Re: NTB po virech
Napsal: 03 črc 2014 15:00
To není FRST, to je combofix 
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:01-07-2014
Ran by Aneta (administrator) on ANETA-HP on 03-07-2014 15:56:56
Running from C:\Users\Aneta\Desktop
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\stacsv.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\AEstSrv.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Windows\System32\wisptis.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TouchUser.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\File Sanitizer\coreshredder.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Nullsoft, Inc.) C:\Program Files\Winamp\winampa.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
() C:\Program Files\Canon\IJPLM\ijplmsvc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(iWin Inc.) C:\Program Files\Pogo Games\PGMTrusted.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(ArcSoft, Inc.) C:\Windows\System32\uArcCapture.exe
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_TabletUser.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTmon.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Wacom Technology, Corp.) C:\Program Files\Tablet\Pen\Pen_Tablet.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Gemfor s.r.o.) C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Service.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ink\InputPersonalization.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation.) C:\Program Files\Microsoft\BingBar\7.3.132.0\SeaPort.EXE
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [QLBController] => C:\Program Files\Hewlett-Packard\HP HotKey Support\QLBController.exe [254520 2010-01-05] (Hewlett-Packard Company)
HKLM\...\Run: [IAAnotif] => C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-25] (Intel Corporation)
HKLM\...\Run: [HPPowerAssistant] => C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1690680 2009-12-17] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] => C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2009-12-17] (Hewlett-Packard)
HKLM\...\Run: [File Sanitizer] => C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe [11265536 2009-12-12] (Hewlett-Packard)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-12-09] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray.exe [495711 2009-12-03] (IDT, Inc.)
HKLM\...\Run: [DTRun] => c:\Program Files\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe [518656 2009-11-19] (ArcSoft Inc.)
HKLM\...\Run: [AdobeCS4ServiceManager] => C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe [611712 2008-08-14] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [WinampAgent] => C:\Program Files\Winamp\winampa.exe [74752 2011-10-26] (Nullsoft, Inc.)
HKLM\...\Run: [APSDaemon] => C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2013-11-02] (Apple Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Alwil Software\Avast5\AvastUI.exe [4086432 2014-07-02] (AVAST Software)
HKLM Group Policy restriction on software: C:\Program Files\Symantec <====== ATTENTION
HKLM Group Policy restriction on software: C:\Program Files\Alwil Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Alwil Software <====== ATTENTION
HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\Symantec <====== ATTENTION
Winlogon\Notify\DeviceNP: C:\windows\system32\DeviceNP.dll (Hewlett-Packard Limited)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\windows\System32\SPReview\SPReview.exe [280576 2014-01-20] (Microsoft Corporation)
HKU\S-1-5-21-3257009789-169782606-895173275-1002\...\Run: [HPADVISOR] => C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe [1685048 2009-09-30] (Hewlett-Packard)
HKU\S-1-5-21-3257009789-169782606-895173275-1002\...\Run: [T-Mobile Communication Centre] => C:\Program Files\T-Mobile\Web'n'walk Manager\Manager.exe [1368768 2012-08-22] (Gemfor s.r.o.)
HKU\S-1-5-21-3257009789-169782606-895173275-1002\...\Run: [swg] => C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2012-12-30] (Google Inc.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\Users\Aneta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Alwil Software\Avast5\ashShell.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - DefaultScope {378B5F70-49B4-41D9-9A5F-19C34C7C929F} URL = http://search.conduit.com/ResultsExt.as ... =CT1750559
SearchScopes: HKCU - Yahoo URL = http://search.yahoo.com/search?p={searc ... barforpogo
SearchScopes: HKCU - {378B5F70-49B4-41D9-9A5F-19C34C7C929F} URL = http://search.conduit.com/ResultsExt.as ... =CT1750559
BHO: Bing Bar Helper - {1dad3af3-ef2f-4f64-ac4b-11789189fcb6} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
BHO: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll (Google Inc.)
