VIRY.CZ

Dobrý den/Ahoj
po tom, co jsem neustále řešil problémy s připojením k internetu, ač vše vypadalo dobře, tak stránky nenabíhali a oprava připojení ve Wni7 objevila problémy s DNS servery, tak teď se počítač výrazně zpomalil, má to delší odezvu, když něco píšu, jsem na konci řádku, zatím, co se na displeji objevuje začátek. Už jednou v minulosti jsem využil pomoci zde na fóru. Prosím o kontrolu logu, třeba tam bude něco, co mi uniká, proč se ten počítač, tak chová Díky moc za pomoc a spolupráci.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-09-2013
Ran by Lukáš (administrator) on HP_LUKAS on 11-09-2013 15:11:53
Running from C:\Users\Lukáš\Desktop
Windows 7 Professional (X64) OS Language: Czech
Internet Explorer Version 9
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\STacSV64.exe
(Hewlett-Packard Company) C:\Windows\system32\Hpservice.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(LSI Corporation) C:\Program Files\LSI SoftModem\agr64svc.exe
(Microsoft Corporation) C:\Windows\system32\CISVC.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler64.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANOTIF.EXE
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(The Author of QIP) C:\Program Files (x86)\QIP\qip.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe
(Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrMfimon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
() C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Hewlett-Packard) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\DllHost.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2010-01-08] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2174760 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [HPPowerAssistant] - C:\Program Files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe [1691192 2010-04-05] (Hewlett-Packard)
HKLM\...\Run: [HPWirelessAssistant] - C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_Main.exe [363064 2010-04-05] (Hewlett-Packard)
HKLM\...\Run: [Broadcom Wireless Manager UI] - C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [5394944 2013-06-23] (Broadcom Corporation)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [6330568 2013-03-21] (ESET)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [489472 2013-07-12] (IDT, Inc.)
HKLM\...\Run: [CDAServer] - C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM-x32\...\runonceex: [ContentMerger] - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-11-23] (Sonic Solutions)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKCU\...\Run: [QIP2005] - C:\Program Files (x86)\QIP\qip.exe [3330560 2010-10-29] (The Author of QIP)
HKCU\...\Run: [GoogleChromeAutoLaunch_032E85145F9C73D9B43D5ED2AF6BF5BD] - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [829392 2013-09-02] (Google Inc.)
HKCU\...\Run: [Advanced SystemCare 6] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe [491840 2013-04-18] (IObit)
MountPoints2: {d486edb5-dbee-11e2-b3c1-806e6f6e6963} - F:\SWSETUP\APPINSTL\hpsoftwaresetup.exe
HKLM-x32\...\Run: [QLBController] - C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe [256056 2010-03-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [IObit Malware Fighter] - C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe [1549120 2013-08-16] (IObit)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Status Monitor.lnk
ShortcutTarget: Status Monitor.lnk -> C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe (Brother Industries, Ltd.)

