can result of Farbar Recovery Scan Tool (FRST) (x86) Version: 31-08-2013 03
Ran by Martin (administrator) on MARTIN-PC on 31-08-2013 14:50:20
Running from C:\Users\Martin\Desktop
Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(Microsoft Corporation) C:\Windows\system32\SLsvc.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
(Apple, Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Pandora.TV) C:\Program Files\PANDORA.TV\PanService\PandoraService.exe
(Microsoft Corporation) C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(PandoraTV) C:\Program Files\PANDORA.TV\PanService\PanProcess.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Pinnacle Systems GmbH) C:\Program Files\Pinnacle\Shared Files\Programs\USBTip\USBTip.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\PAC7302\Monitor.exe
(Hewlett-Packard) C:\Program Files\HP\HP Software Update\hpwuschd2.exe
(AVAST Software) C:\Program Files\Alwil Software\Avast5\AvastUI.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(MyHeritage) C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe
() C:\Program Files\Pando Networks\Media Booster\PMB.exe
(ICQ) C:\Users\Martin\AppData\Roaming\ICQM\icq.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Microsoft Corporation) C:\Windows\ehome\ehsched.exe
(Nero AG) C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
(Microsoft Corporation) C:\Windows\ehome\ehRecvr.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\system32\conime.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Windows\RtHDVCpl.exe [4468736 2007-05-10] (Realtek Semiconductor)
HKLM\...\Run: [NeroFilterCheck] - C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [155648 2006-01-12] (Nero AG)
HKLM\...\Run: [toolbar_eula_launcher] - C:\Program Files\GoogleEULA\EULALauncher.exe [16896 2007-02-09] ( )
HKLM\...\Run: [QuickTime Task] - C:\Program Files\QuickTime\QTTask.exe [413696 2008-03-28] (Apple Inc.)
HKLM\...\Run: [USBToolTip] - C:\PROGRA~1\Pinnacle\SHARED~1\Programs\USBTip\USBTip.exe [199752 2007-02-20] (Pinnacle Systems GmbH)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [NvSvc] - C:\Windows\system32\nvsvc.dll [86016 2007-11-06] (NVIDIA Corporation)
HKLM\...\Run: [NvCplDaemon] - C:\Windows\system32\NvCpl.dll [8530464 2007-11-06] (NVIDIA Corporation)
HKLM\...\Run: [NvMediaCenter] - C:\Windows\system32\NvMcTray.dll [81920 2007-11-06] (NVIDIA Corporation)
HKLM\...\Run: [PAC7302_Monitor] - C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [HP Software Update] - C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe [49208 2010-03-12] (Hewlett-Packard)
HKLM\...\Run: [avast] - C:\Program Files\Alwil Software\Avast5\avastUI.exe [4858968 2013-05-09] (AVAST Software)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM\...\Run: [Family Tree Builder Update] - C:\Program Files\MyHeritage\Bin\FTBCheckUpdates.exe [2532352 2013-08-04] (MyHeritage)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM\...\Policies\Explorer: [BindDirectlyToPropertySetStorage] 0
HKLM\...\Policies\Explorer: [NoDrives] 0
HKCU\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe [143360 2006-12-23] (Nero AG)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files\Pando Networks\Media Booster\PMB.exe [3093624 2012-12-05] ()
HKCU\...\Run: [icq] - C:\Users\Martin\AppData\Roaming\ICQM\icq.exe [28698984 2013-07-30] (ICQ)
HKCU\...\Policies\Explorer: [NoDrives] 0
HKU\Default\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
HKU\Default User\...\Run: [WindowsWelcomeCenter] - C:\Windows\System32\oobefldr.dll [ 2009-04-11] (Microsoft Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\hpoddt01.exe.lnk
ShortcutTarget: hpoddt01.exe.lnk -> C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe (Hewlett-Packard)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk
ShortcutTarget: Výřezy obrazovky a spuštění aplikace OneNote 2007.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
http://www.microsoft.com/isapi/redir.dl ... r=iesearch
URLSearchHook: (No Name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No File
SearchScopes: HKLM - DefaultScope value is missing.
BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll (Microsoft Corporation)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.2.4204.1700\swg.dll (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\Alwil Software\Avast5\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU -No Name - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No File
DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83}
http://upload.facebook.com/controls/200 ... oader5.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C}
http://fpdownload.macromedia.com/get/fl ... rashim.cab
DPF: {CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0005-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA}
http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7}
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: msdaipp - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Winsock: Catalog5 02 %SystemRoot%\system32\napinsp.dll [50176] (Společnost Microsoft)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default
FF Homepage: hxxp://
www.google.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin: @ei.VideoDownloadConverter_4z.com/Plugin - C:\Program Files\VideoDownloadConverter_4zEI\Installr\1.bin\NP4zEISB.dll No File
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @pack.google.com/Google Updater;version=14 - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin: @real.com/RhapsodyPlayerEngine,version=1.1 - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\freeonlineradioplayerrecorder-v1-customized-web-search.xml
FF SearchPlugin: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\slunecnice-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Ovi Maps 3D browser plugin - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\Extensions\
maps@ovi.com
FF Extension: mp4downloader - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\Extensions\
mp4downloader@jeff.net.xpi
FF Extension: vk - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\7zgvqbrp.default\Extensions\
vk@sergeykolosov.mp.xpi
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF HKLM\...\Firefox\Extensions: [{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}] C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF Extension: No Name - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext
FF HKLM\...\Firefox\Extensions: [
wrc@avast.com] C:\Program Files\Alwil Software\Avast5\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF
Chrome:
=======
CHR HomePage: hxxp://
www.google.cz/webhp?hl=cs&tab=iw
CHR RestoreOnStartup: "hxxp://
www.google.cz/webhp?hl=cs&tab=iw"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\29.0.1547.62\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll No File
CHR Plugin: (Microsoft\u00AE Windows Media Player Firefox Plugin) - C:\Program Files\Mozilla Firefox\plugins\np-mswmp.dll (Microsoft Corporation)
CHR Plugin: (Java Deployment Toolkit 6.0.310.5) - C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) ) - C:\Program Files\Mozilla Firefox\plugins\nppl3260.dll No File
CHR Plugin: (RealPlayer Version Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprpjplug.dll No File
CHR Plugin: (RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll No File
CHR Plugin: (RealJukebox NS Plugin) - C:\Program Files\Mozilla Firefox\plugins\nprjplug.dll No File
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin2.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin3.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin4.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin5.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin6.dll (Apple Inc.)
CHR Plugin: (QuickTime Plug-in 7.4.5) - C:\Program Files\QuickTime\plugins\npqtplugin7.dll (Apple Inc.)
CHR Plugin: (Microsoft Corp. DRM Netscape Plugin) - C:\Program Files\Windows Media Player\npwmsdrm.dll (Microsoft Corp.)
CHR Plugin: (Google Earth Plugin) - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
CHR Plugin: (Google Updater) - C:\Program Files\Google\Google Updater\2.4.2432.1652\npCIDetect14.dll (Google)
CHR Plugin: (Picasa) - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Plugin: (RealNetworks Rhapsody Player Engine) - C:\Program Files\Real\RhapsodyPlayerEngine\nprhapengine.dll No File
CHR Plugin: (RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) ) - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (Windows Presentation Foundation) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
CHR Extension: (YouTube) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Gmail) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
========================== Services (Whitelisted) =================
R2 Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [110592 2008-02-18] (Apple, Inc.)
R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
S2 gupdate1ca00a16af0aeac; C:\Program Files\Google\Update\GoogleUpdate.exe [133104 2009-07-09] (Google Inc.)
