No File
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\GEORG\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\GEORG\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\cs@dictionaries.addons.mozilla.org [2013-09-09]
FF Extension: British English Dictionary (Updated) - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\en-gb@flyingtophat.co.uk [2014-01-02]
FF Extension: United States English Spellchecker - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\en-US@dictionaries.addons.mozilla.org [2014-01-02]
FF Extension: Garmin Communicator - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E} [2013-12-14]
FF Extension: Czech (CZ) Language Pack - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\langpack-cs@firefox.mozilla.org.xpi [2013-09-09]
FF Extension: English (GB) Language Pack - C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2014-01-02]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-03-03]
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt\ []
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\IPSFFPlgn\
FF Extension: Symantec Intrusion Prevention - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\IPSFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\coFFPlgn\
FF Extension: No Name - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\coFFPlgn\ []
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-31]
Chrome:
=======
CHR Extension: (avast! Online Security) - C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-12-31]
CHR Extension: (Skype Click to Call) - C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-02-13]
CHR Extension: (Peňaženka Google) - C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-16]
CHR Extension: (DivX Browser Bar) - C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho [2014-03-12]
CHR HKCU\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Users\GEORG\AppData\Local\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-31]
CHR HKLM-x32\...\Chrome\Extension: [lfffjahnfbocnaooecgijfnbpcfekoik] - C:\ProgramData\adawaretb\shortcuts\chrome\adawaretb.crx [2013-12-31]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-03-03]
CHR HKLM-x32\...\Chrome\Extension: [pkmpcdbgnfjfeelcpebpkflcmbkclfho] - C:\Users\GEORG\AppData\Local\CRE\pkmpcdbgnfjfeelcpebpkflcmbkclfho.crx [2013-07-31]
==================== Services (Whitelisted) =================
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-02] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363584 2014-03-03] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1748608 2014-03-03] (Microsoft Corporation)
R2 Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [250712 2013-11-08] (Garmin Ltd or its subsidiaries)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [47416 2014-02-05] (Hewlett-Packard Company)
R2 HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [27192 2010-06-29] ()
R2 LavasoftAdAwareService11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [702744 2014-01-23] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4233088 2013-04-29] (Symantec Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2013-10-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [214520 2014-02-24] ()
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1817560 2013-05-16] (Safer-Networking Ltd.)
S2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [1033688 2013-05-16] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2013-05-15] (Safer-Networking Ltd.)
==================== Drivers (Whitelisted) ====================
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-02] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-31] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-31] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-02] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-02] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-02] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-31] ()
S3 AVerAF35; C:\Windows\System32\Drivers\HPAF35.sys [511104 2009-10-19] (Hewlett-Packard)
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20130412.001\BHDrvx64.sys [1390680 2013-04-12] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484512 2013-04-23] (Symantec Corporation)
S3 gfiark; C:\Windows\System32\drivers\gfiark.sys [41032 2013-05-23] (ThreatTrack Security)
R0 gfibto; C:\Windows\System32\drivers\gfibto.sys [14456 2013-05-27] (GFI Software)
R3 gzflt; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [138232 2013-07-17] (BitDefender LLC)
S3 HPIR; C:\Windows\System32\DRIVERS\HPIR.sys [93184 2009-11-16] (Hewlett-Packard)
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20130423.001\IDSvia64.sys [513184 2013-04-20] (Symantec Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
S3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\ENG64.SYS [126192 2013-04-23] (Symantec Corporation)
S3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\EX64.SYS [2087664 2013-04-23] (Symantec Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
S2 NSHE; C:\Windows\SysWOW64\Drivers\NSHE.SYS [97792 2010-07-28] (Tecar Forum)
S3 SRTSP; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [744568 2011-03-31] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [40568 2011-03-31] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1207000.00D\SYMDS64.SYS [450680 2011-01-27] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [912504 2011-03-15] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [174200 2013-04-23] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [171128 2011-01-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [386168 2011-04-21] (Symantec Corporation)
R3 Trufos; C:\Windows\System32\DRIVERS\Trufos.sys [329800 2013-07-17] (BitDefender S.R.L.)
S3 btwaudio; system32\drivers\btwaudio.sys [X]
S3 btwavdt; system32\drivers\btwavdt.sys [X]
S3 btwl2cap; system32\DRIVERS\btwl2cap.sys [X]
S3 btwrchid; system32\DRIVERS\btwrchid.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-15 12:16 - 2014-03-15 12:16 - 00024492 _____ () C:\Users\GEORG\Desktop\FRST.txt
2014-03-15 12:15 - 2014-03-15 12:16 - 00000000 ____D () C:\FRST
2014-03-15 12:13 - 2014-03-15 12:13 - 00000000 _____ () C:\Users\GEORG\Desktop\FRSTLauncher.exe
2014-03-15 12:12 - 2014-03-15 12:12 - 02157056 _____ (Farbar) C:\Users\GEORG\Desktop\FRST64.exe
2014-03-14 22:18 - 2014-03-14 22:18 - 00001743 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-14 22:17 - 2014-03-14 22:18 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:17 - 2014-03-14 22:18 - 00000000 ____D () C:\Program Files\iTunes
2014-03-14 22:17 - 2014-03-14 22:18 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-14 22:17 - 2014-03-14 22:17 - 00000000 ____D () C:\Program Files\iPod
2014-03-14 22:11 - 2014-03-14 22:11 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-14 22:11 - 2014-03-14 22:11 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-13 21:43 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 21:42 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 21:42 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 21:42 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 21:42 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 21:42 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 21:42 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 21:42 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 21:42 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 21:42 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 21:42 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 21:42 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 21:42 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 21:42 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 21:42 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 21:42 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 21:42 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 21:42 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 21:42 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 21:42 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 21:42 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 21:42 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 21:42 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 21:42 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 21:42 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 21:42 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 21:42 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 21:42 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 21:42 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 21:42 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 21:42 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 21:42 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 21:42 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 21:42 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 21:42 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 21:42 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 21:42 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 21:42 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 21:42 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 21:42 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 21:41 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 21:41 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 21:41 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 21:41 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 21:40 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 21:40 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 21:40 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 21:40 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 10:24 - 2014-03-13 10:24 - 00063104 _____ () C:\Users\GEORG\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-13 10:00 - 2014-03-15 11:34 - 00000336 _____ () C:\Windows\setupact.log
2014-03-13 10:00 - 2014-03-13 10:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 09:59 - 2014-03-14 10:12 - 05232224 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-07 01:52 - 2014-03-07 01:52 - 00000000 _____ () C:\Windows\SysWOW64\sho76BA.tmp
2014-03-07 00:50 - 2014-03-07 13:41 - 00001100 _____ () C:\Users\GEORG\Desktop\Adobe Photoshop CC (64 Bit).lnk
2014-03-06 23:43 - 2014-03-07 00:02 - 00000000 ____D () C:\Users\GEORG\Downloads\Adobe Photoshop CC 14.2.1 Final Multilanguage [ChingLiu]
2014-03-06 23:06 - 2014-03-06 23:06 - 00000168 ____H () C:\Users\GEORG\Desktop\.BridgeLabelsAndRatings
2014-03-05 08:45 - 2014-03-05 08:45 - 00001187 _____ () C:\Users\Public\Desktop\EMCO Malware Destroyer 7.lnk
2014-03-05 08:44 - 2014-03-05 08:44 - 00000000 ____D () C:\Program Files (x86)\EMCO
2014-03-05 07:58 - 2014-03-05 07:58 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Lavasoft
2014-03-05 07:41 - 2014-03-05 07:41 - 00000000 ____D () C:\Program Files\Lavasoft
2014-03-05 07:40 - 2014-03-05 07:40 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-03-04 16:43 - 2014-03-04 16:43 - 00000000 ____D () C:\Users\GEORG\Desktop\škola
2014-03-04 16:41 - 2014-03-10 11:03 - 00000000 ____D () C:\Users\GEORG\Desktop\photoshop
2014-03-01 11:50 - 2014-03-01 12:06 - 00000000 ____D () C:\Users\GEORG\Desktop\nfs obnova
2014-03-01 11:48 - 2014-03-01 11:49 - 00000000 ____D () C:\Users\GEORG\Downloads\NFS16_Patch1.1.0.0 -ALI213
2014-02-25 10:47 - 2014-02-25 10:47 - 00001674 _____ () C:\Users\GEORG\Desktop\Need For Speed The Run.exe - odkaz.lnk
2014-02-24 21:57 - 2014-02-24 21:58 - 00000000 ____D () C:\Users\GEORG\Documents\NFSTR
2014-02-24 21:57 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-02-24 21:57 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-02-24 21:56 - 2014-02-24 21:56 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-02-24 21:56 - 2014-02-24 21:56 - 00000000 ____D () C:\ProgramData\EA Core
2014-02-24 21:56 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-02-24 21:31 - 2014-03-13 20:32 - 00000000 ____D () C:\Program Files (x86)\Need for Speed The Run
2014-02-24 16:42 - 2014-02-24 16:42 - 00442880 _____ (Allstar Group, s.r.o.) C:\Users\GEORG\Downloads\gpcl64bit.exe
2014-02-22 20:55 - 2014-02-22 20:55 - 00001517 _____ () C:\Users\Public\Desktop\NHL® 09.lnk
2014-02-22 20:51 - 2014-02-22 21:44 - 00000000 ____D () C:\NHL 09
2014-02-22 11:31 - 2014-02-22 11:39 - 00000000 ____D () C:\Users\GEORG\Documents\PCSX2
2014-02-22 11:28 - 2014-02-23 11:21 - 00000000 ____D () C:\Program Files (x86)\PCSX2 1.2.1
2014-02-21 21:53 - 2014-02-21 22:07 - 00000000 ____D () C:\Program Files (x86)\PowerISO
2014-02-21 21:53 - 2011-11-15 04:50 - 00125376 _____ (Power Software Ltd) C:\Windows\system32\Drivers\scdemu.sys
2014-02-21 00:26 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-02-21 00:26 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-02-21 00:26 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-02-21 00:26 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-02-21 00:26 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-02-21 00:26 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-02-21 00:26 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-02-21 00:26 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-02-21 00:25 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-02-21 00:25 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-02-21 00:25 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-02-21 00:25 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-02-21 00:25 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-02-21 00:25 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-02-21 00:25 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-02-21 00:25 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-02-21 00:25 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-02-21 00:25 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-02-21 00:25 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-02-21 00:24 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-02-21 00:24 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-02-21 00:20 - 2014-02-22 11:30 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-21 00:20 - 2014-02-22 11:29 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-02-20 23:30 - 2014-02-21 00:05 - 00000000 ____D () C:\Users\GEORG\Downloads\NHL 2K10 [English][PS2DVD][USA][WwW.GamesTorrents.CoM]
2014-02-20 16:48 - 2014-02-20 16:48 - 04697744 _____ (AVAST Software) C:\Users\GEORG\Downloads\avast_free_antivirus_setup_online.exe
2014-02-19 23:28 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-02-19 23:28 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-02-19 23:28 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-02-19 23:28 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-02-19 23:28 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-02-19 23:28 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-02-19 23:28 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-02-19 23:28 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-02-19 23:28 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-02-19 23:28 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-02-19 23:28 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-02-19 23:28 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-02-19 23:28 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-02-19 23:28 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-02-19 23:28 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-02-19 23:28 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-02-19 23:28 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-02-19 22:46 - 2014-02-19 22:46 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\2K Sports
2014-02-19 22:00 - 2014-02-19 22:00 - 00001122 _____ () C:\Users\GEORG\Desktop\NBA 2K14.lnk
2014-02-19 22:00 - 2014-02-19 22:00 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2K Sports
2014-02-19 21:53 - 2014-02-19 21:53 - 00000000 ____D () C:\Program Files (x86)\2K Sports
2014-02-19 17:28 - 2014-02-19 17:28 - 00000000 ____D () C:\Users\GEORG\Downloads\NBA.2K14-RELOADED
2014-02-19 01:40 - 2014-02-19 01:40 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl view
2014-02-19 01:40 - 2014-02-19 01:40 - 00000000 ____D () C:\Users\GEORG\Desktop\bigGUI
2014-02-19 01:37 - 2014-03-04 16:44 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl09 záloha
2014-02-19 01:35 - 2014-02-19 01:35 - 00900467 _____ () C:\Users\GEORG\Downloads\Torf template 08 by zwitter v2(1).rar
2014-02-18 23:58 - 2014-02-18 23:58 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl 09 addon subory
2014-02-18 22:51 - 2014-02-18 22:51 - 16733527 _____ () C:\Users\GEORG\Downloads\CyberTemp.RAR
2014-02-18 22:49 - 2014-02-18 22:49 - 01785827 _____ () C:\Users\GEORG\Downloads\nhlview(1).zip
2014-02-18 22:29 - 2014-02-18 22:29 - 00171315 _____ () C:\Users\GEORG\Downloads\FSHAdd(1).zip
2014-02-18 22:28 - 2014-02-18 22:28 - 00060417 _____ () C:\Users\GEORG\Downloads\BigGUI.zip
2014-02-18 22:27 - 2014-02-18 22:27 - 00036503 _____ () C:\Users\GEORG\Downloads\ImpBIG.zip
2014-02-18 22:21 - 2014-02-18 22:21 - 00171315 _____ () C:\Users\GEORG\Downloads\FSHAdd.zip
2014-02-18 22:18 - 2014-02-18 22:18 - 00000821 _____ () C:\Users\GEORG\Downloads\Backup.zip
2014-02-18 22:14 - 2014-02-18 22:14 - 07292125 _____ () C:\Users\GEORG\Downloads\helmets temp by Demoul.rar
2014-02-18 22:10 - 2014-02-18 22:10 - 05788310 _____ () C:\Users\GEORG\Downloads\template.rar
2014-02-18 22:07 - 2014-02-18 22:07 - 00166278 _____ () C:\Users\GEORG\Downloads\fhjt.zip
2014-02-18 15:22 - 2014-02-18 15:22 - 00363653 _____ () C:\Users\GEORG\Downloads\AddOnInstaller_1.8.rar
2014-02-18 14:48 - 2014-02-22 22:19 - 00000000 ____D () C:\Users\GEORG\Documents\NHL09
2014-02-18 01:25 - 2014-02-18 01:26 - 16135800 _____ () C:\Users\GEORG\Downloads\!!!DRESY-OH.rar
2014-02-18 01:24 - 2014-02-18 01:25 - 16385146 _____ () C:\Users\GEORG\Downloads\facepack.rar
2014-02-17 14:53 - 2014-03-13 10:25 - 00589312 ___SH () C:\Users\GEORG\Desktop\Thumbs.db
2014-02-17 12:56 - 2014-02-17 12:56 - 12787890 _____ () C:\Users\GEORG\Downloads\slovanjerseypack.zip
2014-02-17 02:18 - 2014-02-17 02:18 - 04823980 _____ () C:\Users\GEORG\Downloads\1390940857imaginary-olympic-arena-and-ice-before-the-original-by-eha.rar
2014-02-17 01:49 - 2014-02-17 01:49 - 00215604 _____ () C:\Users\GEORG\Downloads\NHL-08_09-Import-Tools.rar
2014-02-17 00:49 - 2014-02-17 00:49 - 00214063 _____ () C:\Users\GEORG\Downloads\BHImport.rar
