VIRY.CZ

Dobrý den,
prosím o kontrolu, AV mi sice nehlásí žádnou havěť, ale PC se někdy chová divně (např. procesor jde bezdůvodně dlouho naplno). Předem díky.

Logfile of random's system information tool 1.09 (written by random/random)
Run by trojakr at 2013-07-21 23:36:51
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 143 GB (50%) free of 288 GB
Total RAM: 3062 MB (52% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:37:36, on 21.7.2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16635)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
C:\Program Files\ActivIdentity\ActivClient\acevents.exe
C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
C:\Program Files\IDT\WDM\sttray.exe
C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\Samsung\Kies\Kies.exe
C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe
C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\windows\system32\Macromed\Flash\FlashUtil32_11_7_700_224_ActiveX.exe
C:\Users\Robert Troják\Desktop\RSIT.exe
C:\Program Files\trend micro\trojakr.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.czc.cz
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe,c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
O2 - BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [QlbCtrl.exe] C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [PDF Complete] C:\Program Files\PDF Complete\pdfsty.exe
O4 - HKLM\..\Run: [HPPowerAssistant] C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe /hidden
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [HPWirelessAssistant] C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe /hidden
O4 - HKLM\..\Run: [acevents] "C:\Program Files\ActivIdentity\ActivClient\acevents.exe"
O4 - HKLM\..\Run: [accrdsub] "C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe"
O4 - HKLM\..\Run: [File Sanitizer] C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SysTrayApp] C:\Program Files\IDT\WDM\sttray.exe
O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [KiesTrayAgent] C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [OfficeSyncProcess] "C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE"
O4 - HKCU\..\Run: [KiesPreload] C:\Program Files\Samsung\Kies\Kies.exe /preload
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [KiesAirMessage] C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
O4 - HKCU\..\Run: [] C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: VPN Client.lnk = ?
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~1\Office14\ONBttnIE.dll/105
O8 - Extra context menu item: Odeslat obrázek do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Odeslat stránku do zařízení &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\windows\WindowsMobile\INetRepl.dll
O9 - Extra button: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7.2 - {72EFBFE4-C74F-4187-AEFD-73EA3BE968D6} - C:\Program Files\ICQ7.2\ICQ.exe
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: http://*.mcafee.com (HKLM)
O15 - Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://mozilla-mirror.3347.voxcdn.com
O15 - ESC Trusted Zone: http://*.mcafee.com (HKLM)
O15 - ESC Trusted Zone: http://betavscan.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://vs.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://www.mcafeeasap.com (HKLM)
O15 - ESC Trusted Zone: http://mozilla-mirror.3347.voxcdn.com (HKLM)
O15 - ESC Trusted IP range: http://192.168.0.122
O15 - ESC Trusted IP range: http://127.0.0.1
O15 - ESC Trusted IP range: http://192.168.0.122 (HKLM)
O15 - ESC Trusted IP range: http://127.0.0.1 (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = lan.czechcomputer.cz
O17 - HKLM\Software\..\Telephony: DomainName = lan.czechcomputer.cz
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = lan.czechcomputer.cz
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = lan.czechcomputer.cz
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - Winlogon Notify: DeviceNP - DeviceNP.dll (file missing)
O23 - Service: ActivIdentity Shared Store Service (ac.sharedstore) - ActivIdentity - C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\aestsrv.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
O23 - Service: @c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128 (DpHost) - DigitalPersona, Inc. - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: ESET SHA Service (ESHASRV) - ESET - C:\Program Files\ESET\ESET Smart Security\EShaSrv.exe
O23 - Service: HP ProtectTools Device Locking / Auditing (FLCDLOCK) - Hewlett-Packard Ltd - c:\Windows\system32\flcdlock.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Power Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
O23 - Service: HP ProtectTools Service - Hewlett-Packard Development Company, L.P - c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
O23 - Service: HP Support Assistant Service - Unknown owner - C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe (file missing)
O23 - Service: HP Wireless Assistant Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
O23 - Service: Drive Encryption Service (HpFkCryptService) - McAfee, Inc. - c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard - C:\windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: @C:\Program Files\Nero\Update\NASvc.exe,-200 (NAUpdate) - Nero AG - C:\Program Files\Nero\Update\NASvc.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Audio Service (STacSV) - IDT, Inc. - C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\STacSV.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Intel(R) Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: Validity VCS Fingerprint Service (vcsFPService) - Validity Sensors, Inc. - C:\windows\system32\vcsFPService.exe

--
End of file - 15980 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{395610AE-C624-4f58-B89E-23733EA00F9A}]
HP ProtectTools Security Manager Extension - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll [2009-11-02 1471752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}]
Search Helper - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll [2010-09-22 191792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-05-18 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL [2010-12-21 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-05-18 171424]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"QlbCtrl.exe"=C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [2009-09-03 288312]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"PDF Complete"=C:\Program Files\PDF Complete\pdfsty.exe [2009-06-18 563736]
"HPPowerAssistant"=C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [2009-11-18 1690680]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-05-27 1721640]
"HPWirelessAssistant"=C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [2009-10-22 363064]
"acevents"=C:\Program Files\ActivIdentity\ActivClient\acevents.exe [2009-06-04 153640]
"accrdsub"=C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [2009-06-04 400936]
"File Sanitizer"=C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe []
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2009-10-20 98304]
"SysTrayApp"=C:\Program Files\IDT\WDM\sttray.exe [2009-10-13 495708]
"BCSSync"=C:\Program Files\Microsoft Office\Office14\BCSSync.exe [2010-03-13 91520]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"KiesTrayAgent"=C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [2013-02-13 310128]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-03-12 253816]
"egui"=C:\Program Files\ESET\ESET Smart Security\egui.exe [2013-02-14 3158584]
"Windows Mobile Device Center"=C:\windows\WindowsMobile\wmdc.exe [2007-05-31 648072]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"HPADVISOR"=C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW []
"LightScribe Control Panel"=C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2009-06-17 2363392]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"OfficeSyncProcess"=C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [2012-01-20 719672]
"KiesPreload"=C:\Program Files\Samsung\Kies\Kies.exe [2013-02-13 1509232]
"Akamai NetSession Interface"=C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]
"KiesAirMessage"=C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup []
""=C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [2013-02-13 844144]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
VPN Client.lnk - C:\windows\Installer\{CCBAA1F7-E5E1-48B2-9ED9-A79C6A37CE78}\Icon3E5562ED7.ico

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\DeviceNP]
C:\windows\system32\DeviceNP.dll [2009-10-06 75320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL [2012-08-16 4171424]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]
"notification packages"=DPPassFilter
scecli

