LNK/Agent.AK

[Twig]

Dobrý den. Mám podezření na LNK/Agent.AK. Prosím o kontrolu logu z RSIT:

Logfile of random's system information tool 1.10 (written by random/random)
Run by Milan at 2014-07-17 18:41:48
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 11 GB (15%) free of 76 GB
Total RAM: 2048 MB (33% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 18:42:13, on 17.7.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17207)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe
C:\Windows\SOUNDMAN.EXE
C:\Windows\PixArt\PAC7302\Monitor.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Garmin\Express Tray\ExpressTray.exe
C:\Program Files\HTC Home\Clock.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\ProgramData\LangSoft\OETRN.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Windows\System32\wscript.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\Milan\Downloads\Programs\RSIT.exe
C:\Program Files\trend micro\Milan.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll
O2 - BHO: WebTransBHO Class - {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} - (no file)
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O2 - BHO: Rich Media Player - {FEB703F7-E7B2-4AB0-9566-87658AC70095} - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll
O3 - Toolbar: WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O4 - HKLM\..\Run: [CTxfiHlp] CTXFIHLP.EXE
O4 - HKLM\..\Run: [NVRaidService] C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [PAC7302_Monitor] C:\Windows\PixArt\PAC7302\Monitor.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [GarminExpressTrayApp] "C:\Program Files\Garmin\Express Tray\ExpressTray.exe"
O4 - HKCU\..\Run: [Clock Widget (HTC Home)] "C:\Program Files\HTC Home\Clock.exe"
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run
O4 - HKCU\..\Run: [OEXPRESS] C:\ProgramData\LangSoft\OETRN.EXE
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [autoactivation] wscript.exe //B "C:\Users\Milan\AppData\Local\Temp\autoactivation.vbs"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1 (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [DevconDefaultDB] C:\Windows\system32\READREG /SILENT /FAIL=1 (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O4 - Startup: autoactivation.vbs
O4 - Startup: Dropbox.lnk = C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: McAfee Security Scan Plus.lnk = C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
O4 - Global Startup: WDDMStatus.lnk = C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
O4 - Global Startup: WDSmartWare.lnk = C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Stáhnout s IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: Stáhnout s IDM všechny odkazy - C:\Program Files\Internet Download Manager\IEGetAll.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: WebTran - {7E6A20FB-153F-402c-A84B-1A64E1955D3D} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra 'Tools' menuitem: &Nastavit překladač - {CC963627-B1DC-40E0-B52A-CF21EE748449} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra 'Tools' menuitem: &Slovník - {CC963627-B1DC-40E0-B52A-CF21EE748450} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &označený text - {CC963627-B1DC-40E0-B52A-CF21EE748451} - (no file)
O9 - Extra button: (no name) - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O9 - Extra 'Tools' menuitem: Přeložit &stránku - {CC963627-B1DC-40E0-B52A-CF21EE748452} - (no file)
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Garmin Core Update Service - Garmin Ltd or its subsidiaries - C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
O23 - Service: WD SmartWare Drive Manager (WDDMService) - WDC - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
O23 - Service: WD SmartWare Background Service (WDSmartWareBackgroundService) - Memeo - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe

--
End of file - 12005 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0055C089-8582-441B-A0BF-17B458C2A3A8}]
IDM integration (IDMIEHlprObj Class) - C:\Program Files\Internet Download Manager\IDMIECC.dll [2014-07-10 417816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22 62080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0E8A89AD-95D7-40EB-8D9D-083EF7066A01}]
MSS+ Identifier - C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09 96128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2DB66063-BB98-466A-AA0D-3E7ACF5ED853}]
WebTransBHO Class

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2014-04-14 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2014-04-14 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FEB703F7-E7B2-4AB0-9566-87658AC70095}]
Rich Media Player - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll [2013-03-12 120600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{BFC32E1D-EE75-4A48-BC60-104E11EE2431} -

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CTxfiHlp"=C:\Windows\system32\CTXFIHLP.EXE [2007-04-09 19968]
"NVRaidService"=C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [2010-04-09 163944]
"SoundMan"=C:\Windows\SOUNDMAN.EXE [2009-04-14 604704]
"PAC7302_Monitor"=C:\Windows\PixArt\PAC7302\Monitor.exe [2007-12-10 323584]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-02-10 61440]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"LifeCam"=C:\Program Files\Microsoft LifeCam\LifeExp.exe [2010-12-13 135536]
"APSDaemon"=C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [2014-07-03 43816]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-09-12 5110672]
"Logitech Utility"=C:\Windows\Logi_MwX.Exe [2003-12-11 20992]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"GarminExpressTrayApp"=C:\Program Files\Garmin\Express Tray\ExpressTray.exe [2014-06-09 122200]
"Clock Widget (HTC Home)"=C:\Program Files\HTC Home\Clock.exe [2011-11-28 2036736]
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2013-10-28 845168]
"OEXPRESS"=C:\ProgramData\LangSoft\OETRN.EXE [2013-12-30 26624]
"Skype"=C:\Program Files\Skype\Phone\Skype.exe [2014-05-08 21444224]
"autoactivation"=wscript.exe //B C:\Users\Milan\AppData\Local\Temp\autoactivation.vbs []
"IDMan"=C:\Program Files\Internet Download Manager\IDMan.exe [2014-07-10 3858000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Family Tree Builder Update]
C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2013-08-04 2532352]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IDMan]
C:\Program Files\Internet Download Manager\IDMan.exe [2014-07-10 3858000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage]
C:\Program Files\Samsung\Kies\KiesAirMessage.exe [2013-07-18 578560]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload]
C:\Program Files\Samsung\Kies\Kies.exe [2013-10-28 1564528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent]
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2013-10-28 311152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv]
C:\Windows\inf\ntvdm.vbe []

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Adobe Reader Synchronizer.lnk - C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
McAfee Security Scan Plus.lnk - C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
WDDMStatus.lnk - C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
WDSmartWare.lnk - C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe

C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
autoactivation.vbs
Dropbox.lnk - C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\myheritage.exe]
"Debugger=""C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"aux1"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv
"wave6"=wdmaud.drv
"mixer6"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-07-17 18:41:48 ----D---- C:\rsit
2014-07-17 18:41:48 ----D---- C:\Program Files\trend micro
2014-07-15 22:37:53 ----A---- C:\Windows\system32\sqlite3.dll
2014-07-15 22:34:10 ----D---- C:\AdwCleaner
2014-07-14 20:47:17 ----D---- C:\Program Files\WinRAR
2014-07-13 22:21:18 ----D---- C:\Program Files\DjMixerProfessional
2014-07-13 13:35:33 ----D---- C:\Users\Milan\AppData\Roaming\SynthMaker
2014-07-13 13:35:25 ----D---- C:\Users\Milan\AppData\Roaming\Acoustica
2014-07-13 13:30:30 ----D---- C:\Program Files\VST
2014-07-13 13:29:40 ----D---- C:\ProgramData\Acoustica
2014-07-13 13:29:38 ----D---- C:\Program Files\Acoustica Mixcraft 6
2014-07-13 13:13:00 ----D---- C:\Program Files\Internet Download Manager
2014-07-12 20:20:43 ----D---- C:\Program Files\iPod
2014-07-12 20:20:40 ----D---- C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-07-12 20:20:40 ----D---- C:\Program Files\iTunes
2014-07-10 16:51:05 ----A---- C:\Windows\system32\drivers\idmwfp.sys
2014-07-09 06:14:11 ----A---- C:\Windows\system32\win32k.sys
2014-07-09 06:14:10 ----A---- C:\Windows\system32\osk.exe
2014-07-09 06:13:57 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 06:13:57 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-07-09 06:13:57 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-07-09 06:13:56 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 06:13:56 ----A---- C:\Windows\system32\iernonce.dll
2014-07-09 06:13:55 ----A---- C:\Windows\system32\urlmon.dll
2014-07-09 06:13:55 ----A---- C:\Windows\system32\jsproxy.dll
2014-07-09 06:13:55 ----A---- C:\Windows\system32\iedkcs32.dll
2014-07-09 06:13:54 ----A---- C:\Windows\system32\msfeeds.dll
2014-07-09 06:13:54 ----A---- C:\Windows\system32\ieUnatt.exe
2014-07-09 06:13:54 ----A---- C:\Windows\system32\ieapfltr.dll
2014-07-09 06:13:54 ----A---- C:\Windows\system32\dxtmsft.dll
2014-07-09 06:13:52 ----A---- C:\Windows\system32\msrating.dll
2014-07-09 06:13:52 ----A---- C:\Windows\system32\ie4uinit.exe
2014-07-09 06:13:51 ----A---- C:\Windows\system32\wininet.dll
2014-07-09 06:13:51 ----A---- C:\Windows\system32\iesetup.dll
2014-07-09 06:13:51 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 06:13:49 ----A---- C:\Windows\system32\ieui.dll
2014-07-09 06:13:49 ----A---- C:\Windows\system32\dxtrans.dll
2014-07-09 06:13:48 ----A---- C:\Windows\system32\ieframe.dll
2014-07-09 06:13:46 ----A---- C:\Windows\system32\mshtmled.dll
2014-07-09 06:13:45 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-07-09 06:13:44 ----A---- C:\Windows\system32\MshtmlDac.dll
2014-07-09 06:13:44 ----A---- C:\Windows\system32\iertutil.dll
2014-07-09 06:13:42 ----A---- C:\Windows\system32\mshtml.dll
2014-07-09 06:13:42 ----A---- C:\Windows\system32\jscript9diag.dll
2014-07-09 06:13:40 ----A---- C:\Windows\system32\vbscript.dll
2014-07-09 06:13:36 ----A---- C:\Windows\system32\jscript9.dll
2014-07-09 06:12:07 ----A---- C:\Windows\system32\qedit.dll
2014-07-09 06:11:59 ----A---- C:\Windows\system32\drivers\afd.sys
2014-07-09 06:11:30 ----A---- C:\Windows\system32\wdigest.dll
2014-07-09 06:11:30 ----A---- C:\Windows\system32\TSpkg.dll
2014-07-09 06:11:30 ----A---- C:\Windows\system32\schannel.dll
2014-07-09 06:11:30 ----A---- C:\Windows\system32\ncrypt.dll
2014-07-09 06:11:30 ----A---- C:\Windows\system32\msv1_0.dll
2014-07-09 06:11:30 ----A---- C:\Windows\system32\kerberos.dll
2014-07-09 06:11:29 ----A---- C:\Windows\system32\credssp.dll
2014-07-09 06:10:52 ----A---- C:\Windows\system32\aepdu.dll
2014-07-09 06:10:50 ----A---- C:\Windows\system32\aeinv.dll
2014-07-09 06:10:12 ----A---- C:\Windows\system32\lsasrv.dll
2014-07-05 10:49:43 ----D---- C:\Program Files\Common Files\Logitech
2014-07-05 10:49:42 ----A---- C:\Windows\system32\LMOUSE32.DLL
2014-07-05 10:49:42 ----A---- C:\Windows\system32\LMOUSE16.DLL
2014-07-05 10:49:42 ----A---- C:\Windows\system32\LGUICOM.DLL
2014-07-05 10:49:42 ----A---- C:\Windows\system32\COMNCTR.DLL
2014-07-05 10:49:38 ----N---- C:\Windows\system32\lmoufrc.dll
2014-07-05 10:49:38 ----N---- C:\Windows\system32\LCOINST.DLL
2014-07-05 10:49:38 ----N---- C:\Windows\system32\drivers\LCCFLTR.SYS
2014-07-05 10:49:38 ----N---- C:\Windows\system32\drivers\L8042PR2.SYS
2014-07-05 10:49:38 ----D---- C:\Program Files\Logitech
2014-07-05 10:49:38 ----A---- C:\Windows\system32\drivers\lmouflt2.sys
2014-07-05 10:49:38 ----A---- C:\Windows\system32\drivers\LHIDUSB.SYS
2014-07-05 10:49:38 ----A---- C:\Windows\system32\drivers\LHIDFLT2.SYS
2014-07-05 10:49:38 ----A---- C:\Windows\LOGI_MWX.EXE
2014-07-01 18:12:03 ----A---- C:\Windows\system32\FNTCACHE.DAT
2014-06-29 22:09:50 ----D---- C:\Users\Milan\AppData\Roaming\IDM
2014-06-18 15:18:37 ----A---- C:\Windows\system32\drivers\ssudmdm.sys
2014-06-18 15:18:37 ----A---- C:\Windows\system32\drivers\ssudbus.sys