Toolbar: HKLM - Bing Bar - {eec0f710-38b5-4aba-99bf-ec87564a4e13} - C:\Program Files\Microsoft\BingBar\7.3.132.0\BingExt.dll (Microsoft Corporation.)
DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog5 08 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.50
FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @wacom.com/wacom-plugin,version=1.1.0.10 - C:\Program Files\TabletPlugins\npwacom.dll (Wacom, Inc.)
FF Plugin: @wacom.com/wtPlugin,version=2.0.0.1 - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Aneta\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: wacom.com/WacomTabletPlugin - C:\Program Files\TabletPlugins\npWacomTabletPlugin.dll (Wacom)
FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt [2010-02-02]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-06-11]
Chrome:
=======
CHR HomePage: hxxp://www.google.com/
CHR StartupUrls: "hxxp://www.google.com/"
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll No File
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\35.0.1916.153\pdf.dll ()
CHR Plugin: (Skype Toolbars) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.3.0.7550_0\npSkypeChromePlugin.dll No File
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.79\npGoogleUpdate3.dll No File
CHR Plugin: (Windows Live Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Default Plug-in) - default_plugin No File
CHR Extension: (YouTube) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2011-12-15]
CHR Extension: (Vyhledávání Google) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-15]
CHR Extension: (avast! Online Security) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-07-14]
CHR Extension: (Skype Click to Call) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2011-06-19]
CHR Extension: (Peněženka Google) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-19]
CHR Extension: (Gmail) - C:\Users\Aneta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2011-12-15]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-07-02]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2011-05-16]
========================== Services (Whitelisted) =================
S3 ACDaemon; C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe [109056 2009-09-28] (ArcSoft Inc.)
R2 ameisvc; C:\Program Files\T-Mobile\Web'n'walk Manager\ameisvc.exe [123320 2012-08-22] (Gemfor s.r.o.)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [50344 2014-07-02] (AVAST Software)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [300808 2009-11-25] (DigitalPersona, Inc.)
S3 FLCDLOCK; c:\Windows\system32\flcdlock.exe [362040 2009-11-18] (Hewlett-Packard Ltd)
R2 HP Health Check Service; C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe [120832 2009-10-15] (Hewlett-Packard) [File not signed]
R2 HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [102968 2009-12-17] (Hewlett-Packard)
R2 HP ProtectTools Service; c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2009-11-19] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [102968 2009-12-17] (Hewlett-Packard)
R2 HPDayStarterService; c:\Program Files\Hewlett-Packard\HP QuickLook\HPDayStarterService.exe [81920 2010-01-08] (Hewlett-Packard Company) [File not signed]
R2 HpFkCryptService; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [281192 2009-12-16] (McAfee, Inc.)
R2 HPFSService; C:\Program Files\Hewlett-Packard\File Sanitizer\HPFSService.exe [297984 2009-12-12] (Hewlett-Packard) [File not signed]
R2 hpHotkeyMonitor; C:\Program Files\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [264248 2010-01-05] (Hewlett-Packard Company)
R2 IJPLMSVC; C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] ()
R2 LightScribeService; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [73728 2009-06-17] (Hewlett-Packard Company) [File not signed]
R2 PGMTrusted; C:\Program Files\Pogo Games\PGMTrusted.exe [520360 2013-03-25] (iWin Inc.)
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_9fc8b38ddee9fbba\STacSV.exe [229461 2009-12-03] (IDT, Inc.)
R2 uArcCapture; C:\windows\system32\uArcCapture.exe [506472 2009-12-04] (ArcSoft, Inc.)
S2 vcsFPService; C:\windows\system32\vcsFPService.exe [1639728 2009-12-14] (Validity Sensors, Inc.)
==================== Drivers (Whitelisted) ====================
R3 Afc; C:\windows\System32\drivers\Afc.sys [18688 2006-11-11] (Arcsoft, Inc.)
R3 ARCVCAM; C:\windows\System32\DRIVERS\ArcSoftVCapture.sys [29824 2009-12-04] (ArcSoft, Inc.)