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Wdf01000.sys]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2013-07-12 00:08:07 ----A---- C:\windows\system32\jscript.dll
2013-07-12 00:08:05 ----A---- C:\windows\system32\jscript9.dll
2013-07-12 00:08:04 ----A---- C:\windows\system32\jsproxy.dll
2013-07-12 00:08:03 ----A---- C:\windows\system32\iesetup.dll
2013-07-12 00:08:02 ----A---- C:\windows\system32\ieui.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\urlmon.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-07-12 00:08:01 ----A---- C:\windows\system32\msfeeds.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\iesysprep.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\iertutil.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\iernonce.dll
2013-07-12 00:08:01 ----A---- C:\windows\system32\ie4uinit.exe
2013-07-12 00:07:59 ----A---- C:\windows\system32\wininet.dll
2013-07-12 00:07:58 ----A---- C:\windows\system32\ieframe.dll
2013-07-12 00:07:57 ----A---- C:\windows\system32\mshtml.dll
2013-07-11 23:02:24 ----A---- C:\windows\system32\DWrite.dll
2013-07-11 23:02:22 ----A---- C:\windows\system32\WMVDECOD.DLL
2013-07-11 23:02:21 ----A---- C:\windows\system32\win32k.sys
2013-07-11 23:02:21 ----A---- C:\windows\system32\qedit.dll
2013-07-04 22:31:30 ----D---- C:\windows\WindowsMobile
2013-06-29 00:07:13 ----D---- C:\ProgramData\Cisco Systems

======List of files/folders modified in the last 1 month======

2013-07-21 23:37:02 ----D---- C:\windows\Prefetch
2013-07-21 23:36:54 ----D---- C:\Program Files\trend micro
2013-07-21 23:36:53 ----D---- C:\windows\Temp
2013-07-21 22:02:42 ----D---- C:\windows\system32\config
2013-07-21 21:56:41 ----D---- C:\windows\System32
2013-07-21 21:56:41 ----D---- C:\windows\inf
2013-07-21 21:56:41 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-07-21 21:51:09 ----D---- C:\ProgramData\HPQLOG
2013-07-21 21:50:18 ----A---- C:\windows\system32\log.txt
2013-07-19 17:25:44 ----D---- C:\Users\Robert Troják\AppData\Roaming\ICQ
2013-07-17 09:11:30 ----D---- C:\iptemp
2013-07-16 12:13:14 ----SHD---- C:\System Volume Information
2013-07-16 09:41:57 ----D---- C:\ProgramData\PDFC
2013-07-13 21:32:03 ----SHD---- C:\windows\Installer
2013-07-13 21:27:37 ----RD---- C:\Program Files
2013-07-13 21:27:34 ----D---- C:\windows\system32\Tasks
2013-07-13 21:27:33 ----D---- C:\windows\Tasks
2013-07-13 21:25:35 ----RSD---- C:\windows\assembly
2013-07-13 21:25:35 ----D---- C:\windows\Microsoft.NET
2013-07-13 21:03:43 ----D---- C:\windows\winsxs
2013-07-13 21:01:13 ----D---- C:\Program Files\Internet Explorer
2013-07-13 21:01:11 ----D---- C:\Program Files\Windows Journal
2013-07-13 21:01:06 ----D---- C:\Program Files\Windows Defender
2013-07-13 21:01:01 ----D---- C:\Program Files\Microsoft Silverlight
2013-07-12 00:08:59 ----D---- C:\ProgramData\Microsoft Help
2013-07-12 00:08:19 ----D---- C:\windows\system32\catroot2
2013-07-12 00:08:19 ----D---- C:\windows\system32\catroot
2013-07-12 00:04:33 ----A---- C:\windows\system32\MRT.exe
2013-07-04 22:33:27 ----SD---- C:\Users\Robert Troják\AppData\Roaming\Microsoft
2013-07-04 22:33:04 ----D---- C:\windows\system32\LogFiles
2013-07-04 22:32:08 ----D---- C:\windows\system32\drivers
2013-07-04 22:32:04 ----D---- C:\windows\system32\drivers\UMDF
2013-07-04 22:32:03 ----D---- C:\windows\system32\DriverStore
2013-07-04 22:31:30 ----D---- C:\Windows
2013-06-29 00:34:23 ----D---- C:\windows\system32\NDF
2013-06-29 00:18:15 ----D---- C:\Program Files\Cisco Systems
2013-06-29 00:07:13 ----HD---- C:\ProgramData
2013-06-27 00:05:59 ----D---- C:\Program Files\Google