R2 PanService; C:\Program Files\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
S3 WLSetupSvc; C:\Program Files\Windows Live\installer\WLSetupSvc.exe [266240 2007-10-25] (Microsoft Corporation)
S4 x10nets; C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe [x]
==================== Drivers (Whitelisted) ====================
S3 3xHybrid; C:\Windows\System32\DRIVERS\3xHybrid.sys [1136600 2007-01-08] (Philips Semiconductors GmbH)
S3 61883; C:\Windows\System32\DRIVERS\61883.sys [45696 2008-01-19] (Microsoft Corporation)
R0 AFS; C:\Windows\System32\Drivers\AFS.sys [77004 2010-12-05] (Oak Technology Inc.)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [29816 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [66336 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [49760 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [49376 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [770344 2013-06-28] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [369584 2013-06-28] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [56080 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [175176 2013-06-28] ()
S3 AVerFx2hbtv; C:\Windows\System32\drivers\AVerFx2hbtv.sys [436480 2009-07-01] (AVerMedia TECHNOLOGIES, Inc.)
R0 CLFS; C:\Windows\System32\CLFS.sys [245736 2009-04-11] (Microsoft Corporation)
S3 FETNDIS; C:\Windows\System32\DRIVERS\fetnd5.sys [45568 2006-11-02] (VIA Technologies, Inc. )
R0 FltMgr; C:\Windows\System32\drivers\fltmgr.sys [190424 2009-04-11] (Společnost Microsoft)
R3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
R3 Ntfs; C:\Windows\System32\Drivers\Ntfs.sys [1082232 2013-03-03] (Společnost Microsoft)
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [458752 2007-11-08] (PixArt Imaging Inc.)
R3 Ph3xIB32; C:\Windows\System32\DRIVERS\Ph3xIB32.sys [1131136 2007-04-03] (Philips Semiconductors GmbH)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [443448 2011-09-20] ()
R3 X10Hid; C:\Windows\System32\Drivers\x10hid.sys [13976 2006-11-17] (X10 Wireless Technology, Inc.)
S3 XUIF; C:\Windows\System32\Drivers\x10ufx2.sys [27416 2006-11-30] (X10 Wireless Technology, Inc.)
U5 AppMgmt; C:\Windows\system32\svchost.exe [21504 2008-01-19] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Martin\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-08-31 14:49 - 2013-08-31 14:49 - 00000000 ___DC C:\FRST
2013-08-31 14:49 - 2013-08-31 14:49 - 00000000 ____D C:\Users\Martin\AppData\Local\qb0FACB2.5E
2013-08-31 14:45 - 2013-08-31 14:46 - 00018717 _____ C:\Users\Martin\Dokumenty\Plocha\Result.txt
2013-08-31 14:38 - 2013-08-31 14:38 - 00760937 _____ (Farbar) C:\Users\Martin\Dokumenty\Plocha\MiniToolBox.exe
2013-08-31 11:29 - 2013-08-31 11:30 - 00000000 ___DC C:\rsit
2013-08-29 21:57 - 2013-08-31 14:25 - 00000000 ____D C:\Users\Martin\Dokumenty\vypalit
2013-08-29 14:11 - 2013-08-02 06:09 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-25 20:55 - 2013-08-25 20:56 - 00000000 ____D C:\Users\Martin\Dokumenty\Prvni damy
2013-08-21 14:16 - 2013-08-21 14:16 - 32074284 _____ C:\Users\Martin\Zemřel Andropov 1984.wav
2013-08-21 14:06 - 2013-08-21 14:06 - 36333612 _____ C:\Users\Martin\Zemřel Brežněv 1982.wav
2013-08-17 11:16 - 2013-08-17 11:16 - 00000000 ___DC C:\Program Files\Mozilla Firefox
2013-08-15 22:26 - 2013-08-15 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-08-15 22:26 - 2013-08-15 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Adobe Mini Bridge CS5
2013-08-15 22:06 - 2013-08-15 22:06 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-15 22:02 - 2013-08-15 22:02 - 00000000 ___DC C:\Program Files\Adobe Media Player