R2 aswHwid; C:\windows\system32\drivers\aswHwid.sys [24184 2014-07-02] ()
R1 aswKbd; C:\windows\system32\Drivers\aswKbd.sys [24408 2012-03-07] (AVAST Software)
R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [67824 2014-07-02] (AVAST Software)
R1 aswRdr; C:\windows\system32\drivers\aswRdr2.sys [81768 2014-07-02] (AVAST Software)
R0 aswRvrt; C:\windows\system32\Drivers\aswRvrt.sys [49944 2014-07-02] ()
R1 aswSnx; C:\windows\system32\drivers\aswSnx.sys [779536 2014-07-02] (AVAST Software)
R1 aswSP; C:\windows\system32\drivers\aswSP.sys [414392 2014-07-02] (AVAST Software)
R2 aswStm; C:\windows\system32\drivers\aswStm.sys [71944 2014-07-02] (AVAST Software)
S3 aswTap; C:\windows\System32\DRIVERS\aswTap.sys [38472 2014-01-13] (The OpenVPN Project)
R1 aswTdi; C:\windows\system32\Drivers\aswTdi.sys [56080 2013-12-19] (AVAST Software)
R0 aswVmm; C:\windows\system32\Drivers\aswVmm.sys [192352 2014-07-02] ()
R3 athr; C:\windows\System32\DRIVERS\athr.sys [2957312 2012-06-20] (Qualcomm Atheros Communications, Inc.)
S3 DAMDrv; C:\windows\System32\DRIVERS\DAMDrv.sys [32312 2009-10-21] (Hewlett-Packard Development Company L.P.)
S3 huawei_cdcacm; C:\windows\System32\DRIVERS\ew_jucdcacm.sys [90368 2011-02-25] (Huawei Technologies Co., Ltd.)
S3 k750bus; C:\windows\System32\DRIVERS\k750bus.sys [55216 2005-02-11] (MCCI)
S3 MfeAVFK; C:\windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
R1 RsvLock; C:\windows\system32\Drivers\RsvLock.sys [40088 2009-12-16] (McAfee, Inc.)
R3 rtsuvc; C:\windows\System32\DRIVERS\rtsuvc.sys [73344 2009-12-22] (Realtek Semiconductor Corp.)
R0 SafeBoot; C:\windows\system32\Drivers\SafeBoot.sys [110520 2009-12-16] () [File not signed]
R0 SbAlg; C:\windows\system32\Drivers\SbAlg.sys [51800 2009-12-16] (McAfee, Inc.)
R0 SbFsLock; C:\windows\system32\Drivers\SbFsLock.sys [13256 2009-12-16] (McAfee, Inc.)
R1 SCDEmu; C:\windows\system32\Drivers\SCDEmu.sys [59388 2010-04-12] (PowerISO Computing, Inc.) [File not signed]
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [35152 2014-07-02] ()
R3 vpcbus; C:\windows\System32\DRIVERS\vpchbus.sys [172416 2010-11-20] (Microsoft Corporation)
R1 vpcnfltr; C:\windows\System32\DRIVERS\vpcnfltr.sys [48128 2010-11-20] (Microsoft Corporation)
R3 vpcusb; C:\windows\System32\DRIVERS\vpcusb.sys [78336 2010-11-20] (Microsoft Corporation)
R1 vpcvmm; C:\windows\System32\drivers\vpcvmm.sys [296064 2010-11-20] (Microsoft Corporation)
U3 catchme; \??\C:\Users\Aneta\AppData\Local\Temp\catchme.sys [X]
U3 mbr; \??\C:\ComboFix\mbr.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-03 15:56 - 2014-07-03 15:58 - 00023306 _____ () C:\Users\Aneta\Desktop\FRST.txt
2014-07-03 15:56 - 2014-07-03 15:56 - 00000000 ____D () C:\FRST
2014-07-03 15:55 - 2014-07-03 15:55 - 01073664 _____ (Farbar) C:\Users\Aneta\Desktop\FRST.exe
2014-07-03 15:29 - 2014-07-03 15:29 - 00021019 _____ () C:\ComboFix.txt
2014-07-03 15:15 - 2011-06-26 08:45 - 00256000 _____ () C:\windows\PEV.exe
2014-07-03 15:15 - 2010-11-07 19:20 - 00208896 _____ () C:\windows\MBR.exe
2014-07-03 15:15 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\windows\NIRCMD.exe
2014-07-03 15:15 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\windows\SWREG.exe
2014-07-03 15:15 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\windows\SWSC.exe