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2009-07-08 25656]
R0 iaStor;Intel RAID Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2011-03-04 45648]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 SafeBoot;SafeBoot; C:\windows\system32\drivers\SafeBoot.sys [2009-10-15 110520]
R0 SbAlg;SbAlg; C:\windows\system32\drivers\SbAlg.sys [2009-10-15 51800]
R0 SbFsLock;SbFsLock; C:\windows\system32\drivers\SbFsLock.sys [2009-10-15 13256]
R0 storvsc;storvsc; C:\windows\system32\drivers\storvsc.sys [2010-11-20 28032]
R0 vmbus;@%SystemRoot%\system32\vmbusres.dll,-1000; C:\windows\system32\drivers\vmbus.sys [2010-11-20 175360]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\windows\system32\drivers\csc.sys [2010-11-20 388096]
R1 eamonm;eamonm; C:\windows\system32\DRIVERS\eamonm.sys [2013-02-04 175288]
R1 ehdrv;ehdrv; C:\windows\system32\DRIVERS\ehdrv.sys [2013-02-04 124848]
R1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 RsvLock;RsvLock; C:\windows\system32\drivers\RsvLock.sys [2009-10-15 40088]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 CVPNDRVA;Cisco Systems Inc. IPSec Driver; \??\C:\windows\system32\Drivers\CVPNDRVA.sys [2007-04-03 306295]
R2 epfwwfpr;epfwwfpr; C:\windows\system32\DRIVERS\epfwwfpr.sys [2013-02-04 108344]
R2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
R2 rimspci;rimspci; C:\windows\system32\DRIVERS\rimspe86.sys [2009-10-27 48640]
R2 risdpcie;risdpcie; C:\windows\system32\DRIVERS\risdpe86.sys [2009-10-29 47616]
R2 rixdpcie;rixdpcie; C:\windows\system32\DRIVERS\rixdpe86.sys [2009-09-29 38912]
R3 Accelerometer;HP Accelerometer; C:\windows\system32\DRIVERS\Accelerometer.sys [2009-07-08 33848]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2009-08-03 1161760]
R3 AtiHdmiService;ATI Function Driver for High Definition Audio Service; C:\windows\system32\drivers\AtiHdmi.sys [2009-09-30 104976]
R3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2009-10-20 5089280]
R3 DNE;Deterministic Network Enhancer Miniport; C:\windows\system32\DRIVERS\dne2000.sys [2007-01-31 127376]
R3 HECI;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECI.sys [2009-09-17 41088]
R3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
R3 Impcd;Impcd; C:\windows\system32\DRIVERS\Impcd.sys [2009-10-26 125696]
R3 InputFilter_Hid_FlexDef2b;Siliten HID Devices(FlexDef2b) Driver Service; C:\windows\system32\DRIVERS\InputFilter_FlexDef2b.sys [2010-06-19 14848]
R3 NETw5s32;Ovladač adaptéru Intel(R) Wireless WiFi Link pro systém Windows 7 32 Bit; C:\windows\system32\DRIVERS\NETw5s32.sys [2010-01-13 6755840]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\windows\System32\drivers\rdpdr.sys [2010-11-20 133632]
R3 SNP2UVC;USB2.0 PC Camera (SNP2UVC); C:\windows\system32\DRIVERS\snp2uvc.sys [2009-09-18 1765168]
R3 STHDA;IDT High Definition Audio CODEC; C:\windows\system32\DRIVERS\stwrt.sys [2009-10-13 420864]
R3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\windows\system32\DRIVERS\serscan.sys [2009-07-14 9216]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-05-27 245936]
R3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 rimmptsk;rimmptsk; C:\windows\system32\DRIVERS\rimmptsk.sys [2009-06-26 48128]
S2 rimsptsk;rimsptsk; C:\windows\system32\DRIVERS\rimsptsk.sys [2009-06-26 44544]
S2 rismxdp;Ricoh xD-Picture Card Driver; C:\windows\system32\DRIVERS\rixdptsk.sys [2009-06-26 38400]
S3 amdagp;Ovladač filtru AMD portu AGP; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-14 229888]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
S3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
S3 BTHPORT;Ovladač portu Bluetooth; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
S3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-09-17 86056]
S3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-09-17 108072]
S3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-09-17 29472]
S3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-09-17 18472]
S3 CVirtA;Cisco Systems VPN Adapter; C:\windows\system32\DRIVERS\CVirtA.sys [2007-01-18 5275]
S3 DAMDrv;DAMDrv; C:\windows\system32\DRIVERS\DAMDrv.sys [2009-09-08 32312]
S3 fssfltr;FssFltr; C:\windows\system32\DRIVERS\fssfltr.sys [2010-09-23 39272]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
S3 s3cap;s3cap; C:\windows\system32\drivers\vms3cap.sys [2010-11-20 5632]
S3 sdbus;sdbus; C:\windows\system32\drivers\sdbus.sys [2010-11-20 84992]
S3 sisagp;Filtr SIS sběrnice AGP; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\ssadbus.sys [2011-10-27 121064]
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\windows\system32\DRIVERS\ssadmdfl.sys [2011-10-27 12776]
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\windows\system32\DRIVERS\ssadmdm.sys [2011-10-27 136808]
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\windows\system32\DRIVERS\sscdbus.sys [2011-10-27 104648]
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\windows\system32\DRIVERS\sscdmdfl.sys [2011-10-27 14920]
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\windows\system32\DRIVERS\sscdmdm.sys [2011-10-27 132424]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\windows\System32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 viaagp;Filtr VIA sběrnice AGP; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 VMBusHID;VMBusHID; C:\windows\system32\drivers\VMBusHID.sys [2010-11-20 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ac.sharedstore;ActivIdentity Shared Store Service; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [2009-06-04 207400]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-10 65640]
R2 AESTFilters;Andrea ST Filters Service; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\aestsrv.exe [2009-03-02 81920]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-08-03 14336]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2009-10-20 172032]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-09-04 595232]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 CVPND;Cisco Systems, Inc. VPN Service; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [2007-04-03 1516584]
R2 DpHost;@c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe,-128; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [2009-11-02 300808]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [2013-02-14 1020304]
R2 HP Power Assistant Service;HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [2009-11-18 101944]
R2 HP ProtectTools Service;HP ProtectTools Service; c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [2009-09-11 36864]
R2 HP Wireless Assistant Service;HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [2009-10-22 101944]
R2 HpFkCryptService;Drive Encryption Service; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [2009-10-15 277096]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2009-07-08 26168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2009-11-04 268824]
R2 NAUpdate;@C:\Program Files\Nero\Update\NASvc.exe,-200; C:\Program Files\Nero\Update\NASvc.exe [2011-09-23 641832]
R2 pdfcDispatcher;PDF Document Manager; C:\Program Files\PDF Complete\pdfsvc.exe [2009-06-18 635416]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 SeaPort;SeaPort; C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2010-09-22 249136]
R2 STacSV;Audio Service; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\STacSV.exe [2009-10-13 221266]
R2 UNS;Intel(R) Management & Security Application User Notification Service; C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2009-11-04 2320920]
R3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
R3 hpqwmiex;HP Software Framework Service; C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe [2011-03-28 799800]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-11 136176]
S2 HP Support Assistant Service;HP Support Assistant Service; C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe []
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-04-19 161384]
S2 vcsFPService;Validity VCS Fingerprint Service; C:\windows\system32\vcsFPService.exe [2009-10-06 1639728]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-12 256904]
S3 AppMgmt;@appmgmts.dll,-3250; C:\windows\system32\svchost.exe [2009-07-14 20992]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 EhttpSrv;ESET HTTP Server; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [2013-02-14 33136]
S3 ESHASRV;ESET SHA Service; C:\Program Files\ESET\ESET Smart Security\EShaSrv.exe [2013-02-14 183944]
S3 FLCDLOCK;HP ProtectTools Device Locking / Auditing; c:\Windows\system32\flcdlock.exe [2009-10-06 362040]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files\Windows Live\Family Safety\fsssvc.exe [2010-09-23 1493352]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-11 136176]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files\Microsoft Office\Office14\GROOVE.EXE [2012-09-20 30785672]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4640000]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-10-16 74392]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\windows\System32\svchost.exe [2009-07-14 20992]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-06-28 1343400]
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

Zdravim

Predpokladam, ze na ten ESET mate zakoupenou licenci?

Jedna se o domaci PC nebo nejake firemni\pracovni

Zdravím,

- ano, ESET je ofiko a automaticky na něm probíhají aktualizace
- PC je mé vlastní, nicméně používám ho externě i k práci

Stahnete Malwarebytes' Anti-Malware (zkracene MBAM) http://forum.viry.cz/viewtopic.php?f=29&t=115222

• Provedte aktualizaci
• Provedte uplny sken - nic nemazte
• MBAM miva obcas falesne detekce, proto vlozte log do prispevku a pockejte na posouzeni

Malwarebytes Anti-Malware (Zkušební verze Malwarebytes Anti-Malware.) 1.75.0.1300
www.malwarebytes.org

Verze: v2013.07.26.06

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 10.0.9200.16635
trojakr :: ROBERT-HP [administrátor]

Ochrana: Povolena

26.7.2013 23:50:11
MBAM-log-2013-07-27 (14-06-38).txt

Typ: Kompletní kontrola (C:\|F:\|)
Nastavení kontroly povoleno: Paměť | Po spuštění | Registr | Systémové soubory | Heuristická analýza Extra | Heuristická analýza Shuriken | PUP | PUM
Nastavení kontroly zakázáno: P2P
Kontrolované objekty: 598063
Uplynulý čas: 1 hodin, 37 minut, 14 sekund

