Systemku.exe
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Re: Systemku.exe
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 04-11-2014
Ran by Martin (administrator) on MARTIN-PC on 04-11-2014 22:20:35
Running from C:\Users\Martin\Desktop
Loaded Profile: Martin (Available profiles: Martin)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Atheros) C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Alcor Micro Corp.) C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Atheros Communications) C:\Program Files\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Antonio Da Cruz) C:\Program Files\PhotoFiltre\PhotoFiltre.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\PING.EXE
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2262312 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [AmIcoSinglun] => C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [258048 2011-03-18] (Alcor Micro Corp.)
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10992232 2011-09-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1571432 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [ATKOSD2] => C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [318080 2011-12-22] (ASUSTek Computer Inc.)
HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-24] (ASUS)
HKLM\...\Run: [HControlUser] => C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\btvstack.exe [877184 2012-11-29] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\athbttray.exe [696448 2012-11-29] (Atheros Commnucations)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [uTorrent] => C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: Slovníky slovenského pravopisu - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\sk@dictionaries.addons.mozilla.org [2014-10-28]
FF Extension: Add Bookmark Here ² - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\abhere2@moztw.org.xpi [2014-09-03]
FF Extension: Save Text To File - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\HighlightedTextToFile@bobbyrne01.org.xpi [2014-09-03]
FF Extension: Slovak (SK) Language Pack - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\langpack-sk@firefox.mozilla.org.xpi [2014-09-03]
FF Extension: Image Zoom - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2014-09-03]
FF Extension: X-notifier - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2014-09-03]
FF Extension: Text Link - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{54BB9F3F-07E5-486c-9B39-C7398B99391C}.xpi [2014-09-03]
FF Extension: Adblock Plus - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-03]
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [80512 2011-11-21] (ASUS)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-08] (Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [327296 2012-11-29] (Atheros)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [46680 2011-03-18] (Alcor Micro, Corp.)
R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS)
R3 asmthub3; C:\Windows\System32\DRIVERS\asmthub3.sys [102888 2011-11-22] (ASMedia Technology Inc)
R3 asmtxhci; C:\Windows\System32\DRIVERS\asmtxhci.sys [313832 2011-11-22] (ASMedia Technology Inc)
R3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [35968 2012-11-29] (Atheros)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [14464 2011-09-07] (ASUS)
R3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [299648 2012-11-29] (Atheros)
R3 btath_avdt; C:\Windows\System32\drivers\btath_avdt.sys [98432 2012-11-29] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25728 2012-11-29] (Atheros)
R3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [148096 2012-11-29] (Atheros)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [60544 2012-11-29] (Atheros)
R3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [264704 2012-11-29] (Atheros)
R3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [470656 2012-11-29] (Atheros)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-20] (DT Soft Ltd)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [61704 2011-03-18] (FTDI Ltd.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl5dfe8e83; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{91CF8551-7268-49D1-90CA-532AB3992A36}\MpKsl5dfe8e83.sys [39464 2014-11-04] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 22:20 - 2014-11-04 22:21 - 00014497 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-11-04 22:20 - 2014-11-04 22:20 - 00015327 _____ () C:\Users\Martin\Desktop\LM.bat
2014-11-04 21:56 - 2014-11-04 22:20 - 00029696 _____ () C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-11-04 19:19 - 2014-11-04 19:19 - 00008071 _____ () C:\Users\Martin\Desktop\Addition.rar
2014-11-04 19:17 - 2014-11-04 19:17 - 00034083 _____ () C:\Users\Martin\Desktop\FRST3.txt
2014-11-04 19:15 - 2014-11-04 22:20 - 00000000 ____D () C:\FRST
2014-11-04 19:15 - 2014-11-04 19:15 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-11-04 19:14 - 2014-11-04 19:14 - 01106432 _____ (Farbar) C:\Users\Martin\Desktop\FRST.exe
2014-11-04 09:06 - 2014-11-04 09:06 - 00000000 ___RD () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-11-03 21:45 - 2014-11-04 09:04 - 00004004 _____ () C:\Windows\PFRO.log