======List of files/folders modified in the last 1 month======

2014-07-17 18:42:00 ----D---- C:\Windows\Prefetch
2014-07-17 18:41:57 ----D---- C:\Windows\Temp
2014-07-17 18:41:48 ----RD---- C:\Program Files
2014-07-17 18:21:54 ----D---- C:\Users\Milan\AppData\Roaming\Skype
2014-07-17 18:07:42 ----D---- C:\Windows\system32\config
2014-07-17 16:50:41 ----D---- C:\Users\Milan\AppData\Roaming\Dropbox
2014-07-17 16:50:29 ----D---- C:\Users\Milan\AppData\Roaming\DropboxMaster
2014-07-17 16:49:18 ----D---- C:\Program Files\HTC Home
2014-07-17 16:41:05 ----D---- C:\Windows\System32
2014-07-17 16:41:05 ----D---- C:\Windows\inf
2014-07-17 16:41:05 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-07-16 20:53:55 ----D---- C:\Users\Milan\AppData\Roaming\DMCache
2014-07-16 16:47:41 ----SHD---- C:\System Volume Information
2014-07-15 22:48:29 ----D---- C:\Program Files\Common Files
2014-07-15 22:48:18 ----HD---- C:\ProgramData
2014-07-14 16:47:18 ----D---- C:\Program Files\JDownloader
2014-07-13 13:20:41 ----D---- C:\Windows
2014-07-13 13:18:53 ----D---- C:\Windows\system32\drivers
2014-07-13 13:08:33 ----D---- C:\Windows\debug
2014-07-12 20:23:03 ----SHD---- C:\Windows\Installer
2014-07-12 20:20:41 ----D---- C:\Program Files\Common Files\Apple
2014-07-12 20:14:10 ----D---- C:\Windows\system32\catroot
2014-07-09 19:23:48 ----D---- C:\Windows\rescache
2014-07-09 06:33:23 ----D---- C:\Windows\winsxs
2014-07-09 06:29:23 ----D---- C:\Windows\system32\en-US
2014-07-09 06:29:23 ----D---- C:\Program Files\Windows Journal
2014-07-09 06:29:22 ----D---- C:\Program Files\Internet Explorer
2014-07-09 06:29:21 ----D---- C:\Windows\system32\Dism
2014-07-09 06:29:21 ----D---- C:\Windows\ehome
2014-07-09 06:29:20 ----SD---- C:\Windows\system32\CompatTel
2014-07-09 06:29:20 ----D---- C:\Windows\system32\cs-CZ
2014-07-09 06:22:23 ----D---- C:\Windows\system32\MRT
2014-07-09 06:18:32 ----A---- C:\Windows\system32\MRT.exe
2014-07-09 06:17:58 ----D---- C:\ProgramData\Microsoft Help
2014-07-09 06:09:24 ----D---- C:\Windows\system32\catroot2
2014-07-08 21:15:17 ----A---- C:\Windows\system32\FlashPlayerApp.exe
2014-07-06 21:29:21 ----D---- C:\Program Files\Google
2014-07-05 10:50:00 ----D---- C:\Windows\system32\DriverStore
2014-07-05 10:49:39 ----HD---- C:\Program Files\InstallShield Installation Information
2014-07-05 10:47:48 ----D---- C:\Program Files\Common Files\LogiShrd
2014-07-05 10:47:36 ----D---- C:\ProgramData\Logishrd
2014-07-05 09:42:09 ----D---- C:\Windows\system32\Tasks
2014-06-30 21:02:57 ----SHD---- C:\Boot
2014-06-28 08:23:28 ----D---- C:\Program Files\CCleaner
2014-06-22 22:42:24 ----SD---- C:\ProgramData\Microsoft
2014-06-18 13:28:20 ----D---- C:\ProgramData\Package Cache
2014-06-18 13:26:29 ----D---- C:\ProgramData\Garmin
2014-06-18 13:26:16 ----D---- C:\Program Files\Garmin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 epfwwfp;epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
R0 nvatabus;nvatabus; C:\Windows\system32\DRIVERS\nvatabus.sys [2004-12-07 87936]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 Si3114r5;SiI-3114 SoftRaid 5 Controller; C:\Windows\system32\DRIVERS\Si3114r5.sys [2008-04-29 210472]
R0 SiFilter;SATALink driver accelerator; C:\Windows\system32\DRIVERS\SiWinAcc.sys [2008-04-29 17064]
R0 SiRemFil;SATALink External Device Filter; C:\Windows\system32\DRIVERS\SiRemFil.sys [2008-04-29 12200]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\Windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 avgtp;avgtp; \??\C:\Windows\system32\drivers\avgtpx86.sys [2014-06-02 42784]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
R1 EpfwLWF;Epfw NDIS LightWeight Filter; C:\Windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
R2 epfw;epfw; C:\Windows\system32\DRIVERS\epfw.sys [2013-09-17 174400]
R2 IDMWFP;IDMWFP; C:\Windows\system32\DRIVERS\idmwfp.sys [2014-06-09 113680]
R2 Parvdm;Parvdm; C:\Windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\Windows\system32\drivers\RTKVAC.SYS [2009-06-18 4172832]
R3 atikmdag;atikmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2010-02-11 4450816]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys [2012-08-21 26840]
R3 LHidFlt2;Logitech HID/USB Mouse Filter Driver; C:\Windows\system32\DRIVERS\LHidFlt2.Sys [2003-12-11 25630]
R3 LHidUsb;Logitech USB Receiver device driver; C:\Windows\System32\Drivers\LHidUsb.Sys [2003-12-11 37916]
R3 libusb0;libusb-win32 - Kernel Driver 04/08/2011 1.2.4.0; C:\Windows\system32\DRIVERS\libusb0.sys [2013-09-23 35776]
R3 LMouFlt2;Logitech Mouse Class Filter Driver; C:\Windows\System32\Drivers\LMouFlt2.sys [2003-12-11 70894]
R3 MSHUSBVideo;NX6000/NX3000/VX2000/VX5000/VX5500/VX7000/Cinema Filter Driver; C:\Windows\System32\Drivers\nx6000.sys [2010-12-13 30576]
R3 NVENETFD;NVIDIA nForce Networking Controller Driver; C:\Windows\system32\DRIVERS\nvmfdx32.sys [2007-11-18 1040544]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [2012-09-19 10088]
S2 CX23880;WinFast CX2388x WDM Video Capture.; C:\Windows\system32\drivers\cx88vid.sys [2005-08-11 163584]
S2 CXTUNE;Conexant 2388x Tuner; C:\Windows\system32\drivers\CX88TUNE_IBV32.sys [2006-11-02 17664]
S3 aic78xx;aic78xx; C:\Windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\Windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\Windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 COMMONFX.DLL;COMMONFX.DLL; C:\Windows\system32\COMMONFX.DLL [2007-04-18 98600]
S3 CT20XUT.DLL;CT20XUT.DLL; C:\Windows\system32\CT20XUT.DLL [2007-04-12 164608]
S3 ctac32k;Creative AC3 Software Decoder; C:\Windows\system32\drivers\ctac32k.sys [2007-04-10 511272]
S3 ctaud2k;Creative Audio Driver (WDM); C:\Windows\system32\drivers\ctaud2k.sys [2007-04-10 520488]
S3 CTAUDFX.DLL;CTAUDFX.DLL; C:\Windows\system32\CTAUDFX.DLL [2007-04-12 546048]
S3 ctdvda2k;Creative DVD-Audio Device Driver; C:\Windows\system32\drivers\ctdvda2k.sys [2007-04-10 347128]
S3 CTEAPSFX.DLL;CTEAPSFX.DLL; C:\Windows\system32\CTEAPSFX.DLL [2007-04-12 168192]
S3 CTEDSPFX.DLL;CTEDSPFX.DLL; C:\Windows\system32\CTEDSPFX.DLL [2007-04-12 280320]
S3 CTEDSPIO.DLL;CTEDSPIO.DLL; C:\Windows\system32\CTEDSPIO.DLL [2007-04-12 128768]
S3 CTEDSPSY.DLL;CTEDSPSY.DLL; C:\Windows\system32\CTEDSPSY.DLL [2007-04-12 323328]
S3 CTERFXFX.DLL;CTERFXFX.DLL; C:\Windows\system32\CTERFXFX.DLL [2007-04-12 94976]
S3 CTEXFIFX.DLL;CTEXFIFX.DLL; C:\Windows\system32\CTEXFIFX.DLL [2007-04-12 1317632]
S3 CTHWIUT.DLL;CTHWIUT.DLL; C:\Windows\system32\CTHWIUT.DLL [2007-04-12 66816]
S3 ctprxy2k;Creative Proxy Driver; C:\Windows\system32\drivers\ctprxy2k.sys [2007-04-10 14632]
S3 CTSBLFX.DLL;CTSBLFX.DLL; C:\Windows\system32\CTSBLFX.DLL [2007-04-12 560384]
S3 ctsfm2k;Creative SoundFont Management Device Driver; C:\Windows\system32\drivers\ctsfm2k.sys [2007-04-10 157480]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys [2014-03-19 88832]
S3 emupia;E-mu Plug-in Architecture Driver; C:\Windows\system32\drivers\emupia2k.sys [2007-04-10 92968]
S3 GMSIPCI;GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS []
S3 ha10kx2k;Creative Hardware Abstract Layer Driver; C:\Windows\system32\drivers\ha10kx2k.sys [2007-04-10 797992]
S3 hap16v2k;Creative P16V HAL Driver; C:\Windows\system32\drivers\hap16v2k.sys [2007-04-10 163112]
S3 hap17v2k;Creative P17V HAL Driver; C:\Windows\system32\drivers\hap17v2k.sys [2007-04-10 189736]
S3 L8042PR2;Logitech PS/2 Mouse Filter Driver; C:\Windows\System32\Drivers\l8042pr2.sys [2003-12-11 51582]
S3 LHidFilt;Logitech SetPoint KMDF HID Filter Driver; C:\Windows\system32\DRIVERS\LHidFilt.Sys [2013-05-23 43800]
S3 LMouFilt;Logitech SetPoint KMDF Mouse Filter Driver; C:\Windows\system32\DRIVERS\LMouFilt.Sys [2013-05-23 37528]
S3 LUsbFilt;Logitech SetPoint KMDF USB Filter; C:\Windows\System32\Drivers\LUsbFilt.Sys [2013-05-23 28312]
S3 NTACCESS;NTACCESS; \??\D:\NTACCESS.sys []
S3 nvnetbus;NVIDIA Network Bus Enumerator; C:\Windows\system32\DRIVERS\nvnetbus.sys [2004-11-24 12928]
S3 ossrv;Creative OS Services Driver; C:\Windows\system32\drivers\ctoss2k.sys [2007-04-10 126760]
S3 PAC7302;Eye 312; C:\Windows\system32\DRIVERS\PAC7302.SYS [2009-04-28 461824]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 14848]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 SetupNTGLM7X;SetupNTGLM7X; \??\D:\NTGLM7X.sys []
S3 sisagp;Filtr SIS sběrnice AGP; C:\Windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys [2014-03-19 184192]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-20 28032]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 49152]
S3 USBAAPL;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl.sys [2012-12-13 45056]
S3 viaagp;Filtr VIA sběrnice AGP; C:\Windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\Windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]
S3 WDC_SAM;WD SCSI Pass Thru driver; C:\Windows\system32\DRIVERS\wdcsam.sys [2009-02-13 11520]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-06-12 43336]
R2 Ati External Event Utility;Ati External Event Utility; C:\Windows\system32\Ati2evxx.exe [2010-02-11 733184]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-31 390504]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
R2 Garmin Core Update Service;Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [2014-06-09 435032]
R2 MSCamSvc;MSCamSvc; C:\Program Files\Microsoft LifeCam\MSCamS32.exe [2010-12-13 135536]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [2014-01-28 1731896]
R2 UxTuneUp;@%SystemRoot%\System32\uxtuneup.dll,-4096; C:\Windows\System32\svchost.exe [2009-07-14 20992]
R2 WDDMService;WD SmartWare Drive Manager; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [2009-10-14 98304]
R2 WDSmartWareBackgroundService;WD SmartWare Background Service; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [2009-06-16 20480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-30 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-08 262320]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2013-09-11 46688]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-09-01 1044816]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-07-30 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-06-19 108032]
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-07-08 553288]
S3 McComponentHostService;McAfee Security Scan Component Host Service; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [2014-04-09 235696]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2013-07-30 1343400]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]