2014-02-16 22:54 - 2014-02-16 22:54 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-16 21:57 - 2014-02-17 13:58 - 00000000 ____D () C:\Program Files (x86)\EA Sports
2014-02-16 21:57 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-02-16 21:57 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-02-16 21:57 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-02-16 21:57 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-02-16 21:57 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-02-16 21:57 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-02-16 21:57 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-02-16 21:57 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-02-16 21:57 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-02-16 21:57 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-02-16 21:57 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-02-16 21:57 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-02-16 21:57 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-02-16 21:57 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-02-16 21:57 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-02-16 21:57 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-02-16 21:57 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-02-16 21:57 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-02-16 21:57 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-02-16 21:57 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-02-16 21:57 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-02-16 21:57 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-02-16 21:57 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-02-16 21:57 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-02-16 21:57 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-02-16 21:57 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-02-16 21:57 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-02-16 21:57 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-02-16 21:57 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-02-16 21:57 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-02-16 21:57 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-02-16 21:57 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-02-16 21:57 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-02-16 21:57 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-02-16 21:57 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-02-16 21:57 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-02-16 21:56 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-02-16 21:56 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-02-16 21:56 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-02-16 21:56 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-02-16 21:56 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-02-16 21:56 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-02-16 21:56 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-02-16 21:56 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-02-16 21:56 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-02-16 21:56 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-02-16 21:56 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-02-16 21:56 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-02-16 21:56 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-02-16 21:56 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-02-16 21:56 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-02-16 21:56 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-02-16 21:56 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-02-16 21:56 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-02-16 21:56 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-02-16 21:56 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-02-16 21:56 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-02-16 21:56 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-02-16 21:56 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-02-16 21:56 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-02-16 21:56 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-02-16 21:56 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-02-16 21:56 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-02-16 21:56 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-02-16 21:56 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-02-16 21:56 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-02-16 21:56 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-02-16 21:56 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-02-16 21:56 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-02-16 21:56 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-02-16 21:56 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-02-16 21:56 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-02-16 21:56 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-02-16 21:56 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-02-16 21:56 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-02-16 21:56 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-02-16 21:56 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-02-16 21:56 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-02-16 21:56 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-02-16 21:56 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-02-16 21:56 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-02-16 21:56 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-02-16 21:56 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-02-16 21:56 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-02-16 21:56 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-02-16 21:56 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-02-16 21:56 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-02-16 21:56 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-02-16 21:56 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-02-16 21:21 - 2014-02-16 23:10 - 861605547 _____ () C:\Users\GEORG\Downloads\NHL-09-Megapatch-2013.exe
2014-02-16 20:47 - 2014-02-18 01:10 - 00000132 _____ () C:\Users\GEORG\AppData\Roaming\Adobe BMP Format CS6 Prefs
2014-02-16 15:56 - 2014-02-16 15:56 - 00056645 _____ () C:\Users\GEORG\Downloads\BigGUI.rar
2014-02-16 15:41 - 2014-02-16 15:41 - 00274245 _____ () C:\Users\GEORG\Downloads\1389117996new_ingame_graphics_by_eha.rar
2014-02-16 14:57 - 2014-02-16 14:57 - 00627156 _____ () C:\Users\GEORG\Downloads\FshX_Vista_Installer.exe
2014-02-16 12:42 - 2014-02-16 12:42 - 00900467 _____ () C:\Users\GEORG\Downloads\Torf template 08 by zwitter v2.rar
2014-02-16 12:38 - 2014-02-16 12:38 - 10128608 _____ () C:\Users\GEORG\Downloads\Mohnatiy's-template-jerseys.rar
2014-02-15 02:12 - 2014-02-15 02:31 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Spotify
2014-02-15 02:12 - 2014-02-15 02:12 - 00001791 _____ () C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-02-15 02:02 - 2014-02-15 02:31 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Spotify
2014-02-15 02:02 - 2014-02-15 02:18 - 00000000 ____D () C:\Program Files (x86)\Spotify
2014-02-15 00:40 - 2014-02-15 00:41 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 14:44 - 2014-02-14 14:44 - 00303048 _____ () C:\Users\GEORG\Downloads\NHL 14.zip
2014-02-14 02:04 - 2014-02-14 02:04 - 00000000 ____D () C:\Windows\SysWOW64\Garmin
2014-02-14 02:04 - 2014-02-14 02:04 - 00000000 _____ () C:\Windows\SysWOW64\shoF38A.tmp
2014-02-14 01:48 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-14 01:48 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-14 00:21 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-14 00:21 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-14 00:21 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-14 00:21 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-14 00:21 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-14 00:21 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-14 00:20 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-14 00:20 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-14 00:20 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-14 00:20 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-14 00:20 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-14 00:20 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-14 00:20 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-14 00:20 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-14 00:20 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-14 00:20 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-14 00:20 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-14 00:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-14 00:20 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-14 00:20 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-14 00:20 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-14 00:20 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-14 00:20 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-14 00:20 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-14 00:19 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-14 00:19 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-14 00:19 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-14 00:19 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-13 18:34 - 2014-02-13 19:13 - 865888141 _____ () C:\Users\GEORG\Downloads\ELH14_v1a.rar
2014-02-13 02:10 - 2014-02-13 02:10 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\SynthMaker
2014-02-13 01:56 - 2014-02-13 01:56 - 00000000 ____D () C:\ProgramData\Antares
2014-02-13 01:24 - 2014-02-13 01:30 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Shareaza
2014-02-13 01:24 - 2014-02-13 01:24 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Shareaza
2014-02-13 01:18 - 2014-02-13 01:18 - 11370931 _____ (Shareaza Development Team ) C:\Users\GEORG\Downloads\Shareaza_2.7.1.0_Win32.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
==================== One Month Modified Files and Folders =======
2014-03-15 12:16 - 2014-03-15 12:16 - 00024492 _____ () C:\Users\GEORG\Desktop\FRST.txt
2014-03-15 12:16 - 2014-03-15 12:15 - 00000000 ____D () C:\FRST
2014-03-15 12:13 - 2014-03-15 12:13 - 00000000 _____ () C:\Users\GEORG\Desktop\FRSTLauncher.exe
2014-03-15 12:12 - 2014-03-15 12:12 - 02157056 _____ (Farbar) C:\Users\GEORG\Desktop\FRST64.exe
2014-03-15 12:08 - 2013-04-23 16:24 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-15 11:54 - 2013-07-02 11:27 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-15 11:52 - 2010-10-28 01:12 - 01114146 _____ () C:\Windows\WindowsUpdate.log
2014-03-15 11:46 - 2009-07-14 05:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-15 11:46 - 2009-07-14 05:45 - 00023248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-15 11:40 - 2013-05-22 21:31 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-03-15 11:38 - 2013-12-31 13:00 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-15 11:36 - 2013-07-02 11:27 - 00000930 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-15 11:34 - 2014-03-13 10:00 - 00000336 _____ () C:\Windows\setupact.log
2014-03-15 11:34 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-14 22:18 - 2014-03-14 22:18 - 00001743 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-03-14 22:18 - 2014-03-14 22:17 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:18 - 2014-03-14 22:17 - 00000000 ____D () C:\Program Files\iTunes
2014-03-14 22:18 - 2014-03-14 22:17 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-03-14 22:17 - 2014-03-14 22:17 - 00000000 ____D () C:\Program Files\iPod
2014-03-14 22:13 - 2013-07-27 10:37 - 00000000 ____D () C:\ProgramData\Apple
2014-03-14 22:11 - 2014-03-14 22:11 - 00001805 _____ () C:\Users\Public\Desktop\QuickTime Player.lnk
2014-03-14 22:11 - 2014-03-14 22:11 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-03-14 12:21 - 2013-04-23 22:33 - 00000000 ____D () C:\Users\GEORG\AppData\Local\CrashDumps
2014-03-14 10:12 - 2014-03-13 09:59 - 05232224 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-14 10:09 - 2013-04-24 13:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-14 10:09 - 2010-08-18 21:20 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 01:39 - 2009-07-14 06:13 - 00783360 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:14 - 2014-01-26 22:36 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-13 20:32 - 2014-02-24 21:31 - 00000000 ____D () C:\Program Files (x86)\Need for Speed The Run
2014-03-13 11:35 - 2013-12-25 02:29 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-03-13 10:25 - 2014-02-17 14:53 - 00589312 ___SH () C:\Users\GEORG\Desktop\Thumbs.db
2014-03-13 10:24 - 2014-03-13 10:24 - 00063104 _____ () C:\Users\GEORG\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-13 10:06 - 2013-05-27 15:18 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-13 10:00 - 2014-03-13 10:00 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 01:28 - 2013-05-22 21:16 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\uTorrent
2014-03-13 01:21 - 2014-01-16 01:43 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zariadenia Bluetooth
2014-03-11 13:59 - 2013-04-23 23:02 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\SoftGrid Client
2014-03-11 10:03 - 2014-01-16 13:53 - 00000000 ____D () C:\Users\GEORG\Desktop\žiadosti
2014-03-10 23:03 - 2009-09-07 01:40 - 00000000 ____D () C:\SwSetup
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\th-TH
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sl-SI
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\sk-SK
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\ro-RO
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\lt-LT
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\hr-HR
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\he-IL
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\et-EE
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\bg-BG
2014-03-10 22:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\ar-SA
2014-03-10 22:45 - 2010-10-28 01:13 - 00006656 _____ () C:\Windows\system32\bcmwlrc.dll
2014-03-10 22:45 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\lv-LV
2014-03-10 22:35 - 2010-10-28 01:15 - 00000000 ____D () C:\Program Files (x86)\HP
2014-03-10 11:03 - 2014-03-04 16:41 - 00000000 ____D () C:\Users\GEORG\Desktop\photoshop
2014-03-07 13:41 - 2014-03-07 00:50 - 00001100 _____ () C:\Users\GEORG\Desktop\Adobe Photoshop CC (64 Bit).lnk
2014-03-07 13:16 - 2013-05-01 17:51 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Adobe
2014-03-07 01:52 - 2014-03-07 01:52 - 00000000 _____ () C:\Windows\SysWOW64\sho76BA.tmp
2014-03-07 00:56 - 2013-04-23 13:11 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Adobe
2014-03-07 00:49 - 2013-08-01 08:24 - 00000000 ___RD () C:\Users\GEORG\Desktop\Programy
2014-03-07 00:48 - 2013-08-02 10:51 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2014-03-07 00:37 - 2013-04-22 22:57 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-03-07 00:33 - 2013-07-25 09:07 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2014-03-07 00:32 - 2013-07-25 08:57 - 00000000 ____D () C:\Program Files\Adobe
2014-03-07 00:02 - 2014-03-06 23:43 - 00000000 ____D () C:\Users\GEORG\Downloads\Adobe Photoshop CC 14.2.1 Final Multilanguage [ChingLiu]
2014-03-06 23:06 - 2014-03-06 23:06 - 00000168 ____H () C:\Users\GEORG\Desktop\.BridgeLabelsAndRatings
2014-03-05 16:59 - 2013-04-26 08:16 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Windows Live
2014-03-05 08:45 - 2014-03-05 08:45 - 00001187 _____ () C:\Users\Public\Desktop\EMCO Malware Destroyer 7.lnk
2014-03-05 08:44 - 2014-03-05 08:44 - 00000000 ____D () C:\Program Files (x86)\EMCO
2014-03-05 08:43 - 2013-08-01 09:27 - 00000000 ___RD () C:\Users\GEORG\Desktop\Údržba PC
2014-03-05 07:58 - 2014-03-05 07:58 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Lavasoft
2014-03-05 07:41 - 2014-03-05 07:41 - 00000000 ____D () C:\Program Files\Lavasoft
2014-03-05 07:40 - 2014-03-05 07:40 - 00000000 ____D () C:\Program Files\Common Files\Lavasoft
2014-03-05 07:39 - 2013-05-27 15:11 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-03-04 16:44 - 2014-02-19 01:37 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl09 záloha
2014-03-04 16:43 - 2014-03-04 16:43 - 00000000 ____D () C:\Users\GEORG\Desktop\škola
2014-03-03 10:13 - 2013-04-23 16:24 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-03 10:13 - 2013-04-23 16:24 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-03 10:13 - 2013-04-23 16:24 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-01 12:06 - 2014-03-01 11:50 - 00000000 ____D () C:\Users\GEORG\Desktop\nfs obnova
2014-03-01 11:49 - 2014-03-01 11:48 - 00000000 ____D () C:\Users\GEORG\Downloads\NFS16_Patch1.1.0.0 -ALI213
2014-03-01 07:05 - 2014-03-13 21:41 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 21:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 21:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 21:42 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 21:42 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 21:42 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 21:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 21:42 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 21:42 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 21:42 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 21:42 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 21:42 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 21:42 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 21:41 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 21:42 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 21:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 21:41 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 21:42 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 21:42 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 21:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 21:42 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 21:42 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 21:42 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 21:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 21:42 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 21:42 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 21:42 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 21:42 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 21:42 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 21:42 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 21:42 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 21:41 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 21:42 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 21:42 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 21:42 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 21:42 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 21:42 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 21:42 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 21:42 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 21:42 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 23:42 - 2013-07-02 23:16 - 00171008 ___SH () C:\Users\GEORG\Documents\Thumbs.db