2013-08-14 16:36 - 2013-07-25 04:40 - 12334080 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 16:36 - 2013-07-25 04:32 - 01800704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 16:36 - 2013-07-25 04:30 - 09738752 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 16:36 - 2013-07-25 04:26 - 01129472 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 16:36 - 2013-07-25 04:26 - 01104384 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 16:36 - 2013-07-25 04:25 - 01427968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-08-14 16:36 - 2013-07-25 04:24 - 00231936 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-08-14 16:36 - 2013-07-25 04:24 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 16:36 - 2013-07-25 04:23 - 01796096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 16:36 - 2013-07-25 04:23 - 00717824 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 16:36 - 2013-07-25 04:23 - 00607744 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 16:36 - 2013-07-25 04:23 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-08-14 16:36 - 2013-07-25 04:23 - 00142848 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-08-14 16:36 - 2013-07-25 04:22 - 02382848 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 16:36 - 2013-07-25 04:22 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-08-14 16:36 - 2013-07-25 04:22 - 00073216 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-08-14 10:56 - 2013-07-05 06:53 - 00905664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 10:56 - 2013-06-15 15:22 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\icaapi.dll
2013-08-14 10:56 - 2013-06-15 13:23 - 00024064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2013-08-14 10:55 - 2013-07-17 21:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-08-14 10:55 - 2013-07-10 11:47 - 00783360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 10:55 - 2013-07-09 14:10 - 01205168 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-08-14 10:55 - 2013-07-08 06:55 - 03603904 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2013-08-14 10:55 - 2013-07-08 06:55 - 03551680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-08-14 10:53 - 2013-07-08 06:20 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 10:53 - 2013-07-08 06:16 - 00992768 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 10:53 - 2013-07-08 06:16 - 00133120 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 10:53 - 2013-07-08 06:16 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2013-08-12 15:32 - 2013-08-12 15:32 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyHeritage.com
2013-08-12 15:31 - 2012-08-02 08:56 - 00606208 _____ (Lorenzi Davide) C:\Windows\system32\HexUniRTFBox.ocx
2013-08-12 15:31 - 2010-06-17 19:49 - 02029056 _____ (Bytescout) C:\Windows\system32\PDFDocScout.DLL
2013-08-12 15:31 - 2003-07-06 14:07 - 00372736 _____ (Intel Corporation) C:\Windows\system32\ijl15.dll
2013-08-12 15:31 - 2002-03-07 01:19 - 00454656 _____ () C:\Windows\system32\PaintX.dll
2013-08-11 18:43 - 2013-08-11 18:43 - 00000000 ___DC C:\Program Files\DiskInternals
2013-08-11 18:43 - 2013-08-11 18:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2013-08-11 17:33 - 2013-08-11 17:36 - 00000000 ____D C:\Users\Martin\AppData\Roaming\doublecmd
2013-08-11 17:33 - 2013-08-11 17:33 - 00000000 ___DC C:\Program Files\Double Commander
2013-08-11 17:09 - 2013-08-12 09:15 - 00000000 ___DC C:\Program Files\Recuva
2013-08-11 16:33 - 2013-08-11 16:33 - 00000000 ___DC C:\Restoration
2013-08-11 13:05 - 2013-08-12 15:32 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MyHeritage
2013-08-11 13:05 - 2013-08-12 15:32 - 00000000 ____D C:\ProgramData\MyHeritage
2013-08-11 13:05 - 2013-08-11 13:08 - 00000000 ____D C:\Users\Martin\Dokumenty\MyHeritage