==================== Internet (Whitelisted) ====================

StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO-x32: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37

FireFox:
========
FF ProfilePath: C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default
FF user.js: detected! => C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\user.js
FF DefaultSearchEngine: Slunečnice
FF SelectedSearchEngine: Slunečnice
FF Homepage: hxxp://www.idnes.cz/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @garmin.com/GpsControl - C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll (GARMIN Corp.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\ascsurfingprotection@iobit.com
FF Extension: Garmin Communicator - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
FF Extension: intgcal - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\intgcal@egarracingteam.com.ar.xpi
FF Extension: sendtophone - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\sendtophone@martinezdelizarrondo.com.xpi
FF Extension: No Name - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
FF Extension: No Name - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
FF Extension: No Name - C:\Users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\Extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389}.xpi
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt\
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: hxxp://www.idnes.cz/
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Shockwave Flash) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll ()
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.21.145\npGoogleUpdate3.dll No File
CHR Extension: (Google Translate) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb\1.2.5_0
CHR Extension: (Angry Birds) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj\1.5.0.7_0
CHR Extension: (Google Docs) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Facebook) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\boeajhmfdjldchidhphikilcgdacljfm\1.0.3_0
CHR Extension: (Google Search) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Play.cz) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dacomocbpihfdldecacpjedmmcbdgdop\2.10.0_0
CHR Extension: (Google+) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlppkpafhbajpcmmoheippocdidnckmm\1.2.0.418_0
CHR Extension: (Gmail Offline) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejidjjhkpiempkbhmpbfngldlkglhimk\1.20_0
CHR Extension: (Google Calendar) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ejjicmeblgpmajnghnpcppodonldlgfn\4.5.3_0
CHR Extension: (Photo Zoom for Facebook) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\elioihkkcdgakfbahdoddophfngopipi\1.1208.30.1_0
CHR Extension: (Gmail Attachments To Drive) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\epoohehjbaenldfbahgcegdmlogakgin\1.4.0_0
CHR Extension: (AdBlock) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.6_0
CHR Extension: (Google Calendar (by Google)) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich\1.3.1_0
CHR Extension: (FlashBlock) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gofhjkjmkpinhpoiabjplobcaignabnl\0.9.31_0
CHR Extension: (Honeycomb Chrome Theme) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihhhgnjnpmjaikooiahhhlemccommcml\0.2_0
CHR Extension: (Dropbox) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\ioekoebejdcmnlefjiknokhhafglcjdl\3.0.8_0
CHR Extension: (Downloads) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfchnphgogjhineanplmfkofljiagjfb\1_0
CHR Extension: (Google Maps) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lneaknkopdijkpnocmklfnjbeapigfbh\5.2.7_0
CHR Extension: (Google Mail Checker) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff\4.4.0_0
CHR Extension: (Advanced SystemCare Surfing Protection) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_0
CHR Extension: (Chrome In-App Payments service) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.10_0
CHR Extension: (Docs PDF/PowerPoint Viewer (by Google)) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\nnbmlagghjjcbdhgmkedmbmedengocbn\3.10_0
CHR Extension: (Picasa) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\onlgmecjpnejhfeofkgbfgnmdlipdejb\6.2.2_0
CHR Extension: (Gmail) - C:\Users\LUK~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM-x32\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files (x86)\IObit\Advanced SystemCare 6\BrowerProtect\ASC_GhromePlugin.crx

==================== Services (Whitelisted) =================

R2 AdvancedSystemCareService6; C:\Program Files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [574272 2013-04-18] (IObit)
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [462160 2010-07-16] (DigitalPersona, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1341664 2013-03-21] (ESET)