2014-07-03 15:15 - 2000-08-31 02:00 - 00098816 _____ () C:\windows\sed.exe
2014-07-03 15:15 - 2000-08-31 02:00 - 00080412 _____ () C:\windows\grep.exe
2014-07-03 15:15 - 2000-08-31 02:00 - 00068096 _____ () C:\windows\zip.exe
2014-07-03 15:14 - 2014-07-03 15:30 - 00000000 ____D () C:\Qoobox
2014-07-03 15:14 - 2014-07-03 15:28 - 00000000 ____D () C:\windows\erdnt
2014-07-03 15:13 - 2014-07-03 15:13 - 05213907 ____R (Swearware) C:\Users\Aneta\Desktop\ComboFix.exe
2014-07-03 14:34 - 2014-07-03 14:37 - 00000000 ____D () C:\AdwCleaner
2014-07-03 14:34 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\windows\system32\sqlite3.dll
2014-07-03 14:26 - 2014-07-03 14:26 - 01346519 _____ () C:\Users\Aneta\Desktop\AdwCleaner.exe
2014-07-03 12:38 - 2014-07-03 12:38 - 00000000 ____D () C:\Users\Aneta\AppData\Local\CrashDumps
2014-07-03 12:36 - 2014-07-03 15:44 - 00000000 ____D () C:\Program Files\trend micro
2014-07-03 12:36 - 2014-07-03 12:36 - 00781909 _____ () C:\Users\Aneta\Desktop\RSIT.exe
2014-07-03 12:36 - 2014-07-03 12:36 - 00000000 ____D () C:\rsit
2014-07-03 11:31 - 2014-07-03 13:59 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-07-02 15:49 - 2014-07-03 14:41 - 00000912 _____ () C:\windows\PFRO.log
2014-07-02 15:00 - 2014-07-03 14:41 - 00000542 _____ () C:\windows\setupact.log
2014-07-02 15:00 - 2014-07-02 15:00 - 00000000 _____ () C:\windows\setuperr.log
2014-07-02 14:30 - 2014-07-02 14:30 - 04721240 _____ () C:\Users\Aneta\Desktop\RogueKiller.exe
2014-07-02 14:30 - 2014-07-02 14:30 - 00035152 _____ () C:\windows\system32\Drivers\TrueSight.sys
2014-07-02 14:30 - 2014-07-02 14:30 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-02 14:27 - 2014-07-02 14:27 - 00000000 ____D () C:\Users\Aneta\Desktop\RK_Quarantine
2014-07-02 11:32 - 2014-01-09 04:22 - 05694464 _____ (Microsoft Corporation) C:\windows\system32\mstscax.dll
2014-07-02 11:29 - 2014-05-08 11:06 - 02742784 _____ (Microsoft Corporation) C:\windows\system32\rdpcorets.dll
2014-07-02 11:29 - 2014-05-08 11:06 - 00013824 _____ (Microsoft Corporation) C:\windows\system32\RdpGroupPolicyExtension.dll
2014-07-02 11:04 - 2012-08-23 16:48 - 00221184 _____ (Microsoft Corporation) C:\windows\system32\rdpudd.dll
2014-07-02 11:04 - 2012-08-23 16:44 - 00014848 _____ (Microsoft Corporation) C:\windows\system32\Drivers\rdpvideominiport.sys
2014-07-02 11:04 - 2012-08-23 13:12 - 00192000 _____ (Microsoft Corporation) C:\windows\system32\rdpendp_winip.dll
2014-07-02 11:03 - 2013-10-02 02:42 - 00049152 _____ (Microsoft Corporation) C:\windows\system32\Drivers\TsUsbFlt.sys
2014-07-02 11:03 - 2013-10-02 02:32 - 00012800 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-07-02 11:03 - 2013-10-02 02:30 - 00014336 _____ (Microsoft Corporation) C:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-07-02 11:03 - 2013-10-02 02:14 - 00050176 _____ (Microsoft Corporation) C:\windows\system32\MsRdpWebAccess.dll
2014-07-02 11:03 - 2013-10-02 02:14 - 00017920 _____ (Microsoft Corporation) C:\windows\system32\wksprtPS.dll
2014-07-02 11:03 - 2013-10-02 01:58 - 00053248 _____ (Microsoft Corporation) C:\windows\system32\tsgqec.dll
2014-07-02 11:03 - 2013-10-02 01:45 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\TsUsbGDCoInstaller.dll