2014-11-03 21:45 - 2014-11-04 09:04 - 00000168 _____ () C:\Windows\setupact.log
2014-11-03 21:45 - 2014-11-03 21:45 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-03 21:29 - 2014-11-04 09:06 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-03 21:29 - 2014-11-03 21:29 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-03 21:29 - 2014-11-03 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-03 21:28 - 2014-11-03 21:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-03 21:28 - 2014-11-03 21:28 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-03 21:28 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-03 21:28 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-03 21:28 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-03 19:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-11-03 19:07 - 2014-11-03 19:07 - 01375089 _____ () C:\Users\Martin\Desktop\AdwCleaner.exe
2014-11-03 19:06 - 2014-11-03 19:06 - 00003832 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-11-03 19:04 - 2014-11-03 19:04 - 00000000 ____D () C:\Windows\ERUNT
2014-11-03 18:56 - 2014-11-03 18:56 - 01706359 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-10-16 14:04 - 2014-10-10 02:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-16 14:04 - 2014-10-10 02:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-16 14:04 - 2014-10-10 02:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-16 14:04 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 14:04 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 14:04 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 14:04 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 14:04 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 14:04 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 14:04 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 14:04 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 14:04 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 14:04 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 14:04 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 14:04 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 14:04 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 14:04 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 14:04 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 14:04 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 14:04 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 14:04 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 14:04 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 14:03 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 14:03 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 14:03 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 14:03 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 14:03 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 14:03 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 14:03 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 14:03 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 14:03 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 14:03 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 14:03 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 14:03 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 14:03 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 14:02 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 14:02 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 14:02 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 14:02 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 14:02 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 14:02 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 14:02 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 14:02 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 09:18 - 2014-10-16 09:18 - 00125143 _____ () C:\Users\Martin\Downloads\Xnotifier_for_Chrome_3_3_10.crx
2014-10-15 10:57 - 2014-10-15 10:57 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-05 13:45 - 2014-07-25 11:55 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-05 13:45 - 2014-07-25 11:49 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-05 13:45 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-05 13:45 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-05 13:44 - 2014-10-05 13:45 - 00006095 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-10-05 13:17 - 2014-11-04 22:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-05 13:17 - 2014-10-16 08:26 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-10-05 13:17 - 2014-10-16 08:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 22:19 - 2013-05-19 14:16 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Skype
2014-11-04 22:00 - 2013-06-16 09:32 - 00000000 ____D () C:\ProgramData\firebird
2014-11-04 21:57 - 2013-05-27 21:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\CrashDumps
2014-11-04 20:45 - 2013-05-19 14:55 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\vlc
2014-11-04 19:12 - 2013-05-19 14:17 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\uTorrent
2014-11-04 15:28 - 2013-05-19 13:34 - 01858939 _____ () C:\Windows\WindowsUpdate.log
2014-11-04 14:04 - 2014-09-13 11:57 - 00000000 ____D () C:\Users\Martin\AppData\Local\paint.net