R2 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [32768 2010-10-19] (Hewlett-Packard Development Company, L.P)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [264248 2010-03-01] (Hewlett-Packard Company)
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE [48128 2013-06-23] (Broadcom Corporation)

==================== Drivers (Whitelisted) ====================

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [213416 2013-02-14] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [150616 2013-01-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [190232 2013-01-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [59440 2013-01-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [58416 2013-02-14] (ESET)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R3 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
R3 SNP2UVC; C:\Windows\System32\DRIVERS\snp2uvc.sys [1803904 2010-01-18] ()
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
S3 dgderdrv; System32\drivers\dgderdrv.sys [x]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-09-11 15:11 - 2013-09-11 15:11 - 00000000 ____D C:\Users\LUK~1\AppData\Local\qb0F2B63.1F
2013-09-11 15:11 - 2013-09-11 15:11 - 00000000 ____D C:\FRST
2013-09-11 15:11 - 2013-09-11 01:21 - 01949408 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64.exe
2013-09-10 17:55 - 2013-09-10 17:55 - 21824552 _____ (IObit ) C:\Users\Lukáš\Downloads\imf-setup.exe
2013-09-10 17:54 - 2013-09-10 17:56 - 00001180 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-09-10 17:49 - 2013-09-10 17:49 - 00000000 ____D C:\Windows\Tasks\TaskDisabled
2013-09-10 17:47 - 2013-09-11 14:55 - 00000112 _____ C:\Windows\setupact.log
2013-09-10 17:47 - 2013-09-10 17:47 - 00000000 _____ C:\Windows\setuperr.log
2013-09-10 17:46 - 2013-09-11 14:54 - 00002178 _____ C:\Windows\PFRO.log
2013-09-10 17:33 - 2013-09-10 17:54 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\IObit
2013-09-10 17:33 - 2013-09-10 17:54 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-10 17:33 - 2013-09-10 17:33 - 00003094 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-10 17:33 - 2013-09-10 17:33 - 00001279 _____ C:\Users\Public\Desktop\Uninstaller.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00001267 _____ C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00001228 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Apple Computer
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\ProgramData\IObit
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-10 17:31 - 2013-09-10 17:32 - 30157081 _____ C:\Users\Lukáš\Downloads\ascf-setup.exe
2013-09-10 09:34 - 2013-09-10 10:22 - 00000000 ____D C:\Program Files (x86)\RegCleaner
2013-09-09 10:29 - 2013-09-09 10:29 - 00000000 ____D C:\Users\Lukáš\Documents\BlazeVideo
2013-09-09 10:15 - 2013-09-10 07:31 - 00000000 ____D C:\ProgramData\BlazeVideo
2013-09-09 10:12 - 2013-09-09 10:12 - 00000000 ____D C:\Program Files (x86)\BlazeVideo
2013-09-09 06:30 - 2013-09-09 06:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-06 12:32 - 2013-09-06 12:32 - 00084480 _____ C:\Users\Lukáš\Downloads\Volby-do-PS-PCR-2013---krajske-kandidatky.xls
2013-09-06 08:45 - 2013-09-06 08:45 - 00002025 _____ C:\Users\Lukáš\Desktop\DotaznikMMPI2 – zástupce.lnk
2013-09-03 21:01 - 2013-09-03 21:01 - 00000000 ____D C:\Users\LUK~1\AppData\Local\SSScan
2013-09-03 20:47 - 2013-09-03 20:47 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-03 20:44 - 2013-09-03 20:44 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2013-08-30 18:58 - 2013-08-30 18:58 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\GHISLER
2013-08-30 16:50 - 2013-08-30 16:50 - 1857863654 _____ C:\Users\Lukáš\Downloads\BABOVRESKY.avi
2013-08-30 16:49 - 2013-08-30 16:49 - 00018366 _____ C:\Users\Lukáš\Downloads\[CzT]Babovresky_2013_CZ_.torrent
2013-08-29 09:05 - 2013-08-29 09:05 - 00003090 _____ C:\Windows\System32\Tasks\{FCC059B6-CC06-4782-8A08-745925A2C3E0}
2013-08-28 18:53 - 2013-08-28 18:55 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\FIFA 13 Demo
2013-08-28 18:52 - 2013-08-30 19:37 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\FIFA 13
2013-08-28 18:52 - 2013-08-28 19:22 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\Origin
2013-08-28 18:52 - 2013-08-28 19:22 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\Origin
2013-08-28 18:52 - 2013-08-28 18:52 - 00125136 _____ C:\Users\ssuwlcbajqry\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 18:52 - 2013-08-28 18:52 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\hpqlog
2013-08-28 18:51 - 2013-09-10 10:22 - 00000000 ____D C:\Users\ssuwlcbajqry
2013-08-28 18:51 - 2013-09-03 20:32 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\Samsung