Nalezené procesy v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené moduly v paměti: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené klíče v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené hodnoty v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené datové položky v registru: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené složky: 0
(Žádné škodlivé položky nebyly zjištěny)

Nalezené soubory: 3
C:\Users\Robert Troják\Documents\Programy\MioPocket 4.0 Release 68\MioPocket 4.0 Release 68\MioAutoRun\Programs\CE Agenda\mfcce300.dll (Malware.Packer.Gen) -> Nebyla provedena žádná instrukce.
C:\Users\Robert Troják\Documents\Programy\MioPocket 4.0 Release 68\MioPocket 4.0 Release 68\MioAutoRun\Programs\NetCFCfg\rtf3_5.dll (Malware.Packer.Gen) -> Nebyla provedena žádná instrukce.
C:\Users\Robert Troják\Documents\Programy\MioPocket 4.0 Release 68\MioPocket 4.0 Release 68\MioAutoRun\Programs\Office\RICHED20.DLL (Malware.Packer.Gen) -> Nebyla provedena žádná instrukce.

(konec)

Nalezy MBAMu nemazte, jedna se o falesnou detekci


Prosim o spusteni nasledujiciho

Aplikace ke stažení:

• http://tharifas.sweb.cz/Test.exe
• http://vyosek.ic.cz/pro_usery/Test.exe

Po stažení je nutné na systémech Vista, W7 a W8 spustit utilitu jako Správce - kliknutí pravým tlačítkem myši na ikonu a zvolení možnosti Spustit jako správce či Run As Administrator



Následně dojde ke stažení FRST a inicializaci

• Po spuštění FRST odsouhlasíme licenční podmínky kliknutím na Ano.
• Dooznačíme položku Addition.txt - viz obrázek.
  
• Klikneme na tlačítko Scan čímž spustíme skenování.
• Počkáme na dokončení skenování FRST a vytvoření doplňkových informací naší nástavbou.
• Otevře se nám textový soubor FRST.txt, což je požadovaný log a jehož obsah vložíme do svého tématu na fóru.
• Po uzavření logu se Test.exe ukončí a na ploše nám zbyde utilta FRST a dva logy FRST.txt a Addition.txt - nic z toho zatím nemažeme.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-07-2013
Ran by trojakr (administrator) on 28-07-2013 16:23:21
Running from C:\Users\Robert Troják\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(McAfee, Inc.) c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(AMD) C:\windows\system32\atiesrxx.exe
(IDT, Inc.) C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\STacSV.exe
(Hewlett-Packard) C:\windows\system32\Hpservice.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Andrea Electronics Corporation) C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\aestsrv.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Cisco Systems, Inc.) C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(Hewlett-Packard Development Company, L.P) c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(PDF Complete Inc) C:\Program Files\PDF Complete\pdfsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(AMD) C:\windows\system32\atieclxx.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(DigitalPersona, Inc.) c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCtrl.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Windows\WindowsMobile\wmdc.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
(Akamai Technologies, Inc.) C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Akamai Technologies, Inc.) C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe
( Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\VolCtrl.exe
(Hewlett-Packard Development Company, L.P.) C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Hewlett-Packard Development Company L.P.) C:\Program Files\Hewlett-Packard\Shared\hpCaslNotification.exe
(Microsoft Corporation) C:\windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Program Files\Hewlett-Packard\Shared\hpqToaster.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\windows\system32\Macromed\Flash\FlashUtil32_11_8_800_94_ActiveX.exe
() C:\Users\Robert Troják\Desktop\Test.exe
(Microsoft Corporation) C:\windows\system32\cmd.exe
(Microsoft Corporation) C:\windows\system32\PING.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [QlbCtrl.exe] - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe [288312 2009-09-03] ( Hewlett-Packard Development Company, L.P.)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-08-25] (Intel Corporation)
HKLM\...\Run: [PDF Complete] - C:\Program Files\PDF Complete\pdfsty.exe [563736 2009-06-18] (PDF Complete Inc)
HKLM\...\Run: [HPPowerAssistant] - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1690680 2009-11-18] (Hewlett-Packard)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1721640 2010-05-27] (Synaptics Incorporated)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2009-10-22] (Hewlett-Packard)
HKLM\...\Run: [acevents] - C:\Program Files\ActivIdentity\ActivClient\acevents.exe [153640 2009-06-04] (ActivIdentity)
HKLM\...\Run: [accrdsub] - C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [400936 2009-06-04] (ActivIdentity)
HKLM\...\Run: [File Sanitizer] - C:\Program Files\Hewlett-Packard\File Sanitizer\CoreShredder.exe [x]
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2009-10-20] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray.exe [495708 2009-10-13] (IDT, Inc.)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [3158584 2013-02-14] (ESET)
HKLM\...\Run: [Windows Mobile Device Center] - C:\Windows\WindowsMobile\wmdc.exe [648072 2007-05-31] (Microsoft Corporation)
HKLM\...\runonceex: [ContentMerger] - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-13] (Sonic Solutions)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\DeviceNP: DeviceNP.dll (Hewlett-Packard Limited)
HKCU\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]
HKCU\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [2363392 2009-06-17] (Hewlett-Packard Company)
HKCU\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [x]
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [x]
HKU\Lukáš Matějka\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [x]
HKU\Lukáš Matějka\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2009-06-17] (Hewlett-Packard Company)
HKU\Robert\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2009-06-17] (Hewlett-Packard Company)
HKU\Robert\...\Run: [ICQ] - C:\Program Files\ICQ7.2\ICQ.exe [ 2011-01-05] (ICQ, LLC.)
HKU\User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW [x]
HKU\User\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2009-06-17] (Hewlett-Packard Company)
HKU\Václav Vaněček\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN [x]
HKU\Václav Vaněček\...\Run: [LightScribe Control Panel] - C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe [ 2009-06-17] (Hewlett-Packard Company)
HKU\Václav Vaněček\...\Run: [RocketDock] - C:\Program Files\CustoPackTools\utils\RocketDock\RocketDock.exe [x]
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VPN Client.lnk
ShortcutTarget: VPN Client.lnk -> C:\windows\Installer\{CCBAA1F7-E5E1-48B2-9ED9-A79C6A37CE78}\Icon3E5562ED7.ico ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/ig
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.czc.cz
SearchScopes: HKLM - DefaultScope {2E934F7B-B301-497A-922F-F19168CA5AFB} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {2E934F7B-B301-497A-922F-F19168CA5AFB} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKCU - DefaultScope {FC2816C8-E27F-4825-95D1-0911D0A9698E} URL = http://www.google.cz/search?q={searchTe ... Page}&rlz=
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={search ... 26C738EA51
SearchScopes: HKCU - {2E934F7B-B301-497A-922F-F19168CA5AFB} URL =
SearchScopes: HKCU - {FC2816C8-E27F-4825-95D1-0911D0A9698E} URL = http://www.google.cz/search?q={searchTe ... Page}&rlz=
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 88.83.161.210

FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: gophoto - C:\Users\Robert Troják\AppData\Roaming\Mozilla\Firefox\profiles\extensions\gophoto@gophoto.it.xpi
FF HKLM\...\Firefox\Extensions: [otis@digitalpersona.com] c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Endpoint Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: hxxp://www.google.cz/ig
CHR RestoreOnStartup: "hxxp://www.google.cz/ig"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\28.0.1500.72\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~1\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.135\npGoogleUpdate3.dll No File
CHR Plugin: (Veetle TV Player) - C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Windows Live\u0099 Photo Gallery) - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll No File
CHR Extension: (YouTube) - C:\Users\ROBERT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\ROBERT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (GoPhoto.it) - C:\Users\ROBERT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk\1.5_0
CHR Extension: (Gmail) - C:\Users\ROBERT~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR HKLM\...\Chrome\Extension: [pfmopbbadnfoelckkcmjjeaaegjpjjbk] - C:\Program Files\Gophoto.it\gophotoit14.crx

========================== Services (Whitelisted) =================

R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [207400 2009-06-04] (ActivIdentity)
R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [14336 2009-08-03] (LSI Corporation)
R2 CVPND; C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe [1516584 2007-04-03] (Cisco Systems, Inc.)
R2 DpHost; c:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [300808 2009-11-02] (DigitalPersona, Inc.)
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [33136 2013-02-14] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1020304 2013-02-14] (ESET)
S3 ESHASRV; C:\Program Files\ESET\ESET Smart Security\EShaSrv.exe [183944 2013-02-14] (ESET)
S3 FLCDLOCK; c:\Windows\system32\flcdlock.exe [362040 2009-10-06] (Hewlett-Packard Ltd)
R2 HP Power Assistant Service; C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [101944 2009-11-18] (Hewlett-Packard)
R2 HP ProtectTools Service; c:\Program Files\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2009-09-11] (Hewlett-Packard Development Company, L.P)
R2 HP Wireless Assistant Service; C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [101944 2009-10-22] (Hewlett-Packard)
R2 HpFkCryptService; c:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [277096 2009-10-15] (McAfee, Inc.)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [641832 2011-09-23] (Nero AG)
R2 pdfcDispatcher; C:\Program Files\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
R2 STacSV; C:\windows\System32\DriverStore\FileRepository\stwrt.inf_x86_neutral_499a67a913bde1c7\STacSV.exe [221266 2009-10-13] (IDT, Inc.)
S2 vcsFPService; C:\windows\system32\vcsFPService.exe [1639728 2009-10-06] (Validity Sensors, Inc.)
R2 yksvc; C:\Windows\System32\yk62x86.dll [364544 2009-09-28] (Marvell)
S2 HP Support Assistant Service; "C:\Program Files\Hewlett-Packard\HP Support Framework\hpsa_service.exe" [x]

==================== Drivers (Whitelisted) ====================

S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R2 CVPNDRVA; C:\windows\system32\Drivers\CVPNDRVA.sys [306295 2007-04-03] (Cisco Systems, Inc.)
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv.sys [32312 2009-09-08] (Hewlett-Packard Development Company L.P.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [127376 2007-01-31] (Deterministic Networks, Inc.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [175288 2013-02-04] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [124848 2013-02-04] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [108344 2013-02-04] (ESET)
R3 InputFilter_Hid_FlexDef2b; C:\Windows\System32\DRIVERS\InputFilter_FlexDef2b.sys [14848 2010-06-19] (Siliten)
R3 MBAMProtector; C:\windows\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
S3 MfeAVFK; C:\Windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\Windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\Windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\Windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
R2 risdpcie; C:\Windows\system32\DRIVERS\risdpe86.sys [47616 2009-10-29] (REDC)
R2 rixdpcie; C:\Windows\system32\DRIVERS\rixdpe86.sys [38912 2009-09-29] (REDC)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [40088 2009-10-15] (McAfee, Inc.)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [110520 2009-10-15] ()
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [51800 2009-10-15] (McAfee, Inc.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [13256 2009-10-15] (McAfee, Inc.)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1765168 2009-09-18] ()
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-07-28 16:22 - 2013-07-28 16:22 - 00154232 _____ (Noël Danjou) C:\Users\Robert Troják\AppData\Local\download.exe
2013-07-28 16:22 - 2013-07-28 16:22 - 00001355 ___HT C:\Users\Robert Troják\Desktop\7404SODL.bat
2013-07-28 16:22 - 2013-07-28 16:22 - 00000000 ____D C:\FRST
2013-07-28 16:22 - 2013-07-28 12:10 - 01221130 _____ (Farbar) C:\Users\Robert Troják\Desktop\FRST.exe
2013-07-28 16:22 - 2013-07-26 08:41 - 00002627 _____ C:\Users\Robert Troják\Desktop\logmodification.bat
2013-07-28 16:21 - 2013-07-28 16:21 - 00361472 _____ C:\Users\Robert Troják\Desktop\Test.exe
2013-07-26 23:44 - 2013-07-26 23:44 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-26 23:44 - 2013-07-26 23:44 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-07-26 23:44 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\windows\system32\Drivers\mbam.sys
2013-07-25 17:38 - 2013-07-25 17:38 - 00146212 _____ C:\Users\Robert Troják\Desktop\08_Srpen.xlsx
2013-07-22 14:36 - 2013-07-23 11:02 - 00340824 _____ C:\Users\Robert Troják\Documents\W29_13 - Robert Troják - týdenní zpráva.pptx
2013-07-21 23:34 - 2013-07-21 23:34 - 00781383 _____ C:\Users\Robert Troják\Desktop\RSIT.exe
2013-07-15 18:55 - 2013-07-16 11:41 - 00340489 _____ C:\Users\Robert Troják\Documents\W28_13 - Robert Troják - týdenní zpráva.pptx
2013-07-15 09:55 - 2013-07-15 10:20 - 00017545 ____N C:\Users\Robert Troják\Desktop\ATC_Samsung_w2913.xlsx
2013-07-13 21:27 - 2013-07-28 15:32 - 00000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job
2013-07-12 00:08 - 2013-06-12 01:43 - 02877440 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-07-12 00:08 - 2013-06-12 01:43 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-07-12 00:08 - 2013-06-12 01:43 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-07-12 00:08 - 2013-06-12 01:43 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-07-12 00:08 - 2013-06-12 01:43 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-07-12 00:08 - 2013-06-12 01:43 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-07-12 00:08 - 2013-06-12 01:42 - 02046976 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-07-12 00:08 - 2013-06-12 01:42 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-07-12 00:08 - 2013-06-12 01:42 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-07-12 00:08 - 2013-06-12 01:42 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-07-12 00:08 - 2013-06-12 01:42 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-07-12 00:08 - 2013-06-12 00:51 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-07-12 00:08 - 2013-06-07 04:37 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-07-12 00:07 - 2013-06-12 01:43 - 14329856 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-07-12 00:07 - 2013-06-12 01:43 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-07-12 00:07 - 2013-06-12 01:42 - 13760512 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-07-11 23:02 - 2013-06-05 05:05 - 02347520 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-07-11 23:02 - 2013-06-04 06:53 - 00509440 _____ (Microsoft Corporation) C:\windows\system32\qedit.dll
2013-07-11 23:02 - 2013-05-06 06:56 - 01620480 _____ (Microsoft Corporation) C:\windows\system32\WMVDECOD.DLL
2013-07-11 23:02 - 2013-04-10 01:34 - 01247744 _____ (Microsoft Corporation) C:\windows\system32\DWrite.dll
2013-07-11 21:59 - 2013-07-11 23:01 - 00152702 _____ C:\Users\Robert Troják\Downloads\07_Červenec.xlsx
2013-07-08 23:48 - 2013-07-09 12:26 - 00340496 _____ C:\Users\Robert Troják\Documents\W27_13 - Robert Troják - týdenní zpráva.pptx
2013-07-08 11:50 - 2013-07-09 10:06 - 00217429 _____ C:\Users\Robert Troják\Documents\06_2013 - Robert Troják - měsíční zpráva.pptx
2013-07-05 01:05 - 2013-07-05 01:05 - 00000228 _____ C:\Users\Robert Troják\Desktop\shell_daemon.zip
2013-07-05 00:32 - 2010-06-25 17:54 - 00000143 _____ C:\Users\Robert Troják\Desktop\shell_daemon.cfg
2013-07-04 23:00 - 2013-07-04 23:29 - 00006232 _____ C:\Users\Robert Troják\Desktop\APShell.ini
2013-07-04 23:00 - 2009-10-22 22:42 - 00006232 _____ C:\Users\Robert Troják\Desktop\APShell_old.ini
2013-07-04 22:35 - 2013-07-04 22:35 - 00000918 _____ C:\Users\Robert Troják\Desktop\Centrum zařízení Windows Mobile.lnk
2013-07-04 22:32 - 2013-07-04 22:32 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-07-04 22:31 - 2013-07-04 22:33 - 00000000 ____D C:\windows\WindowsMobile
2013-07-01 13:20 - 2013-07-02 10:30 - 00340333 _____ C:\Users\Robert Troják\Documents\W26_13 - Robert Troják - týdenní zpráva.pptx
2013-06-29 00:07 - 2013-06-29 00:07 - 00000000 ____D C:\ProgramData\Cisco Systems