2013-08-11 13:03 - 2013-08-11 13:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\The Complete Genealogy Reporter - FTB
2013-08-11 13:02 - 2013-08-12 15:31 - 00000000 ___DC C:\Program Files\MyHeritage
2013-08-06 14:14 - 2013-08-16 12:37 - 00000000 ____D C:\Users\Martin\Dokumenty\DT2014
2013-08-05 16:33 - 2013-08-05 16:33 - 00000000 ____D C:\Users\Martin\KBCertifikat
2013-08-04 18:26 - 2013-08-04 18:26 - 00930336 _____ (MyHeritage) C:\Windows\system32\FTBSaver.scr
==================== One Month Modified Files and Folders =======
2013-08-31 14:49 - 2013-08-31 14:49 - 00000000 ___DC C:\FRST
2013-08-31 14:49 - 2013-08-31 14:49 - 00000000 ____D C:\Users\Martin\AppData\Local\qb0FACB2.5E
2013-08-31 14:49 - 2010-10-31 21:40 - 00000000 ____D C:\Users\Martin\Dokumenty\Plocha
2013-08-31 14:46 - 2013-08-31 14:45 - 00018717 _____ C:\Users\Martin\Dokumenty\Plocha\Result.txt
2013-08-31 14:41 - 2011-10-26 11:21 - 01601884 ____N C:\Windows\WindowsUpdate.log
2013-08-31 14:39 - 2012-08-14 13:26 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-08-31 14:38 - 2013-08-31 14:38 - 00760937 _____ (Farbar) C:\Users\Martin\Dokumenty\Plocha\MiniToolBox.exe
2013-08-31 14:35 - 2009-07-09 16:39 - 00000936 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-31 14:35 - 2006-11-02 14:37 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-08-31 14:32 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-31 14:32 - 2006-11-02 14:47 - 00003568 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-31 14:32 - 2006-11-02 14:47 - 00003568 _____ C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-31 14:31 - 2006-11-02 15:01 - 00032542 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2013-08-31 14:25 - 2013-08-29 21:57 - 00000000 ____D C:\Users\Martin\Dokumenty\vypalit
2013-08-31 14:14 - 2009-07-09 16:39 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-31 13:28 - 2011-03-14 09:35 - 00000960 _____ C:\Windows\Tasks\Google Software Updater.job
2013-08-31 11:30 - 2013-08-31 11:29 - 00000000 ___DC C:\rsit
2013-08-31 11:29 - 2010-07-22 12:17 - 00000000 ___DC C:\Program Files\Trend Micro
2013-08-31 11:23 - 2008-02-04 12:56 - 00000000 ___RD C:\Users\Martin\Dokumenty
2013-08-31 11:23 - 2008-02-04 12:56 - 00000000 ____D C:\Users\Martin
2013-08-31 11:06 - 2012-08-25 13:31 - 00000000 ____D C:\Users\Martin\Dokumenty\Moje Videa
2013-08-30 21:13 - 2008-10-18 15:51 - 00000349 _____ C:\Users\Public\Documents\PCLECHAL.INI
2013-08-25 20:56 - 2013-08-25 20:55 - 00000000 ____D C:\Users\Martin\Dokumenty\Prvni damy
2013-08-25 18:19 - 2008-11-22 13:20 - 00000000 ____D C:\Program Files\Common Files\Adobe AIR
2013-08-23 09:48 - 2013-07-09 09:40 - 00000000 ____D C:\Users\Martin\kbpki
2013-08-21 14:16 - 2013-08-21 14:16 - 32074284 _____ C:\Users\Martin\Zemřel Andropov 1984.wav
2013-08-21 14:06 - 2013-08-21 14:06 - 36333612 _____ C:\Users\Martin\Zemřel Brežněv 1982.wav
2013-08-18 18:04 - 2008-10-16 22:59 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2013-08-18 17:55 - 2008-02-06 12:53 - 00000000 ____D C:\Users\Martin\AppData\Roaming\ICQ
2013-08-18 11:01 - 2013-06-30 11:01 - 00000288 _____ C:\Windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2126688981-4244795158-810744998-1000.job
2013-08-17 23:42 - 2012-08-30 19:20 - 00000000 ___DC C:\Program Files\Mozilla Maintenance Service
2013-08-17 11:16 - 2013-08-17 11:16 - 00000000 ___DC C:\Program Files\Mozilla Firefox
2013-08-16 12:37 - 2013-08-06 14:14 - 00000000 ____D C:\Users\Martin\Dokumenty\DT2014
2013-08-16 12:37 - 2011-09-30 20:54 - 00000000 ____D C:\Users\Martin\Dokumenty\Obec
2013-08-16 12:29 - 2013-07-30 17:02 - 00000000 ____D C:\Users\Martin\Dokumenty\5 let Pojebu
2013-08-16 12:26 - 2009-04-27 14:07 - 00000000 ____D C:\Users\Martin\Dokumenty\Miksuv fotak