2013-08-28 18:51 - 2013-08-28 18:51 - 00000020 ___SH C:\Users\ssuwlcbajqry\ntuser.ini
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Šablony
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Soubory cookie
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Poslední
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Okolní tiskárny
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Okolní síť
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Nabídka Start
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Dokumenty
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Obrázky
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Hudba
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Filmy
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Data aplikací
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\AppData\Local\Data aplikací
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\Složka Bluetooth Exchange
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\ESET
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\DigitalPersona
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\ESET
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\DigitalPersona
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\Broadcom
2013-08-28 18:44 - 2013-08-28 18:46 - 00000000 ____D C:\Users\Lukáš\Documents\FIFA 13 Demo
2013-08-28 18:44 - 2013-08-28 18:44 - 00000000 __SHD C:\ProgramData\DSS
2013-08-28 18:20 - 2013-08-28 18:20 - 16949160 _____ (Electronic Arts, Inc.) C:\Users\Lukáš\Downloads\OriginThinSetup.exe
2013-08-28 18:13 - 2013-08-28 18:13 - 00000000 ____D C:\Windows\system32\appmgmt
2013-08-28 14:43 - 2013-08-28 15:07 - 00000000 ____D C:\Users\ybevfytrb\Documents\FIFA 13
2013-08-28 14:40 - 2013-08-28 14:43 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\Origin
2013-08-28 14:40 - 2013-08-28 14:40 - 00125136 _____ C:\Users\ybevfytrb\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 14:40 - 2013-08-28 14:40 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Google
2013-08-28 14:39 - 2013-09-03 20:32 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\Samsung
2013-08-28 14:39 - 2013-08-28 14:43 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Origin
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\Documents\Složka Bluetooth Exchange
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\hpqlog
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\DigitalPersona
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\DigitalPersona
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Broadcom
2013-08-28 14:38 - 2013-09-10 10:22 - 00000000 ____D C:\Users\ybevfytrb
2013-08-28 14:38 - 2013-08-28 14:38 - 00000020 ___SH C:\Users\ybevfytrb\ntuser.ini
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Šablony
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Soubory cookie
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Poslední
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Okolní tiskárny
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Okolní síť
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Nabídka Start
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Dokumenty
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Obrázky
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Hudba
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Filmy
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Data aplikací
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\AppData\Local\Data aplikací
2013-08-27 05:39 - 2013-09-10 17:42 - 00000000 ____D C:\Windows\Minidump
2013-08-26 21:25 - 2013-08-26 21:25 - 00002984 _____ C:\Windows\System32\Tasks\{1C52C17B-7479-477B-9E21-32A2C27C5B9C}
2013-08-26 21:24 - 2013-08-26 21:24 - 00002984 _____ C:\Windows\System32\Tasks\{B8586BED-B061-473A-B80B-41AA007F62D0}
2013-08-26 20:53 - 2013-09-03 20:56 - 00000000 ____D C:\Users\LUK~1\AppData\Local\CrashDumps
2013-08-26 20:52 - 2013-08-27 05:51 - 00000000 ____D C:\Users\Lukáš\Documents\FIFA 13
2013-08-26 20:49 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2013-08-26 20:49 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2013-08-26 20:49 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2013-08-26 20:49 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2013-08-26 20:49 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2013-08-26 20:49 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 02106216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2013-08-26 20:49 - 2010-05-26 11:41 - 00248672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_43.