2014-07-02 11:03 - 2013-10-02 01:08 - 00855552 _____ (Microsoft Corporation) C:\windows\system32\rdvidcrl.dll
2014-07-02 11:03 - 2013-10-02 01:00 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\TSWbPrxy.exe
2014-07-02 11:03 - 2013-10-02 00:53 - 00350208 _____ (Microsoft Corporation) C:\windows\system32\wksprt.exe
2014-07-02 11:03 - 2013-10-02 00:34 - 01068544 _____ (Microsoft Corporation) C:\windows\system32\mstsc.exe
2014-07-02 11:02 - 2013-09-25 03:57 - 00792576 _____ (Microsoft Corporation) C:\windows\system32\TSWorkspace.dll
2014-07-02 11:01 - 2012-05-04 11:59 - 00514560 _____ (Microsoft Corporation) C:\windows\system32\qdvd.dll
2014-07-02 10:45 - 2014-07-02 10:45 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-02 10:12 - 2014-07-02 10:12 - 00001222 _____ () C:\Users\Aneta\Desktop\Revo Uninstaller.lnk
2014-07-02 10:12 - 2014-07-02 10:12 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-01 16:01 - 2014-07-03 14:45 - 00332849 _____ () C:\windows\WindowsUpdate.log
2014-07-01 15:56 - 2014-07-01 15:56 - 00239698 _____ () C:\Users\Aneta\Desktop\cc_20140701_155608.reg
2014-07-01 15:49 - 2014-07-01 15:49 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-07-01 15:49 - 2014-07-01 15:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-01 15:49 - 2014-07-01 15:49 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-21 20:06 - 2014-06-21 20:47 - 727698837 _____ () C:\Users\Aneta\Desktop\Fish-Tank-(2009)-eng-720p-BRrip-.mkv
2014-06-18 06:20 - 2014-06-18 06:24 - 00000000 ____D () C:\Users\Aneta\Desktop\michala plakaty
2014-06-16 15:46 - 2014-06-16 15:46 - 09760256 _____ () C:\Users\Aneta\Desktop\Excelentni_matka_mest_Praha.pps
2014-06-11 17:19 - 2014-06-08 10:48 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-11 17:19 - 2014-06-08 10:43 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
2014-06-11 17:19 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2014-06-11 17:19 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2014-06-11 17:19 - 2014-05-30 11:02 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2014-06-11 17:19 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\windows\system32\vbscript.dll
2014-06-11 17:19 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2014-06-11 17:19 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2014-06-11 17:19 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2014-06-11 17:19 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2014-06-11 17:19 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2014-06-11 17:19 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2014-06-11 17:19 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2014-06-11 17:19 - 2014-05-30 10:28 - 00108032 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2014-06-11 17:19 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2014-06-11 17:19 - 2014-05-30 10:21 - 00646144 _____ (Microsoft Corporation) C:\windows\system32\MsSpellCheckingFacility.exe
2014-06-11 17:19 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\windows\system32\dxtmsft.dll
2014-06-11 17:19 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\windows\system32\JavaScriptCollectionAgent.dll
2014-06-11 17:19 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\windows\system32\msrating.dll