==================== One Month Modified Files and Folders =======

2013-07-28 16:22 - 2013-07-28 16:22 - 00154232 _____ (Noël Danjou) C:\Users\Robert Troják\AppData\Local\download.exe
2013-07-28 16:22 - 2013-07-28 16:22 - 00001355 ___HT C:\Users\Robert Troják\Desktop\7404SODL.bat
2013-07-28 16:22 - 2013-07-28 16:22 - 00000000 ____D C:\FRST
2013-07-28 16:21 - 2013-07-28 16:21 - 00361472 _____ C:\Users\Robert Troják\Desktop\Test.exe
2013-07-28 15:32 - 2013-07-13 21:27 - 00000940 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job
2013-07-28 15:29 - 2012-04-10 08:15 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2013-07-28 12:33 - 2009-07-14 06:34 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-07-28 12:33 - 2009-07-14 06:34 - 00020944 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-07-28 12:27 - 2010-05-26 00:22 - 01967173 _____ C:\windows\WindowsUpdate.log
2013-07-28 12:26 - 2010-08-11 23:16 - 00000950 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-07-28 12:25 - 2009-12-18 08:34 - 00000000 ____D C:\ProgramData\HPQLOG
2013-07-28 12:24 - 2010-09-29 08:30 - 00104999 _____ C:\windows\setupact.log
2013-07-28 12:24 - 2009-07-14 06:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-07-28 12:10 - 2013-07-28 16:22 - 01221130 _____ (Farbar) C:\Users\Robert Troják\Desktop\FRST.exe
2013-07-27 17:39 - 2011-04-18 14:38 - 01691137 _____ C:\Users\Robert Troják\Desktop\OLAP.xlsx
2013-07-27 17:25 - 2011-02-06 17:16 - 00411258 _____ C:\Users\Robert Troják\Desktop\Podklady pro zprávy.xlsx
2013-07-27 17:11 - 2011-02-15 22:38 - 00000000 ____D C:\Users\Robert Troják\Documents\BP
2013-07-27 16:55 - 2010-07-22 13:10 - 00000264 _____ C:\windows\system32\config\netlogon.ftl
2013-07-26 23:44 - 2013-07-26 23:44 - 00001067 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2013-07-26 23:44 - 2013-07-26 23:44 - 00000000 ____D C:\Program Files\Malwarebytes' Anti-Malware
2013-07-26 19:06 - 2010-07-23 10:26 - 00002002 ____H C:\Users\Robert Troják\Documents\Default.rdp
2013-07-26 18:10 - 2010-08-03 14:43 - 00000000 ____D C:\Users\Robert Troják\AppData\Roaming\ICQ
2013-07-26 09:11 - 2012-04-10 08:15 - 00692104 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerApp.exe
2013-07-26 09:11 - 2011-05-18 09:04 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\system32\FlashPlayerCPLApp.cpl
2013-07-26 09:11 - 2010-08-03 10:17 - 00000000 ____D C:\Users\Robert Troják\AppData\Local\Adobe
2013-07-26 08:41 - 2013-07-28 16:22 - 00002627 _____ C:\Users\Robert Troják\Desktop\logmodification.bat
2013-07-26 01:05 - 2010-11-03 20:28 - 00171282 _____ C:\Users\Robert Troják\Desktop\OLAP_Samsung_W21_11.xlsx
2013-07-25 17:38 - 2013-07-25 17:38 - 00146212 _____ C:\Users\Robert Troják\Desktop\08_Srpen.xlsx
2013-07-25 12:59 - 2010-07-22 13:14 - 00006652 __RSH C:\ProgramData\ntuser.pol
2013-07-24 15:36 - 2009-12-18 08:21 - 01585934 _____ C:\windows\system32\PerfStringBackup.INI
2013-07-24 15:32 - 2011-10-03 09:58 - 00000000 ____D C:\Users\Robert Troják\Documents\Mzda_RT
2013-07-23 11:02 - 2013-07-22 14:36 - 00340824 _____ C:\Users\Robert Troják\Documents\W29_13 - Robert Troják - týdenní zpráva.pptx
2013-07-23 06:19 - 2009-12-18 08:35 - 00000000 ____D C:\ProgramData\PDFC
2013-07-22 15:58 - 2010-09-27 23:24 - 00613964 _____ C:\Users\Robert Troják\Desktop\prodej vs. zobrazení.xlsx
2013-07-22 15:27 - 2010-08-24 10:32 - 00092672 _____ C:\Users\Robert Troják\Desktop\Stav_skladu_ke_dni.xls
2013-07-21 23:36 - 2010-08-06 23:11 - 00000000 ____D C:\Program Files\trend micro
2013-07-21 23:34 - 2013-07-21 23:34 - 00781383 _____ C:\Users\Robert Troják\Desktop\RSIT.exe
2013-07-16 11:41 - 2013-07-15 18:55 - 00340489 _____ C:\Users\Robert Troják\Documents\W28_13 - Robert Troják - týdenní zpráva.pptx
2013-07-15 10:20 - 2013-07-15 09:55 - 00017545 ____N C:\Users\Robert Troják\Desktop\ATC_Samsung_w2913.xlsx
2013-07-13 21:25 - 2009-07-14 04:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-07-13 21:02 - 2009-07-14 06:33 - 00458792 _____ C:\windows\system32\FNTCACHE.DAT
2013-07-13 21:01 - 2010-07-21 17:34 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-07-13 21:01 - 2009-07-27 15:49 - 00000000 ____D C:\Program Files\Windows Journal
2013-07-13 21:01 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\Windows Defender
2013-07-12 00:08 - 2009-12-18 08:39 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-07-12 00:04 - 2010-06-28 21:27 - 75699896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-07-11 23:01 - 2013-07-11 21:59 - 00152702 _____ C:\Users\Robert Troják\Downloads\07_Červenec.xlsx
2013-07-09 15:06 - 2010-07-23 10:37 - 00000000 ____D C:\Users\Robert Troják\Documents\Samsung
2013-07-09 12:26 - 2013-07-08 23:48 - 00340496 _____ C:\Users\Robert Troják\Documents\W27_13 - Robert Troják - týdenní zpráva.pptx
2013-07-09 10:06 - 2013-07-08 11:50 - 00217429 _____ C:\Users\Robert Troják\Documents\06_2013 - Robert Troják - měsíční zpráva.pptx
2013-07-08 12:13 - 2010-09-04 00:31 - 00013207 _____ C:\Users\Robert Troják\Documents\statistika_montáž_ PC_CZC.xlsx
2013-07-05 01:05 - 2013-07-05 01:05 - 00000228 _____ C:\Users\Robert Troják\Desktop\shell_daemon.zip
2013-07-05 00:03 - 2010-07-23 10:36 - 00000000 ____D C:\Users\Robert Troják\Documents\Programy
2013-07-04 23:29 - 2013-07-04 23:00 - 00006232 _____ C:\Users\Robert Troják\Desktop\APShell.ini
2013-07-04 22:35 - 2013-07-04 22:35 - 00000918 _____ C:\Users\Robert Troják\Desktop\Centrum zařízení Windows Mobile.lnk
2013-07-04 22:33 - 2013-07-04 22:31 - 00000000 ____D C:\windows\WindowsMobile
2013-07-04 22:33 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\LogFiles
2013-07-04 22:32 - 2013-07-04 22:32 - 00000000 ____H C:\windows\system32\Drivers\Msft_User_WpdRapi2_01_00_00.Wdf
2013-07-02 10:30 - 2013-07-01 13:20 - 00340333 _____ C:\Users\Robert Troják\Documents\W26_13 - Robert Troják - týdenní zpráva.pptx
2013-06-30 11:14 - 2010-10-08 08:41 - 00022770 _____ C:\windows\PFRO.log
2013-06-29 00:34 - 2009-07-14 04:37 - 00000000 ____D C:\windows\system32\NDF
2013-06-29 00:18 - 2010-07-22 13:38 - 00000000 ____D C:\Program Files\Cisco Systems
2013-06-29 00:07 - 2013-06-29 00:07 - 00000000 ____D C:\ProgramData\Cisco Systems
2013-06-28 19:29 - 2012-08-08 10:28 - 00000000 ____D C:\Users\Robert Troják\AppData\Local\Akamai