2014-02-27 23:40 - 2013-07-27 09:58 - 00002496 _____ () C:\Users\GEORG\Documents\Register Vegas Pro.htm
2014-02-27 23:33 - 2013-07-27 09:36 - 00000000 ____D () C:\Program Files (x86)\Sony
2014-02-27 23:32 - 2013-07-25 12:31 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Sony
2014-02-26 13:15 - 2013-04-23 23:01 - 00767670 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 23:38 - 2013-04-22 23:17 - 00003186 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForGEORG
2014-02-25 23:38 - 2013-04-22 23:17 - 00000332 _____ () C:\Windows\Tasks\HPCeeScheduleForGEORG.job
2014-02-25 20:52 - 2009-07-14 06:08 - 00032562 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-25 10:47 - 2014-02-25 10:47 - 00001674 _____ () C:\Users\GEORG\Desktop\Need For Speed The Run.exe - odkaz.lnk
2014-02-24 21:58 - 2014-02-24 21:57 - 00000000 ____D () C:\Users\GEORG\Documents\NFSTR
2014-02-24 21:56 - 2014-02-24 21:56 - 00000000 ____D () C:\ProgramData\Electronic Arts
2014-02-24 21:56 - 2014-02-24 21:56 - 00000000 ____D () C:\ProgramData\EA Core
2014-02-24 16:44 - 2013-10-26 17:28 - 00214520 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-02-24 16:44 - 2013-10-26 17:27 - 00214520 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-02-24 16:42 - 2014-02-24 16:42 - 00442880 _____ (Allstar Group, s.r.o.) C:\Users\GEORG\Downloads\gpcl64bit.exe
2014-02-23 11:21 - 2014-02-22 11:28 - 00000000 ____D () C:\Program Files (x86)\PCSX2 1.2.1
2014-02-22 22:19 - 2014-02-18 14:48 - 00000000 ____D () C:\Users\GEORG\Documents\NHL09
2014-02-22 21:44 - 2014-02-22 20:51 - 00000000 ____D () C:\NHL 09
2014-02-22 20:55 - 2014-02-22 20:55 - 00001517 _____ () C:\Users\Public\Desktop\NHL® 09.lnk
2014-02-22 11:39 - 2014-02-22 11:31 - 00000000 ____D () C:\Users\GEORG\Documents\PCSX2
2014-02-22 11:30 - 2014-02-21 00:20 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-02-22 11:29 - 2014-02-21 00:20 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-02-22 11:29 - 2013-12-14 23:27 - 00000000 ____D () C:\ProgramData\Package Cache
2014-02-21 22:07 - 2014-02-21 21:53 - 00000000 ____D () C:\Program Files (x86)\PowerISO
2014-02-21 20:20 - 2013-04-29 15:28 - 00000000 ____D () C:\Windows\rescache
2014-02-21 00:05 - 2014-02-20 23:30 - 00000000 ____D () C:\Users\GEORG\Downloads\NHL 2K10 [English][PS2DVD][USA][WwW.GamesTorrents.CoM]
2014-02-20 17:18 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-02-20 16:48 - 2014-02-20 16:48 - 04697744 _____ (AVAST Software) C:\Users\GEORG\Downloads\avast_free_antivirus_setup_online.exe
2014-02-19 22:46 - 2014-02-19 22:46 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\2K Sports
2014-02-19 22:00 - 2014-02-19 22:00 - 00001122 _____ () C:\Users\GEORG\Desktop\NBA 2K14.lnk
2014-02-19 22:00 - 2014-02-19 22:00 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\2K Sports
2014-02-19 21:53 - 2014-02-19 21:53 - 00000000 ____D () C:\Program Files (x86)\2K Sports
2014-02-19 17:28 - 2014-02-19 17:28 - 00000000 ____D () C:\Users\GEORG\Downloads\NBA.2K14-RELOADED
2014-02-19 01:40 - 2014-02-19 01:40 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl view
2014-02-19 01:40 - 2014-02-19 01:40 - 00000000 ____D () C:\Users\GEORG\Desktop\bigGUI
2014-02-19 01:35 - 2014-02-19 01:35 - 00900467 _____ () C:\Users\GEORG\Downloads\Torf template 08 by zwitter v2(1).rar
2014-02-19 00:50 - 2014-01-17 01:00 - 00000132 _____ () C:\Users\GEORG\AppData\Roaming\Adobe PNG Format CS6 Prefs
2014-02-18 23:58 - 2014-02-18 23:58 - 00000000 ____D () C:\Users\GEORG\Desktop\nhl 09 addon subory
2014-02-18 22:51 - 2014-02-18 22:51 - 16733527 _____ () C:\Users\GEORG\Downloads\CyberTemp.RAR
2014-02-18 22:49 - 2014-02-18 22:49 - 01785827 _____ () C:\Users\GEORG\Downloads\nhlview(1).zip
2014-02-18 22:29 - 2014-02-18 22:29 - 00171315 _____ () C:\Users\GEORG\Downloads\FSHAdd(1).zip
2014-02-18 22:28 - 2014-02-18 22:28 - 00060417 _____ () C:\Users\GEORG\Downloads\BigGUI.zip
2014-02-18 22:27 - 2014-02-18 22:27 - 00036503 _____ () C:\Users\GEORG\Downloads\ImpBIG.zip
2014-02-18 22:21 - 2014-02-18 22:21 - 00171315 _____ () C:\Users\GEORG\Downloads\FSHAdd.zip
2014-02-18 22:18 - 2014-02-18 22:18 - 00000821 _____ () C:\Users\GEORG\Downloads\Backup.zip
2014-02-18 22:14 - 2014-02-18 22:14 - 07292125 _____ () C:\Users\GEORG\Downloads\helmets temp by Demoul.rar
2014-02-18 22:10 - 2014-02-18 22:10 - 05788310 _____ () C:\Users\GEORG\Downloads\template.rar
2014-02-18 22:07 - 2014-02-18 22:07 - 00166278 _____ () C:\Users\GEORG\Downloads\fhjt.zip
2014-02-18 15:22 - 2014-02-18 15:22 - 00363653 _____ () C:\Users\GEORG\Downloads\AddOnInstaller_1.8.rar
2014-02-18 13:46 - 2014-02-02 20:45 - 00000000 ____D () C:\Program Files (x86)\Counter-Strike 1.6 Non-Steam
2014-02-18 01:26 - 2014-02-18 01:25 - 16135800 _____ () C:\Users\GEORG\Downloads\!!!DRESY-OH.rar
2014-02-18 01:25 - 2014-02-18 01:24 - 16385146 _____ () C:\Users\GEORG\Downloads\facepack.rar
2014-02-18 01:10 - 2014-02-16 20:47 - 00000132 _____ () C:\Users\GEORG\AppData\Roaming\Adobe BMP Format CS6 Prefs
2014-02-17 15:33 - 2013-08-14 09:21 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-17 15:29 - 2013-04-26 11:58 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-17 14:00 - 2014-02-11 13:53 - 00000000 ____D () C:\Users\GEORG\Documents\NHL 14
2014-02-17 13:58 - 2014-02-16 21:57 - 00000000 ____D () C:\Program Files (x86)\EA Sports
2014-02-17 12:56 - 2014-02-17 12:56 - 12787890 _____ () C:\Users\GEORG\Downloads\slovanjerseypack.zip
2014-02-17 02:18 - 2014-02-17 02:18 - 04823980 _____ () C:\Users\GEORG\Downloads\1390940857imaginary-olympic-arena-and-ice-before-the-original-by-eha.rar
2014-02-17 01:49 - 2014-02-17 01:49 - 00215604 _____ () C:\Users\GEORG\Downloads\NHL-08_09-Import-Tools.rar
2014-02-17 00:49 - 2014-02-17 00:49 - 00214063 _____ () C:\Users\GEORG\Downloads\BHImport.rar
2014-02-16 23:10 - 2014-02-16 21:21 - 861605547 _____ () C:\Users\GEORG\Downloads\NHL-09-Megapatch-2013.exe
2014-02-16 22:54 - 2014-02-16 22:54 - 00178800 _____ (Sony DADC Austria AG.) C:\Windows\SysWOW64\CmdLineExt_x64.dll
2014-02-16 21:25 - 2013-08-27 22:37 - 00000000 ____D () C:\Users\GEORG\Downloads\NHL® 09
2014-02-16 21:12 - 2014-01-16 21:30 - 00000000 ____D () C:\Users\GEORG\Desktop\HRY
2014-02-16 15:56 - 2014-02-16 15:56 - 00056645 _____ () C:\Users\GEORG\Downloads\BigGUI.rar
2014-02-16 15:41 - 2014-02-16 15:41 - 00274245 _____ () C:\Users\GEORG\Downloads\1389117996new_ingame_graphics_by_eha.rar
2014-02-16 14:57 - 2014-02-16 14:57 - 00627156 _____ () C:\Users\GEORG\Downloads\FshX_Vista_Installer.exe
2014-02-16 12:42 - 2014-02-16 12:42 - 00900467 _____ () C:\Users\GEORG\Downloads\Torf template 08 by zwitter v2.rar
2014-02-16 12:38 - 2014-02-16 12:38 - 10128608 _____ () C:\Users\GEORG\Downloads\Mohnatiy's-template-jerseys.rar
2014-02-16 10:10 - 2013-04-23 16:20 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 02:31 - 2014-02-15 02:12 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Spotify
2014-02-15 02:31 - 2014-02-15 02:02 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Spotify
2014-02-15 02:18 - 2014-02-15 02:02 - 00000000 ____D () C:\Program Files (x86)\Spotify
2014-02-15 02:12 - 2014-02-15 02:12 - 00001791 _____ () C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk
2014-02-15 00:41 - 2014-02-15 00:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 14:44 - 2014-02-14 14:44 - 00303048 _____ () C:\Users\GEORG\Downloads\NHL 14.zip
2014-02-14 10:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\sk-SK
2014-02-14 02:04 - 2014-02-14 02:04 - 00000000 ____D () C:\Windows\SysWOW64\Garmin
2014-02-14 02:04 - 2014-02-14 02:04 - 00000000 _____ () C:\Windows\SysWOW64\shoF38A.tmp
2014-02-13 19:13 - 2014-02-13 18:34 - 865888141 _____ () C:\Users\GEORG\Downloads\ELH14_v1a.rar
2014-02-13 15:53 - 2014-01-26 22:36 - 00000000 ____D () C:\ProgramData\Skype
2014-02-13 02:10 - 2014-02-13 02:10 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\SynthMaker
2014-02-13 01:56 - 2014-02-13 01:56 - 00000000 ____D () C:\ProgramData\Antares
2014-02-13 01:56 - 2013-05-22 21:34 - 00000000 ____D () C:\Program Files (x86)\Antares Audio Technologies
2014-02-13 01:56 - 2013-05-21 17:24 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2014-02-13 01:50 - 2012-01-31 08:34 - 00000000 ___HD () C:\Users\GEORG\AppData\Local\H4ilJAN9Rvcr
2014-02-13 01:41 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Setup
2014-02-13 01:39 - 2014-02-11 13:52 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Clickteam
2014-02-13 01:33 - 2010-08-18 19:57 - 00000000 ____D () C:\ProgramData\Symantec
2014-02-13 01:32 - 2014-01-16 10:22 - 00000000 ____D () C:\Program Files (x86)\PhotoRescue PC
2014-02-13 01:30 - 2014-02-13 01:24 - 00000000 ____D () C:\Users\GEORG\AppData\Roaming\Shareaza
2014-02-13 01:26 - 2014-01-22 21:53 - 00000000 ____D () C:\Users\GEORG\Downloads\ReFX Nexus v3.3 Team Air VSTi
2014-02-13 01:26 - 2014-01-20 11:01 - 00000000 ____D () C:\Users\GEORG\Downloads\Refx Nexus v2.3.2
2014-02-13 01:26 - 2014-01-20 01:06 - 00000000 ____D () C:\Users\GEORG\Downloads\ReFX Nexus 2.3.4 (Team ULTiMATE and Metonator)
2014-02-13 01:26 - 2014-01-18 10:57 - 00000000 ____D () C:\Users\GEORG\Downloads\ReFX.Nexus.All.Expansions.All.Skins.COMPLETE PACK
2014-02-13 01:26 - 2013-07-25 08:12 - 00000000 ____D () C:\Users\GEORG\Downloads\Adobe Premiere Pro CS6 6.0.0 LS7 Multilanguage [ChingLiu]
2014-02-13 01:26 - 2013-05-22 21:17 - 00000000 ____D () C:\Users\GEORG\Downloads\BitTorrent-Kaskade-FreaksOfNature-Preview
2014-02-13 01:24 - 2014-02-13 01:24 - 00000000 ____D () C:\Users\GEORG\AppData\Local\Shareaza
2014-02-13 01:18 - 2014-02-13 01:18 - 11370931 _____ (Shareaza Development Team ) C:\Users\GEORG\Downloads\Shareaza_2.7.1.0_Win32.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 00:41 - 2014-02-13 00:41 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-13 00:41 - 2013-10-21 13:20 - 00000000 ____D () C:\ProgramData\Oracle
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-13 11:53
==================== End Of Log ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Kontróla logu FRST
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: Kontróla logu FRST
Zdravim 
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.
Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner a ulozte ho na plochu.Ukoncete vsechny programy, jinak to AdwCleaner udela za vas.
Kliknete na nej pravym mysidlem a levym na Spustit jako spravce.
Kliknete na Scan a pockejte, az kontrola dobehne.
Pak kliknete na Clean
Program zacne pracovat (muze dojit k restartu pc) a vyplivne log (pripadne bude zde C:\AdwCleaner\AdwCleaner [S?].txt ). Ten mi sem zkopirujte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Tady je log
# AdwCleaner v3.022 - Report created 16/03/2014 at 11:00:55
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : GEORG - GEORG-HP
# Running from : C:\Users\GEORG\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\Conduit
Folder Deleted : C:\ProgramData\uniblue
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\DivX_Browser_Bar
Folder Deleted : C:\Users\GEORG\AppData\Local\Conduit
Folder Deleted : C:\Users\GEORG\AppData\Local\genienext
Folder Deleted : C:\Users\GEORG\AppData\Local\Mobogenie
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\DivX_Browser_Bar
Folder Deleted : C:\Users\GEORG\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\GEORG\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\GEORG\Documents\Mobogenie
Folder Deleted : C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Smartbar
Folder Deleted : C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
File Deleted : C:\END
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0EEDB912-C5FA-486F-8334-57288578C627}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{77E8143B-6759-416E-B521-82CFED75150B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{77E8143B-6759-416E-B521-82CFED75150B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DD937C23-9304-4E9E-9FD3-0E00B88E2C2E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F23E8864-DDAA-438C-B4F6-0B157508802E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{06CC060B-9739-4816-A801-CAFDEA892186}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{77E8143B-6759-416E-B521-82CFED75150B}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{77E8143B-6759-416E-B521-82CFED75150B}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{77E8143B-6759-416E-B521-82CFED75150B}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\DivX_Browser_Bar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\DivX_Browser_Bar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
-\\ Mozilla Firefox v27.0.1 (sk)
[ File : C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\prefs.js ]
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_converterVersion.enc", "OS4yLjAuMTY=");
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_lastTimeUpdateChecked.enc", -1035799267);
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_playerVersion.enc", "MTEuMC4xLjU4");
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_streamerVersion.enc", "MS4yLjEuMjc=");
Line Deleted : user_pref("CT3288691.FirstTime", "true");
Line Deleted : user_pref("CT3288691.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3288691.UserID", "UN75140567024071221");
Line Deleted : user_pref("CT3288691.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3288691.autoDisableScopes", -1);
Line Deleted : user_pref("CT3288691.countryCode", "SK");
Line Deleted : user_pref("CT3288691.defaultSearch", "false");
Line Deleted : user_pref("CT3288691.enableAlerts", "true");
Line Deleted : user_pref("CT3288691.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3288691.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3288691.fixUrls", true);
Line Deleted : user_pref("CT3288691.fullUserID", "UN75140567024071221.IN.20130801004300");
Line Deleted : user_pref("CT3288691.installId", "stub.exe");
Line Deleted : user_pref("CT3288691.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3288691.installUsage", "2013-08-02T01:33:24.2035542+03:00");
Line Deleted : user_pref("CT3288691.installUsageEarly", "2013-08-02T01:33:19.6951913+03:00");
Line Deleted : user_pref("CT3288691.installerVersion", "1.5.4.5");
Line Deleted : user_pref("CT3288691.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3288691.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3288691.lastVersion", "10.19.2.505");
Line Deleted : user_pref("CT3288691.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3288691.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3288691.openThankYouPage", "false");
Line Deleted : user_pref("CT3288691.openUninstallPage", "true");
Line Deleted : user_pref("CT3288691.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3288691.search.searchAppId", "10000002");
Line Deleted : user_pref("CT3288691.search.searchCount", "2");
Line Deleted : user_pref("CT3288691.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3288691.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3288691.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3288691.serviceLayer_services_Configuration_lastUpdate", "1377587553103");
Line Deleted : user_pref("CT3288691.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1377165464958");
Line Deleted : user_pref("CT3288691.serviceLayer_services_appsMetadata_lastUpdate", "1377648697996");
Line Deleted : user_pref("CT3288691.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1376649980744");
Line Deleted : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1375396397551");
Line Deleted : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1375396402765");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.16.9.506_lastUpdate", "1376985421719");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.16.9.6_lastUpdate", "1375396408657");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.19.2.505_lastUpdate", "1377636276838");
Line Deleted : user_pref("CT3288691.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1376649981838");
Line Deleted : user_pref("CT3288691.serviceLayer_services_searchAPI_lastUpdate", "1377587553087");
Line Deleted : user_pref("CT3288691.serviceLayer_services_serviceMap_lastUpdate", "1377587552916");
Line Deleted : user_pref("CT3288691.serviceLayer_services_toolbarContextMenu_lastUpdate", "1376649981641");
Line Deleted : user_pref("CT3288691.serviceLayer_services_toolbarSettings_lastUpdate", "1377648697933");
Line Deleted : user_pref("CT3288691.serviceLayer_services_translation_lastUpdate", "1377587553464");
Line Deleted : user_pref("CT3288691.settingsINI", true);
Line Deleted : user_pref("CT3288691.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3288691.showToolbarPermission", "false");
Line Deleted : user_pref("CT3288691.smartbar.CTID", "CT3288691");
Line Deleted : user_pref("CT3288691.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3288691.smartbar.toolbarName", "DivX Browser Bar ");
Line Deleted : user_pref("CT3288691.startPage", "false");
Line Deleted : user_pref("CT3288691.toolbarBornServerTime", "2-8-2013");
Line Deleted : user_pref("CT3288691.toolbarCurrentServerTime", "27-8-2013");
Line Deleted : user_pref("CT3288691.toolbarLoginClientTime", "Fri Aug 02 2013 00:33:28 GMT+0200");
Line Deleted : user_pref("CT3288691.versionFromInstaller", "10.16.9.6");
Line Deleted : user_pref("CT3288691.xpeMode", "3");
Line Deleted : user_pref("smartbar.machineId", "XQV+ZOYEUVZO2KZGBGCCIGJ6QSPCJVOGKBF6OA0ICFYAALXNB9/2U/O3BBKAW1KUFTY4XIYYQUPYZKPNHTUVLW");
-\\ Google Chrome v33.0.1750.146
[ File : C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [10509 octets] - [16/03/2014 10:58:26]
AdwCleaner[S0].txt - [10445 octets] - [16/03/2014 11:00:55]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10506 octets] ##########
# AdwCleaner v3.022 - Report created 16/03/2014 at 11:00:55
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : GEORG - GEORG-HP