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2013-08-26 20:49 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2013-08-26 20:48 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2013-08-26 20:48 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2013-08-26 20:48 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2013-08-26 20:48 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2013-08-26 20:48 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2013-08-26 20:48 - 2008-10-15 06:22 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2013-08-26 20:48 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2013-08-26 20:48 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2013-08-26 20:48 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2013-08-26 20:48 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2013-08-26 20:48 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2013-08-26 20:48 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2013-08-26 20:48 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-08-26 20:48 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-08-26 20:48 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-08-26 20:48 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-08-26 20:48 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-08-26 20:48 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-08-26 20:48 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2013-08-26 20:48 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2013-08-26 20:48 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2013-08-26 20:48 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2013-08-26 20:48 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2013-08-26 20:48 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2013-08-26 20:48 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2013-08-26 20:48 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2013-08-26 20:48 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2013-08-26 20:48 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2013-08-26 20:48 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2013-08-26 20:48 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2013-08-26 20:48 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2013-08-26 20:48 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2013-08-26 20:48 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2013-08-26 20:48 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2013-08-26 20:48 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2013-08-26 20:48 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2013-08-26 20:48 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2013-08-26 20:48 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2013-08-26 20:48 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2013-08-26 20:28 - 2013-09-11 14:30 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Origin
2013-08-26 20:27 - 2013-09-11 14:30 - 00000000 ____D C:\ProgramData\Origin
2013-08-26 20:27 - 2013-09-11 14:30 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-08-21 19:51 - 2013-08-21 19:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-16 15:05 - 2013-09-03 20:57 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-08-13 13:40 - 2013-08-13 13:40 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2013-08-12 19:25 - 2013-08-12 19:25 - 00009088 _____ C:\Users\Lukáš\Downloads\SKS back.zip

==================== One Month Modified Files and Folders =======

2013-09-11 15:12 - 2013-06-23 12:29 - 01865428 _____ C:\Windows\WindowsUpdate.log
2013-09-11 15:11 - 2013-09-11 15:11 - 00000000 ____D C:\Users\LUK~1\AppData\Local\qb0F2B63.1F
2013-09-11 15:11 - 2013-09-11 15:11 - 00000000 ____D C:\FRST
2013-09-11 15:10 - 2013-06-24 11:50 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-09-11 15:02 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-09-11 15:02 - 2009-07-14 06:45 - 00009920 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-09-11 15:01 - 2013-07-27 16:27 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\uTorrent
2013-09-11 15:00 - 2009-08-31 02:05 - 00637244 _____ C:\Windows\system32\perfh005.dat
2013-09-11 15:00 - 2009-08-31 02:05 - 00124762 _____ C:\Windows\system32\perfc005.dat
2013-09-11 15:00 - 2009-07-14 07:13 - 01487572 _____ C:\Windows\system32\PerfStringBackup.INI
2013-09-11 14:58 - 2013-08-08 08:52 - 00000000 ____D C:\Program Files (x86)\MyFree Codec
2013-09-11 14:58 - 2013-07-12 07:53 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce7ec42e6cc164.job
2013-09-11 14:55 - 2013-09-10 17:47 - 00000112 _____ C:\Windows\setupact.log
2013-09-11 14:55 - 2013-06-24 08:56 - 00000000 ____D C:\ProgramData\HPQLOG
2013-09-11 14:55 - 2013-06-23 14:01 - 00000946 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-09-11 14:55 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-09-11 14:54 - 2013-09-10 17:46 - 00002178 _____ C:\Windows\PFRO.log
2013-09-11 14:51 - 2013-07-11 11:05 - 00000000 ____D C:\Windows\system32\MRT