[vyosek]

Zdravim

Udelejte MBAM dle tohoto http://forum.viry.cz/viewtopic.php?f=29&t=137928

[Twig]

Omlouvám se ale vypadá to, že to bude trvat do rána.

[vyosek]

Jasny, casu dost

[Twig]

Konečně hotovo. Vkládám log z MBAM.
ESET trvale hlásí:
LNK/Agent.AK
wscript.lnk. Bylo by řešením vymazat v registrech všechny položky klíčů s tímto odkazem (wscript)?

Malwarebytes Anti-Malware
www.malwarebytes.org

Datum skenování: 17.7.2014
Čas skenování: 20:26:01
Protokol:
Správce: Ano

Verze: 2.00.2.1012
Databáze malwaru: v2014.07.17.09
Databáze rootkitů: v2014.07.14.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Self-protection: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x86
Souborový systém: NTFS
Uživatel: Milan

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 624780
Uplynulý čas: 20 hod, 3 min, 0 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristics: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(No malicious items detected)

Moduly: 0
(No malicious items detected)

Klíče registru: 0
(No malicious items detected)

Hodnoty registru: 0
(No malicious items detected)

Data registru: 0
(No malicious items detected)

Složky: 0
(No malicious items detected)

Soubory: 117
PUP.Optional.OpenCandy.A, C:\AdwCleaner\Quarantine\C\Users\Milan\AppData\Roaming\OpenCandy\AB8D63932E1B4E14831BE2C35C0D60E0\LatestDLMgr.exe.vir, , [b7e627798fec8fa741e1e82c45bc946c],
RiskWare.Tool.CK, C:\Autodesk\Autodesk_Revit_2013_Czech_Win_32-64bit\AD 2013 Kn x86.exe, , [c5d82e7217648fa7fb10d4ebd729a957],
PUP.RiskwareTool.CK, C:\Autodesk\Autodesk_Revit_2013_Czech_Win_32-64bit\xf-adesk2012x32.exe, , [415c237de09ba88e3d88e41c3fc328d8],
RiskWare.Tool.CK, C:\Program Files\Autodesk\Revit 2013\Program\AD 2013 Kn x86.exe, , [5845d2ceeb9088aebd4e8f308b7519e7],
PUP.Hacktool.Patcher, C:\Program Files\EarMaster Pro 5\earmaster.5.pro-patch.exe, , [742947592259a591efcfc243f80858a8],
PUP.Hacktool.Patcher, C:\Program Files\EarMaster School 5\earmaster.5.pro-patch.exe, , [1f7e237d5229ef473b8332d37d83d22e],
Backdoor.Agent, C:\ProgramData\IDM Patch\IDM Patch\1.0.0.0\Patch.exe, , [ccd18b15e99273c3b1037356778a07f9],
PUP.Riskware.Patcher, C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1-Final-+-Patch--12-7-2014.zip, , [900d950bff7c67cfb531f91ab54ca55b],
PUP.RiskwareTool.CK, C:\Users\Milan\Downloads\Compressed\WinRAR-5.10-CZ-(x32).rar, , [3b62544cafccab8b5247a22ba65b0af6],
PUP.Riskware.Patcher, C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1-Final-+-Patch--12-7-2014\Internet Download Manager 6.21 Build 1 Final Retail + Patch\Patch.6.21.zip, , [98054f5114671a1cb630e72c6c95df21],
BitcoinMiner, C:\Windows\inf\msjxba\msjxba.exe, , [7429d3cd0378261036818e7604fd0000],
Trojan.Agent.W, C:\Windows\Setup\SCRIPTS\WINDOWS7LOADER.exe, , [9508c7d9bcbf42f47bd43c3045bf0000],
PUP.Optional.OpenCandy, C:\Install\WinAmp\winamp5623_full_emusic-7plus_all.exe, , [336ac0e07dfe42f431e0daf0c53f49b7],
RiskWare.Tool.CK, E:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP183\A0137734.exe, , [6e2fe8b8f08b82b4204cb0296d947c84],
PUP.Keygen.Intro, E:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP183\A0137739.EXE, , [d0cd68389fdc6dc953df5efc22e2af51],
PUP.Keygen.Intro, E:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP183\A0144079.EXE, , [1f7e2878afcc7db95ad876e4867e7090],
PUP.Keygen.Intro, E:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP183\A0144082.EXE, , [78257e22b8c36acc56dcaeacc4403ac6],
PUP.Keygen.Intro, E:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP183\A0144085.EXE, , [0b92653b7407be78f63cd882768e3bc5],
PUP.Optional.Spigot.A, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP220\A0222837.exe, , [336a2b75cdae38fe0b8ed056f808659b],
PUP.Optional.Spigot.A, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP234\A0238546.exe, , [7c21cbd52853b97d0d98b6d357aa06fa],
PUP.Optional.OpenCandy.A, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP284\A0256094.exe, , [128bbee23b40e353dc4635df2fd2ac54],
PUP.Optional.OpenCandy, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP287\A0258275.exe, , [405dacf49ae158de828fae1c8183b050],
PUP.Optional.OpenCandy, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP305\A0261456.exe, , [4558445cf6854bebf120d3f722e23ec2],
PUP.Adware.Gotclip.ScamLotto, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP308\A0264840.exe, , [b9e41d83fa8156e0b01bf099936d41bf],
RiskWare.Tool.CK, F:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP369\A0300559.exe, , [d2cb0b95e09b65d13bd0f7c89d637f81],
PUP.Optional.Spigot.A, F:\Documents and Settings\All Users\Data aplikací\YTD YouTube Downloader & Converter\ytd_installer.exe, , [029b3868d1aaea4cbddc2ff770907f81],
RiskWare.Tool.CK, G:\Autodesk\Autodesk-2013-Universal-Keygen-janco.rar, , [7e1fc4dc334802347e8d2c93f30d32ce],
Trojan.Agent.CK, G:\Autodesk\Autodesk-2014-keygen.rar, , [4e4fe6baee8dd06623646bd56b978c74],
Trojan.Agent.CK, G:\Autodesk\Autodesk-2014-Product-KeyGen.rar, , [267770307dfeb5813453271932d0af51],
Trojan.Agent.CK, G:\Autodesk\Autodesk-2014-X-force-KeyGen.zip, , [4b523b65c0bbf83ed8af9fa19171b54b],
PUP.RiskwareTool.CK, G:\Autodesk\Autodesk-keygen-2012.rar, , [900d5b45136838fef1d420e06c96fe02],
RiskWare.Tool.CK, G:\Autodesk\Autodesk-keygen-2013.rar, , [dcc1fca4adce40f60dfe0db2718fc838],
Trojan.Agent.CK, G:\Autodesk\Autodesk-keygen-2014.rar, , [0697712fa4d7c472315677c9fe04a25e],
RiskWare.Tool.CK, G:\Autodesk\Autodesk-2013-Universal-Keygen-janco\AD 2013 Kn x86.exe, , [1885445c28537cba0803fbc4d62a11ef],
PUP.RiskwareTool.CK, G:\Autodesk\Autodesk-keygen-2012\xf-adesk2012x32.exe, , [1d80d0d0a6d50f2716af37c992707090],
PUP.RiskwareTool.CK, G:\Install\Adobe\Adobe Acrobat Pro XI and CS 6 - Crack Final by By_OpenGL_India.rar, , [277659475625162081a238d23fc329d7],
CrackTool.Agent, G:\Install\Adobe\adobe.acrobat.xi.pro.patch-MPT-DeGun TPB 2012.rar, , [cbd26f314b30cd69d0b257d015eccd33],
Trojan.Agent.CK, G:\Install\Adobe\Adobe Acrobat X Pro 10.1.2 + keygen + update + host patch(in key gen) + návod\Keygen\Keygen.exe, , [bedfc2dee49757df5e6b0d726d9323dd],
Trojan.Agent.CK, G:\Install\Adobe\Adobe Acrobat X Pro v10.1.4.38 Multilingual Portable + Keygen [WwW.ZoNaTorrent.CoM]\Adobe Acrobat X Pro v10.1.4.38 Multilingual Portable + Keygen---PMS\Keygen\Keygen.exe, , [1f7edac680fb83b327a2483722de5ba5],
RiskWare.Tool.CK, G:\Install\Autodesk_Inventor_2013\Autodesk-keygen-2013.rar, , [811c9c04d6a542f48c7fcbf4b84856aa],
Malware.Gen, G:\Install\Autodesk_Inventor_2013\Autodesk_AIS10_keygen.rar, , [7528b1efbcbf2511ea23d78641bf58a8],
RiskWare.Tool.CK, G:\Install\Autodesk_Inventor_2013\Autodesk-keygen-2013\Crack-Win\xf-adsk2013_x32.exe, , [faa33868b5c60d29eb20239cc23e758b],
RiskWare.Tool.CK, G:\Install\Autodesk_Inventor_2013\Autodesk-keygen-2013\Crack-Win\xf-adsk2013_x64.exe, , [2c718c14453685b19279883725db9967],
Trojan.Agent, G:\Install\BSPlayer\BS.Player.Pro.v2.63.1071.Multilingual.Incl.Keymaker-CORE.rar, , [3667069ab5c6a2943c57479a53ae40c0],
Trojan.Agent, G:\Install\BSPlayer\BS.Player.Pro.v2.63.1071.Multilingual-CORE\keygen.exe, , [06975947304ba690b5de1cc533ce8878],
PUP.Keygen.Intro, G:\Install\Corel\Corel.WinDVD.Pro.v11.0.0.342.Multilingual.Incl.Keymaker\CORE10k.EXE, , [1786346c017a1a1c61d1f86257ad847c],
PUP.Keygen.Intro, G:\Install\Downloadery\HiDownload.Platinum.v7.996.Incl.Keymaker-CORE\CORE10k.EXE, , [7f1ea9f73f3c51e5d45ef7636e96649c],
Trojan.Agent.CK, G:\Install\Downloadery\HiDownload.Platinum.v7.996.Incl.Keymaker-CORE\keygen.exe, , [a5f8eab6e3981c1abe0b56299c64bb45],
Riskware.Tool.CK, G:\Install\Downloadery\Internet download manager\IDM.6.12.22\IDM.6.12.22.rar, , [6c31e7b9ccafe2549da476f2ca366e92],
Riskware.Tool.CK, G:\Install\Downloadery\Internet download manager\IDM.6.12.22\IDM.6.12.22\Keygen\Keygen.exe, , [f3aacbd576050c2ac978cf9901ffd729],
Riskware.Tool.CK, G:\Install\Downloadery\Internet download manager\IDM.6.12.22\IDM.6.12.22\Keygen\Patch.exe, , [1c81a7f9de9d3bfbbf82c6a220e0c53b],
RiskWare.Tool.CK, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 build 22 Final [ChingLiu]\Keygen-Patch UnREaL RCE\Keygen.and.Patch-UnREaL.exe, , [c9d44c54fa81a09609de644e40c48f71],
RiskWare.Tool.CK, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 build 23 Final Retail [ChingLiu]\Keygen-Patch UnREaL RCE\Keygen.and.Patch-UnREaL.exe, , [0796871989f2b87ed0177141e123f010],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 Final Build 22 + Patchs\Patchs\Patch 1\patch.exe, , [faa3e9b7611a9a9cd5e99174ef1116ea],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 Final Build 22 + Patchs\Patchs\Patch 2\idm.v6.xx.release.3-patch.exe, , [acf14a56f8832e0808b6c1444eb208f8],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 Final Build 23 + Patchs\Patchs\Patch 1\patch.exe, , [7f1e4e528bf0d85ef9c57b8a43bd5ba5],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet Download Manager 6.12 Final Build 23 + Patchs\Patchs\Patch 2\idm.v6.xx.release.3-patch.exe, , [bce10a96c2b90d29f3cbf11478888c74],