# Running from : C:\Users\GEORG\Downloads\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\Conduit
Folder Deleted : C:\ProgramData\uniblue
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\DivX_Browser_Bar
Folder Deleted : C:\Users\GEORG\AppData\Local\Conduit
Folder Deleted : C:\Users\GEORG\AppData\Local\genienext
Folder Deleted : C:\Users\GEORG\AppData\Local\Mobogenie
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\boost_interprocess
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\GEORG\AppData\LocalLow\DivX_Browser_Bar
Folder Deleted : C:\Users\GEORG\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\GEORG\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\GEORG\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mobogenie
Folder Deleted : C:\Users\GEORG\Documents\Mobogenie
Folder Deleted : C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\Smartbar
Folder Deleted : C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
File Deleted : C:\END
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Google\Chrome\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\adawarebp_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{0EEDB912-C5FA-486F-8334-57288578C627}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0EEDB912-C5FA-486F-8334-57288578C627}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{77E8143B-6759-416E-B521-82CFED75150B}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{77E8143B-6759-416E-B521-82CFED75150B}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{DD937C23-9304-4E9E-9FD3-0E00B88E2C2E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F23E8864-DDAA-438C-B4F6-0B157508802E}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{06CC060B-9739-4816-A801-CAFDEA892186}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{77E8143B-6759-416E-B521-82CFED75150B}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{77E8143B-6759-416E-B521-82CFED75150B}]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks [{77E8143B-6759-416E-B521-82CFED75150B}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\AppDataLow\Software\DivX_Browser_Bar
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\DivX_Browser_Bar
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mobogenie
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Toolbar Cleaner
Key Deleted : [x64] HKLM\SOFTWARE\DivX\Install\Setup\WizardLayout\ConduitToolbar
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16521
-\\ Mozilla Firefox v27.0.1 (sk)
[ File : C:\Users\GEORG\AppData\Roaming\Mozilla\Firefox\Profiles\irgmabgw.default\prefs.js ]
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_converterVersion.enc", "OS4yLjAuMTY=");
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_lastTimeUpdateChecked.enc", -1035799267);
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_playerVersion.enc", "MTEuMC4xLjU4");
Line Deleted : user_pref("CT3288691.CONDUIT_UPDATE_streamerVersion.enc", "MS4yLjEuMjc=");
Line Deleted : user_pref("CT3288691.FirstTime", "true");
Line Deleted : user_pref("CT3288691.FirstTimeFF3", "true");
Line Deleted : user_pref("CT3288691.UserID", "UN75140567024071221");
Line Deleted : user_pref("CT3288691.addressBarTakeOverEnabledInHidden", "true");
Line Deleted : user_pref("CT3288691.autoDisableScopes", -1);
Line Deleted : user_pref("CT3288691.countryCode", "SK");
Line Deleted : user_pref("CT3288691.defaultSearch", "false");
Line Deleted : user_pref("CT3288691.enableAlerts", "true");
Line Deleted : user_pref("CT3288691.enableSearchFromAddressBar", "true");
Line Deleted : user_pref("CT3288691.firstTimeDialogOpened", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundError", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundErrorByUser", "true");
Line Deleted : user_pref("CT3288691.fixPageNotFoundErrorInHidden", "true");
Line Deleted : user_pref("CT3288691.fixUrls", true);
Line Deleted : user_pref("CT3288691.fullUserID", "UN75140567024071221.IN.20130801004300");
Line Deleted : user_pref("CT3288691.installId", "stub.exe");
Line Deleted : user_pref("CT3288691.installType", "conduitnsisintegration");
Line Deleted : user_pref("CT3288691.installUsage", "2013-08-02T01:33:24.2035542+03:00");
Line Deleted : user_pref("CT3288691.installUsageEarly", "2013-08-02T01:33:19.6951913+03:00");
Line Deleted : user_pref("CT3288691.installerVersion", "1.5.4.5");
Line Deleted : user_pref("CT3288691.isCheckedStartAsHidden", true);
Line Deleted : user_pref("CT3288691.isFirstTimeToolbarLoading", "false");
Line Deleted : user_pref("CT3288691.lastVersion", "10.19.2.505");
Line Deleted : user_pref("CT3288691.mam_gk_installer_preapproved.enc", "dHJ1ZQ==");
Line Deleted : user_pref("CT3288691.migrateAppsAndComponents", true);
Line Deleted : user_pref("CT3288691.openThankYouPage", "false");
Line Deleted : user_pref("CT3288691.openUninstallPage", "true");
Line Deleted : user_pref("CT3288691.revertSettingsEnabled", "false");
Line Deleted : user_pref("CT3288691.search.searchAppId", "10000002");
Line Deleted : user_pref("CT3288691.search.searchCount", "2");
Line Deleted : user_pref("CT3288691.searchInNewTabEnabledByUser", "false");
Line Deleted : user_pref("CT3288691.searchInNewTabEnabledInHidden", "true");
Line Deleted : user_pref("CT3288691.searchSuggestEnabledByUser", "true");
Line Deleted : user_pref("CT3288691.serviceLayer_services_Configuration_lastUpdate", "1377587553103");
Line Deleted : user_pref("CT3288691.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1377165464958");
Line Deleted : user_pref("CT3288691.serviceLayer_services_appsMetadata_lastUpdate", "1377648697996");
Line Deleted : user_pref("CT3288691.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1376649980744");
Line Deleted : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1375396397551");
Line Deleted : user_pref("CT3288691.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1375396402765");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.16.9.506_lastUpdate", "1376985421719");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.16.9.6_lastUpdate", "1375396408657");
Line Deleted : user_pref("CT3288691.serviceLayer_services_login_10.19.2.505_lastUpdate", "1377636276838");
Line Deleted : user_pref("CT3288691.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1376649981838");
Line Deleted : user_pref("CT3288691.serviceLayer_services_searchAPI_lastUpdate", "1377587553087");
Line Deleted : user_pref("CT3288691.serviceLayer_services_serviceMap_lastUpdate", "1377587552916");
Line Deleted : user_pref("CT3288691.serviceLayer_services_toolbarContextMenu_lastUpdate", "1376649981641");
Line Deleted : user_pref("CT3288691.serviceLayer_services_toolbarSettings_lastUpdate", "1377648697933");
Line Deleted : user_pref("CT3288691.serviceLayer_services_translation_lastUpdate", "1377587553464");
Line Deleted : user_pref("CT3288691.settingsINI", true);
Line Deleted : user_pref("CT3288691.shouldFirstTimeDialog", "false");
Line Deleted : user_pref("CT3288691.showToolbarPermission", "false");
Line Deleted : user_pref("CT3288691.smartbar.CTID", "CT3288691");
Line Deleted : user_pref("CT3288691.smartbar.Uninstall", "0");
Line Deleted : user_pref("CT3288691.smartbar.toolbarName", "DivX Browser Bar ");
Line Deleted : user_pref("CT3288691.startPage", "false");
Line Deleted : user_pref("CT3288691.toolbarBornServerTime", "2-8-2013");
Line Deleted : user_pref("CT3288691.toolbarCurrentServerTime", "27-8-2013");
Line Deleted : user_pref("CT3288691.toolbarLoginClientTime", "Fri Aug 02 2013 00:33:28 GMT+0200");
Line Deleted : user_pref("CT3288691.versionFromInstaller", "10.16.9.6");
Line Deleted : user_pref("CT3288691.xpeMode", "3");
Line Deleted : user_pref("smartbar.machineId", "XQV+ZOYEUVZO2KZGBGCCIGJ6QSPCJVOGKBF6OA0ICFYAALXNB9/2U/O3BBKAW1KUFTY4XIYYQUPYZKPNHTUVLW");
-\\ Google Chrome v33.0.1750.146
[ File : C:\Users\GEORG\AppData\Local\Google\Chrome\User Data\Default\preferences ]
*************************
AdwCleaner[R0].txt - [10509 octets] - [16/03/2014 10:58:26]
AdwCleaner[S0].txt - [10445 octets] - [16/03/2014 11:00:55]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [10506 octets] ##########
Re: Kontróla logu FRST
Udelejte !!!kompletni!!! kontrolu s MBAM http://forum.viry.cz/viewtopic.php?f=29&t=115222 a dejte sem vysledky. Predem nic nemazte, miva obcas falesne detekcePokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Kontrola konečne dokončená log tady:
Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org
Verzia databázy: v2014.03.16.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
GEORG :: GEORG-HP [administrátor]
Ochrana: Zapnuté
16. 3. 2014 11:32:01
MBAM-log-2014-03-16 (14-25-33).txt
Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 524886
Uplynutý čas: 2 hod, 21 min, 10 sek
Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)
Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)
Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)
Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)
Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)
Detegované priečinky: 0
(Škodlivé položky neboli zistené)
Detegované súbory: 2
C:\AdwCleaner\Quarantine\C\Users\GEORG\AppData\Local\Conduit\CT3288691\DivX_Browser_BarAutoUpdateHelper.exe.vir (PUP.Optional.Conduit.A) -> Žiadna úloha nevykonaná.
C:\Program Files\Adobe\Adobe Photoshop CS6 (64 Bit)\amtlib.dll (PUP.RiskwareTool.CK) -> Žiadna úloha nevykonaná.
(koniec)
Malwarebytes Anti-Malware (Skúšobná verzia) 1.75.0.1300
www.malwarebytes.org
Verzia databázy: v2014.03.16.02
Windows 7 Service Pack 1 x64 NTFS
Internet Explorer 11.0.9600.16521
GEORG :: GEORG-HP [administrátor]
Ochrana: Zapnuté
16. 3. 2014 11:32:01
MBAM-log-2014-03-16 (14-25-33).txt
Typ kontroly: Úplná kontrola (C:\|)
Možnosti kontroly zapnuté: Pamäť | Po spustení | Registre | Systémové súbory | Heuristika/Extra | Heuristika/Shuriken | PUP | PUM
Možnosti kontroly vypnuté: P2P
Objektov kontrolovaných: 524886
Uplynutý čas: 2 hod, 21 min, 10 sek
Detegované služby pamäte: 0
(Škodlivé položky neboli zistené)
Detegované moduly pamäte: 0
(Škodlivé položky neboli zistené)
Detegované registračné kľúče: 0
(Škodlivé položky neboli zistené)
Detegované registračné hodnoty: 0
(Škodlivé položky neboli zistené)
Detegované položky registračných dát: 0
(Škodlivé položky neboli zistené)
Detegované priečinky: 0
(Škodlivé položky neboli zistené)
Detegované súbory: 2
C:\AdwCleaner\Quarantine\C\Users\GEORG\AppData\Local\Conduit\CT3288691\DivX_Browser_BarAutoUpdateHelper.exe.vir (PUP.Optional.Conduit.A) -> Žiadna úloha nevykonaná.
C:\Program Files\Adobe\Adobe Photoshop CS6 (64 Bit)\amtlib.dll (PUP.RiskwareTool.CK) -> Žiadna úloha nevykonaná.
(koniec)
Re: Kontróla logu FRST
Nalezy nechte odstranit, pak MBAM odinstalujte.
Jestli bude Avast rvat, ze to chce otevrit v sandboxu, nedovolte to! Vyberte moznost Otevrit normalne Stahnete RogueKiller http://www.sur-la-toile.com/RogueKiller/RogueKiller.exe , ulozte ho na plochu, kliknete na nej pravym mysidlem a levym na Spustit jako spravce.Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Zprava a objevi se log. Ten mi sem vlozte
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Prikladám log z rogue killer :
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Kontrola -- Dátum : 03/16/2014 21:21:48
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 5 ¤¤¤
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (localhost:21320 [Country: (Private Address) (XX), City: (Private Address)]) -> NÁJDENÉ
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ
[BROK VAL] HKCR\[...]\command : () -> CHÝBA
¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] HPSA Upgrade : C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [7] -> NÁJDENÉ
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Browser Addons : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS725050A9A364 ATA Device +++++
--- User ---
[MBR] eab64ce156fa6a921403af9492d2fca1
[BSP] 54ce22fcdd304a1d18b4ca3bcae3ad65 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 455612 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 933502976 | Size: 21024 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončené : << RKreport[0]_S_03162014_212148.txt >>
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Kontrola -- Dátum : 03/16/2014 21:21:48
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 5 ¤¤¤
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (localhost:21320 [Country: (Private Address) (XX), City: (Private Address)]) -> NÁJDENÉ
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NÁJDENÉ
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NÁJDENÉ
[BROK VAL] HKCR\[...]\command : () -> CHÝBA
¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] HPSA Upgrade : C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [7] -> NÁJDENÉ
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Browser Addons : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS725050A9A364 ATA Device +++++
--- User ---
[MBR] eab64ce156fa6a921403af9492d2fca1
[BSP] 54ce22fcdd304a1d18b4ca3bcae3ad65 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 455612 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 933502976 | Size: 21024 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončené : << RKreport[0]_S_03162014_212148.txt >>
Re: Kontróla logu FRST
Proxy tam mate schvalne?
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (localhost:21320 [Country: (Private Address) (XX), City: (Private Address)]) -> NÁJDENÉ
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NÁJDENÉ
Znovu spustte RogueKiller jako spravce (pokud jste ho jeste nezavrel/a, rovnou kliknete na napis Smazat)Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete na napis Smazat.
Pak kliknete na napis Zprava a objevi se log. Ten mi sem vlozte.
Pak kliknete na napis Oprava Host a Zprava.
Objevi se dalsi log. I ten mi sem vlozte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Co sa týka tých proxy tak nic také jsem si tam nedával. Maximálne tak neaké povolení pro Adobe.
Log č. 1 :
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Odebrať -- Dátum : 03/17/2014 12:12:56
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[BROK VAL] HKCR\[...]\command : () -> Vytvorené ("%1" %*)
¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] HPSA Upgrade : C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [7] -> VYMAZANÉ
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Browser Addons : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS725050A9A364 ATA Device +++++
--- User ---
[MBR] eab64ce156fa6a921403af9492d2fca1
[BSP] 54ce22fcdd304a1d18b4ca3bcae3ad65 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 455612 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 933502976 | Size: 21024 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončené : << RKreport[0]_D_03172014_121256.txt >>
RKreport[0]_S_03162014_212148.txt;RKreport[0]_S_03172014_121149.txt
________________________________________________________________________________________________________________
LOG č.2 :
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Oprava HOSTS -- Dátum : 03/17/2014 12:18:37
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 0 ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost
Dokončené : << RKreport[0]_H_03172014_121837.txt >>
RKreport[0]_D_03172014_121256.txt;RKreport[0]_S_03162014_212148.txt;RKreport[0]_S_03172014_121149.txt
Log č. 1 :
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Odebrať -- Dátum : 03/17/2014 12:12:56
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 3 ¤¤¤
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> NAHRADENÉ (0)
[HJ DESK][PUM] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> NAHRADENÉ (0)
[BROK VAL] HKCR\[...]\command : () -> Vytvorené ("%1" %*)
¤¤¤ naplánované úlohy : 1 ¤¤¤
[V2][SUSP PATH] HPSA Upgrade : C:\ProgramData\Hewlett-Packard\HPSAUpgrade3\HpSAUpgrade.exe [7] -> VYMAZANÉ
¤¤¤ spustenie položky : 0 ¤¤¤
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Browser Addons : 0 ¤¤¤
¤¤¤ Zvláštne súbory / Adresáre: ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Kontrola MBR: ¤¤¤
+++++ PhysicalDrive0: (\\.\PHYSICALDRIVE0 @ IDE) Hitachi HTS725050A9A364 ATA Device +++++
--- User ---
[MBR] eab64ce156fa6a921403af9492d2fca1
[BSP] 54ce22fcdd304a1d18b4ca3bcae3ad65 : Windows Vista/7/8 MBR Code
Partition table:
0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 2048 | Size: 199 Mo
1 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 409600 | Size: 455612 Mo
2 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 933502976 | Size: 21024 Mo
3 - [XXXXXX] FAT32-LBA (0x0c) [VISIBLE] Offset (sectors): 976560128 | Size: 103 Mo
User = LL1 ... OK!
User = LL2 ... OK!
Dokončené : << RKreport[0]_D_03172014_121256.txt >>
RKreport[0]_S_03162014_212148.txt;RKreport[0]_S_03172014_121149.txt
________________________________________________________________________________________________________________
LOG č.2 :
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Oprava HOSTS -- Dátum : 03/17/2014 12:18:37
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 0 ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
¤¤¤ Súbor HOSTS: ¤¤¤
--> %SystemRoot%\System32\drivers\etc\hosts
127.0.0.1 3dns-1.adobe.com 3dns-2.adobe.com 3dns-3.adobe.com 3dns-4.adobe.com 3dns.adobe.com activate-sea.adobe.com activate-sjc0.adobe.com activate.adobe.com activate.wip.adobe.com activate.wip1.adobe.com activate.wip2.adobe.com activate.wip3.adobe.com activate.wip4.adobe.com adobe-dns-1.adobe.com adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com adobe-dns-4.adobe.com adobe-dns.adobe.com adobeereg.com crl.verisign.net ereg.adobe.com ereg.wip.adobe.com ereg.wip1.adobe.com ereg.wip2.adobe.com ereg.wip3.adobe.com ereg.wip4.adobe.com hl2rcv.adobe.com ood.opsource.net practivate.adobe practivate.adobe.com
127.0.0.1 practivate.adobe.ipp practivate.adobe.newoa practivate.adobe.ntp wip.adobe.com wip1.adobe.com wip2.adobe.com wip3.adobe.com wip4.adobe.com wwis-dubc1-vip60.adobe.com www.adobeereg.com www.wip.adobe.com www.wip1.adobe.com www.wip2.adobe.com www.wip3.adobe.com www.wip4.adobe.com
¤¤¤ Resetovaný HOSTS: ¤¤¤
127.0.0.1 localhost
Dokončené : << RKreport[0]_H_03172014_121837.txt >>
RKreport[0]_D_03172014_121256.txt;RKreport[0]_S_03162014_212148.txt;RKreport[0]_S_03172014_121149.txt
Re: Kontróla logu FRST
Znovu spustte RogueKiller jako spravce Probehne kratoucky testik a pak se zpristupni vpravo nahore tlacitko Prohledat. Na to kliknete a probehne dalsi test.
Po dokonceni kliknete Oprava Proxy a Zprava
Objevi se log. Ten mi sem vlozte.