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-07-25 00:05

==================== Scheduled Tasks (whitelisted) =============

Task: {2C1A303B-1200-4CD0-97D2-F0E39AB16E6A} - System32\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440 => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-11] (Google Inc.)
Task: {3F7DFC6C-0615-4C3C-BD43-2B8834A69DF3} - System32\Tasks\WPD\SqmUpload_S-1-5-21-2848504580-1333515203-390218964-5253 => C:\Windows\system32\rundll32.exe [2009-07-14] (Microsoft Corporation)
Task: {5BF98AAD-9AA8-4A5B-A1A1-CA9A5BAF584F} - System32\Tasks\Microsoft\Windows\MUI\Lpksetup => C:\windows\System32\lpksetup.exe [2010-11-20] (Microsoft Corporation)
Task: {79A795AB-8BF0-4DE0-A9CF-08FD4A7D5E0E} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2009-07-14] (Microsoft Corporation)
Task: {7F54E1C7-9326-4C39-8F8B-84E40B8CD989} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task
Task: {A27BD7F9-E729-497E-AB32-CB046D214628} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2010-08-11] (Google Inc.)
Task: {E3915817-3021-4673-A9FE-D83E687D12D9} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe [2010-02-11] (Microsoft Corporation)
Task: {FF7F0F87-070C-40AC-B9F3-29D9AF65E60F} - System32\Tasks\Adobe Flash Player Updater => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-07-26] (Adobe Systems Incorporated)
Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Supplementary Scan (All) =============


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000005
"ConsentPromptBehaviorUser"=dword:00000003
"EnableInstallerDetection"=dword:00000001
"EnableLUA"=dword:00000001
"EnableSecureUIAPaths"=dword:00000001
"EnableUIADesktopToggle"=dword:00000000
"EnableVirtualization"=dword:00000001
"PromptOnSecureDesktop"=dword:00000001
"ValidateAdminCodeSignatures"=dword:00000000
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"scforceoption"=dword:00000000
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"FilterAdministratorToken"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats]
"CF_TEXT"=dword:00000001
"CF_BITMAP"=dword:00000002
"CF_OEMTEXT"=dword:00000007
"CF_DIB"=dword:00000008
"CF_PALETTE"=dword:00000009
"CF_UNICODETEXT"=dword:0000000d
"CF_DIBV5"=dword:00000011


[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.msadpcm"="msadp32.acm"
"midimapper"="midimap.dll"
"wavemapper"="msacm32.drv"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.i420"="iyuv_32.dll"
"VIDC.YVU9"="tsbyuv.dll"
"msacm.l3acm"="C:\\Windows\\System32\\l3codeca.acm"
"vidc.cvid"="iccvid.dll"
"MSVideo8"="VfWWDM32.dll"
"wave1"="wdmaud.drv"
"midi1"="wdmaud.drv"
"mixer1"="wdmaud.drv"
"aux1"="wdmaud.drv"
"wave2"="wdmaud.drv"
"midi2"="wdmaud.drv"
"mixer2"="wdmaud.drv"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"