RiskWare.Tool.CK, G:\Install\Downloadery\Internet download manager\Internet Download Manager v6.12 Build 23 Final Incl Patch-Instalován\Internet Download Manager v6.12 Build 23 Final.rar, , [3a63455b87f4072f994e61512bd918e8],
RiskWare.Tool.CK, G:\Install\Downloadery\Internet download manager\Internet Download Manager v6.12 Build 23 Final Incl Patch-Instalován\Internet Download Manager v6.12 Build 23 Final\Internet Download Manager v6.12 Build 23 Final\Patch + Keygen.exe, , [138a227ec8b340f6e304c8ea4eb6bc44],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet-Download-Manager--IDM-6.05-crack\Internet-Download-Manager--IDM-6.05-crack.rar, , [2479673926552e084c723bca09f77e82],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet-Download-Manager--IDM-6.05-crack\Internet Download Manager IDM 6.05 crack\Patch 6.xx.exe, , [138a2e726d0ecc6a1ba3ec19fe020ef2],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet-Download-Manager--IDM-6.05-crack\Internet Download Manager IDM 6.05 crack\PATCH UnREaL RCE.exe, , [e3bad4cc1b608ea806b837ce4cb4ef11],
Spyware.Password, G:\Install\Downloadery\Internet download manager\Internet-Download-Manager--IDM-6.05-crack\Internet Download Manager IDM 6.05 crack\SnDk&p.exe, , [a9f449574b3050e62cf305ec30d0a060],
PUP.Hacktool.Patcher, G:\Install\Downloadery\Internet download manager\Internet-Download-Manager--IDM-6.05-crack\Internet Download Manager IDM 6.05 crack\IDM 6.05 Build 12\PATCH UnREaL RCE.exe, , [d3cac6da8bf071c5556944c1827e936d],
PUP.Optional.MyEmoticons.A, G:\Install\Downloadery\Youtubedownloader\YTDSetup.exe, , [702dc3ddd5a659ddb2ec114e16eb9769],
RiskWare.Tool.CK, G:\Install\FastStone Capture 6.7 Full Keygen\FastStone-Capture-6.7-Full-Keygen.rar, , [9904564a15666ec8158723af27dab947],
RiskWare.Tool.CK, G:\Install\FastStone Capture 6.7 Full Keygen\FastStone Capture 6.7 Full Keygen - www.XP-ZONE.tk\keygen.exe, , [f0ad1f81700b82b4277526ac827f12ee],
PUP.Keygen.Intro, G:\Install\Grafika\Abrosoft.FantaMorph.Deluxe.5.4.0.Multilingual.rar, , [dfbeb7e9accf47ef90a26eecbe4603fd],
PUP.Hacktool.Patcher, G:\Install\Grafika\Morpheus_Photo_Animation_Suite_Industrial_3.16_hatcat.rar, , [811c534d56255dd95c621aeb6f91c739],
PUP.Keygen.Intro, G:\Install\Grafika\Abrosoft.FantaMorph.Deluxe.5.4.0.Multilingual\CORE.rar, , [3766fca4b6c595a1ce644911de261be5],
PUP.Keygen.Intro, G:\Install\Grafika\Abrosoft.FantaMorph.Deluxe.5.4.0.Multilingual\CORE\CORE\CORE10k.EXE, , [891420803348251183af500a966e8f71],
PUP.Hacktool.Patcher, G:\Install\Grafika\Morpheus_Photo_Animation_Suite_Industrial_3.16_hatcat\Morpheus_Photo_Animation_Suite_Industrial_3.16_hatcat\MPT\morpheus.photo.animation.suite.3.16-patch.exe, , [e9b46c34364552e4b905ec195ea29c64],
PUP.Optional.Somoto, G:\Install\HTCHome\htchome_setup.exe, , [c7d65a467209f54107428841ec187d83],
PUP.Hacktool.Patcher, G:\Install\IDM\IDM-6.17-build-8-incl-crack-Cz_Ge0.rar, , [f4a99f01017a1f179c22fc099d631ce4],
TheftMarker.Crude, G:\Install\PCTools\PC.Tools.Performance.Toolkit.v1.0.0.114.MULTILINGUAL-CRD\crd.exe, , [2b72128e542706309c41756bae53c33d],
TheftMarker.Crude, G:\Install\PCTools\PC.Tools.Registry.Mechanic.v10.0.0.132.MULTILINGUAL\crd.exe, , [f7a6534dfb80261002dba040d32e02fe],
TheftMarker.Crude, G:\Install\PCTools\PC.Tools.Registry.Mechanic.v10.0.0.132.MULTILINGUAL_WarezBot\crd.exe, , [3b62b6ea215ad75f409d36aa7b86867a],
PUP.Hacktool.Patcher, G:\Install\PCTools\PCOptimizer\patch.rar, , [8518bde3f78485b1efcf4db8d52b9a66],
PUP.Hacktool.Patcher, G:\Install\PCTools\PCOptimizer\PC_Optimizer_Pro_6.0.9.1.rar, , [aeefc0e07b00a294249afe07718f27d9],
PUP.Hacktool.Patcher, G:\Install\PCTools\PCOptimizer\PC_Optimizer_Pro_6.0.9.1\patch.rar, , [77261f816a11df57863807fee21edd23],
PUP.Hacktool.Patcher, G:\Install\PCTools\PCOptimizer\PC_Optimizer_Pro_6.0.9.1\patch\pc.optimizer.pro.v6.x.x-patch.exe, , [7f1eb0f088f3ef47e7d727de49b7f50b],
TheftMarker.Crude, G:\Install\PCTools\PCT.Perf.Toolkit.2011.1.0.0.114\Www.Cybermania.Org_PCT.Perf.Toolkit.2011.rar, , [2f6ea9f77a011521706d6b758d7426da],
TheftMarker.Crude, G:\Install\PCTools\PCT.Perf.Toolkit.2011.1.0.0.114\serial\crd.exe, , [c8d57c2444370432e1fc38a8ba47a65a],
PUP.Optional.OpenCandy, G:\Install\Přehravače\gom-player_2.1.49.5139.EXE, , [e2bbadf37dfe2a0c18f9715947bd728e],
PUP.Optional.OpenCandy, G:\Install\Přehravače\KMPlayer_EN_3.1.0.0_R2.exe, , [e1bc3868d1aa81b5f51cdeeccb3912ee],
RiskWare.Tool.CK, G:\Install\QuickTime 7 Pro\QuickTime 7.7 Pro\Quick Time Player Pro.v.7.7(1680.34)\Keygen.rar, , [18852f71c5b6a88e21575584798809f7],
Packer.ModifiedUPX, G:\Install\Replay Media Catcher 4.04\keygen\kg.exe, , [adf03e6274072412cdbfe7d74bb505fb],
PUP.Keygen.Intro, G:\Install\SuperAntiSpyware\SUPERAntiSpyware.Professional.v5.0.1144.Multilingual.Incl.Keymaker-CORE\CORE10k.EXE, , [910cd9c77efd66d0e74b1446ce36e719],
Malware.Packer, G:\Install\SuperAntiSpyware\SUPERAntiSpyware.Professional.v5.0.1144.Multilingual.Incl.Keymaker-CORE\keygen.exe, , [7f1e1f81d2a976c0a270be9551afde22],
Trojan.Agent.CK, G:\Install\Ulead VideoStudio Plus 11.5 + Keygen & Dolby Digital PowerPack\Ulead VideoStudio Plus 11\keygen.exe, , [217c5f41146791a5a52476092ad632ce],
PUP.Optional.OpenCandy, G:\Install\WinAmp\winamp5623_full_emusic-7plus_all.exe, , [c9d4f4acb8c36ec889885674b74da65a],
PUP.Hacktool.Patcher, G:\Milan\Install-SW\EarMaster.zip, , [7e1fe7b9e09bad89843a7095669a36ca],
PUP.Hacktool.Patcher, G:\Milan\Install-SW\EarMaster\EarMaster\PATCH\earmaster.5.pro-patch.exe, , [9607079976057abc506eaa5b29d7f30d],
PUP.Keygen.Intro, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP135\A0020193.EXE, , [d4c9f2aee299191d51e1c19959abf20e],
PUP.Keygen.Intro, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP135\A0020380.EXE, , [0895128ef289eb4bf14121394cb850b0],
PUP.Keygen.Intro, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP135\A0020381.EXE, , [6b32ccd482f97fb7ea484e0cf014db25],
PUP.Hacktool.Patcher, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP167\A0030441.exe, , [f4a9fba5a5d65cda704e64a1639d0ff1],
PUP.Keygen.Intro, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP167\A0036460.EXE, , [8d100e92a5d6fe38e34fe4767c882ed2],
PUP.Keygen.Intro, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP167\A0044808.EXE, , [415ce9b707748caa1919d387788c8779],
PUP.Optional.SweetIM, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP167\A0046263.dll, , [faa38a16d6a534025151a3260cf831cf],
PUP.Hacktool.Patcher, G:\System Volume Information\_restore{3D4AEFE6-69E3-43B4-BEBC-ECDA3036A97E}\RP80\A0007348.exe, , [37662d73413aba7cb00ebb4a36caa957],
PUP.Optional.OpenCandy, G:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP161\A0126535.exe, , [0697a7f9621965d12fe2eedca4604ab6],
PUP.Optional.SweetIM, G:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP218\A0216914.dll, , [732a287883f87fb7e1c1a2278c78f20e],
PUP.Keygen.Intro, G:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP218\A0220185.EXE, , [8b121e820d6e201637fb8cce0301fc04],
PUP.Hacktool.Patcher, G:\System Volume Information\_restore{87FB6A15-65AA-4EF0-B5F0-FB24FEACD8A4}\RP220\A0223869.exe, , [6b327927abd0013508b65ca9dc24e11f],
PUP.Optional.SweetIM, G:\System Volume Information\_restore{DFD4596F-8099-4B8E-841F-68A346A333D0}\RP108\A0045448.msi, , [d7c6930d4932999d861ca227d331dd23],
PUP.Optional.SweetIM, G:\System Volume Information\_restore{DFD4596F-8099-4B8E-841F-68A346A333D0}\RP108\A0045449.msi, , [b6e768385328171fbae8b9105fa56799],
PUP.Optional.OpenCandy, G:\Bývalé disky_C\Bývalý_disk_C\Dokumenty\winamp5601_full_bundle_emusic-7plus_all.exe, , [e8b5e6ba5c1fe650f0218e3c6c98de22],
PAssword.Tool, G:\Dokumenty\Downloads\rpc412.zip, , [dcc18d13374468ce815224aa9f623ac6],
PUP.Optional.Mindspark, G:\Downloads\Allin1ConvertCrxSetup.59D67416-A6ED-452E-BA68-0C8384DE65E9.exe, , [e7b6c1df1368c670d73577fcb64e6898],
Trojan.Bitcoin.SE, G:\Downloads\TuneUp Utilities 2013 plna verze cesky.exe, , [c2db940c82f9b581490baa7c40c1b848],
PUP.Optional.OpenCandy.A, G:\Downloads\Winamp-fullsetup.exe, , [dcc130704c2f0531e998e55d9c64ef11],
Trojan.Agent.VBS, G:\Downloads\winrar-4.11-full-cz-32bit.exe, , [821b831d4d2e57df3b8878b99c64827e],
RiskWare.Tool.CK, G:\Downloads\Compressed\Autodesk-keygen-2013.rar, , [aaf3dec226558aac22e9c9f668982bd5],
Malware.Gen, G:\Downloads\Compressed\Autodesk_AIS10_keygen.rar, , [732a8c146e0ddd597c91ce8f7888926e],
PUP.Optional.OpenCandy, G:\Downloads\Programs\KMPlayer_3-6-0-87-jd.exe, , [4756f2ae2358122463aeb812a0643cc4],
Malware.Trace, C:\Windows\inf\ntvdm.inf, , [8f0ea1ff1b60a4922e0589754cb7fd03],