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Je možné že po tej kontrole a opravách sa mi vytvorilo na ploche Počítač a složka používatele?
tady je ten log:
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Oprava Proxy -- Dátum : 03/17/2014 13:42:37
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 2 ¤¤¤
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (localhost:21320 [Country: (Private Address) (XX), City: (Private Address)]) -> VYMAZANÉ
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NAHRADENÉ (0)
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
Dokončené : << RKreport[0]_PR_03172014_134237.txt >>
RKreport[0]_D_03172014_121256.txt;RKreport[0]_H_03172014_121837.txt;RKreport[0]_S_03162014_212148.txt
RKreport[0]_S_03172014_121149.txt;RKreport[0]_S_03172014_134208.txt
tady je ten log:
RogueKiller V8.8.11 [Mar 14 2014] by Adlice Software
mail : http://www.adlice.com/contact/
Feedback : http://forum.adlice.com
Webové stránky : http://www.adlice.com/softwares/roguekiller/
Blog : http://www.adlice.com
Operačný systém : Windows 7 (6.1.7601 Service Pack 1) 64 bits version
Spustené v : Normálny režim
Užívateľ : GEORG [Práva Správcu]
Režim : Oprava Proxy -- Dátum : 03/17/2014 13:42:37
| ARK || FAK || MBR |
¤¤¤ Škodlivé procesy : 0 ¤¤¤
¤¤¤ Záznamy Registrov : 2 ¤¤¤
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyServer (localhost:21320 [Country: (Private Address) (XX), City: (Private Address)]) -> VYMAZANÉ
[PROXY IE][PUM] HKCU\[...]\Internet Settings : ProxyEnable (1) -> NAHRADENÉ (0)
¤¤¤ webové prehliadače : 0 ¤¤¤
¤¤¤ Ovládač : [NENAHRATÉ 0x0] ¤¤¤
¤¤¤ Vonkajšie Hives: ¤¤¤
¤¤¤ Nákaza : ¤¤¤
Dokončené : << RKreport[0]_PR_03172014_134237.txt >>
RKreport[0]_D_03172014_121256.txt;RKreport[0]_H_03172014_121837.txt;RKreport[0]_S_03162014_212148.txt
RKreport[0]_S_03172014_121149.txt;RKreport[0]_S_03172014_134208.txt
Re: Kontróla logu FRST
Je to mozne, program to dava do vychoziho nastaveni. Vite jak ty ikony skryt, nebo chcete navod?
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=30&t=130787
Dejte log z RSIT http://forum.viry.cz/viewtopic.php?f=30&t=130787
Pokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
Nebyl sem si tím jist návod netřeba .
Prikladám log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by GEORG at 2014-03-17 21:01:49
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 215 GB (47%) free of 456 GB
Total RAM: 3323 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:02:00, on 17. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera_crashreporter.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files\trend micro\GEORG.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?sourc ... 51A3696AFB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.katasterportal.sk
O15 - Trusted IP range: http://195.28.70.134
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://78.41.175.170/activex/AMC.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 12007 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 31200016
\??\C:\Windows\system32\conhost.exe "14144606844012230201487265756-11454168516885850151065047171-703700483-975211533
C:\Windows\System32\spoolsv.exe
taskeng.exe {F72B7DE3-F887-44BA-A6FB-5D7A88CED9A0}
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\BBSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3416
"taskhost.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\wdm\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher /crash-reporter-parent-id=6024
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=gpu-process --channel="6024.0.1668800848\2013533636" --crash-reporter-pid=5708 --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27 --gpu-vendor-id=0x1002 --gpu-device-id=0x9712 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.712.1.2000 --crash-reporter-pid=5708 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=sk --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=5708 --channel="6024.3.1346735254\549157519" /prefetch:673131151
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=sk --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=5708 --channel="6024.4.1653143695\1006448088" /prefetch:673131151
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe"
C:\Windows\system32\sppsvc.exe
"C:\Users\GEORG\Desktop\RSITx64.exe"
taskhost.exe $(Arg0)
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForGEORG.job
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-09 487424]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
""= []
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [2014-01-23 4114264]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPWirelessAssistant]
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu]
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-16 98304]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-05-16 3830224]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-02 3767096]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-08-18 52920]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-03-17 21:01:50 ----D---- C:\Program Files\trend micro
2014-03-17 21:01:49 ----D---- C:\rsit
2014-03-16 11:28:57 ----D---- C:\Users\GEORG\AppData\Roaming\Malwarebytes
2014-03-16 11:28:41 ----D---- C:\ProgramData\Malwarebytes
2014-03-16 11:08:20 ----D---- C:\ProgramData\boost_interprocess
2014-03-16 10:58:21 ----D---- C:\AdwCleaner
2014-03-15 12:15:30 ----D---- C:\FRST
2014-03-14 22:17:40 ----D---- C:\Program Files\iPod
2014-03-14 22:17:38 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:17:38 ----D---- C:\Program Files\iTunes
2014-03-14 22:17:38 ----D---- C:\Program Files (x86)\iTunes
2014-03-14 22:11:06 ----D---- C:\Program Files (x86)\QuickTime
2014-03-13 21:43:19 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-13 21:42:52 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-13 21:42:52 ----A---- C:\Windows\system32\wer.dll
2014-03-13 21:42:24 ----A---- C:\Windows\system32\win32k.sys
2014-03-13 21:42:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 21:42:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-13 21:42:13 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-13 21:42:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\urlmon.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\iernonce.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-13 21:42:11 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-13 21:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-13 21:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-13 21:42:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-13 21:42:08 ----A---- C:\Windows\system32\iesetup.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-13 21:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-13 21:42:04 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-13 21:42:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-13 21:42:00 ----A---- C:\Windows\system32\jscript9.dll
2014-03-13 21:42:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-13 21:41:59 ----A---- C:\Windows\system32\wininet.dll
2014-03-13 21:41:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 21:41:58 ----A---- C:\Windows\system32\msrating.dll
2014-03-13 21:41:57 ----A---- C:\Windows\system32\mshtml.dll
2014-03-13 21:40:36 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-13 21:40:36 ----A---- C:\Windows\system32\qedit.dll
2014-03-13 21:40:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-13 21:40:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-07 01:52:52 ----A---- C:\Windows\SYSWOW64\sho76BA.tmp
2014-03-05 08:44:42 ----D---- C:\Program Files (x86)\EMCO
2014-03-05 07:58:46 ----D---- C:\Users\GEORG\AppData\Roaming\Lavasoft
2014-03-05 07:41:50 ----D---- C:\Program Files\Lavasoft
2014-03-05 07:40:26 ----D---- C:\Program Files\Common Files\Lavasoft
2014-02-25 18:04:18 ----D---- C:\Windows\Migration
2014-02-24 21:57:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-02-24 21:57:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-02-24 21:57:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-02-24 21:56:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-02-24 21:56:40 ----D---- C:\ProgramData\EA Core
2014-02-24 21:56:39 ----D---- C:\ProgramData\Electronic Arts
2014-02-24 21:56:39 ----D---- C:\ProgramData\EA Logs
2014-02-24 21:31:07 ----D---- C:\Program Files (x86)\Need for Speed The Run
2014-02-22 20:51:57 ----D---- C:\NHL 09
2014-02-22 11:28:25 ----D---- C:\Program Files (x86)\PCSX2 1.2.1
2014-02-21 21:53:14 ----A---- C:\Windows\system32\drivers\scdemu.sys
2014-02-21 21:53:13 ----D---- C:\Program Files (x86)\PowerISO
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-02-21 00:26:29 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-02-21 00:26:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-02-21 00:26:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-21 00:26:27 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-02-21 00:26:11 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-02-21 00:26:11 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-02-21 00:26:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-02-21 00:26:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-02-21 00:25:53 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-02-21 00:25:53 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-02-21 00:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-02-21 00:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-02-21 00:25:23 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-02-21 00:25:23 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-02-21 00:25:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-02-21 00:25:15 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-02-21 00:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-02-21 00:25:04 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-02-21 00:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-02-21 00:25:02 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-02-21 00:20:17 ----HD---- C:\Windows\msdownld.tmp
2014-02-21 00:20:14 ----D---- C:\Windows\SYSWOW64\directx
2014-02-19 23:28:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-02-19 23:28:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-02-19 23:28:39 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-02-19 23:28:39 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-02-19 23:28:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-02-19 23:28:35 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-02-19 22:46:04 ----D---- C:\Users\GEORG\AppData\Roaming\2K Sports
======List of files/folders modified in the last 1 months======
2014-03-17 21:01:50 ----RD---- C:\Program Files
2014-03-17 21:01:30 ----D---- C:\Windows\Temp
2014-03-17 20:58:49 ----D---- C:\Windows\system32\config
2014-03-17 18:46:22 ----D---- C:\Users\GEORG\AppData\Roaming\SoftGrid Client
2014-03-17 13:42:05 ----D---- C:\Windows\system32\drivers
2014-03-16 21:17:58 ----D---- C:\Program Files (x86)
2014-03-16 20:28:08 ----D---- C:\Windows\inf
2014-03-16 17:04:50 ----D---- C:\Windows
2014-03-16 17:04:32 ----D---- C:\Windows\System32
2014-03-16 15:06:41 ----D---- C:\Users\GEORG\AppData\Roaming\uTorrent
2014-03-16 15:05:55 ----D---- C:\Windows\Logs
2014-03-16 12:12:38 ----D---- C:\Program Files (x86)\VstPlugins
2014-03-16 12:03:30 ----SHD---- C:\Windows\Installer
2014-03-16 11:28:41 ----HD---- C:\ProgramData
2014-03-15 17:05:35 ----D---- C:\Windows\system32\Tasks
2014-03-15 16:34:00 ----RSD---- C:\Windows\assembly
2014-03-15 16:32:04 ----SHD---- C:\System Volume Information
2014-03-15 15:07:31 ----D---- C:\ProgramData\Package Cache
2014-03-15 15:06:53 ----D---- C:\Windows\SysWOW64
2014-03-14 22:13:11 ----D---- C:\ProgramData\Apple
2014-03-14 10:14:15 ----D---- C:\Windows\winsxs
2014-03-14 10:09:23 ----D---- C:\Program Files\Internet Explorer
2014-03-14 10:09:23 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-14 10:09:15 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-14 10:09:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 01:39:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:39:42 ----D---- C:\Windows\system32\catroot
2014-03-13 21:39:28 ----D---- C:\Windows\system32\catroot2
2014-03-13 21:14:15 ----RD---- C:\Program Files (x86)\Skype
2014-03-13 11:35:30 ----D---- C:\Program Files (x86)\Opera
2014-03-13 10:25:15 ----D---- C:\Windows\Prefetch
2014-03-13 10:06:47 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-13 01:40:26 ----D---- C:\Windows\Tasks
2014-03-13 01:21:10 ----D---- C:\Windows\SoftwareDistribution
2014-03-10 23:03:21 ----D---- C:\SwSetup
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-TW
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-HK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-CN
2014-03-10 22:46:19 ----D---- C:\Windows\system32\tr-TR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\th-TH
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sv-SE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sl-SI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sk-SK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ru-RU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ro-RO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-PT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-BR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pl-PL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nl-NL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nb-NO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\lt-LT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ko-KR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ja-JP
2014-03-10 22:46:19 ----D---- C:\Windows\system32\it-IT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hu-HU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hr-HR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\he-IL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fr-FR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fi-FI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\et-EE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\es-ES
2014-03-10 22:46:19 ----D---- C:\Windows\system32\en-US
2014-03-10 22:46:19 ----D---- C:\Windows\system32\el-GR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\de-DE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\da-DK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\cs-CZ
2014-03-10 22:46:19 ----D---- C:\Windows\system32\bg-BG
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ar-SA
2014-03-10 22:45:41 ----D---- C:\Windows\system32\lv-LV
2014-03-10 22:45:16 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-03-10 22:35:38 ----D---- C:\Program Files (x86)\HP
2014-03-07 00:56:43 ----D---- C:\Users\GEORG\AppData\Roaming\Adobe
2014-03-07 00:48:07 ----D---- C:\Program Files\Common Files\Adobe
2014-03-07 00:37:18 ----D---- C:\Program Files (x86)\Adobe
2014-03-07 00:33:48 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-03-07 00:32:44 ----D---- C:\Program Files\Adobe
2014-03-07 00:25:33 ----RSD---- C:\Windows\Fonts
2014-03-05 07:40:26 ----D---- C:\Program Files\Common Files
2014-03-05 07:39:33 ----D---- C:\ProgramData\Lavasoft
2014-03-03 10:13:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-27 23:33:04 ----D---- C:\Program Files (x86)\Sony
2014-02-27 23:32:11 ----D---- C:\Users\GEORG\AppData\Roaming\Sony
2014-02-26 23:16:18 ----D---- C:\Windows\Microsoft.NET
2014-02-26 13:15:56 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-25 18:04:51 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-25 18:04:18 ----ASD---- C:\ProgramData\Microsoft
2014-02-24 21:59:40 ----D---- C:\Program Files (x86)\Common Files
2014-02-24 16:44:19 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-21 20:20:53 ----D---- C:\Windows\rescache
2014-02-20 17:18:02 ----D---- C:\Windows\system32\NDF
2014-02-18 13:46:51 ----D---- C:\Program Files (x86)\Counter-Strike 1.6 Non-Steam
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-31 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-31 207904]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 gfibto;gfibto; C:\Windows\system32\drivers\gfibto.sys [2013-05-27 14456]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [2011-03-15 912504]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-31 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-02 1038072]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-02 421704]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20130412.001\BHDrvx64.sys [2013-04-12 1390680]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-04-23 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20130423.001\IDSvia64.sys [2013-04-20 513184]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2011-11-15 125376]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [2011-04-21 386168]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-02 78648]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-16 6403584]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-16 188928]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-02 80184]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-10 342056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 gzflt;gzflt; \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [2013-07-17 138232]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-06-09 515584]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-04-23 174200]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 Trufos;Trufos; C:\Windows\system32\DRIVERS\Trufos.sys [2013-07-17 329800]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-16 6403584]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys []
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
S3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-01-23 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-01-23 27760]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\ENG64.SYS [2013-04-23 126192]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\EX64.SYS [2013-04-23 2087664]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-09 239136]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [2011-03-31 744568]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-16 202752]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-02 50344]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\BBSvc.exe [2014-02-27 193696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2013-11-08 250712]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-02-05 47416]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LavasoftAdAwareService11;Ad-Aware Service 11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [2014-01-23 702744]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2013-04-29 4233088]
R2 PaceLicenseDServices;PACE License Services; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-07-09 2932224]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-26 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-02-24 214520]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-05-16 1817560]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-05-15 171928]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-09 258048]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2012-08-10 1001376]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-05-16 1033688]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\SeaPort.exe [2014-02-27 247968]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-06-28 1431888]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-03 257928]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
návod netřeba .Prikladám log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by GEORG at 2014-03-17 21:01:49