================ Drive and Memory info =====================

MyFreeCodec
Drive c: () (Fixed) (Total:280.79 GB) (Free:139.44 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.41 GB) FAT32

Available physical RAM: 1459.07 MB
Total physical RAM: 3061.87 MB
Percentage of memory in use: 52%

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [91520 2010-03-13] (Microsoft Corporation)
  HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
  HKLM\...\Run: [KiesTrayAgent] - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [310128 2013-02-13] (Samsung Electronics Co., Ltd.)
  U\...\Run: [OfficeSyncProcess] - C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [719672 2012-01-20] (Microsoft Corporation)
  HKCU\...\Run: [KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1509232 2013-02-13] (Samsung)
  HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
  HKCU\...\Run: [KiesAirMessage] - C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup [x]
  HKCU\...\Run: [] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13] (Samsung)
  HKU\Robert\...\Run: [ICQ] - C:\Program Files\ICQ7.2\ICQ.exe [ 2011-01-05] (ICQ, LLC.)
  SearchScopes: HKLM - DefaultScope {2E934F7B-B301-497A-922F-F19168CA5AFB} URL = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
  SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
  SearchScopes: HKLM - {2E934F7B-B301-497A-922F-F19168CA5AFB} URL = http://www.bing.com/search?q={searchTerms}&form=CMNTDF&pc=CMNTDF&src=IE-SearchBox
  SearchScopes: HKCU - DefaultScope {FC2816C8-E27F-4825-95D1-0911D0A9698E} URL = http://www.google.cz/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=
  SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&affID=119776&tl=4-8873-8580-190000000479835600-1364897285-1365287260-1367879260&tt=gc_&babsrc=SP_ss&mntrId=C48D0026C738EA51
  SearchScopes: HKCU - {2E934F7B-B301-497A-922F-F19168CA5AFB} URL =
  SearchScopes: HKCU - {FC2816C8-E27F-4825-95D1-0911D0A9698E} URL = http://www.google.cz/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}&rlz=
  Toolbar: HKCU -No Name - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No File
  C:\Users\Robert Troják\AppData\Local\Akamai
  Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
  Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job => C:\Program Files\Google\Update\GoogleUpdate.exe
  Hosts:
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-07-2013
Ran by trojakr at 2013-07-28 23:05:41 Run:1
Running from C:\Users\Robert Troják\Desktop
Boot Mode: Normal

==============================================

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\BCSSync => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPreload] - C:\Program Files\Samsung\Kies\Kies.exe [1509232 2013-02-13 => Value not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface] - C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05 => Value not found.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\KiesAirMessage => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\] - C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [844144 2013-02-13 => Value not found.
HKU\Robert\Software\Microsoft\Windows\CurrentVersion\Run\\ICQ => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E934F7B-B301-497A-922F-F19168CA5AFB} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{2E934F7B-B301-497A-922F-F19168CA5AFB} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2E934F7B-B301-497A-922F-F19168CA5AFB} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{2E934F7B-B301-497A-922F-F19168CA5AFB} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{FC2816C8-E27F-4825-95D1-0911D0A9698E} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{FC2816C8-E27F-4825-95D1-0911D0A9698E} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Value deleted successfully.
HKCR\CLSID\{21FA44EF-376D-4D53-9B0F-8A89D3229068} => Key not found.

"C:\Users\Robert Troják\AppData\Local\Akamai" directory move:

C:\Users\Robert Troják\AppData\Local\Akamai\admintool.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\client.ini => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\ControlPanel.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\control_panel.txt => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\CplTasks.xml => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\euc_state.json => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\extraroot.pem => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\guid.ini => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\installer.txt => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\installer_no_upload_silent.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\netsession_win.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\readme.txt => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\root.pem => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\rswinui.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\uninstall.exe => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\user.dat => Moved successfully.
Could not move "C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log" => Scheduled to move on reboot.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130721_221022.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130722_065723.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130722_215322.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_042113.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_042649.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_084728.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_150513.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_190422.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130723_205704.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130724_074000.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130724_135837.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130724_190201.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130724_223106.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130725_072011.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130725_230757.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130726_070344.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130727_122650.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130727_125228.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130727_141347.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130727_141743.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130727_223537.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log.130728_102723.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon1.debug.log => Moved successfully.
Could not move "C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log" => Scheduled to move on reboot.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130721_205341.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130721_215342.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130721_221021.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_065735.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_075736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_085736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_095736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_105736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_115737.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_125738.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_135738.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_145739.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_155739.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_165740.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_175741.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_185742.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_195742.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_205742.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130722_215321.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_042124.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_042649.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_084742.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_094743.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_104743.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_114743.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_124744.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_134744.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_144745.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_150512.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_190434.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_200435.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130723_205704.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_074011.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_084012.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_094012.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_104012.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_114012.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_124013.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_134013.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_135837.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_190214.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_200214.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_210214.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_220214.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130724_223106.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_072023.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_082023.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_092023.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_102023.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_112024.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_122024.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_132025.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_142025.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_152026.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_162027.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_172028.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_182028.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_192028.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_202029.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_212029.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_222029.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130725_230755.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_070357.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_080358.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_090358.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_100358.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_110359.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_120400.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_130401.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_140401.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_150402.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_160402.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_170402.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_180402.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_190403.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_200404.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_210404.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_220405.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130726_230406.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_000407.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_010407.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_020408.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_030409.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_071807.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_081808.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_091809.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_101810.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_111810.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_121811.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_122649.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_125240.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_135241.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_141346.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_141754.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_151754.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_161755.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_171756.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_181757.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_191758.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_201759.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_211759.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_221800.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130727_223537.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_102733.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_112734.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_122734.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_132734.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_142735.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_152735.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_162736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_172736.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_182737.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_192738.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log.130728_202738.sent => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\chs.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\cht.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\csy.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\dan.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\deu.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\esp.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\fin.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\fra.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\ita.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\jpn.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\kor.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\nld.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\nor.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\plk.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\ptb.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\ptg.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\rus.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\sve.dll => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Languages\trk.dll => Moved successfully.
Could not move "C:\Users\Robert Troják\AppData\Local\Akamai" directory. => Scheduled to move on reboot.

C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA1ce7fff6412440.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

=========== Result of Scheduled Files to move ===========
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\daemon.debug.log => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai\Logs\debug.log => Moved successfully.
C:\Users\Robert Troják\AppData\Local\Akamai => Moved successfully.

==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Vše proběhlo korektně, PC šlape, moc děkuji za pomoc a posílám příspěvek.

Nemate zac, rad jsem pomohl Zase nekdy

Za podporu fora jmenem celeho tymu dekuji

A na zaklade Pravidla o zamykani temat