2014-06-11 17:19 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\windows\system32\mshtmled.dll
2014-06-11 17:19 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\windows\system32\dxtrans.dll
2014-06-11 17:19 - 2014-05-30 09:57 - 00595968 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2014-06-11 17:19 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2014-06-11 17:19 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2014-06-11 17:19 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\windows\system32\mshtmlmedia.dll
2014-06-11 17:19 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2014-06-11 17:19 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2014-06-11 17:19 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2014-06-11 17:19 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2014-06-11 17:19 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2014-06-11 17:19 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\windows\system32\usp10.dll
2014-06-11 17:19 - 2014-04-05 04:25 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2014-06-11 17:19 - 2014-04-05 04:24 - 00187840 _____ (Microsoft Corporation) C:\windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 17:19 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\windows\system32\msxml6.dll
2014-06-11 17:19 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\windows\system32\msxml3.dll
2014-06-11 17:19 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml6r.dll
2014-06-11 17:19 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\msxml3r.dll
==================== One Month Modified Files and Folders =======
2014-07-03 15:58 - 2014-07-03 15:56 - 00023306 _____ () C:\Users\Aneta\Desktop\FRST.txt
2014-07-03 15:56 - 2014-07-03 15:56 - 00000000 ____D () C:\FRST
2014-07-03 15:55 - 2014-07-03 15:55 - 01073664 _____ (Farbar) C:\Users\Aneta\Desktop\FRST.exe
2014-07-03 15:54 - 2012-12-30 11:34 - 00000914 _____ () C:\windows\Tasks\Adobe Flash Player Updater.job
2014-07-03 15:44 - 2014-07-03 12:36 - 00000000 ____D () C:\Program Files\trend micro
2014-07-03 15:32 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\tracing
2014-07-03 15:30 - 2014-07-03 15:14 - 00000000 ____D () C:\Qoobox
2014-07-03 15:30 - 2009-07-14 04:37 - 00000000 __RHD () C:\Users\Default
2014-07-03 15:30 - 2009-07-14 04:37 - 00000000 ___RD () C:\Users\Public
2014-07-03 15:29 - 2014-07-03 15:29 - 00021019 _____ () C:\ComboFix.txt
2014-07-03 15:28 - 2014-07-03 15:14 - 00000000 ____D () C:\windows\erdnt
2014-07-03 15:28 - 2009-07-14 04:04 - 00000215 _____ () C:\windows\system.ini
2014-07-03 15:27 - 2011-06-18 11:29 - 00000938 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-03 15:27 - 2010-06-22 13:17 - 00000000 ____D () C:\Users\Aneta
2014-07-03 15:13 - 2014-07-03 15:13 - 05213907 ____R (Swearware) C:\Users\Aneta\Desktop\ComboFix.exe
2014-07-03 14:49 - 2009-07-14 06:34 - 00020944 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-03 14:49 - 2009-07-14 06:34 - 00020944 ____H () C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-03 14:46 - 2010-02-02 02:05 - 01584626 _____ () C:\windows\system32\PerfStringBackup.INI
2014-07-03 14:45 - 2014-07-01 16:01 - 00332849 _____ () C:\windows\WindowsUpdate.log
2014-07-03 14:42 - 2010-02-02 02:20 - 00000000 ____D () C:\ProgramData\HPQLOG