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 215 GB (47%) free of 456 GB
Total RAM: 3323 MB (46% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 21:02:00, on 17. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera_crashreporter.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe
C:\Program Files\trend micro\GEORG.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?sourc ... 51A3696AFB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://www.katasterportal.sk
O15 - Trusted IP range: http://195.28.70.134
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://78.41.175.170/activex/AMC.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Ad-Aware Service 11 (LavasoftAdAwareService11) - Unknown owner - C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Spybot-S&D 2 Scanner Service (SDScannerService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
O23 - Service: Spybot-S&D 2 Updating Service (SDUpdateService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
O23 - Service: Spybot-S&D 2 Security Center Service (SDWSCService) - Safer-Networking Ltd. - C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 12007 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
atieclxx
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 31200016
\??\C:\Windows\system32\conhost.exe "14144606844012230201487265756-11454168516885850151065047171-703700483-975211533
C:\Windows\System32\spoolsv.exe
taskeng.exe {F72B7DE3-F887-44BA-A6FB-5D7A88CED9A0}
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\BBSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 3416
"taskhost.exe"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\wdm\sttray64.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\servicing\TrustedInstaller.exe
"C:\Program Files\iPod\bin\iPodService.exe"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --ran-launcher /crash-reporter-parent-id=6024
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=gpu-process --channel="6024.0.1668800848\2013533636" --crash-reporter-pid=5708 --disable-image-transport-surface --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,14,27 --gpu-vendor-id=0x1002 --gpu-device-id=0x9712 --gpu-driver-vendor="ATI Technologies Inc." --gpu-driver-version=8.712.1.2000 --crash-reporter-pid=5708 --ignored=" --type=renderer " /prefetch:822062411
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=sk --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=5708 --channel="6024.3.1346735254\549157519" /prefetch:673131151
"C:\Program Files (x86)\Opera\20.0.1387.77\opera.exe" --type=renderer --disable-direct-npapi-requests --lang=sk --enable-threaded-compositing --enable-deadline-scheduling --disable-client-side-phishing-detection --enable-ignore-autocomplete-off --disable-delegated-renderer --crash-reporter-pid=5708 --channel="6024.4.1653143695\1006448088" /prefetch:673131151
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuClient.exe"
C:\Windows\system32\sppsvc.exe
"C:\Users\GEORG\Desktop\RSITx64.exe"
taskhost.exe $(Arg0)
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForGEORG.job
======Registry dump======
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-09 487424]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
""= []
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [2014-01-23 4114264]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPWirelessAssistant]
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu]
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-16 98304]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"SDTray"=C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [2013-05-16 3830224]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-02 3767096]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-08-18 52920]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe"="C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-03-17 21:01:50 ----D---- C:\Program Files\trend micro
2014-03-17 21:01:49 ----D---- C:\rsit
2014-03-16 11:28:57 ----D---- C:\Users\GEORG\AppData\Roaming\Malwarebytes
2014-03-16 11:28:41 ----D---- C:\ProgramData\Malwarebytes
2014-03-16 11:08:20 ----D---- C:\ProgramData\boost_interprocess
2014-03-16 10:58:21 ----D---- C:\AdwCleaner
2014-03-15 12:15:30 ----D---- C:\FRST
2014-03-14 22:17:40 ----D---- C:\Program Files\iPod
2014-03-14 22:17:38 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:17:38 ----D---- C:\Program Files\iTunes
2014-03-14 22:17:38 ----D---- C:\Program Files (x86)\iTunes
2014-03-14 22:11:06 ----D---- C:\Program Files (x86)\QuickTime
2014-03-13 21:43:19 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-13 21:42:52 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-13 21:42:52 ----A---- C:\Windows\system32\wer.dll
2014-03-13 21:42:24 ----A---- C:\Windows\system32\win32k.sys
2014-03-13 21:42:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 21:42:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-13 21:42:13 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-13 21:42:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\urlmon.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\iernonce.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-13 21:42:11 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-13 21:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-13 21:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-13 21:42:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-13 21:42:08 ----A---- C:\Windows\system32\iesetup.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-13 21:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-13 21:42:04 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-13 21:42:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-13 21:42:00 ----A---- C:\Windows\system32\jscript9.dll
2014-03-13 21:42:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-13 21:41:59 ----A---- C:\Windows\system32\wininet.dll
2014-03-13 21:41:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 21:41:58 ----A---- C:\Windows\system32\msrating.dll
2014-03-13 21:41:57 ----A---- C:\Windows\system32\mshtml.dll
2014-03-13 21:40:36 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-13 21:40:36 ----A---- C:\Windows\system32\qedit.dll
2014-03-13 21:40:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-13 21:40:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-07 01:52:52 ----A---- C:\Windows\SYSWOW64\sho76BA.tmp
2014-03-05 08:44:42 ----D---- C:\Program Files (x86)\EMCO
2014-03-05 07:58:46 ----D---- C:\Users\GEORG\AppData\Roaming\Lavasoft
2014-03-05 07:41:50 ----D---- C:\Program Files\Lavasoft
2014-03-05 07:40:26 ----D---- C:\Program Files\Common Files\Lavasoft
2014-02-25 18:04:18 ----D---- C:\Windows\Migration
2014-02-24 21:57:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-02-24 21:57:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-02-24 21:57:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-02-24 21:56:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-02-24 21:56:40 ----D---- C:\ProgramData\EA Core
2014-02-24 21:56:39 ----D---- C:\ProgramData\Electronic Arts
2014-02-24 21:56:39 ----D---- C:\ProgramData\EA Logs
2014-02-24 21:31:07 ----D---- C:\Program Files (x86)\Need for Speed The Run
2014-02-22 20:51:57 ----D---- C:\NHL 09
2014-02-22 11:28:25 ----D---- C:\Program Files (x86)\PCSX2 1.2.1
2014-02-21 21:53:14 ----A---- C:\Windows\system32\drivers\scdemu.sys
2014-02-21 21:53:13 ----D---- C:\Program Files (x86)\PowerISO
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-02-21 00:26:29 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-02-21 00:26:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-02-21 00:26:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-21 00:26:27 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-02-21 00:26:11 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-02-21 00:26:11 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-02-21 00:26:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-02-21 00:26:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-02-21 00:25:53 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-02-21 00:25:53 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-02-21 00:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-02-21 00:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-02-21 00:25:23 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-02-21 00:25:23 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-02-21 00:25:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-02-21 00:25:15 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-02-21 00:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-02-21 00:25:04 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-02-21 00:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-02-21 00:25:02 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-02-21 00:20:17 ----HD---- C:\Windows\msdownld.tmp
2014-02-21 00:20:14 ----D---- C:\Windows\SYSWOW64\directx
2014-02-19 23:28:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-02-19 23:28:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-02-19 23:28:39 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-02-19 23:28:39 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-02-19 23:28:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-02-19 23:28:35 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-02-19 22:46:04 ----D---- C:\Users\GEORG\AppData\Roaming\2K Sports
======List of files/folders modified in the last 1 months======
2014-03-17 21:01:50 ----RD---- C:\Program Files
2014-03-17 21:01:30 ----D---- C:\Windows\Temp
2014-03-17 20:58:49 ----D---- C:\Windows\system32\config
2014-03-17 18:46:22 ----D---- C:\Users\GEORG\AppData\Roaming\SoftGrid Client
2014-03-17 13:42:05 ----D---- C:\Windows\system32\drivers
2014-03-16 21:17:58 ----D---- C:\Program Files (x86)
2014-03-16 20:28:08 ----D---- C:\Windows\inf
2014-03-16 17:04:50 ----D---- C:\Windows
2014-03-16 17:04:32 ----D---- C:\Windows\System32
2014-03-16 15:06:41 ----D---- C:\Users\GEORG\AppData\Roaming\uTorrent
2014-03-16 15:05:55 ----D---- C:\Windows\Logs
2014-03-16 12:12:38 ----D---- C:\Program Files (x86)\VstPlugins
2014-03-16 12:03:30 ----SHD---- C:\Windows\Installer
2014-03-16 11:28:41 ----HD---- C:\ProgramData
2014-03-15 17:05:35 ----D---- C:\Windows\system32\Tasks
2014-03-15 16:34:00 ----RSD---- C:\Windows\assembly
2014-03-15 16:32:04 ----SHD---- C:\System Volume Information
2014-03-15 15:07:31 ----D---- C:\ProgramData\Package Cache
2014-03-15 15:06:53 ----D---- C:\Windows\SysWOW64
2014-03-14 22:13:11 ----D---- C:\ProgramData\Apple
2014-03-14 10:14:15 ----D---- C:\Windows\winsxs
2014-03-14 10:09:23 ----D---- C:\Program Files\Internet Explorer
2014-03-14 10:09:23 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-14 10:09:15 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-14 10:09:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 01:39:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:39:42 ----D---- C:\Windows\system32\catroot
2014-03-13 21:39:28 ----D---- C:\Windows\system32\catroot2
2014-03-13 21:14:15 ----RD---- C:\Program Files (x86)\Skype
2014-03-13 11:35:30 ----D---- C:\Program Files (x86)\Opera
2014-03-13 10:25:15 ----D---- C:\Windows\Prefetch
2014-03-13 10:06:47 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-13 01:40:26 ----D---- C:\Windows\Tasks
2014-03-13 01:21:10 ----D---- C:\Windows\SoftwareDistribution
2014-03-10 23:03:21 ----D---- C:\SwSetup
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-TW
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-HK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-CN
2014-03-10 22:46:19 ----D---- C:\Windows\system32\tr-TR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\th-TH
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sv-SE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sl-SI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sk-SK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ru-RU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ro-RO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-PT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-BR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pl-PL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nl-NL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nb-NO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\lt-LT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ko-KR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ja-JP
2014-03-10 22:46:19 ----D---- C:\Windows\system32\it-IT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hu-HU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hr-HR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\he-IL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fr-FR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fi-FI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\et-EE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\es-ES
2014-03-10 22:46:19 ----D---- C:\Windows\system32\en-US
2014-03-10 22:46:19 ----D---- C:\Windows\system32\el-GR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\de-DE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\da-DK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\cs-CZ
2014-03-10 22:46:19 ----D---- C:\Windows\system32\bg-BG
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ar-SA
2014-03-10 22:45:41 ----D---- C:\Windows\system32\lv-LV
2014-03-10 22:45:16 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-03-10 22:35:38 ----D---- C:\Program Files (x86)\HP
2014-03-07 00:56:43 ----D---- C:\Users\GEORG\AppData\Roaming\Adobe
2014-03-07 00:48:07 ----D---- C:\Program Files\Common Files\Adobe
2014-03-07 00:37:18 ----D---- C:\Program Files (x86)\Adobe
2014-03-07 00:33:48 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-03-07 00:32:44 ----D---- C:\Program Files\Adobe
2014-03-07 00:25:33 ----RSD---- C:\Windows\Fonts
2014-03-05 07:40:26 ----D---- C:\Program Files\Common Files
2014-03-05 07:39:33 ----D---- C:\ProgramData\Lavasoft
2014-03-03 10:13:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-27 23:33:04 ----D---- C:\Program Files (x86)\Sony
2014-02-27 23:32:11 ----D---- C:\Users\GEORG\AppData\Roaming\Sony
2014-02-26 23:16:18 ----D---- C:\Windows\Microsoft.NET
2014-02-26 13:15:56 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-25 18:04:51 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-25 18:04:18 ----ASD---- C:\ProgramData\Microsoft
2014-02-24 21:59:40 ----D---- C:\Program Files (x86)\Common Files
2014-02-24 16:44:19 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-21 20:20:53 ----D---- C:\Windows\rescache
2014-02-20 17:18:02 ----D---- C:\Windows\system32\NDF
2014-02-18 13:46:51 ----D---- C:\Program Files (x86)\Counter-Strike 1.6 Non-Steam
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-31 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-31 207904]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 gfibto;gfibto; C:\Windows\system32\drivers\gfibto.sys [2013-05-27 14456]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2013-09-27 248240]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [2011-03-15 912504]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-31 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-02 1038072]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-02 421704]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20130412.001\BHDrvx64.sys [2013-04-12 1390680]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-04-23 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20130423.001\IDSvia64.sys [2013-04-20 513184]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2011-11-15 125376]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [2011-04-21 386168]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-02 78648]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-16 6403584]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-16 188928]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-02 80184]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-10 342056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 gzflt;gzflt; \??\C:\Program Files\Lavasoft\Ad-Aware Antivirus\Antimalware Engine\2.6.0.0\gzflt.sys [2013-07-17 138232]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-06-09 515584]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-04-23 174200]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 Trufos;Trufos; C:\Windows\system32\DRIVERS\Trufos.sys [2013-07-17 329800]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-16 6403584]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys []
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
S3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-01-23 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-01-23 27760]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\ENG64.SYS [2013-04-23 126192]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\EX64.SYS [2013-04-23 2087664]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2013-09-27 134944]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-09 239136]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [2011-03-31 744568]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-16 202752]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-02 50344]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\BBSvc.exe [2014-02-27 193696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2013-11-08 250712]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-02-05 47416]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LavasoftAdAwareService11;Ad-Aware Service 11; C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareService.exe [2014-01-23 702744]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2013-04-29 4233088]
R2 PaceLicenseDServices;PACE License Services; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-07-09 2932224]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-26 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-02-24 214520]
R2 SDScannerService;Spybot-S&D 2 Scanner Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2013-05-16 1817560]
R2 SDWSCService;Spybot-S&D 2 Security Center Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [2013-05-15 171928]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-09 258048]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2012-08-10 1001376]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S2 SDUpdateService;Spybot-S&D 2 Updating Service; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2013-05-16 1033688]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.126.0\SeaPort.exe [2014-02-27 247968]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-06-28 1431888]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-03 257928]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Re: Kontróla logu FRST
Bezi vam tam tri antiviry!!! Dva musi pryc. Doporucuji nechat Avast, zbytek odinstalujte.
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-10-23 1266912]
"AdAwareTray"=C:\Program Files\Lavasoft\Ad-Aware Antivirus\Ad-Aware Antivirus\11.1.5354.0\AdAwareTray.exe [2014-01-23 4114264]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-02 3767096]
Take odinstalujte Spybota, program je zastaraly. Pak dejte novy log z RSITPokud máte dotaz, který není určen pro veřejnost, můžete mi napsat na mail marty84zavináčforum.viry.cz
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Možnost podpořit naše fórum https://platba.viry.cz/payment/
Z časových důvodů teď budu na fóru méně často. V případě delšího čekání na odpověď kontaktujte prosím některého z kolegů (většina má mailovou adresu ve svém podpisu).
Re: Kontróla logu FRST
programy odinstalovány.