Fyzické sektory: 0
(No malicious items detected)


(end)

[vyosek]

Vsechny nalezy MBAMu smazte

V registrech to opravime nebojte

Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

[Twig]

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:15-07-2014 01
Ran by Milan (administrator) on MILAN-PC on 18-07-2014 19:30:06
Running from C:\Users\Milan\Desktop
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe
(Realtek Semiconductor Corp.) C:\Windows\SOUNDMAN.EXE
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Express Tray\ExpressTray.exe
() C:\Program Files\HTC Home\Clock.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\ProgramData\LangSoft\OETRN.EXE
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Windows\System32\wscript.exe
(Tonec Inc.) C:\Program Files\Internet Download Manager\IDMan.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe
(Western Digital) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe
(Dropbox, Inc.) C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Logitech Inc.) C:\Program Files\Logitech\MouseWare\system\EM_EXEC.EXE
(Tonec Inc.) C:\Program Files\Internet Download Manager\IEMonitor.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Garmin Ltd or its subsidiaries) C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
(WDC) C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe
(Memeo) C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(TuneUp Software) C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [CTxfiHlp] => C:\Windows\system32\CTXFIHLP.EXE [19968 2007-04-09] (Creative Technology Ltd)
HKLM\...\Run: [NVRaidService] => C:\Program Files\NVIDIA Corporation\Raid\nvraidservice.exe [163944 2010-04-09] (NVIDIA Corporation)
HKLM\...\Run: [SoundMan] => C:\Windows\SOUNDMAN.EXE [604704 2009-04-14] (Realtek Semiconductor Corp.)
HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe [323584 2007-12-10] (PixArt Imaging Incorporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2010-02-10] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [LifeCam] => C:\Program Files\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [43816 2014-07-03] (Apple Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
HKLM\...\Run: [Logitech Utility] => C:\Windows\Logi_MwX.Exe [20992 2003-12-11] (Logitech Inc.)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware" [54072 2014-05-12] (Malwarebytes Corporation)
HKU\.DEFAULT\...\Run: [DevconDefaultDB] => C:\Windows\system32\READREG /SILENT /FAIL=1
HKU\.DEFAULT\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-30] (Microsoft Corporation)
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [Clock Widget (HTC Home)] => C:\Program Files\HTC Home\Clock.exe [2036736 2011-11-28] ()
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-10-28] (Samsung)
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [OEXPRESS] => C:\ProgramData\LangSoft\OETRN.EXE [26624 2013-12-30] ()
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [autoactivation] => wscript.exe //B "C:\Users\Milan\AppData\Local\Temp\autoactivation.vbs" <===== ATTENTION
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3858000 2014-07-10] (Tonec Inc.)
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\MountPoints2: {32e559a4-0136-11e3-8424-001109da65cc} - "H:\WD SmartWare.exe" autoplay=true
HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\MountPoints2: {62fe2ec9-f932-11e2-83ef-806e6f6e6963} - D:\Setup.exe
IFEO\myheritage.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
ShortcutTarget: Adobe Reader Synchronizer.lnk -> C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDDMStatus.lnk
ShortcutTarget: WDDMStatus.lnk -> C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMStatus.exe (WDC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WDSmartWare.lnk
ShortcutTarget: WDSmartWare.lnk -> C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWare.exe (Western Digital)
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\autoactivation.vbs ()
Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Milan\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: IDM Shell Extension -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files\Internet Download Manager\IDMShellExt.dll (Tonec Inc.)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {DD50B8FF-E937-4582-BFC1-FB3FADD5FDB5} URL = http://search.seznam.cz/?q={searchTerms ... chmodule_2
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: Rich Media Player -> {FEB703F7-E7B2-4AB0-9566-87658AC70095} -> C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\IE\PluginRichmediaplayer.dll ()
Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 212.80.66.7 212.80.66.8

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @garmin.com/GpsControl - C:\Program Files\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @richmediaplayer.com/nppluginrichmediaplayer - C:\Program Files\Mozilla Firefox\plugins\nppluginrichmediaplayer.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppluginrichmediaplayer.dll ()
FF HKLM\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF HKLM\...\Firefox\Extensions: [{3DF4B26D-DB19-45DF-962A-6719D071245B}] - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B}
FF Extension: Rich Media Player extension - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Firefox\{3DF4B26D-DB19-45DF-962A-6719D071245B} [2013-08-07]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-05-11]
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\Milan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Milan\AppData\Roaming\IDM\idmmzcc5 [2014-07-13]

Chrome:
=======
CHR HomePage:
CHR StartupUrls: "hxxp://seznam.cz/"
CHR DefaultSearchKeyword: seznam.cz
CHR DefaultSearchProvider: Seznam
CHR DefaultSearchURL: http://search.seznam.cz/?q={searchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Dokumenty Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2013-07-30]
CHR Extension: (Disk Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-07-30]
CHR Extension: (YouTube) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-30]
CHR Extension: (Chrome YouTube Downloader) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cbdjiinahkdjdcdlgfimlcolkjpbooja [2013-09-22]
CHR Extension: (Vyhledávání Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2013-07-30]
CHR Extension: (Download Video) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\doagiokpgboiomffjfhaiimafndmmpni [2013-08-07]
CHR Extension: (IDM Integration Module) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn [2014-07-13]
CHR Extension: (IDM Integration) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jmolcgpienlcieaajfkkdamlngancncm [2013-09-22]
CHR Extension: (Peněženka Google) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-01]
CHR Extension: (Gmail) - C:\Users\Milan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-30]
CHR HKLM\...\Chrome\Extension: [doagiokpgboiomffjfhaiimafndmmpni] - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\richmediadownloader.crx [2013-07-23]
CHR HKLM\...\Chrome\Extension: [fkcdbkhjcaljlfolhllfneigeepmjfim] - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\playerextension.crx [2013-02-28]
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2014-07-10]
CHR HKCU\...\Chrome\Extension: [jmlmanpnnbnpabnonijjmnmplnbfcgbf] - C:\Program Files\NetSoftware\chromegem.crx [2014-07-10]

========================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2013-09-01] (Flexera Software, Inc.)
R2 Garmin Core Update Service; C:\Program Files\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [435032 2014-06-09] (Garmin Ltd or its subsidiaries)
R2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 TuneUp.UtilitiesSvc; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe [1731896 2014-01-28] (TuneUp Software)
R2 WDDMService; C:\Program Files\Western Digital\WD SmartWare\WD Drive Manager\WDDMService.exe [98304 2009-10-14] (WDC) [File not signed]
R2 WDSmartWareBackgroundService; C:\Program Files\Western Digital\WD SmartWare\Front Parlor\WDSmartWareBackgroundService.exe [20480 2009-06-16] (Memeo) [File not signed]