2014-07-03 14:41 - 2014-07-02 15:49 - 00000912 _____ () C:\windows\PFRO.log
2014-07-03 14:41 - 2014-07-02 15:00 - 00000542 _____ () C:\windows\setupact.log
2014-07-03 14:41 - 2011-06-18 11:29 - 00000934 _____ () C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-03 14:41 - 2009-07-14 06:53 - 00000006 ____H () C:\windows\Tasks\SA.DAT
2014-07-03 14:37 - 2014-07-03 14:34 - 00000000 ____D () C:\AdwCleaner
2014-07-03 14:26 - 2014-07-03 14:26 - 01346519 _____ () C:\Users\Aneta\Desktop\AdwCleaner.exe
2014-07-03 13:59 - 2014-07-03 11:31 - 00000000 ____D () C:\Kaspersky Rescue Disk 10.0
2014-07-03 13:59 - 2014-01-23 22:23 - 00000000 ____D () C:\Users\Aneta\Desktop\stepka pohadky a oddíl
2014-07-03 12:38 - 2014-07-03 12:38 - 00000000 ____D () C:\Users\Aneta\AppData\Local\CrashDumps
2014-07-03 12:36 - 2014-07-03 12:36 - 00781909 _____ () C:\Users\Aneta\Desktop\RSIT.exe
2014-07-03 12:36 - 2014-07-03 12:36 - 00000000 ____D () C:\rsit
2014-07-02 15:00 - 2014-07-02 15:00 - 00000000 _____ () C:\windows\setuperr.log
2014-07-02 14:30 - 2014-07-02 14:30 - 04721240 _____ () C:\Users\Aneta\Desktop\RogueKiller.exe
2014-07-02 14:30 - 2014-07-02 14:30 - 00035152 _____ () C:\windows\system32\Drivers\TrueSight.sys
2014-07-02 14:30 - 2014-07-02 14:30 - 00000000 ____D () C:\ProgramData\RogueKiller
2014-07-02 14:27 - 2014-07-02 14:27 - 00000000 ____D () C:\Users\Aneta\Desktop\RK_Quarantine
2014-07-02 11:09 - 2009-07-14 04:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-07-02 10:45 - 2014-07-02 10:45 - 00043152 _____ (AVAST Software) C:\windows\avastSS.scr
2014-07-02 10:45 - 2014-04-29 09:40 - 00024184 _____ () C:\windows\system32\Drivers\aswHwid.sys
2014-07-02 10:45 - 2014-01-13 15:04 - 00071944 _____ (AVAST Software) C:\windows\system32\Drivers\aswstm.sys
2014-07-02 10:45 - 2013-07-14 06:23 - 00192352 _____ () C:\windows\system32\Drivers\aswVmm.sys
2014-07-02 10:45 - 2013-07-14 06:23 - 00049944 _____ () C:\windows\system32\Drivers\aswRvrt.sys
2014-07-02 10:45 - 2012-06-05 19:03 - 00002058 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-07-02 10:45 - 2012-04-29 17:14 - 00081768 _____ (AVAST Software) C:\windows\system32\Drivers\aswRdr2.sys
2014-07-02 10:45 - 2011-06-11 13:18 - 00779536 _____ (AVAST Software) C:\windows\system32\Drivers\aswsnx.sys
2014-07-02 10:45 - 2010-06-22 15:01 - 00414392 _____ (AVAST Software) C:\windows\system32\Drivers\aswsp.sys
2014-07-02 10:45 - 2010-06-22 15:01 - 00067824 _____ (AVAST Software) C:\windows\system32\Drivers\aswMonFlt.sys
2014-07-02 10:45 - 2010-06-22 15:00 - 00276432 _____ (AVAST Software) C:\windows\system32\aswBoot.exe
2014-07-02 10:12 - 2014-07-02 10:12 - 00001222 _____ () C:\Users\Aneta\Desktop\Revo Uninstaller.lnk
2014-07-02 10:12 - 2014-07-02 10:12 - 00000000 ____D () C:\Program Files\VS Revo Group
2014-07-02 10:06 - 2014-04-23 22:02 - 00000000 ____D () C:\Program Files\iwintoolbarforpogo
2014-07-01 15:56 - 2014-07-01 15:56 - 00239698 _____ () C:\Users\Aneta\Desktop\cc_20140701_155608.reg
2014-07-01 15:55 - 2011-11-05 14:10 - 00000000 ____D () C:\Users\Aneta\AppData\Roaming\Winamp
2014-07-01 15:55 - 2011-05-14 14:36 - 00000000 ____D () C:\windows\Minidump
2014-07-01 15:55 - 2010-07-06 20:58 - 00000000 ____D () C:\Users\Aneta\AppData\Roaming\Skype