Log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by GEORG at 2014-03-18 13:00:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 219 GB (48%) free of 456 GB
Total RAM: 3323 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:00:46, on 18. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\trend micro\GEORG.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?sourc ... 51A3696AFB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://78.41.175.170/activex/AMC.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 11187 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 35873616
\??\C:\Windows\system32\conhost.exe "-17706564531613433131-1782879951-192461604-20891987021458097922-952374422-234033369
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"taskhost.exe"
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\wdm\sttray64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4284
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe"
taskeng.exe {2FDF3B1F-8FCB-4331-85EA-2EE2E1478040}
taskeng.exe {B3C5C085-DBD7-40D3-B094-F675F820793D}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1321875999-3521709362-3586832015-10004_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1321875999-3521709362-3586832015-10004 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\GEORG\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForGEORG.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-09 487424]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPWirelessAssistant]
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu]
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-16 98304]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-02 3767096]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-08-18 52920]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-03-18 12:51:19 ----A---- C:\Windows\wininit.ini
2014-03-17 21:01:50 ----D---- C:\Program Files\trend micro
2014-03-17 21:01:49 ----D---- C:\rsit
2014-03-16 11:28:57 ----D---- C:\Users\GEORG\AppData\Roaming\Malwarebytes
2014-03-16 11:28:41 ----D---- C:\ProgramData\Malwarebytes
2014-03-16 11:08:20 ----D---- C:\ProgramData\boost_interprocess
2014-03-16 10:58:21 ----D---- C:\AdwCleaner
2014-03-15 12:15:30 ----D---- C:\FRST
2014-03-14 22:17:40 ----D---- C:\Program Files\iPod
2014-03-14 22:17:38 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:17:38 ----D---- C:\Program Files\iTunes
2014-03-14 22:17:38 ----D---- C:\Program Files (x86)\iTunes
2014-03-14 22:11:06 ----D---- C:\Program Files (x86)\QuickTime
2014-03-13 21:43:19 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-13 21:42:52 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-13 21:42:52 ----A---- C:\Windows\system32\wer.dll
2014-03-13 21:42:24 ----A---- C:\Windows\system32\win32k.sys
2014-03-13 21:42:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 21:42:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-13 21:42:13 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-13 21:42:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\urlmon.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\iernonce.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-13 21:42:11 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-13 21:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-13 21:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-13 21:42:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-13 21:42:08 ----A---- C:\Windows\system32\iesetup.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-13 21:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-13 21:42:04 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-13 21:42:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-13 21:42:00 ----A---- C:\Windows\system32\jscript9.dll
2014-03-13 21:42:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-13 21:41:59 ----A---- C:\Windows\system32\wininet.dll
2014-03-13 21:41:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 21:41:58 ----A---- C:\Windows\system32\msrating.dll
2014-03-13 21:41:57 ----A---- C:\Windows\system32\mshtml.dll
2014-03-13 21:40:36 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-13 21:40:36 ----A---- C:\Windows\system32\qedit.dll
2014-03-13 21:40:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-13 21:40:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-07 01:52:52 ----A---- C:\Windows\SYSWOW64\sho76BA.tmp
2014-03-05 08:44:42 ----D---- C:\Program Files (x86)\EMCO
2014-02-25 18:04:18 ----D---- C:\Windows\Migration
2014-02-24 21:57:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-02-24 21:57:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-02-24 21:57:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-02-24 21:56:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-02-24 21:56:40 ----D---- C:\ProgramData\EA Core
2014-02-24 21:56:39 ----D---- C:\ProgramData\Electronic Arts
2014-02-24 21:56:39 ----D---- C:\ProgramData\EA Logs
2014-02-24 21:31:07 ----D---- C:\Program Files (x86)\Need for Speed The Run
2014-02-22 20:51:57 ----D---- C:\NHL 09
2014-02-22 11:28:25 ----D---- C:\Program Files (x86)\PCSX2 1.2.1
2014-02-21 21:53:14 ----A---- C:\Windows\system32\drivers\scdemu.sys
2014-02-21 21:53:13 ----D---- C:\Program Files (x86)\PowerISO
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-02-21 00:26:29 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-02-21 00:26:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-02-21 00:26:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-21 00:26:27 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-02-21 00:26:11 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-02-21 00:26:11 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-02-21 00:26:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-02-21 00:26:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-02-21 00:25:53 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-02-21 00:25:53 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-02-21 00:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-02-21 00:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-02-21 00:25:23 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-02-21 00:25:23 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-02-21 00:25:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-02-21 00:25:15 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-02-21 00:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-02-21 00:25:04 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-02-21 00:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-02-21 00:25:02 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-02-21 00:20:17 ----HD---- C:\Windows\msdownld.tmp
2014-02-21 00:20:14 ----D---- C:\Windows\SYSWOW64\directx
2014-02-19 23:28:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-02-19 23:28:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-02-19 23:28:39 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-02-19 23:28:39 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-02-19 23:28:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-02-19 23:28:35 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-02-19 22:46:04 ----D---- C:\Users\GEORG\AppData\Roaming\2K Sports
======List of files/folders modified in the last 1 months======
2014-03-18 13:00:42 ----D---- C:\Windows\Temp
2014-03-18 12:58:48 ----D---- C:\Windows\System32
2014-03-18 12:58:48 ----D---- C:\Windows\inf
2014-03-18 12:58:47 ----D---- C:\Windows
2014-03-18 12:57:39 ----D---- C:\Windows\system32\config
2014-03-18 12:56:24 ----SHD---- C:\System Volume Information
2014-03-18 12:52:43 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-18 12:52:43 ----D---- C:\Program Files (x86)
2014-03-18 12:51:26 ----ASD---- C:\ProgramData\Microsoft
2014-03-18 12:46:26 ----SHD---- C:\Windows\Installer
2014-03-18 12:46:26 ----RD---- C:\Program Files
2014-03-18 12:45:03 ----D---- C:\Windows\system32\drivers
2014-03-18 12:40:41 ----HD---- C:\ProgramData
2014-03-18 12:39:37 ----D---- C:\ProgramData\Lavasoft
2014-03-18 12:38:45 ----D---- C:\Program Files\Common Files
2014-03-17 18:46:22 ----D---- C:\Users\GEORG\AppData\Roaming\SoftGrid Client
2014-03-16 15:06:41 ----D---- C:\Users\GEORG\AppData\Roaming\uTorrent
2014-03-16 15:05:55 ----D---- C:\Windows\Logs
2014-03-16 12:12:38 ----D---- C:\Program Files (x86)\VstPlugins
2014-03-15 17:05:35 ----D---- C:\Windows\system32\Tasks
2014-03-15 16:34:00 ----RSD---- C:\Windows\assembly
2014-03-15 15:07:31 ----D---- C:\ProgramData\Package Cache
2014-03-15 15:06:53 ----D---- C:\Windows\SysWOW64
2014-03-14 22:13:11 ----D---- C:\ProgramData\Apple
2014-03-14 10:14:15 ----D---- C:\Windows\winsxs
2014-03-14 10:09:23 ----D---- C:\Program Files\Internet Explorer
2014-03-14 10:09:23 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-14 10:09:15 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-14 10:09:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 01:39:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:39:42 ----D---- C:\Windows\system32\catroot
2014-03-13 21:39:28 ----D---- C:\Windows\system32\catroot2
2014-03-13 21:14:15 ----RD---- C:\Program Files (x86)\Skype
2014-03-13 11:35:30 ----D---- C:\Program Files (x86)\Opera
2014-03-13 10:25:15 ----D---- C:\Windows\Prefetch
2014-03-13 01:40:26 ----D---- C:\Windows\Tasks
2014-03-13 01:21:10 ----D---- C:\Windows\SoftwareDistribution
2014-03-10 23:03:21 ----D---- C:\SwSetup
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-TW
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-HK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-CN
2014-03-10 22:46:19 ----D---- C:\Windows\system32\tr-TR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\th-TH
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sv-SE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sl-SI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sk-SK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ru-RU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ro-RO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-PT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-BR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pl-PL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nl-NL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nb-NO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\lt-LT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ko-KR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ja-JP
2014-03-10 22:46:19 ----D---- C:\Windows\system32\it-IT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hu-HU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hr-HR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\he-IL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fr-FR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fi-FI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\et-EE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\es-ES
2014-03-10 22:46:19 ----D---- C:\Windows\system32\en-US
2014-03-10 22:46:19 ----D---- C:\Windows\system32\el-GR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\de-DE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\da-DK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\cs-CZ
2014-03-10 22:46:19 ----D---- C:\Windows\system32\bg-BG
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ar-SA
2014-03-10 22:45:41 ----D---- C:\Windows\system32\lv-LV
2014-03-10 22:45:16 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-03-10 22:35:38 ----D---- C:\Program Files (x86)\HP
2014-03-07 00:56:43 ----D---- C:\Users\GEORG\AppData\Roaming\Adobe
2014-03-07 00:48:07 ----D---- C:\Program Files\Common Files\Adobe
2014-03-07 00:37:18 ----D---- C:\Program Files (x86)\Adobe
2014-03-07 00:33:48 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-03-07 00:32:44 ----D---- C:\Program Files\Adobe
2014-03-07 00:25:33 ----RSD---- C:\Windows\Fonts
2014-03-03 10:13:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-27 23:33:04 ----D---- C:\Program Files (x86)\Sony
2014-02-27 23:32:11 ----D---- C:\Users\GEORG\AppData\Roaming\Sony
2014-02-26 23:16:18 ----D---- C:\Windows\Microsoft.NET
2014-02-26 13:15:56 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-25 18:04:51 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-24 21:59:40 ----D---- C:\Program Files (x86)\Common Files
2014-02-24 16:44:19 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-21 20:20:53 ----D---- C:\Windows\rescache
2014-02-20 17:18:02 ----D---- C:\Windows\system32\NDF
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-31 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-31 207904]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 gfibto;gfibto; C:\Windows\system32\drivers\gfibto.sys [2013-05-27 14456]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [2011-03-15 912504]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-31 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-02 1038072]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-02 421704]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20130412.001\BHDrvx64.sys [2013-04-12 1390680]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-04-23 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20130423.001\IDSvia64.sys [2013-04-20 513184]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2011-11-15 125376]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [2011-04-21 386168]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-02 78648]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-16 6403584]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-16 188928]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-02 80184]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-10 342056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-06-09 515584]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-04-23 174200]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-16 6403584]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys []
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
S3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-01-23 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-01-23 27760]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\ENG64.SYS [2013-04-23 126192]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\EX64.SYS [2013-04-23 2087664]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-09 239136]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [2011-03-31 744568]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-16 202752]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-02 50344]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [2014-03-11 193696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-02-05 47416]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2013-04-29 4233088]
R2 PaceLicenseDServices;PACE License Services; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-07-09 2932224]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-26 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-02-24 214520]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-09 258048]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [2014-03-11 247968]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2012-08-10 1001376]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2013-11-08 250712]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-06-28 1431888]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-23 1255736]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-03 257928]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Log z RSIT:
Logfile of random's system information tool 1.08 (written by random/random)
Run by GEORG at 2014-03-18 13:00:38
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 219 GB (48%) free of 456 GB
Total RAM: 3323 MB (56% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 13:00:46, on 18. 3. 2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
C:\Program Files\trend micro\GEORG.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securesearch.lavasoft.com/?sourc ... 51A3696AFB
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O2 - BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O3 - Toolbar: Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200
O8 - Extra context menu item: Odoslať obrázok do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odoslať stránku do &Zariadenia s rozhraním Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://78.41.175.170/activex/AMC.cab
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - C:\Program Files\DigitalPersona\Bin\DpHostW.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service 64 - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HP Support Assistant Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe (file missing)
O23 - Service: HP Support Solutions Framework Service (HPSupportSolutionsFrameworkService) - Hewlett-Packard Company - C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe
O23 - Service: HPWMISVC - Unknown owner - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Norton Online Backup (NOBU) - Symantec Corporation - C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe
O23 - Service: PACE License Services (PaceLicenseDServices) - PACE Anti-Piracy, Inc. - C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10122 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\Windows\system32\vcsFPService.exe
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
--
End of file - 11187 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
"C:\Program Files\IDT\WDM\STacSV64.exe"
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\Hpservice.exe
C:\Windows\system32\vcsFPService.exe
C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\system32\WLANExt.exe 35873616
\??\C:\Windows\system32\conhost.exe "-17706564531613433131-1782879951-192461604-20891987021458097922-952374422-234033369
C:\Windows\System32\spoolsv.exe
"C:\Program Files\DigitalPersona\Bin\DpHostW.exe"
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\IDT\WDM\AESTSr64.exe"
"C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe"
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe"
"C:\Program Files\Bonjour\mDNSResponder.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\SysWOW64\ezSharedSvcHost.exe
"taskhost.exe"
"C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe"
"C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Program Files\IDT\wdm\sttray64.exe"
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM"
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\iTunes\iTunesHelper.exe"
"C:\Program Files\DigitalPersona\Bin\DPAgent.exe"
"C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe"
"C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe"
"C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe"
"C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\SysWOW64\PnkBstrB.exe
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 4284
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe"
"C:\Program Files\iPod\bin\iPodService.exe"
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe"
"C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe" SERVICE
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe"
taskeng.exe {2FDF3B1F-8FCB-4331-85EA-2EE2E1478040}
taskeng.exe {B3C5C085-DBD7-40D3-B094-F675F820793D}
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe_S-1-5-21-1321875999-3521709362-3586832015-10004_ Global\UsGthrCtrlFltPipeMssGthrPipe_S-1-5-21-1321875999-3521709362-3586832015-10004 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon" "1"
"C:\Windows\system32\SearchFilterHost.exe" 0 512 516 524 65536 520
C:\Windows\System32\svchost.exe -k WerSvcGroup
"C:\Users\GEORG\Desktop\RSITx64.exe"
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\HPCeeScheduleForGEORG.job
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1dad3af3-ef2f-4f64-ac4b-11789189fcb6}]
Bing Bar Helper - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\amd64\BingExt.dll [2014-03-11 1154720]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{eec0f710-38b5-4aba-99bf-ec87564a4e13} - Bing Bar - C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BingExt.dll [2014-03-11 1431712]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray64.exe [2010-06-09 487424]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPWirelessAssistant]
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe [2010-06-18 8192]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SmartMenu]
C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe [2010-01-20 611896]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-04-16 98304]
"HP Quick Launch"=C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe [2010-06-29 602168]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-02 3767096]
"QuickTime Task"=C:\Program Files (x86)\QuickTime\QTTask.exe [2014-01-17 421888]
"iTunesHelper"=C:\Program Files (x86)\iTunes\iTunesHelper.exe [2014-02-21 152392]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{E54729E8-BB3D-4270-9D49-7389EA579090}"=C:\Windows\SysWow64\EZUPBH~1.DLL [2010-08-18 52920]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\DpHost]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"EnableShellExecuteHooks"=1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 months======
2014-03-18 12:51:19 ----A---- C:\Windows\wininit.ini
2014-03-17 21:01:50 ----D---- C:\Program Files\trend micro
2014-03-17 21:01:49 ----D---- C:\rsit
2014-03-16 11:28:57 ----D---- C:\Users\GEORG\AppData\Roaming\Malwarebytes
2014-03-16 11:28:41 ----D---- C:\ProgramData\Malwarebytes
2014-03-16 11:08:20 ----D---- C:\ProgramData\boost_interprocess
2014-03-16 10:58:21 ----D---- C:\AdwCleaner
2014-03-15 12:15:30 ----D---- C:\FRST
2014-03-14 22:17:40 ----D---- C:\Program Files\iPod
2014-03-14 22:17:38 ----D---- C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-03-14 22:17:38 ----D---- C:\Program Files\iTunes
2014-03-14 22:17:38 ----D---- C:\Program Files (x86)\iTunes
2014-03-14 22:11:06 ----D---- C:\Program Files (x86)\QuickTime