2014-11-04 14:04 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-04 13:59 - 2013-05-24 18:58 - 00000000 ____D () C:\ProgramData\Nokia
2014-11-04 13:59 - 2013-05-24 18:47 - 00000000 ____D () C:\Program Files\Common Files\Nokia
2014-11-04 13:59 - 2013-05-24 18:46 - 00000000 ____D () C:\Program Files\Nokia
2014-11-04 13:51 - 2013-05-19 14:14 - 00000000 ____D () C:\Program Files\Google
2014-11-04 13:50 - 2013-08-01 14:30 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Batch PDF Watermark
2014-11-04 13:49 - 2013-06-04 10:38 - 00000000 ____D () C:\Program Files\Autocom
2014-11-04 09:12 - 2009-07-14 05:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 09:12 - 2009-07-14 05:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-04 09:10 - 2010-11-20 22:01 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-04 09:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-03 22:07 - 2013-05-19 14:26 - 00001863 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-11-03 22:07 - 2013-05-19 14:26 - 00000000 ____D () C:\Program Files\Defraggler
2014-11-03 22:07 - 2013-05-19 14:13 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-03 22:07 - 2013-05-19 14:13 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-03 22:04 - 2013-08-31 22:26 - 00001155 _____ () C:\Users\Public\Desktop\GOM Player.lnk
2014-11-03 22:04 - 2013-05-19 14:14 - 00001179 _____ () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2014-11-03 22:04 - 2013-05-19 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2014-11-03 19:10 - 2014-04-10 19:18 - 00000000 ____D () C:\AdwCleaner
2014-11-03 18:51 - 2013-08-02 12:49 - 01107968 _____ () C:\Users\Martin\Desktop\RSIT.exe
2014-11-03 18:51 - 2013-07-14 14:32 - 00000000 ____D () C:\Program Files\trend micro
2014-11-03 18:42 - 2013-05-19 13:39 - 00000000 ____D () C:\Users\Martin
2014-11-03 18:37 - 2013-10-18 14:35 - 00007603 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-30 12:24 - 2013-05-19 14:28 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-29 17:00 - 2013-06-24 12:12 - 00000997 _____ () C:\Users\Martin\Desktop\vcds.txt
2014-10-22 16:25 - 2014-08-23 10:25 - 00000748 _____ () C:\Users\Martin\Desktop\Solaris Diagnostic & OBD.lnk
2014-10-22 09:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-21 23:49 - 2014-09-03 18:43 - 00000270 _____ () C:\Users\Martin\Desktop\miro bug.txt
2014-10-18 08:33 - 2014-09-18 07:54 - 00000000 ___RD () C:\Program Files\Skype
2014-10-18 08:33 - 2013-05-19 14:16 - 00000000 ____D () C:\ProgramData\Skype
2014-10-18 08:25 - 2009-07-14 05:33 - 03766688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 00:02 - 2014-05-08 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-17 17:15 - 2013-05-19 14:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-17 17:11 - 2013-07-30 02:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 16:58 - 2013-05-19 14:59 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-16 08:52 - 2014-08-15 08:45 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe
2014-10-16 08:04 - 2014-09-03 08:56 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-15 13:44 - 2014-09-12 20:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak
2014-10-15 07:57 - 2014-03-17 09:31 - 00000721 _____ () C:\Users\Martin\Desktop\odkazy.txt
2014-10-11 11:46 - 2013-05-20 19:08 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\XnView
2014-10-05 13:45 - 2013-07-02 13:07 - 00000000 ____D () C:\Program Files\Java
Files to move or delete:
====================
C:\Users\Martin\esetsmartinstaller_sky.exe
Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\temp\ExPromo.exe
C:\Users\Martin\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Martin\AppData\Local\temp\Quarantine.exe
C:\Users\Martin\AppData\Local\temp\Uni98BB.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 12:15
==================== End Of Log ============================
Ran by Martin (administrator) on MARTIN-PC on 04-11-2014 22:20:35
Running from C:\Users\Martin\Desktop
Loaded Profile: Martin (Available profiles: Martin)
Platform: Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControl.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AdminService.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\ATKOSD.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\VS7DEBUG\mdm.exe
(Nuance Communications, Inc.) C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe
(Atheros) C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\WDC.exe
(ASUSTek Computer Inc.) C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Alcor Micro Corp.) C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Atheros Communications) C:\Program Files\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Bluetooth Suite\AthBtTray.exe
(Acresso Corporation) C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\calc.exe
(Antonio Da Cruz) C:\Program Files\PhotoFiltre\PhotoFiltre.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Corporation) C:\Windows\System32\PING.EXE
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2262312 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [AmIcoSinglun] => C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe [258048 2011-03-18] (Alcor Micro Corp.)