==================== Drivers (Whitelisted) ====================

R3 ALCXWDM; C:\Windows\System32\drivers\RTKVAC.SYS [4172832 2009-06-18] (Realtek Semiconductor Corp.)
R1 avgtp; C:\Windows\system32\drivers\avgtpx86.sys [42784 2014-06-02] (AVG Technologies)
S3 COMMONFX.DLL; C:\Windows\System32\COMMONFX.DLL [98600 2007-04-18] (Creative Technology Ltd)
S3 CT20XUT.DLL; C:\Windows\System32\CT20XUT.DLL [164608 2007-04-12] (Creative Technology Ltd.)
S3 CTAUDFX.DLL; C:\Windows\System32\CTAUDFX.DLL [546048 2007-04-12] (Creative Technology Ltd)
S3 ctdvda2k; C:\Windows\System32\drivers\ctdvda2k.sys [347128 2007-04-10] (Creative Technology Ltd)
S3 CTEAPSFX.DLL; C:\Windows\System32\CTEAPSFX.DLL [168192 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPFX.DLL; C:\Windows\System32\CTEDSPFX.DLL [280320 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPIO.DLL; C:\Windows\System32\CTEDSPIO.DLL [128768 2007-04-12] (Creative Technology Ltd)
S3 CTEDSPSY.DLL; C:\Windows\System32\CTEDSPSY.DLL [323328 2007-04-12] (Creative Technology Ltd)
S3 CTERFXFX.DLL; C:\Windows\System32\CTERFXFX.DLL [94976 2007-04-12] (Creative Technology Ltd)
S3 CTEXFIFX.DLL; C:\Windows\System32\CTEXFIFX.DLL [1317632 2007-04-12] (Creative Technology Ltd.)
S3 CTHWIUT.DLL; C:\Windows\System32\CTHWIUT.DLL [66816 2007-04-12] (Creative Technology Ltd.)
S3 CTSBLFX.DLL; C:\Windows\System32\CTSBLFX.DLL [560384 2007-04-12] (Creative Technology Ltd)
S2 CX23880; C:\Windows\System32\drivers\cx88vid.sys [163584 2005-08-11] (Leadtek Research Inc.)
S2 CXTUNE; C:\Windows\System32\drivers\CX88TUNE_IBV32.sys [17664 2006-11-02] (Conexant Systems, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
S3 ha10kx2k; C:\Windows\System32\drivers\ha10kx2k.sys [797992 2007-04-10] (Creative Technology Ltd)
S3 hap16v2k; C:\Windows\System32\drivers\hap16v2k.sys [163112 2007-04-10] (Creative Technology Ltd)
S3 hap17v2k; C:\Windows\System32\drivers\hap17v2k.sys [189736 2007-04-10] (Creative Technology Ltd)
S3 L8042PR2; C:\Windows\System32\Drivers\l8042pr2.sys [51582 2003-12-11] (Logitech, Inc.)
U0 lacaahkl; C:\Windows\System32\drivers\stbqlyj.sys [52440 2014-07-18] (Malwarebytes Corporation)
R3 LHidUsb; C:\Windows\System32\Drivers\LHidUsb.Sys [37916 2003-12-11] (Logitech, Inc.)
R3 libusb0; C:\Windows\System32\DRIVERS\libusb0.sys [35776 2013-09-23] (http://libusb-win32.sourceforge.net)
S3 LUsbFilt; C:\Windows\System32\Drivers\LUsbFilt.Sys [28312 2013-05-23] (Logitech, Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [110296 2014-07-17] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-05-12] (Malwarebytes Corporation)
R0 nvatabus; C:\Windows\System32\DRIVERS\nvatabus.sys [87936 2004-12-07] (NVIDIA Corporation)
S3 nvnetbus; C:\Windows\System32\DRIVERS\nvnetbus.sys [12928 2004-11-24] (NVIDIA Corporation)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [461824 2009-04-28] (PixArt Imaging Inc.)
R0 Si3114r5; C:\Windows\System32\DRIVERS\Si3114r5.sys [210472 2008-04-29] (Silicon Image, Inc)
R0 SiFilter; C:\Windows\System32\DRIVERS\SiWinAcc.sys [17064 2008-04-29] (Silicon Image, Inc.)
R0 SiRemFil; C:\Windows\System32\DRIVERS\SiRemFil.sys [12200 2008-04-29] (Silicon Image, Inc.)
R3 TuneUpUtilitiesDrv; C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesDriver32.sys [10088 2012-09-19] (TuneUp Software)
R2 WolfVision Video Capture II; C:\Windows\System32\DRIVERS\WolfVZCamera2.sys [32792 2013-03-29] ()
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
S3 GMSIPCI; \??\D:\INSTALL\GMSIPCI.SYS [X]
S3 NTACCESS; \??\D:\NTACCESS.sys [X]
S3 SetupNTGLM7X; \??\D:\NTGLM7X.sys [X]
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-18 19:30 - 2014-07-18 19:31 - 00022573 _____ () C:\Users\Milan\Desktop\FRST.txt
2014-07-18 19:28 - 2014-07-18 19:30 - 00000000 ____D () C:\FRST
2014-07-18 19:26 - 2014-07-18 19:25 - 01077248 _____ (Farbar) C:\Users\Milan\Desktop\FRST.exe
2014-07-18 19:24 - 2014-07-18 19:24 - 00015327 _____ () C:\Users\Milan\Desktop\LM.bat
2014-07-18 19:23 - 2014-07-18 19:24 - 00029696 _____ () C:\Users\Milan\AppData\Local\MSGBOX.EXE
2014-07-18 19:22 - 2014-07-18 19:22 - 00052440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\stbqlyj.sys
2014-07-18 18:07 - 2014-07-18 18:07 - 00018312 _____ () C:\MBAM_1.txt
2014-07-17 20:23 - 2014-07-17 20:24 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-17 20:22 - 2014-07-17 20:22 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-07-17 20:22 - 2014-05-12 07:26 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-17 20:22 - 2014-05-12 07:25 - 00074456 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-17 20:22 - 2014-05-12 07:25 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-17 18:41 - 2014-07-17 18:42 - 00000000 ____D () C:\rsit
2014-07-17 18:41 - 2014-07-17 18:42 - 00000000 ____D () C:\Program Files\trend micro
2014-07-15 23:11 - 2014-07-15 23:13 - 00001343 _____ () C:\Users\Milan\Desktop\adwcleaner_3.215.exe.lnk
2014-07-15 22:37 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-07-15 22:34 - 2014-07-17 16:45 - 00000000 ____D () C:\AdwCleaner
2014-07-14 20:47 - 2014-07-14 20:49 - 00000000 ____D () C:\Program Files\WinRAR
2014-07-14 20:47 - 2014-07-14 20:47 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-14 20:47 - 2014-07-14 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-14 17:03 - 2014-07-14 17:42 - 679070400 _____ () C:\Users\Milan\Downloads\Hitlerovi válečníci (2).avi
2014-07-13 22:23 - 2014-07-13 22:23 - 00000000 ____D () C:\Users\Milan\Documents\DJMixPro
2014-07-13 22:21 - 2014-07-13 22:22 - 00000000 ____D () C:\Program Files\DjMixerProfessional
2014-07-13 22:21 - 2014-07-13 22:21 - 00001116 _____ () C:\Users\Milan\Desktop\DJ Mixer Professional for Win.lnk
2014-07-13 22:21 - 2014-07-13 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJ Mixer Professional for Win
2014-07-13 13:52 - 2014-07-13 13:53 - 142675152 _____ (Acoustica, Inc.) C:\Users\Milan\Downloads\Acoustica_Mixcraft_6.1.217.exe
2014-07-13 13:35 - 2014-07-13 13:35 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\SynthMaker
2014-07-13 13:35 - 2014-07-13 13:35 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Acoustica
2014-07-13 13:32 - 2014-07-13 13:32 - 00001974 _____ () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Mixcraft 6.lnk
2014-07-13 13:32 - 2014-07-13 13:32 - 00001950 _____ () C:\Users\Milan\Desktop\Mixcraft 6.lnk
2014-07-13 13:32 - 2014-07-13 13:32 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 6
2014-07-13 13:30 - 2014-07-13 13:30 - 00000000 ____D () C:\Program Files\VST
2014-07-13 13:29 - 2014-07-13 13:32 - 00000000 ____D () C:\Program Files\Acoustica Mixcraft 6
2014-07-13 13:29 - 2014-07-13 13:30 - 00000000 ____D () C:\ProgramData\Acoustica
2014-07-13 13:20 - 2014-07-17 16:49 - 00000728 _____ () C:\Windows\setupact.log
2014-07-13 13:20 - 2014-07-17 16:48 - 00002406 _____ () C:\Windows\PFRO.log
2014-07-13 13:20 - 2014-07-13 13:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-13 13:13 - 2014-07-13 13:18 - 00000000 ____D () C:\Program Files\Internet Download Manager
2014-07-13 13:13 - 2014-07-13 13:13 - 00000983 _____ () C:\Users\Milan\Desktop\Internet Download Manager.lnk
2014-07-13 13:13 - 2014-07-13 13:13 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2014-07-13 13:13 - 2014-07-13 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2014-07-13 13:11 - 2014-07-13 13:11 - 00002064 _____ () C:\Users\Milan\Documents\cc_20140713_131129.reg
2014-07-13 12:10 - 2014-07-13 12:10 - 00000000 ____D () C:\Users\Milan\Downloads\Mixcraft-v6.1-vicejazycni-program-k-tvorbe-hudby+klíč+návod
2014-07-13 12:09 - 2014-07-13 12:09 - 00000000 ____D () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1
2014-07-12 21:23 - 2014-07-12 21:23 - 00000000 ____D () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1-Final-+-Patch--12-7-2014
2014-07-12 21:16 - 2014-07-12 21:17 - 06204796 _____ () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1.rar
2014-07-12 20:51 - 2014-07-12 20:59 - 141275457 _____ () C:\Users\Milan\Downloads\Mixcraft-v6.1-vicejazycni-program-k-tvorbe-hudby+klíč+návod.rar
2014-07-12 20:22 - 2014-07-12 20:22 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-12 20:22 - 2014-07-12 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-12 20:20 - 2014-07-12 20:22 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-07-12 20:20 - 2014-07-12 20:22 - 00000000 ____D () C:\Program Files\iTunes
2014-07-12 20:20 - 2014-07-12 20:20 - 00000000 ____D () C:\Program Files\iPod
2014-07-10 16:51 - 2014-06-09 10:40 - 00113680 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2014-07-09 16:35 - 2014-07-09 16:58 - 408378015 _____ () C:\Users\Milan\Downloads\Operace Navy SEALs; Grenada -- iVysílání -- Česká televize.1.mp4
2014-07-09 06:14 - 2014-06-18 03:51 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 06:14 - 2014-06-18 02:52 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 06:13 - 2014-06-20 21:39 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 06:13 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 06:13 - 2014-06-19 01:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-07-09 06:13 - 2014-06-19 01:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-07-09 06:13 - 2014-06-19 01:38 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-07-09 06:13 - 2014-06-19 01:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-07-09 06:13 - 2014-06-19 01:36 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-07-09 06:13 - 2014-06-19 01:35 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-07-09 06:13 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 06:13 - 2014-06-19 01:28 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-07-09 06:13 - 2014-06-19 01:28 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-07-09 06:13 - 2014-06-19 01:25 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-07-09 06:13 - 2014-06-19 01:23 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-07-09 06:13 - 2014-06-19 01:23 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-07-09 06:13 - 2014-06-19 01:22 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-07-09 06:13 - 2014-06-19 01:16 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-07-09 06:13 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 06:13 - 2014-06-19 01:06 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-07-09 06:13 - 2014-06-19 01:01 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-07-09 06:13 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 06:13 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 06:13 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 06:13 - 2014-06-19 00:52 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 06:13 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 06:13 - 2014-06-19 00:46 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-07-09 06:13 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 06:13 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 06:13 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 06:13 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 06:13 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 06:12 - 2014-06-06 11:44 - 00509440 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00247808 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00220160 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-07-09 06:11 - 2014-05-30 09:52 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-07-09 06:11 - 2014-05-30 08:36 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 06:10 - 2014-06-30 03:40 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 06:10 - 2014-06-30 03:36 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 06:10 - 2014-06-05 16:26 - 01059840 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-07 20:35 - 2014-07-07 20:39 - 716177408 _____ () C:\Users\Milan\Downloads\lubuntu-14.04-desktop-i386.iso
2014-07-06 21:36 - 2014-07-06 21:39 - 00000000 ____D () C:\Users\Milan\Downloads\Hitlerovi.valecnici.Ep01.Prisluhovac.Keitel.DVBT.XviD.CZ-BeeR
2014-07-06 21:29 - 2014-07-06 21:29 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup (2).exe
2014-07-06 21:29 - 2014-07-06 21:29 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup (1).exe
2014-07-06 21:29 - 2014-07-06 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-07-06 21:27 - 2014-07-06 21:27 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup.exe
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\Program Files\Logitech
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\Program Files\Common Files\Logitech
2014-07-05 10:49 - 2003-12-18 09:50 - 00104960 _____ (Logitech Inc.) C:\Windows\system32\COMNCTR.DLL
2014-07-05 10:49 - 2003-12-18 09:50 - 00097792 _____ (Logitech Inc.) C:\Windows\system32\LGUICOM.DLL
2014-07-05 10:49 - 2003-12-18 09:50 - 00016896 _____ (Logitech, Inc.) C:\Windows\system32\LMOUSE32.DLL
2014-07-05 10:49 - 2003-12-18 09:50 - 00003568 _____ (Logitech, Inc.) C:\Windows\system32\LMOUSE16.DLL
2014-07-05 10:49 - 2003-12-11 09:50 - 00152064 ____N (Logitech Inc.) C:\Windows\system32\lmoufrc.dll
2014-07-05 10:49 - 2003-12-11 09:50 - 00070894 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\lmouflt2.sys
2014-07-05 10:49 - 2003-12-11 09:50 - 00051582 ____N (Logitech, Inc.) C:\Windows\system32\Drivers\L8042PR2.SYS
2014-07-05 10:49 - 2003-12-11 09:50 - 00037916 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LHIDUSB.SYS
2014-07-05 10:49 - 2003-12-11 09:50 - 00025630 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LHIDFLT2.SYS
2014-07-05 10:49 - 2003-12-11 09:50 - 00023372 ____N (Logitech, Inc.) C:\Windows\system32\LCOINST.DLL
2014-07-05 10:49 - 2003-12-11 09:50 - 00020992 _____ (Logitech Inc.) C:\Windows\LOGI_MWX.EXE
2014-07-05 10:49 - 2003-12-11 09:50 - 00014092 ____N (Logitech, Inc.) C:\Windows\system32\Drivers\LCCFLTR.SYS
2014-07-05 10:44 - 2014-07-05 10:44 - 00001027 _____ () C:\Users\Milan\AppData\Dokumenty – zástupce.lnk
2014-07-05 10:31 - 2014-07-05 10:31 - 60816768 _____ (Logitech Inc. ) C:\Users\Milan\Downloads\setpoint400.exe
2014-07-05 09:40 - 2014-07-05 09:41 - 04058282 _____ (Logitech ) C:\Users\Milan\Downloads\mw980enu.exe
2014-07-04 19:43 - 2014-07-04 20:20 - 663498033 _____ () C:\Users\Milan\Downloads\Nové-objevy-ve-starém-Egyptě---Tajemství-pyramid---dokument-CZ-HD.mp4
2014-07-01 18:14 - 2014-07-01 18:14 - 00111736 _____ () C:\Users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-07-01 18:12 - 2014-07-09 06:32 - 00415152 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-06-30 21:24 - 2014-06-30 21:24 - 30414736 _____ (TuneUp Software) C:\Users\Milan\Downloads\TuneUpUtilities2013_cs-CZ.exe
2014-06-29 22:09 - 2014-07-18 19:24 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\IDM
2014-06-29 12:08 - 2014-06-29 12:15 - 00000000 ____D () C:\Users\Milan\Documents\aaa
2014-06-22 20:50 - 2014-06-22 20:52 - 00000000 ____D () C:\Users\Milan\Downloads\Knihy
2014-06-21 09:32 - 2014-06-21 09:32 - 00000045 _____ () C:\Users\Milan\Desktop\WPA2-PSK.txt
2014-06-21 05:03 - 2014-06-21 05:04 - 01164494 _____ () C:\Users\Milan\Downloads\Cesta-Steva-Jobse-Jay-Elliot.mobi
2014-06-18 15:29 - 2014-06-18 15:29 - 00000230 _____ () C:\Users\Milan\Desktop\Kies Air.url
2014-06-18 15:27 - 2014-06-18 15:28 - 00000846 _____ () C:\Users\Milan\Downloads\sd.jnlp
2014-06-18 15:18 - 2014-03-19 03:27 - 00184192 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudmdm.sys
2014-06-18 15:18 - 2014-03-19 03:27 - 00088832 _____ (DEVGURU Co., LTD.(www.devguru.co.kr)) C:\Windows\system32\Drivers\ssudbus.sys
2014-06-18 13:26 - 2014-06-18 13:26 - 00001858 _____ () C:\Users\Public\Desktop\Garmin Express.lnk