2013-09-11 14:48 - 2013-06-23 16:07 - 79143768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-09-11 14:48 - 2013-06-23 15:47 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-09-11 14:30 - 2013-08-26 20:28 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Origin
2013-09-11 14:30 - 2013-08-26 20:27 - 00000000 ____D C:\ProgramData\Origin
2013-09-11 14:30 - 2013-08-26 20:27 - 00000000 ____D C:\ProgramData\Electronic Arts
2013-09-11 01:21 - 2013-09-11 15:11 - 01949408 _____ (Farbar) C:\Users\Lukáš\Desktop\FRST64.exe
2013-09-10 17:56 - 2013-09-10 17:54 - 00001180 _____ C:\Users\Public\Desktop\IObit Malware Fighter.lnk
2013-09-10 17:55 - 2013-09-10 17:55 - 21824552 _____ (IObit ) C:\Users\Lukáš\Downloads\imf-setup.exe
2013-09-10 17:54 - 2013-09-10 17:33 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\IObit
2013-09-10 17:54 - 2013-09-10 17:33 - 00000000 ____D C:\Program Files (x86)\IObit
2013-09-10 17:49 - 2013-09-10 17:49 - 00000000 ____D C:\Windows\Tasks\TaskDisabled
2013-09-10 17:47 - 2013-09-10 17:47 - 00000000 _____ C:\Windows\setuperr.log
2013-09-10 17:43 - 2011-02-10 15:15 - 00000000 ____D C:\Users\Lukáš\Documents\PPPRCH
2013-09-10 17:43 - 2011-02-10 15:12 - 00000000 ____D C:\Users\Lukáš\Documents\Plocha
2013-09-10 17:42 - 2013-08-27 05:39 - 00000000 ____D C:\Windows\Minidump
2013-09-10 17:33 - 2013-09-10 17:33 - 00003094 _____ C:\Windows\System32\Tasks\ASC6_PerformanceMonitor
2013-09-10 17:33 - 2013-09-10 17:33 - 00001279 _____ C:\Users\Public\Desktop\Uninstaller.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00001267 _____ C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Uninstall Programs.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00001228 _____ C:\Users\Public\Desktop\Advanced SystemCare 6.lnk
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Apple Computer
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\ProgramData\IObit
2013-09-10 17:33 - 2013-09-10 17:33 - 00000000 ____D C:\ProgramData\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-10 17:32 - 2013-09-10 17:31 - 30157081 _____ C:\Users\Lukáš\Downloads\ascf-setup.exe
2013-09-10 15:36 - 2013-08-09 05:47 - 00000332 _____ C:\Windows\Tasks\HPCeeScheduleForLukáš.job
2013-09-10 15:35 - 2013-08-09 05:47 - 00003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForLukáš
2013-09-10 11:25 - 2013-06-24 11:18 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Skype
2013-09-10 10:24 - 2013-06-23 12:53 - 00000000 ____D C:\Users\Lukáš
2013-09-10 10:22 - 2013-09-10 09:34 - 00000000 ____D C:\Program Files (x86)\RegCleaner
2013-09-10 10:22 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry
2013-09-10 10:22 - 2013-08-28 14:38 - 00000000 ____D C:\Users\ybevfytrb
2013-09-10 10:22 - 2013-06-23 14:16 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\GHISLER
2013-09-10 10:22 - 2009-07-14 09:45 - 00000000 ___RD C:\Users\Public\Recorded TV
2013-09-10 10:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-09-10 10:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2013-09-10 10:22 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\AppCompat
2013-09-10 07:31 - 2013-09-09 10:15 - 00000000 ____D C:\ProgramData\BlazeVideo
2013-09-09 19:39 - 2013-04-23 16:32 - 00000000 ____D C:\Users\Lukáš\Documents\Scan
2013-09-09 18:14 - 2013-07-02 07:03 - 00000072 _____ C:\Users\Public\LMDebug.log
2013-09-09 10:31 - 2011-02-21 17:32 - 00004608 _____ C:\6XSourceFilter.grf
2013-09-09 10:29 - 2013-09-09 10:29 - 00000000 ____D C:\Users\Lukáš\Documents\BlazeVideo
2013-09-09 10:12 - 2013-09-09 10:12 - 00000000 ____D C:\Program Files (x86)\BlazeVideo
2013-09-09 06:30 - 2013-09-09 06:30 - 00000000 ____D C:\Users\Public\Documents\CrashDump
2013-09-06 12:32 - 2013-09-06 12:32 - 00084480 _____ C:\Users\Lukáš\Downloads\Volby-do-PS-PCR-2013---krajske-kandidatky.xls
2013-09-06 11:48 - 2013-06-27 12:13 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Dropbox
2013-09-06 11:45 - 2011-06-05 08:39 - 00000000 ___RD C:\Users\Lukáš\Dropbox
2013-09-06 08:45 - 2013-09-06 08:45 - 00002025 _____ C:\Users\Lukáš\Desktop\DotaznikMMPI2 – zástupce.lnk
2013-09-05 21:41 - 2013-07-04 19:07 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-09-05 21:41 - 2013-07-01 20:52 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-09-04 21:04 - 2013-05-21 19:34 - 00000000 ____D C:\Users\Lukáš\Documents\TK Advaita
2013-09-04 21:01 - 2013-06-23 14:06 - 00002186 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2013-09-03 21:01 - 2013-09-03 21:01 - 00000000 ____D C:\Users\LUK~1\AppData\Local\SSScan
2013-09-03 20:57 - 2013-08-16 15:05 - 00000000 ____D C:\ProgramData\boost_interprocess
2013-09-03 20:56 - 2013-08-26 20:53 - 00000000 ____D C:\Users\LUK~1\AppData\Local\CrashDumps
2013-09-03 20:48 - 2013-06-24 14:54 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Samsung