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [83240 2011-05-05] (Synaptics Incorporated)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [10992232 2011-09-05] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RtHDVBg.exe [1571432 2011-08-16] (Realtek Semiconductor)
HKLM\...\Run: [ATKOSD2] => C:\Program Files\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [318080 2011-12-22] (ASUSTek Computer Inc.)
HKLM\...\Run: [ATKMEDIA] => C:\Program Files\ASUS\ATK Package\ATK Media\DMedia.exe [174720 2011-10-24] (ASUS)
HKLM\...\Run: [HControlUser] => C:\Program Files\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [974432 2014-08-22] (Microsoft Corporation)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Bluetooth Suite\btvstack.exe [877184 2012-11-29] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Bluetooth Suite\athbttray.exe [696448 2012-11-29] (Atheros Commnucations)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-05] (Acresso Corporation)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [uTorrent] => C:\Users\Martin\AppData\Roaming\uTorrent\uTorrent.exe [1322832 2014-07-03] (BitTorrent Inc.)
HKU\S-1-5-21-616477033-3631907855-1866218665-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [22065760 2014-10-01] (Skype Technologies S.A.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/en-us/?pc=UP97&ocid=UP97DHP
BHO: PlusIEEventHelper Class -> {551A852F-39A6-44A7-9C13-AFBEC9185A9D} -> C:\Program Files\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll (Zeon Corporation)
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @videolan.org/vlc,version=2.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: Slovníky slovenského pravopisu - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\sk@dictionaries.addons.mozilla.org [2014-10-28]
FF Extension: Add Bookmark Here ² - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\abhere2@moztw.org.xpi [2014-09-03]
FF Extension: Save Text To File - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\HighlightedTextToFile@bobbyrne01.org.xpi [2014-09-03]
FF Extension: Slovak (SK) Language Pack - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\langpack-sk@firefox.mozilla.org.xpi [2014-09-03]
FF Extension: Image Zoom - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{1A2D0EC4-75F5-4c91-89C4-3656F6E44B68}.xpi [2014-09-03]
FF Extension: X-notifier - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{37fa1426-b82d-11db-8314-0800200c9a66}.xpi [2014-09-03]
FF Extension: Text Link - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{54BB9F3F-07E5-486c-9B39-C7398B99391C}.xpi [2014-09-03]
FF Extension: Adblock Plus - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\2pufn8zd.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-09-03]
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ASLDRService; C:\Program Files\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [80512 2011-11-21] (ASUS)
R2 ATKGFNEXSrv; C:\Program Files\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [96896 2011-11-21] (ASUS)
S3 BrYNSvc; C:\Program Files\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [File not signed]
S3 hpqcxs08; C:\Program Files\HP\Digital Imaging\bin\hpqcxs08.dll [249344 2009-09-20] (Hewlett-Packard Co.) [File not signed]
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 MDM; C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22192 2014-08-22] (Microsoft Corporation)
R2 Net Driver HPZ12; C:\Windows\system32\HPZinw12.dll [44544 2008-12-03] (Hewlett-Packard) [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [288120 2014-08-22] (Microsoft Corporation)
R2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-08] (Nuance Communications, Inc.)
R2 Pml Driver HPZ12; C:\Windows\system32\HPZipm12.dll [53760 2008-12-03] (Hewlett-Packard) [File not signed]
R2 ZAtheros Bt and Wlan Coex Agent; C:\Program Files\Bluetooth Suite\Ath_CoexAgent.exe [327296 2012-11-29] (Atheros)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AmUStor; C:\Windows\System32\drivers\AmUStor.SYS [46680 2011-03-18] (Alcor Micro, Corp.)