==================== One Month Modified Files and Folders =======

2014-07-18 19:31 - 2014-07-18 19:30 - 00022573 _____ () C:\Users\Milan\Desktop\FRST.txt
2014-07-18 19:30 - 2014-07-18 19:28 - 00000000 ____D () C:\FRST
2014-07-18 19:29 - 2013-08-01 18:44 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Skype
2014-07-18 19:25 - 2014-07-18 19:26 - 01077248 _____ (Farbar) C:\Users\Milan\Desktop\FRST.exe
2014-07-18 19:24 - 2014-07-18 19:24 - 00015327 _____ () C:\Users\Milan\Desktop\LM.bat
2014-07-18 19:24 - 2014-07-18 19:23 - 00029696 _____ () C:\Users\Milan\AppData\Local\MSGBOX.EXE
2014-07-18 19:24 - 2014-06-29 22:09 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\IDM
2014-07-18 19:22 - 2014-07-18 19:22 - 00052440 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\stbqlyj.sys
2014-07-18 19:22 - 2013-07-30 19:08 - 00000000 ____D () C:\Windows\Panther
2014-07-18 19:21 - 2014-02-23 03:23 - 00000000 ____D () C:\Program Files\EarMaster Pro 5
2014-07-18 19:21 - 2014-02-23 03:22 - 00000000 ____D () C:\Program Files\EarMaster School 5
2014-07-18 19:21 - 2013-08-07 22:45 - 00000000 ____D () C:\Users\Milan\Downloads\Compressed
2014-07-18 19:15 - 2013-12-12 19:34 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-18 19:13 - 2013-07-30 22:01 - 00000938 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-18 18:07 - 2014-07-18 18:07 - 00018312 _____ () C:\MBAM_1.txt
2014-07-18 17:30 - 2013-07-30 18:12 - 01499405 _____ () C:\Windows\WindowsUpdate.log
2014-07-18 16:42 - 2013-07-30 22:02 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-18 04:56 - 2013-08-11 18:40 - 00000000 ____D () C:\Users\Milan\Documents\Outlook
2014-07-17 23:15 - 2013-07-30 22:01 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-17 20:24 - 2014-07-17 20:23 - 00110296 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-17 20:22 - 2014-07-17 20:22 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-17 20:22 - 2014-07-17 20:22 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-07-17 18:42 - 2014-07-17 18:41 - 00000000 ____D () C:\rsit
2014-07-17 18:42 - 2014-07-17 18:41 - 00000000 ____D () C:\Program Files\trend micro
2014-07-17 16:57 - 2009-07-14 06:34 - 00018448 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-17 16:57 - 2009-07-14 06:34 - 00018448 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-17 16:50 - 2014-04-30 14:40 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\DropboxMaster
2014-07-17 16:50 - 2013-08-07 20:29 - 00000000 ___RD () C:\Users\Milan\Dropbox
2014-07-17 16:50 - 2013-08-07 20:26 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Dropbox
2014-07-17 16:49 - 2014-07-13 13:20 - 00000728 _____ () C:\Windows\setupact.log
2014-07-17 16:49 - 2013-08-11 09:52 - 00000000 ____D () C:\Program Files\HTC Home
2014-07-17 16:49 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-17 16:48 - 2014-07-13 13:20 - 00002406 _____ () C:\Windows\PFRO.log
2014-07-17 16:45 - 2014-07-15 22:34 - 00000000 ____D () C:\AdwCleaner
2014-07-17 16:41 - 2013-07-30 18:22 - 01593238 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-16 20:53 - 2013-08-07 22:45 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\DMCache
2014-07-15 23:17 - 2013-08-16 17:39 - 00000000 ____D () C:\Users\Milan\kbpki
2014-07-15 23:13 - 2014-07-15 23:11 - 00001343 _____ () C:\Users\Milan\Desktop\adwcleaner_3.215.exe.lnk
2014-07-14 20:49 - 2014-07-14 20:47 - 00000000 ____D () C:\Program Files\WinRAR
2014-07-14 20:47 - 2014-07-14 20:47 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-14 20:47 - 2014-07-14 20:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-14 17:42 - 2014-07-14 17:03 - 679070400 _____ () C:\Users\Milan\Downloads\Hitlerovi válečníci (2).avi
2014-07-14 16:47 - 2013-12-31 04:05 - 00000000 ____D () C:\Program Files\JDownloader
2014-07-13 22:23 - 2014-07-13 22:23 - 00000000 ____D () C:\Users\Milan\Documents\DJMixPro
2014-07-13 22:22 - 2014-07-13 22:21 - 00000000 ____D () C:\Program Files\DjMixerProfessional
2014-07-13 22:21 - 2014-07-13 22:21 - 00001116 _____ () C:\Users\Milan\Desktop\DJ Mixer Professional for Win.lnk
2014-07-13 22:21 - 2014-07-13 22:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJ Mixer Professional for Win
2014-07-13 13:53 - 2014-07-13 13:52 - 142675152 _____ (Acoustica, Inc.) C:\Users\Milan\Downloads\Acoustica_Mixcraft_6.1.217.exe
2014-07-13 13:35 - 2014-07-13 13:35 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\SynthMaker
2014-07-13 13:35 - 2014-07-13 13:35 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Acoustica
2014-07-13 13:32 - 2014-07-13 13:32 - 00001974 _____ () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Mixcraft 6.lnk
2014-07-13 13:32 - 2014-07-13 13:32 - 00001950 _____ () C:\Users\Milan\Desktop\Mixcraft 6.lnk
2014-07-13 13:32 - 2014-07-13 13:32 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Acoustica Mixcraft 6
2014-07-13 13:32 - 2014-07-13 13:29 - 00000000 ____D () C:\Program Files\Acoustica Mixcraft 6
2014-07-13 13:30 - 2014-07-13 13:30 - 00000000 ____D () C:\Program Files\VST
2014-07-13 13:30 - 2014-07-13 13:29 - 00000000 ____D () C:\ProgramData\Acoustica
2014-07-13 13:20 - 2014-07-13 13:20 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-13 13:18 - 2014-07-13 13:13 - 00000000 ____D () C:\Program Files\Internet Download Manager
2014-07-13 13:13 - 2014-07-13 13:13 - 00000983 _____ () C:\Users\Milan\Desktop\Internet Download Manager.lnk
2014-07-13 13:13 - 2014-07-13 13:13 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2014-07-13 13:13 - 2014-07-13 13:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2014-07-13 13:11 - 2014-07-13 13:11 - 00002064 _____ () C:\Users\Milan\Documents\cc_20140713_131129.reg
2014-07-13 12:10 - 2014-07-13 12:10 - 00000000 ____D () C:\Users\Milan\Downloads\Mixcraft-v6.1-vicejazycni-program-k-tvorbe-hudby+klíč+návod
2014-07-13 12:09 - 2014-07-13 12:09 - 00000000 ____D () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1
2014-07-12 21:23 - 2014-07-12 21:23 - 00000000 ____D () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1-Final-+-Patch--12-7-2014
2014-07-12 21:17 - 2014-07-12 21:16 - 06204796 _____ () C:\Users\Milan\Downloads\Internet-Download-Manager-6.21-Build-1.rar
2014-07-12 20:59 - 2014-07-12 20:51 - 141275457 _____ () C:\Users\Milan\Downloads\Mixcraft-v6.1-vicejazycni-program-k-tvorbe-hudby+klíč+návod.rar
2014-07-12 20:22 - 2014-07-12 20:22 - 00001753 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-07-12 20:22 - 2014-07-12 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-07-12 20:22 - 2014-07-12 20:20 - 00000000 ____D () C:\ProgramData\188F1432-103A-4ffb-80F1-36B633C5C9E1
2014-07-12 20:22 - 2014-07-12 20:20 - 00000000 ____D () C:\Program Files\iTunes
2014-07-12 20:20 - 2014-07-12 20:20 - 00000000 ____D () C:\Program Files\iPod
2014-07-12 20:20 - 2013-11-07 19:46 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-07-09 19:23 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-07-09 16:58 - 2014-07-09 16:35 - 408378015 _____ () C:\Users\Milan\Downloads\Operace Navy SEALs; Grenada -- iVysílání -- Česká televize.1.mp4
2014-07-09 06:32 - 2014-07-01 18:12 - 00415152 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-09 06:29 - 2014-05-06 22:18 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-09 06:29 - 2009-07-14 11:21 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-09 06:22 - 2013-07-30 22:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-09 06:18 - 2013-07-30 22:09 - 93585272 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-09 06:17 - 2013-08-10 00:07 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-08 21:15 - 2013-09-02 21:39 - 00699056 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-07-08 21:15 - 2013-09-02 21:39 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-07-07 20:39 - 2014-07-07 20:35 - 716177408 _____ () C:\Users\Milan\Downloads\lubuntu-14.04-desktop-i386.iso
2014-07-06 21:39 - 2014-07-06 21:36 - 00000000 ____D () C:\Users\Milan\Downloads\Hitlerovi.valecnici.Ep01.Prisluhovac.Keitel.DVBT.XviD.CZ-BeeR
2014-07-06 21:29 - 2014-07-06 21:29 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup (2).exe
2014-07-06 21:29 - 2014-07-06 21:29 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup (1).exe
2014-07-06 21:29 - 2014-07-06 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-07-06 21:29 - 2013-07-30 22:01 - 00000000 ____D () C:\Program Files\Google
2014-07-06 21:27 - 2014-07-06 21:27 - 00895120 _____ (Google Inc.) C:\Users\Milan\Downloads\GoogleEarthPluginSetup.exe
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\Program Files\Logitech
2014-07-05 10:49 - 2014-07-05 10:49 - 00000000 ____D () C:\Program Files\Common Files\Logitech
2014-07-05 10:49 - 2013-07-30 20:05 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-07-05 10:47 - 2013-07-30 23:32 - 00000000 ____D () C:\ProgramData\Logishrd
2014-07-05 10:47 - 2013-07-30 23:32 - 00000000 ____D () C:\Program Files\Common Files\LogiShrd
2014-07-05 10:44 - 2014-07-05 10:44 - 00001027 _____ () C:\Users\Milan\AppData\Dokumenty – zástupce.lnk
2014-07-05 10:31 - 2014-07-05 10:31 - 60816768 _____ (Logitech Inc. ) C:\Users\Milan\Downloads\setpoint400.exe
2014-07-05 09:41 - 2014-07-05 09:40 - 04058282 _____ (Logitech ) C:\Users\Milan\Downloads\mw980enu.exe
2014-07-04 20:20 - 2014-07-04 19:43 - 663498033 _____ () C:\Users\Milan\Downloads\Nové-objevy-ve-starém-Egyptě---Tajemství-pyramid---dokument-CZ-HD.mp4
2014-07-01 18:14 - 2014-07-01 18:14 - 00111736 _____ () C:\Users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-30 21:24 - 2014-06-30 21:24 - 30414736 _____ (TuneUp Software) C:\Users\Milan\Downloads\TuneUpUtilities2013_cs-CZ.exe
2014-06-30 21:07 - 2013-07-30 18:26 - 00000000 ____D () C:\Users\Milan
2014-06-30 21:06 - 2009-07-14 04:03 - 64225280 _____ () C:\Windows\system32\config\SOFTWARE_tureg_old
2014-06-30 21:06 - 2009-07-14 04:03 - 18087936 _____ () C:\Windows\system32\config\SYSTEM_tureg_old
2014-06-30 21:06 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SECURITY_tureg_old
2014-06-30 21:02 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\SAM_tureg_old
2014-06-30 21:02 - 2009-07-14 04:03 - 00262144 _____ () C:\Windows\system32\config\DEFAULT_tureg_old
2014-06-30 03:40 - 2014-07-09 06:10 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-30 03:36 - 2014-07-09 06:10 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-29 13:16 - 2013-08-07 22:45 - 00000000 ____D () C:\Users\Milan\Downloads\Video
2014-06-29 12:15 - 2014-06-29 12:08 - 00000000 ____D () C:\Users\Milan\Documents\aaa
2014-06-28 08:23 - 2013-08-07 21:22 - 00000969 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-06-28 08:23 - 2013-08-07 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-06-28 08:23 - 2013-08-07 21:22 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-22 20:52 - 2014-06-22 20:50 - 00000000 ____D () C:\Users\Milan\Downloads\Knihy
2014-06-21 09:32 - 2014-06-21 09:32 - 00000045 _____ () C:\Users\Milan\Desktop\WPA2-PSK.txt
2014-06-21 05:04 - 2014-06-21 05:03 - 01164494 _____ () C:\Users\Milan\Downloads\Cesta-Steva-Jobse-Jay-Elliot.mobi
2014-06-20 21:39 - 2014-07-09 06:13 - 00240824 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-19 02:16 - 2014-07-09 06:13 - 17276416 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 01:56 - 2014-07-09 06:13 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-19 01:56 - 2014-07-09 06:13 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-19 01:38 - 2014-07-09 06:13 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-19 01:37 - 2014-07-09 06:13 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-19 01:36 - 2014-07-09 06:13 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-19 01:35 - 2014-07-09 06:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-06-19 01:32 - 2014-07-09 06:13 - 02179072 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 01:28 - 2014-07-09 06:13 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-19 01:28 - 2014-07-09 06:13 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-19 01:25 - 2014-07-09 06:13 - 00442368 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-19 01:23 - 2014-07-09 06:13 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-19 01:23 - 2014-07-09 06:13 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-19 01:22 - 2014-07-09 06:13 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-19 01:16 - 2014-07-09 06:13 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-19 01:12 - 2014-07-09 06:13 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:06 - 2014-07-09 06:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-19 01:01 - 2014-07-09 06:13 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-19 00:59 - 2014-07-09 06:13 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 06:13 - 00239616 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 00:52 - 2014-07-09 06:13 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 00:52 - 2014-07-09 06:13 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 00:49 - 2014-07-09 06:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 00:46 - 2014-07-09 06:13 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-19 00:45 - 2014-07-09 06:13 - 01964544 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 06:13 - 11742208 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:13 - 2014-07-09 06:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:09 - 2014-07-09 06:13 - 01139200 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:07 - 2014-07-09 06:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-18 15:29 - 2014-06-18 15:29 - 00000230 _____ () C:\Users\Milan\Desktop\Kies Air.url
2014-06-18 15:28 - 2014-06-18 15:27 - 00000846 _____ () C:\Users\Milan\Downloads\sd.jnlp
2014-06-18 13:37 - 2014-03-01 14:08 - 00001919 _____ () C:\Users\Public\Desktop\Samsung Kies 3.lnk
2014-06-18 13:28 - 2013-08-10 20:37 - 00000000 ____D () C:\ProgramData\Package Cache
2014-06-18 13:26 - 2014-06-18 13:26 - 00001858 _____ () C:\Users\Public\Desktop\Garmin Express.lnk
2014-06-18 13:26 - 2013-08-10 20:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Garmin
2014-06-18 13:26 - 2013-08-10 18:05 - 00000000 ____D () C:\ProgramData\Garmin
2014-06-18 13:26 - 2013-08-10 17:51 - 00000000 ____D () C:\Program Files\Garmin
2014-06-18 03:51 - 2014-07-09 06:14 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-06-18 02:52 - 2014-07-09 06:14 - 02350080 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