2014-03-13 21:43:19 ----A---- C:\Windows\system32\wwansvc.dll
2014-03-13 21:42:52 ----A---- C:\Windows\SYSWOW64\wer.dll
2014-03-13 21:42:52 ----A---- C:\Windows\system32\wer.dll
2014-03-13 21:42:24 ----A---- C:\Windows\system32\win32k.sys
2014-03-13 21:42:19 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\iertutil.dll
2014-03-13 21:42:18 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 21:42:17 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-13 21:42:16 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-13 21:42:15 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-13 21:42:13 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-13 21:42:12 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\urlmon.dll
2014-03-13 21:42:12 ----A---- C:\Windows\system32\iernonce.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-13 21:42:11 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-13 21:42:11 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-03-13 21:42:10 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-13 21:42:10 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-13 21:42:09 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-13 21:42:08 ----A---- C:\Windows\system32\iesetup.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-13 21:42:06 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-13 21:42:05 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-13 21:42:04 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-13 21:42:04 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-13 21:42:03 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieui.dll
2014-03-13 21:42:02 ----A---- C:\Windows\system32\ieframe.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\jscript9diag.dll
2014-03-13 21:42:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-13 21:42:00 ----A---- C:\Windows\system32\jscript9.dll
2014-03-13 21:42:00 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-13 21:41:59 ----A---- C:\Windows\system32\wininet.dll
2014-03-13 21:41:58 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 21:41:58 ----A---- C:\Windows\system32\msrating.dll
2014-03-13 21:41:57 ----A---- C:\Windows\system32\mshtml.dll
2014-03-13 21:40:36 ----A---- C:\Windows\SYSWOW64\qedit.dll
2014-03-13 21:40:36 ----A---- C:\Windows\system32\qedit.dll
2014-03-13 21:40:10 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-13 21:40:09 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-07 01:52:52 ----A---- C:\Windows\SYSWOW64\sho76BA.tmp
2014-03-05 08:44:42 ----D---- C:\Program Files (x86)\EMCO
2014-02-25 18:04:18 ----D---- C:\Windows\Migration
2014-02-24 21:57:53 ----A---- C:\Windows\SYSWOW64\XAudio2_5.dll
2014-02-24 21:57:38 ----A---- C:\Windows\SYSWOW64\D3DCompiler_42.dll
2014-02-24 21:57:38 ----A---- C:\Windows\system32\D3DCompiler_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\SYSWOW64\d3dx11_42.dll
2014-02-24 21:57:23 ----A---- C:\Windows\system32\d3dx11_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\SYSWOW64\d3dx10_42.dll
2014-02-24 21:57:16 ----A---- C:\Windows\system32\d3dx10_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\SYSWOW64\D3DX9_42.dll
2014-02-24 21:57:08 ----A---- C:\Windows\system32\D3DX9_42.dll
2014-02-24 21:56:43 ----A---- C:\Windows\SYSWOW64\XAPOFX1_3.dll
2014-02-24 21:56:40 ----D---- C:\ProgramData\EA Core
2014-02-24 21:56:39 ----D---- C:\ProgramData\Electronic Arts
2014-02-24 21:56:39 ----D---- C:\ProgramData\EA Logs
2014-02-24 21:31:07 ----D---- C:\Program Files (x86)\Need for Speed The Run
2014-02-22 20:51:57 ----D---- C:\NHL 09
2014-02-22 11:28:25 ----D---- C:\Program Files (x86)\PCSX2 1.2.1
2014-02-21 21:53:14 ----A---- C:\Windows\system32\drivers\scdemu.sys
2014-02-21 21:53:13 ----D---- C:\Program Files (x86)\PowerISO
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\SYSWOW64\XAPOFX1_5.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAudio2_7.dll
2014-02-21 00:26:31 ----A---- C:\Windows\system32\XAPOFX1_5.dll
2014-02-21 00:26:29 ----A---- C:\Windows\SYSWOW64\xactengine3_7.dll
2014-02-21 00:26:29 ----A---- C:\Windows\system32\xactengine3_7.dll
2014-02-21 00:26:27 ----A---- C:\Windows\SYSWOW64\D3DCompiler_43.dll
2014-02-21 00:26:27 ----A---- C:\Windows\system32\D3DCompiler_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\SYSWOW64\d3dcsx_43.dll
2014-02-21 00:26:25 ----A---- C:\Windows\system32\d3dcsx_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\SYSWOW64\d3dx11_43.dll
2014-02-21 00:26:24 ----A---- C:\Windows\system32\d3dx11_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\SYSWOW64\d3dx10_43.dll
2014-02-21 00:26:22 ----A---- C:\Windows\system32\d3dx10_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\SYSWOW64\D3DX9_43.dll
2014-02-21 00:26:20 ----A---- C:\Windows\system32\D3DX9_43.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\SYSWOW64\XAPOFX1_4.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAudio2_6.dll
2014-02-21 00:26:18 ----A---- C:\Windows\system32\XAPOFX1_4.dll
2014-02-21 00:26:11 ----A---- C:\Windows\SYSWOW64\xactengine3_6.dll
2014-02-21 00:26:11 ----A---- C:\Windows\system32\xactengine3_6.dll
2014-02-21 00:26:02 ----A---- C:\Windows\SYSWOW64\X3DAudio1_7.dll
2014-02-21 00:26:02 ----A---- C:\Windows\system32\X3DAudio1_7.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAudio2_5.dll
2014-02-21 00:25:54 ----A---- C:\Windows\system32\XAPOFX1_3.dll
2014-02-21 00:25:53 ----A---- C:\Windows\SYSWOW64\xactengine3_5.dll
2014-02-21 00:25:53 ----A---- C:\Windows\system32\xactengine3_5.dll
2014-02-21 00:25:51 ----A---- C:\Windows\SYSWOW64\d3dcsx_42.dll
2014-02-21 00:25:51 ----A---- C:\Windows\system32\d3dcsx_42.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\SYSWOW64\XAPOFX1_2.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAudio2_3.dll
2014-02-21 00:25:33 ----A---- C:\Windows\system32\XAPOFX1_2.dll
2014-02-21 00:25:23 ----A---- C:\Windows\SYSWOW64\xactengine3_3.dll
2014-02-21 00:25:23 ----A---- C:\Windows\system32\xactengine3_3.dll
2014-02-21 00:25:15 ----A---- C:\Windows\SYSWOW64\X3DAudio1_5.dll
2014-02-21 00:25:15 ----A---- C:\Windows\system32\X3DAudio1_5.dll
2014-02-21 00:25:04 ----A---- C:\Windows\SYSWOW64\XAPOFX1_1.dll
2014-02-21 00:25:04 ----A---- C:\Windows\system32\XAPOFX1_1.dll
2014-02-21 00:25:02 ----A---- C:\Windows\SYSWOW64\XAudio2_2.dll
2014-02-21 00:25:02 ----A---- C:\Windows\system32\XAudio2_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\SYSWOW64\xactengine3_2.dll
2014-02-21 00:24:52 ----A---- C:\Windows\system32\xactengine3_2.dll
2014-02-21 00:20:17 ----HD---- C:\Windows\msdownld.tmp
2014-02-21 00:20:14 ----D---- C:\Windows\SYSWOW64\directx
2014-02-19 23:28:46 ----A---- C:\Windows\system32\d3dx10_41.dll
2014-02-19 23:28:46 ----A---- C:\Windows\system32\D3DCompiler_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\SYSWOW64\D3DX9_41.dll
2014-02-19 23:28:44 ----A---- C:\Windows\system32\D3DX9_41.dll
2014-02-19 23:28:39 ----A---- C:\Windows\SYSWOW64\XAudio2_4.dll
2014-02-19 23:28:39 ----A---- C:\Windows\system32\XAudio2_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\SYSWOW64\xactengine3_4.dll
2014-02-19 23:28:37 ----A---- C:\Windows\system32\xactengine3_4.dll
2014-02-19 23:28:35 ----A---- C:\Windows\SYSWOW64\X3DAudio1_6.dll
2014-02-19 23:28:35 ----A---- C:\Windows\system32\X3DAudio1_6.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\SYSWOW64\D3DCompiler_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\d3dx10_40.dll
2014-02-19 23:28:33 ----A---- C:\Windows\system32\D3DCompiler_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\SYSWOW64\D3DX9_40.dll
2014-02-19 23:28:32 ----A---- C:\Windows\system32\D3DX9_40.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\SYSWOW64\D3DCompiler_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\d3dx10_39.dll
2014-02-19 23:28:22 ----A---- C:\Windows\system32\D3DCompiler_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\SYSWOW64\D3DX9_39.dll
2014-02-19 23:28:18 ----A---- C:\Windows\system32\D3DX9_39.dll
2014-02-19 22:46:04 ----D---- C:\Users\GEORG\AppData\Roaming\2K Sports
======List of files/folders modified in the last 1 months======
2014-03-18 13:00:42 ----D---- C:\Windows\Temp
2014-03-18 12:58:48 ----D---- C:\Windows\System32
2014-03-18 12:58:48 ----D---- C:\Windows\inf
2014-03-18 12:58:47 ----D---- C:\Windows
2014-03-18 12:57:39 ----D---- C:\Windows\system32\config
2014-03-18 12:56:24 ----SHD---- C:\System Volume Information
2014-03-18 12:52:43 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-18 12:52:43 ----D---- C:\Program Files (x86)
2014-03-18 12:51:26 ----ASD---- C:\ProgramData\Microsoft
2014-03-18 12:46:26 ----SHD---- C:\Windows\Installer
2014-03-18 12:46:26 ----RD---- C:\Program Files
2014-03-18 12:45:03 ----D---- C:\Windows\system32\drivers
2014-03-18 12:40:41 ----HD---- C:\ProgramData
2014-03-18 12:39:37 ----D---- C:\ProgramData\Lavasoft
2014-03-18 12:38:45 ----D---- C:\Program Files\Common Files
2014-03-17 18:46:22 ----D---- C:\Users\GEORG\AppData\Roaming\SoftGrid Client
2014-03-16 15:06:41 ----D---- C:\Users\GEORG\AppData\Roaming\uTorrent
2014-03-16 15:05:55 ----D---- C:\Windows\Logs
2014-03-16 12:12:38 ----D---- C:\Program Files (x86)\VstPlugins
2014-03-15 17:05:35 ----D---- C:\Windows\system32\Tasks
2014-03-15 16:34:00 ----RSD---- C:\Windows\assembly
2014-03-15 15:07:31 ----D---- C:\ProgramData\Package Cache
2014-03-15 15:06:53 ----D---- C:\Windows\SysWOW64
2014-03-14 22:13:11 ----D---- C:\ProgramData\Apple
2014-03-14 10:14:15 ----D---- C:\Windows\winsxs
2014-03-14 10:09:23 ----D---- C:\Program Files\Internet Explorer
2014-03-14 10:09:23 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-14 10:09:15 ----D---- C:\Program Files\Microsoft Silverlight
2014-03-14 10:09:13 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2014-03-14 01:39:39 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:39:42 ----D---- C:\Windows\system32\catroot
2014-03-13 21:39:28 ----D---- C:\Windows\system32\catroot2
2014-03-13 21:14:15 ----RD---- C:\Program Files (x86)\Skype
2014-03-13 11:35:30 ----D---- C:\Program Files (x86)\Opera
2014-03-13 10:25:15 ----D---- C:\Windows\Prefetch
2014-03-13 01:40:26 ----D---- C:\Windows\Tasks
2014-03-13 01:21:10 ----D---- C:\Windows\SoftwareDistribution
2014-03-10 23:03:21 ----D---- C:\SwSetup
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-TW
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-HK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\zh-CN
2014-03-10 22:46:19 ----D---- C:\Windows\system32\tr-TR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\th-TH
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sv-SE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sl-SI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\sk-SK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ru-RU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ro-RO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-PT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pt-BR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\pl-PL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nl-NL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\nb-NO
2014-03-10 22:46:19 ----D---- C:\Windows\system32\lt-LT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ko-KR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ja-JP
2014-03-10 22:46:19 ----D---- C:\Windows\system32\it-IT
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hu-HU
2014-03-10 22:46:19 ----D---- C:\Windows\system32\hr-HR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\he-IL
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fr-FR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\fi-FI
2014-03-10 22:46:19 ----D---- C:\Windows\system32\et-EE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\es-ES
2014-03-10 22:46:19 ----D---- C:\Windows\system32\en-US
2014-03-10 22:46:19 ----D---- C:\Windows\system32\el-GR
2014-03-10 22:46:19 ----D---- C:\Windows\system32\de-DE
2014-03-10 22:46:19 ----D---- C:\Windows\system32\da-DK
2014-03-10 22:46:19 ----D---- C:\Windows\system32\cs-CZ
2014-03-10 22:46:19 ----D---- C:\Windows\system32\bg-BG
2014-03-10 22:46:19 ----D---- C:\Windows\system32\ar-SA
2014-03-10 22:45:41 ----D---- C:\Windows\system32\lv-LV
2014-03-10 22:45:16 ----A---- C:\Windows\system32\bcmwlrc.dll
2014-03-10 22:35:38 ----D---- C:\Program Files (x86)\HP
2014-03-07 00:56:43 ----D---- C:\Users\GEORG\AppData\Roaming\Adobe
2014-03-07 00:48:07 ----D---- C:\Program Files\Common Files\Adobe
2014-03-07 00:37:18 ----D---- C:\Program Files (x86)\Adobe
2014-03-07 00:33:48 ----D---- C:\ProgramData\regid.1986-12.com.adobe
2014-03-07 00:32:44 ----D---- C:\Program Files\Adobe
2014-03-07 00:25:33 ----RSD---- C:\Windows\Fonts
2014-03-03 10:13:12 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-02-27 23:33:04 ----D---- C:\Program Files (x86)\Sony
2014-02-27 23:32:11 ----D---- C:\Users\GEORG\AppData\Roaming\Sony
2014-02-26 23:16:18 ----D---- C:\Windows\Microsoft.NET
2014-02-26 13:15:56 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-02-25 18:04:51 ----D---- C:\Windows\SYSWOW64\en-US
2014-02-24 21:59:40 ----D---- C:\Program Files (x86)\Common Files
2014-02-24 16:44:19 ----A---- C:\Windows\SYSWOW64\PnkBstrB.exe
2014-02-21 20:20:53 ----D---- C:\Windows\rescache
2014-02-20 17:18:02 ----D---- C:\Windows\system32\NDF
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2013-12-31 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2013-12-31 207904]
R0 AtiPcie;AMD PCI Express (3GIO) Filter; C:\Windows\system32\DRIVERS\AtiPcie.sys [2009-08-24 16440]
R0 gfibto;gfibto; C:\Windows\system32\drivers\gfibto.sys [2013-05-27 14456]
R0 hpdskflt;HP Filter; C:\Windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 30008]
R0 PxHlpa64;PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [2011-11-03 56208]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 SymDS;Symantec Data Store; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMDS64.SYS [2011-01-27 450680]
R0 SymEFA;Symantec Extended File Attributes; C:\Windows\system32\drivers\NISx64\1207000.00D\SYMEFA64.SYS [2011-03-15 912504]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2013-12-31 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-02 1038072]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-02 421704]
R1 BHDrvx64;BHDrvx64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\BASHDefs\20130412.001\BHDrvx64.sys [2013-04-12 1390680]
R1 eeCtrl;Symantec Eraser Control driver; \??\C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [2013-04-23 484512]
R1 IDSVia64;IDSVia64; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\IPSDefs\20130423.001\IDSvia64.sys [2013-04-20 513184]
R1 SCDEmu;SCDEmu; C:\Windows\system32\drivers\SCDEmu.sys [2011-11-15 125376]
R1 SRTSPX;Symantec Real Time Storage Protection (PEL) x64; C:\Windows\system32\drivers\NISx64\1207000.00D\SRTSPX64.SYS [2011-03-31 40568]
R1 SymIRON;Symantec Iron Driver; C:\Windows\system32\drivers\NISx64\1207000.00D\Ironx64.SYS [2011-01-27 171128]
R1 SymNetS;Symantec Network Security WFP Driver; C:\Windows\System32\Drivers\NISx64\1207000.00D\SYMNETS.SYS [2011-04-21 386168]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-02 78648]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\Windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 43320]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atipmdag.sys [2010-04-16 6403584]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2010-04-16 188928]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-02 80184]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\Windows\system32\DRIVERS\bcmwl664.sys [2010-05-08 3063360]
R3 BthEnum;Bluetooth Request Block Driver; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 btwampfl;Bluetooth AMP USB Filter; C:\Windows\system32\drivers\btwampfl.sys [2010-06-10 342056]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 33240]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
R3 STHDA;@%SystemRoot%\system32\stlang64.dll,-10322; C:\Windows\system32\DRIVERS\stwrt64.sys [2010-06-09 515584]
R3 SymEvent;SymEvent; \??\C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [2013-04-23 174200]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 usbfilter;AMD USB Filter Driver; C:\Windows\system32\DRIVERS\usbfilter.sys [2009-12-22 38456]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]
S2 NSHE;Guardant Emulator Driver; \??\C:\Windows\system32\Drivers\NSHE.SYS []
S3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\Windows\system32\drivers\AtiHdmi.sys [2010-05-06 125456]
S3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-04-16 6403584]
S3 AVerAF35;HP USB DVB-T TV Tuner; C:\Windows\System32\Drivers\HPAF35.sys [2009-10-19 511104]
S3 BTHPORT;Bluetooth Port Driver; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 btwaudio;Bluetooth Audio Device Service; C:\Windows\system32\drivers\btwaudio.sys []
S3 btwavdt;Bluetooth AVDT Service; C:\Windows\system32\drivers\btwavdt.sys []
S3 btwl2cap;Bluetooth L2CAP Service; C:\Windows\system32\DRIVERS\btwl2cap.sys []
S3 btwrchid;btwrchid; C:\Windows\system32\DRIVERS\btwrchid.sys []
S3 clwvd;HP Webcam Splitter; C:\Windows\system32\DRIVERS\clwvd.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2010-09-22 48488]
S3 gfiark;gfiark; C:\Windows\system32\drivers\gfiark.sys [2013-05-23 41032]
S3 ggflt;SEMC USB Flash Driver Filter; C:\Windows\system32\DRIVERS\ggflt.sys [2014-01-23 14448]
S3 ggsemc;SEMC USB Flash Driver; C:\Windows\system32\DRIVERS\ggsemc.sys [2014-01-23 27760]
S3 HPIR;HP TV Tuner Infrared Receiver; C:\Windows\system32\DRIVERS\HPIR.sys [2009-11-16 93184]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2009-06-10 6108416]
S3 NAVENG;NAVENG; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\ENG64.SYS [2013-04-23 126192]
S3 NAVEX15;NAVEX15; \??\C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_18.0.0.128\Definitions\VirusDefs\20130423.021\EX64.SYS [2013-04-23 2087664]
S3 netw5v64;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\netw5v64.sys [2009-06-10 5434368]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 Revoflt;Revoflt; C:\Windows\system32\DRIVERS\revoflt.sys [2009-12-30 31800]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUStor.sys [2010-02-09 239136]
S3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2009-11-28 295424]
S3 sdbus;sdbus; C:\Windows\system32\drivers\sdbus.sys [2010-11-20 109056]
S3 SRTSP;Symantec Real Time Storage Protection x64; C:\Windows\System32\Drivers\NISx64\1207000.00D\SRTSP64.SYS [2011-03-31 744568]
S3 SrvHsfHDA;SrvHsfHDA; C:\Windows\system32\DRIVERS\VSTAZL6.SYS [2009-06-10 292864]
S3 SrvHsfV92;SrvHsfV92; C:\Windows\system32\DRIVERS\VSTDPV6.SYS [2009-06-10 1485312]
S3 SrvHsfWinac;SrvHsfWinac; C:\Windows\system32\DRIVERS\VSTCNXT6.SYS [2009-06-10 740864]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2012-08-23 57856]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AESTFilters;Andrea ST Filters Service; C:\Program Files\IDT\WDM\AESTSr64.exe [2009-03-03 89600]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2010-04-16 202752]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-02-12 43336]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-02 50344]
R2 BBSvc;BingBar Service; C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\BBSvc.exe [2014-03-11 193696]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-03-03 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-03-03 1748608]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 DpHost;@C:\Program Files\DigitalPersona\Bin\DpHostW.exe,-128; C:\Program Files\DigitalPersona\Bin\DpHostW.exe [2010-04-23 445192]
R2 ezSharedSvc;Easybits Services for Windows; C:\Windows\syswow64\ezSharedSvcHost.exe [2010-04-23 514232]
R2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2012-09-27 86528]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2010-06-18 103992]
R2 hpsrv;HP Service; C:\Windows\system32\Hpservice.exe [2011-05-13 30520]
R2 HPSupportSolutionsFrameworkService;HP Support Solutions Framework Service; C:\Program Files (x86)\Hp\Common\HPSupportSolutionsFrameworkService.exe [2014-02-05 47416]
R2 HPWMISVC;HPWMISVC; C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe [2010-06-29 27192]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [2010-05-19 73728]
R2 NOBU;Norton Online Backup; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [2013-04-29 4233088]
R2 PaceLicenseDServices;PACE License Services; C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe [2011-07-09 2932224]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2013-10-26 76888]
R2 PnkBstrB;PnkBstrB; C:\Windows\syswow64\PnkBstrB.exe [2014-02-24 214520]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 STacSV;@%SystemRoot%\system32\stlang64.dll,-10122; C:\Program Files\IDT\WDM\STacSV64.exe [2010-06-09 258048]
R2 vcsFPService;Validity VCS Fingerprint Service; C:\Windows\system32\vcsFPService.exe [2010-02-23 2192176]
R3 BBUpdate;BBUpdate; C:\Program Files (x86)\Microsoft\BingBar\7.3.132.0\SeaPort.exe [2014-03-11 247968]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe [2012-08-10 1001376]
R3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-02-21 641352]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2013-11-08 250712]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 FLEXnet Licensing Service 64;FLEXnet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2013-06-28 1431888]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2010-09-22 1493352]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-07-02 116648]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-09 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-01 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-15 118896]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-04-23 1255736]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
S4 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-03 257928]
S4 NetMsmqActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@c:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
Přispějete na provoz fóra?