R2 ASMMAP; C:\Program Files\ASUS\ATK Package\ATKGFNEX\ASMMAP.sys [13880 2009-07-02] (ASUS)
R3 asmthub3; C:\Windows\System32\DRIVERS\asmthub3.sys [102888 2011-11-22] (ASMedia Technology Inc)
R3 asmtxhci; C:\Windows\System32\DRIVERS\asmtxhci.sys [313832 2011-11-22] (ASMedia Technology Inc)
R3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [35968 2012-11-29] (Atheros)
R1 ATKWMIACPIIO; C:\Program Files\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi.sys [14464 2011-09-07] (ASUS)
R3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [299648 2012-11-29] (Atheros)
R3 btath_avdt; C:\Windows\System32\drivers\btath_avdt.sys [98432 2012-11-29] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [25728 2012-11-29] (Atheros)
R3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [148096 2012-11-29] (Atheros)
R3 BTATH_LWFLT; C:\Windows\System32\DRIVERS\btath_lwflt.sys [60544 2012-11-29] (Atheros)
R3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [264704 2012-11-29] (Atheros)
R3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [470656 2012-11-29] (Atheros)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [242240 2013-05-20] (DT Soft Ltd)
S3 FTDIBUS; C:\Windows\System32\drivers\ftdibus.sys [61704 2011-03-18] (FTDI Ltd.)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2014-10-01] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2014-10-01] (Malwarebytes Corporation)
R3 MEI; C:\Windows\System32\DRIVERS\HECI.sys [41088 2010-10-19] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [231800 2014-07-17] (Microsoft Corporation)
R1 MpKsl5dfe8e83; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{91CF8551-7268-49D1-90CA-532AB3992A36}\MpKsl5dfe8e83.sys [39464 2014-11-04] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 22:20 - 2014-11-04 22:21 - 00014497 _____ () C:\Users\Martin\Desktop\FRST.txt
2014-11-04 22:20 - 2014-11-04 22:20 - 00015327 _____ () C:\Users\Martin\Desktop\LM.bat
2014-11-04 21:56 - 2014-11-04 22:20 - 00029696 _____ () C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-11-04 19:19 - 2014-11-04 19:19 - 00008071 _____ () C:\Users\Martin\Desktop\Addition.rar
2014-11-04 19:17 - 2014-11-04 19:17 - 00034083 _____ () C:\Users\Martin\Desktop\FRST3.txt
2014-11-04 19:15 - 2014-11-04 22:20 - 00000000 ____D () C:\FRST
2014-11-04 19:15 - 2014-11-04 19:15 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-11-04 19:14 - 2014-11-04 19:14 - 01106432 _____ (Farbar) C:\Users\Martin\Desktop\FRST.exe
2014-11-04 09:06 - 2014-11-04 09:06 - 00000000 ___RD () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-11-03 21:45 - 2014-11-04 09:04 - 00004004 _____ () C:\Windows\PFRO.log
2014-11-03 21:45 - 2014-11-04 09:04 - 00000168 _____ () C:\Windows\setupact.log
2014-11-03 21:45 - 2014-11-03 21:45 - 00000000 _____ () C:\Windows\setuperr.log
2014-11-03 21:29 - 2014-11-04 09:06 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-11-03 21:29 - 2014-11-03 21:29 - 00001060 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-11-03 21:29 - 2014-11-03 21:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-11-03 21:28 - 2014-11-03 21:28 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-11-03 21:28 - 2014-11-03 21:28 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-11-03 21:28 - 2014-10-01 11:11 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-11-03 21:28 - 2014-10-01 11:11 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-11-03 21:28 - 2014-10-01 11:11 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-11-03 19:08 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\system32\sqlite3.dll
2014-11-03 19:07 - 2014-11-03 19:07 - 01375089 _____ () C:\Users\Martin\Desktop\AdwCleaner.exe
2014-11-03 19:06 - 2014-11-03 19:06 - 00003832 _____ () C:\Users\Martin\Desktop\JRT.txt
2014-11-03 19:04 - 2014-11-03 19:04 - 00000000 ____D () C:\Windows\ERUNT