2013-08-16 12:20 - 2013-04-28 10:35 - 00000000 ____D C:\Users\Martin\Dokumenty\Historie - czech
2013-08-16 12:18 - 2013-04-28 10:26 - 00000000 ____D C:\Users\Martin\Dokumenty\Prezidenti CR
2013-08-16 11:35 - 2010-11-07 12:02 - 00000000 ___HD C:\Users\Martin\Dokumenty\Plocha\.picasaoriginals
2013-08-16 08:42 - 2006-11-02 14:47 - 03829280 _____ C:\Windows\system32\FNTCACHE.DAT
2013-08-15 22:26 - 2013-08-15 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2013-08-15 22:26 - 2013-08-15 22:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Adobe Mini Bridge CS5
2013-08-15 22:11 - 2008-02-04 13:47 - 00000000 ____D C:\Users\Martin\AppData\Local\Adobe
2013-08-15 22:09 - 2008-02-04 13:47 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Adobe
2013-08-15 22:08 - 2008-02-04 12:56 - 00145456 _____ C:\Users\Martin\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-15 22:06 - 2013-08-15 22:06 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2013-08-15 22:06 - 2008-04-04 21:34 - 00000000 ____D C:\ProgramData\Adobe
2013-08-15 22:06 - 2008-04-04 21:34 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-08-15 22:04 - 2007-05-31 15:17 - 00000000 ____D C:\Program Files\Adobe
2013-08-15 22:02 - 2013-08-15 22:02 - 00000000 ___DC C:\Program Files\Adobe Media Player
2013-08-14 18:29 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\Microsoft.NET
2013-08-14 18:19 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2013-08-14 16:50 - 2013-07-13 01:13 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 16:47 - 2006-11-02 12:24 - 75778376 _____ (Microsoft Corporation) C:\Windows\system32\mrt.exe
2013-08-14 16:45 - 2007-06-01 09:43 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-14 16:40 - 2006-11-02 12:33 - 01547318 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-12 15:32 - 2013-08-12 15:32 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MyHeritage.com
2013-08-12 15:32 - 2013-08-11 13:05 - 00000000 ____D C:\Users\Martin\AppData\Roaming\MyHeritage
2013-08-12 15:32 - 2013-08-11 13:05 - 00000000 ____D C:\ProgramData\MyHeritage
2013-08-12 15:31 - 2013-08-11 13:02 - 00000000 ___DC C:\Program Files\MyHeritage
2013-08-12 09:15 - 2013-08-11 17:09 - 00000000 ___DC C:\Program Files\Recuva
2013-08-11 19:08 - 2009-02-16 22:36 - 00000000 ___DC C:\Program Files\EASEUS
2013-08-11 18:43 - 2013-08-11 18:43 - 00000000 ___DC C:\Program Files\DiskInternals
2013-08-11 18:43 - 2013-08-11 18:43 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2013-08-11 18:07 - 2007-05-31 20:00 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-08-11 17:36 - 2013-08-11 17:33 - 00000000 ____D C:\Users\Martin\AppData\Roaming\doublecmd
2013-08-11 17:33 - 2013-08-11 17:33 - 00000000 ___DC C:\Program Files\Double Commander
2013-08-11 16:33 - 2013-08-11 16:33 - 00000000 ___DC C:\Restoration
2013-08-11 16:06 - 2006-11-02 12:23 - 00002577 _____ C:\Windows\system32\config.nt
2013-08-11 16:03 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc
2013-08-11 16:02 - 2006-11-02 12:22 - 64487424 _____ C:\Windows\system32\config\software_previous
2013-08-11 16:02 - 2006-11-02 12:22 - 42467328 _____ C:\Windows\system32\config\components_previous
2013-08-11 16:02 - 2006-11-02 12:22 - 38010880 _____ C:\Windows\system32\config\system_previous
2013-08-11 16:02 - 2006-11-02 12:22 - 00524288 _____ C:\Windows\system32\config\default_previous
2013-08-11 16:02 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous
2013-08-11 16:02 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous
2013-08-11 16:01 - 2012-12-05 19:00 - 00000000 ____D C:\ProgramData\PMB Files
2013-08-11 16:01 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2013-08-11 16:01 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration
2013-08-11 13:08 - 2013-08-11 13:05 - 00000000 ____D C:\Users\Martin\Dokumenty\MyHeritage
2013-08-11 13:03 - 2013-08-11 13:03 - 00000000 ____D C:\Users\Martin\AppData\Roaming\The Complete Genealogy Reporter - FTB
2013-08-05 16:33 - 2013-08-05 16:33 - 00000000 ____D C:\Users\Martin\KBCertifikat
2013-08-04 18:26 - 2013-08-04 18:26 - 00930336 _____ (MyHeritage) C:\Windows\system32\FTBSaver.scr
2013-08-02 06:09 - 2013-08-29 14:11 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2013-08-01 13:57 - 2013-04-28 11:24 - 00000000 ____D C:\Users\Martin\Dokumenty\Scenaře
Files to move or delete:
====================
C:\Users\Martin\lkp.exe
C:\Users\Martin\AppData\Local\Temp\kbpki\b1a68fca876cfc030a8d.dll
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== Scheduled Tasks (whitelisted) ===========
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Google Software Updater.job => C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RealUpgradeLogonTaskS-1-5-21-2126688981-4244795158-810744998-1000.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
Task: C:\Windows\Tasks\RealUpgradeScheduledTaskS-1-5-21-2126688981-4244795158-810744998-1000.job => C:\Program Files\Real\RealUpgrade\realupgrade.exe
==================== Supplementary Scan (All) ================
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\prwntdrv
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\prwntdrv
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000002
"ConsentPromptBehaviorUser"=dword:00000001
"EnableInstallerDetection"=dword:00000001
"EnableLUA"=dword:00000001
"EnableSecureUIAPaths"=dword:00000001
"EnableVirtualization"=dword:00000001
"PromptOnSecureDesktop"=dword:00000001
"ValidateAdminCodeSignatures"=dword:00000000
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"scforceoption"=dword:00000000
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"FilterAdministratorToken"=dword:00000000
"EnableUIADesktopToggle"=dword:00000000
"DisableRegistryTools"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"BindDirectlyToPropertySetStorage"=dword:00000000
"NoDrives"=dword:00000000
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer\run]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval"=dword:00000001
"FirewallDisableNotify"=dword:00000000
"AntiVirusDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"AntiSpywareOverride"=dword:00000000
"FirewallOverride"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"="midimap.dll"
"wavemapper"="msacm32.drv"
"MSVideo8"="VfWWDM32.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msadpcm"="msadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"vidc.cvid"="iccvid.dll"
"vidc.iv31"="ir32_32.dll"
"vidc.iv32"="ir32_32.dll"
"vidc.iv41"="ir41_32.ax"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVU9"="tsbyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"vidc.iv50"="ir50_32.dll"
"msacm.l3acm"="l3codeca.acm"
"msacm.sl_anet"="sl_anet.acm"
"vidc.XVID"="xvidvfw.dll"
"vidc.mjpg"="pvmjpg30.dll"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"aux"="wdmaud.drv"
"wave1"="wdmaud.drv"
"mixer1"="wdmaud.drv"
"vidc.lags"="lagarith.dll"
"VIDC.FFDS"="ff_vfw.dll"
"msacm.ac3acm"="ac3acm.acm"
"msacm.l3codecp"="l3codecp.acm"
==================== Drive and Memory info ===================
Drive c: (BOOT) (Fixed) (Total:278.49 GB) (Free:73.66 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (RECOVER) (Fixed) (Total:19.59 GB) (Free:2.44 GB) FAT32
Available physical RAM: 793.71 MB
Total physical RAM: 2045.45 MB
Percentage of memory in use: 61%
LastRegBack: 2013-08-31 14:44
==================== End Of Log ==============================
Spustte MiniTool dle kolegy
2ad1:f5ff:ff74(Preferovan‚) 
4001:809::1004