Some content of TEMP:
====================
C:\Users\Milan\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmphitlb2.dll
C:\Users\Milan\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-07-08 19:11

[Twig]

Přikládám addition.txt

[Twig]

ESET hlásí viry pouze v případě, je-li vložena disketa do mechaniky nebo je-li vložena USB flash memory.

[vyosek]

Odinstalujte McAfee Security Scan Plus

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe" "C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware" [54072 2014-05-12] (Malwarebytes Corporation)
  HKU\.DEFAULT\...\Run: [DevconDefaultDB] => C:\Windows\system32\READREG /SILENT /FAIL=1
  HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-07-30] (Microsoft Corporation)
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [GarminExpressTrayApp] => C:\Program Files\Garmin\Express Tray\ExpressTray.exe [122200 2014-06-09] (Garmin Ltd or its subsidiaries)
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845168 2013-10-28] (Samsung)
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [OEXPRESS] => C:\ProgramData\LangSoft\OETRN.EXE [26624 2013-12-30] ()
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [autoactivation] => wscript.exe //B "C:\Users\Milan\AppData\Local\Temp\autoactivation.vbs" <===== ATTENTION
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\Run: [IDMan] => C:\Program Files\Internet Download Manager\IDMan.exe [3858000 2014-07-10] (Tonec Inc.)
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\MountPoints2: {32e559a4-0136-11e3-8424-001109da65cc} - "H:\WD SmartWare.exe" autoplay=true
  HKU\S-1-5-21-2536137262-3142679929-2204209605-1000\...\MountPoints2: {62fe2ec9-f932-11e2-83ef-806e6f6e6963} - D:\Setup.exe
  IFEO\myheritage.exe: [Debugger] "C:\Program Files\TuneUp Utilities 2013\TUAutoReactivator32.exe"
  Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk
  Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk
  Startup: C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\autoactivation.vbs ()
  ShellIconOverlayIdentifiers: DropboxExt1 -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
  ShellIconOverlayIdentifiers: DropboxExt2 -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
  ShellIconOverlayIdentifiers: DropboxExt3 -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
  C:\Users\Milan\AppData\Local\Temp\autoactivation.vbs
  
  SearchScopes: HKLM - DefaultScope value is missing.
  SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKCU - {DD50B8FF-E937-4582-BFC1-FB3FADD5FDB5} URL = http://search.seznam.cz/?q={searchTerms}&sourceid=Searchmodule_2
  BHO: WebTransBHO Class -> {2DB66063-BB98-466A-AA0D-3E7ACF5ED853} -> No File
  Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - No File
  
  CHR HKLM\...\Chrome\Extension: [doagiokpgboiomffjfhaiimafndmmpni] - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\richmediadownloader.crx [2013-07-23]
  CHR HKLM\...\Chrome\Extension: [fkcdbkhjcaljlfolhllfneigeepmjfim] - C:\Users\Milan\AppData\Local\Rich Media Player\BrowserExtensions\Chrome\playerextension.crx [2013-02-28]
  CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files\Internet Download Manager\IDMGCExt.crx [2014-07-10]
  CHR HKCU\...\Chrome\Extension: [jmlmanpnnbnpabnonijjmnmplnbfcgbf] - C:\Program Files\NetSoftware\chromegem.crx [2014-07-10]
  
  C:\Users\Milan\AppData\Local\Rich Media Player
  2014-07-18 19:30 - 2014-07-18 19:31 - 00022573 _____ () C:\Users\Milan\Desktop\FRST.txt
  2014-07-18 19:24 - 2014-07-18 19:24 - 00015327 _____ () C:\Users\Milan\Desktop\LM.bat
  2014-07-18 19:23 - 2014-07-18 19:24 - 00029696 _____ () C:\Users\Milan\AppData\Local\MSGBOX.EXE
  2014-07-18 18:07 - 2014-07-18 18:07 - 00018312 _____ () C:\MBAM_1.txt
  2014-07-17 18:41 - 2014-07-17 18:42 - 00000000 ____D () C:\rsit
  2014-07-17 18:41 - 2014-07-17 18:42 - 00000000 ____D () C:\Program Files\trend micro
  2014-07-15 23:11 - 2014-07-15 23:13 - 00001343 _____ () C:\Users\Milan\Desktop\adwcleaner_3.215.exe.lnk
  2014-07-15 22:37 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
  2014-07-15 22:34 - 2014-07-17 16:45 - 00000000 ____D () C:\AdwCleaner
  
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: {E1428966-4036-438A-A7D9-CB1C339E902C} - System32\Tasks\KMS Activation for Office => C:\Windows\KMSAct.exe
  C:\Windows\KMSAct.exe
  
  AlternateDataStreams: C:\ProgramData\TEMP:A1EDB939
  C:\Windows\inf\ntvdm.vbe
  
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NtVdmSrv" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload" /f
  REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent" /f
  
  Hosts:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

[Twig]

Fixlog v příloze.

[Twig]

Znovu fixlog, neviděl jsem jej tam.

[vyosek]

Zapojte do PC vsechny USB klice (flashky, ext. disky apod.)

• Stahne a ulozte na plochu UsbFix http://www.viry.cz/forum/viewtopic.php?f=24&t=102308
• Spustte a kliknete na Deletion
• Po dokonceni sem vlozte log, pokud na Vas nevyskoci, najdete jej zde C:\UsbFix.txt

[Twig]

USBFix nejde stáhnout.

[Twig]

Už ho mám.