2014-11-03 18:56 - 2014-11-03 18:56 - 01706359 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-10-16 14:04 - 2014-10-10 02:44 - 00396288 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-16 14:04 - 2014-10-10 02:44 - 00230912 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-16 14:04 - 2014-10-10 02:39 - 00302592 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-16 14:04 - 2014-09-29 01:41 - 02379264 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-16 14:04 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-16 14:04 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-16 14:04 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-16 14:04 - 2014-09-19 02:14 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-16 14:04 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-16 14:04 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-16 14:04 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-16 14:04 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-16 14:04 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-16 14:04 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-16 14:04 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-16 14:04 - 2014-09-19 01:50 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-16 14:04 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-16 14:04 - 2014-09-19 01:44 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-16 14:04 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-16 14:04 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-16 14:04 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-16 14:04 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-16 14:03 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-16 14:03 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-16 14:03 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-16 14:03 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-16 14:03 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-16 14:03 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-16 14:03 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-16 14:03 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-16 14:03 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-16 14:03 - 2014-09-19 01:20 - 00677888 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-16 14:03 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-16 14:03 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-16 14:03 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-16 14:03 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-16 14:02 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-16 14:02 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-16 14:02 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-16 14:02 - 2014-08-29 02:44 - 02744320 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-16 14:02 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00523264 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00304128 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-16 14:02 - 2014-07-17 02:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-16 14:02 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-16 14:02 - 2014-07-17 02:03 - 00184320 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-16 14:02 - 2014-07-17 02:02 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-16 09:18 - 2014-10-16 09:18 - 00125143 _____ () C:\Users\Martin\Downloads\Xnotifier_for_Chrome_3_3_10.crx
2014-10-15 10:57 - 2014-10-15 10:57 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-10-05 13:45 - 2014-10-05 13:45 - 00000000 ____D () C:\Program Files\Common Files\Java
2014-10-05 13:45 - 2014-07-25 11:55 - 00096680 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-10-05 13:45 - 2014-07-25 11:49 - 00272808 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-05 13:45 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-05 13:45 - 2014-07-25 11:49 - 00175528 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-05 13:44 - 2014-10-05 13:45 - 00006095 _____ () C:\Windows\system32\jupdate-1.7.0_67-b01.log
2014-10-05 13:17 - 2014-11-04 22:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-05 13:17 - 2014-10-16 08:26 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-10-05 13:17 - 2014-10-16 08:26 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-11-04 22:19 - 2013-05-19 14:16 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Skype
2014-11-04 22:00 - 2013-06-16 09:32 - 00000000 ____D () C:\ProgramData\firebird
2014-11-04 21:57 - 2013-05-27 21:58 - 00000000 ____D () C:\Users\Martin\AppData\Local\CrashDumps
2014-11-04 20:45 - 2013-05-19 14:55 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\vlc
2014-11-04 19:12 - 2013-05-19 14:17 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\uTorrent
2014-11-04 15:28 - 2013-05-19 13:34 - 01858939 _____ () C:\Windows\WindowsUpdate.log