2014-07-01 15:55 - 2009-07-27 10:31 - 00000000 ____D () C:\windows\Panther
2014-07-01 15:49 - 2014-07-01 15:49 - 00000965 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-07-01 15:49 - 2014-07-01 15:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-07-01 15:49 - 2014-07-01 15:49 - 00000000 ____D () C:\Program Files\CCleaner
2014-06-21 20:47 - 2014-06-21 20:06 - 727698837 _____ () C:\Users\Aneta\Desktop\Fish-Tank-(2009)-eng-720p-BRrip-.mkv
2014-06-19 18:35 - 2013-08-23 18:42 - 00000000 ____D () C:\Users\Aneta\Desktop\ars21 a ck
2014-06-19 16:15 - 2014-04-15 06:09 - 00000000 ____D () C:\Users\Aneta\Desktop\aktual letaky
2014-06-19 14:31 - 2012-11-16 07:24 - 00948224 ___SH () C:\Users\Aneta\Thumbs.db
2014-06-18 14:43 - 2014-01-19 12:25 - 00000000 ____D () C:\Users\Aneta\Desktop\gtmskola
2014-06-18 06:24 - 2014-06-18 06:20 - 00000000 ____D () C:\Users\Aneta\Desktop\michala plakaty
2014-06-17 22:13 - 2011-08-29 19:22 - 00000000 ____D () C:\Users\Aneta\Desktop\hudba
2014-06-16 15:46 - 2014-06-16 15:46 - 09760256 _____ () C:\Users\Aneta\Desktop\Excelentni_matka_mest_Praha.pps
2014-06-15 10:20 - 2012-11-30 11:50 - 00000000 ____D () C:\Users\Aneta\Desktop\prurez dilem AS
2014-06-13 13:38 - 2011-06-18 11:30 - 00002129 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-06-13 12:12 - 2014-05-16 12:47 - 00000000 ____D () C:\Users\Aneta\Desktop\kursy a rozpracované projekty
2014-06-12 07:03 - 2009-07-14 04:37 - 00000000 ____D () C:\windows\rescache
2014-06-12 06:04 - 2014-05-06 21:31 - 00000000 ___SD () C:\windows\system32\CompatTel
2014-06-11 21:43 - 2010-02-02 02:33 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-11 21:41 - 2014-01-20 00:21 - 00000000 ____D () C:\windows\system32\MRT
2014-06-11 21:39 - 2010-06-22 13:47 - 92708840 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2014-06-09 18:44 - 2014-04-23 21:45 - 00000000 ____D () C:\Users\Aneta\AppData\Roaming\HipSoft
2014-06-09 18:41 - 2011-03-08 12:59 - 00000000 ____D () C:\Users\Aneta\Desktop\filmynot
2014-06-09 18:37 - 2012-11-25 16:34 - 00000000 ____D () C:\Users\Aneta\Desktop\všechno z plochy
2014-06-09 11:55 - 2013-12-23 10:49 - 00000000 ____D () C:\Users\Aneta\Desktop\zaloha flash§mailisty
2014-06-08 10:48 - 2014-06-11 17:19 - 00391680 _____ (Microsoft Corporation) C:\windows\system32\aepdu.dll
2014-06-08 10:43 - 2014-06-11 17:19 - 00302592 _____ (Microsoft Corporation) C:\windows\system32\aeinv.dll
Files to move or delete:
====================
C:\Users\Aneta\iTunesSetup.exe
C:\Users\Aneta\SkypeSetup.exe
C:\Users\Aneta\UnityWebPlayer.exe
==================== Bamital & volsnap Check =================
C:\windows\explorer.exe => File is digitally signed
C:\windows\system32\winlogon.exe => File is digitally signed
C:\windows\system32\wininit.exe => File is digitally signed
C:\windows\system32\svchost.exe => File is digitally signed
C:\windows\system32\services.exe => File is digitally signed
C:\windows\system32\User32.dll => File is digitally signed
C:\windows\system32\userinit.exe => File is digitally signed
C:\windows\system32\rpcss.dll => File is digitally signed
C:\windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-07-02 14:20
==================== End Of Log ============================
Odinstalujte combofix přes Start - Spustit
záložka