2014-11-04 14:04 - 2014-09-13 11:57 - 00000000 ____D () C:\Users\Martin\AppData\Local\paint.net
2014-11-04 14:04 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-11-04 13:59 - 2013-05-24 18:58 - 00000000 ____D () C:\ProgramData\Nokia
2014-11-04 13:59 - 2013-05-24 18:47 - 00000000 ____D () C:\Program Files\Common Files\Nokia
2014-11-04 13:59 - 2013-05-24 18:46 - 00000000 ____D () C:\Program Files\Nokia
2014-11-04 13:51 - 2013-05-19 14:14 - 00000000 ____D () C:\Program Files\Google
2014-11-04 13:50 - 2013-08-01 14:30 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\Batch PDF Watermark
2014-11-04 13:49 - 2013-06-04 10:38 - 00000000 ____D () C:\Program Files\Autocom
2014-11-04 09:12 - 2009-07-14 05:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-04 09:12 - 2009-07-14 05:34 - 00028944 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-04 09:10 - 2010-11-20 22:01 - 00782470 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-04 09:04 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-03 22:07 - 2013-05-19 14:26 - 00001863 _____ () C:\Users\Public\Desktop\Defraggler.lnk
2014-11-03 22:07 - 2013-05-19 14:26 - 00000000 ____D () C:\Program Files\Defraggler
2014-11-03 22:07 - 2013-05-19 14:13 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-11-03 22:07 - 2013-05-19 14:13 - 00000000 ____D () C:\Program Files\CCleaner
2014-11-03 22:04 - 2013-08-31 22:26 - 00001155 _____ () C:\Users\Public\Desktop\GOM Player.lnk
2014-11-03 22:04 - 2013-05-19 14:14 - 00001179 _____ () C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2014-11-03 22:04 - 2013-05-19 14:14 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2014-11-03 19:10 - 2014-04-10 19:18 - 00000000 ____D () C:\AdwCleaner
2014-11-03 18:51 - 2013-08-02 12:49 - 01107968 _____ () C:\Users\Martin\Desktop\RSIT.exe
2014-11-03 18:51 - 2013-07-14 14:32 - 00000000 ____D () C:\Program Files\trend micro
2014-11-03 18:42 - 2013-05-19 13:39 - 00000000 ____D () C:\Users\Martin
2014-11-03 18:37 - 2013-10-18 14:35 - 00007603 _____ () C:\Users\Martin\AppData\Local\Resmon.ResmonCfg
2014-10-30 12:24 - 2013-05-19 14:28 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-29 17:00 - 2013-06-24 12:12 - 00000997 _____ () C:\Users\Martin\Desktop\vcds.txt
2014-10-22 16:25 - 2014-08-23 10:25 - 00000748 _____ () C:\Users\Martin\Desktop\Solaris Diagnostic & OBD.lnk
2014-10-22 09:28 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-10-21 23:49 - 2014-09-03 18:43 - 00000270 _____ () C:\Users\Martin\Desktop\miro bug.txt
2014-10-18 08:33 - 2014-09-18 07:54 - 00000000 ___RD () C:\Program Files\Skype
2014-10-18 08:33 - 2013-05-19 14:16 - 00000000 ____D () C:\ProgramData\Skype
2014-10-18 08:25 - 2009-07-14 05:33 - 03766688 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 00:02 - 2014-05-08 00:40 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-17 17:15 - 2013-05-19 14:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-17 17:11 - 2013-07-30 02:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 16:58 - 2013-05-19 14:59 - 100290944 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-16 08:52 - 2014-08-15 08:45 - 00000000 ____D () C:\Users\Martin\AppData\Local\Adobe
2014-10-16 08:04 - 2014-09-03 08:56 - 00000000 ____D () C:\Program Files\Mozilla Maintenance Service
2014-10-15 13:44 - 2014-09-12 20:44 - 00000000 ____D () C:\Program Files\Mozilla Firefox.bak
2014-10-15 07:57 - 2014-03-17 09:31 - 00000721 _____ () C:\Users\Martin\Desktop\odkazy.txt
2014-10-11 11:46 - 2013-05-20 19:08 - 00000000 ____D () C:\Users\Martin\AppData\Roaming\XnView
2014-10-05 13:45 - 2013-07-02 13:07 - 00000000 ____D () C:\Program Files\Java
Files to move or delete:
====================
C:\Users\Martin\esetsmartinstaller_sky.exe
Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\temp\ExPromo.exe
C:\Users\Martin\AppData\Local\temp\NOSEventMessages.dll
C:\Users\Martin\AppData\Local\temp\Quarantine.exe
C:\Users\Martin\AppData\Local\temp\Uni98BB.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 12:15
==================== End Of Log ============================
Re: Systemku.exe
Este jeden problem sa sem tam vyskytuje ale to stym nemusi suvisiet, sem tam zly flash v prehliadaci.
Ale suvis to moze mat ten ze mam dost kariet otvorenych, plus pridavam produkty na eshop ( obrazky sa pridavaju cez flash).
Ale suvis to moze mat ten ze mam dost kariet otvorenych, plus pridavam produkty na eshop ( obrazky sa pridavaju cez flash).
Re: Systemku.exe
Máte plugin aktualizovaný?
Jinak log už vypadá ok.
Jinak log už vypadá ok.
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Ano, ale to moze byt tym ze mozila ide na plno - casto zabera az 1gb miesta a potom spadne a restartuje sa, to ma len tak napadlo.
Mozem teda zmazat logy, program odinstalovat ano?
Mozem teda zmazat logy, program odinstalovat ano?
Re: Systemku.exe
Ano můžete 
NO já nevím, v poslední době mě taky Mozilla zlobí tím jak je vytížená..pomalu přecházím na chrome
NO já nevím, v poslední době mě taky Mozilla zlobí tím jak je vytížená..pomalu přecházím na chrome
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Ďakujem za pomoc,
Pri chrome mi vadí že je otvorený x krát v správcovi aj po zatvorení prehliadača, hádam mozillu vyladia a nedopadne ako Avast, od určitej verzie som ho prestal kvôli vyťažovaniu používať-
Pri chrome mi vadí že je otvorený x krát v správcovi aj po zatvorení prehliadača, hádam mozillu vyladia a nedopadne ako Avast, od určitej verzie som ho prestal kvôli vyťažovaniu používať-
Re: Systemku.exe
To mi vadí taky. Při poslední aktualizaci mozilly jsem byla hodně naštvaná...asi zkusím ještě Operu, ale bohužel pc doma nepoužívám sama a jakákoliv změna není vítána 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Odosielam hlášky o zlihaní mozilly aj za Vás
keďže otváram stovky kariet denne, hádam to vyriešia. 
Re: Systemku.exe
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Zdravím dosť sa mi spomalilo načítanie PDF - dlho trvá kým mi otvorí a načíta viac stránkový súbor, a kopírovanie CTR+c často nefunguje, bol tam pridaný podpsi jedného dodávateľa, adobe aj preinštalovaný, a včera aj odobraný podpis a stále ide pomaly.
Môže to mať súvis s čistením? ( ešte sa zmenilo že som nainštaloval Spyrware Terminator Free) Ďakujem.
Môže to mať súvis s čistením? ( ešte sa zmenilo že som nainštaloval Spyrware Terminator Free) Ďakujem.
Re: Systemku.exe
Tak toho Terminátora zase odinstalujte, je už zastaralý, a myslím že za to může 
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Ďakujem
toto by naozaj ani nenapadlo a to mám skúsenosti z Avastom 
Re: Systemku.exe
Na občasný sken stačí Mbam ve free verzi, nějaké spyboty a Termionátory už do pc nepatří. Pomohla ta odinstalace?
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Re: Systemku.exe
Áno valí všetko ako má, ďakujem. Je smutné ako máme čoraz silnejšie PC a aj taká kravinka dokáže až PC mrzne ako staré Pentium 100.
Alebo čo je môj prípad zistiť že keď chcem PC z Touchpadom ako som mal na 8r NB, ktorá ide doteraz veľmi presne nič také nezoženie, len nepresné praskajúce, a lámuce sa Toupady.
Ďakujem zas za pomoc
Alebo čo je môj prípad zistiť že keď chcem PC z Touchpadom ako som mal na 8r NB, ktorá ide doteraz veľmi presne nič také nezoženie, len nepresné praskajúce, a lámuce sa Toupady.
Ďakujem zas za pomoc
Re: Systemku.exe
S tím Vám nepomůžu
.
Mějte se krásně
Mějte se krásně
Nepoužívejte COMBOFIX bez doporučení rádce, může dojít k poškození systému!
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.
Vždy před odvirováním počítače zazálohujte důležitá data
Chcete podpořit naše forum? Informace zde

K zastižení jsem spíše v noci, mezi 21.-23. hodinou
Pokud máte nějaké dotazy, můžete mi napsat na email Motji(zavináč)forum.viry.cz.


Přispějete na provoz fóra?