2013-09-03 20:48 - 2013-06-24 14:52 - 00000000 ____D C:\ProgramData\Samsung
2013-09-03 20:48 - 2013-06-24 14:51 - 00000000 ____D C:\Program Files (x86)\Samsung
2013-09-03 20:47 - 2013-09-03 20:47 - 00000000 ____D C:\Program Files\Common Files\Common Desktop Agent
2013-09-03 20:44 - 2013-09-03 20:44 - 00000000 ____D C:\Program Files (x86)\SamsungPrinterLiveUpdate
2013-09-03 20:32 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\Samsung
2013-09-03 20:32 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\Samsung
2013-09-03 20:09 - 2011-02-10 15:09 - 00000000 ____D C:\Users\Lukáš\Documents\Moje naskenované obrázky
2013-09-02 19:47 - 2013-06-23 14:24 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
2013-09-01 16:19 - 2013-06-23 12:54 - 00000000 ___RD C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-31 07:22 - 2013-05-21 19:41 - 00000000 ____D C:\Users\Lukáš\Documents\SUR
2013-08-30 19:37 - 2013-08-28 18:52 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\FIFA 13
2013-08-30 18:58 - 2013-08-30 18:58 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\GHISLER
2013-08-30 16:50 - 2013-08-30 16:50 - 1857863654 _____ C:\Users\Lukáš\Downloads\BABOVRESKY.avi
2013-08-30 16:50 - 2013-07-27 17:02 - 1887930954 _____ C:\Users\Lukáš\Downloads\Harry Potter and The Half-Blood Prince [2009].avi
2013-08-30 16:49 - 2013-08-30 16:49 - 00018366 _____ C:\Users\Lukáš\Downloads\[CzT]Babovresky_2013_CZ_.torrent
2013-08-29 09:12 - 2013-06-24 11:18 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-08-29 09:12 - 2013-06-24 11:03 - 00000000 ____D C:\ProgramData\Skype
2013-08-29 09:05 - 2013-08-29 09:05 - 00003090 _____ C:\Windows\System32\Tasks\{FCC059B6-CC06-4782-8A08-745925A2C3E0}
2013-08-28 19:22 - 2013-08-28 18:52 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\Origin
2013-08-28 19:22 - 2013-08-28 18:52 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\Origin
2013-08-28 18:55 - 2013-08-28 18:53 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\FIFA 13 Demo
2013-08-28 18:52 - 2013-08-28 18:52 - 00125136 _____ C:\Users\ssuwlcbajqry\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 18:52 - 2013-08-28 18:52 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\hpqlog
2013-08-28 18:51 - 2013-08-28 18:51 - 00000020 ___SH C:\Users\ssuwlcbajqry\ntuser.ini
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Šablony
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Soubory cookie
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Poslední
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Okolní tiskárny
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Okolní síť
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Nabídka Start
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Dokumenty
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Obrázky
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Hudba
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Documents\Filmy
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\Data aplikací
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 _SHDL C:\Users\ssuwlcbajqry\AppData\Local\Data aplikací
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\Documents\Složka Bluetooth Exchange
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\ESET
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Roaming\DigitalPersona
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\ESET
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\DigitalPersona
2013-08-28 18:51 - 2013-08-28 18:51 - 00000000 ____D C:\Users\ssuwlcbajqry\AppData\Local\Broadcom
2013-08-28 18:46 - 2013-08-28 18:44 - 00000000 ____D C:\Users\Lukáš\Documents\FIFA 13 Demo
2013-08-28 18:44 - 2013-08-28 18:44 - 00000000 __SHD C:\ProgramData\DSS
2013-08-28 18:20 - 2013-08-28 18:20 - 16949160 _____ (Electronic Arts, Inc.) C:\Users\Lukáš\Downloads\OriginThinSetup.exe
2013-08-28 18:13 - 2013-08-28 18:13 - 00000000 ____D C:\Windows\system32\appmgmt
2013-08-28 15:07 - 2013-08-28 14:43 - 00000000 ____D C:\Users\ybevfytrb\Documents\FIFA 13
2013-08-28 14:43 - 2013-08-28 14:40 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\Origin
2013-08-28 14:43 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Origin
2013-08-28 14:40 - 2013-08-28 14:40 - 00125136 _____ C:\Users\ybevfytrb\AppData\Local\GDIPFONTCACHEV1.DAT
2013-08-28 14:40 - 2013-08-28 14:40 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Google
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\Documents\Složka Bluetooth Exchange
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\hpqlog
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Roaming\DigitalPersona
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\DigitalPersona
2013-08-28 14:39 - 2013-08-28 14:39 - 00000000 ____D C:\Users\ybevfytrb\AppData\Local\Broadcom
2013-08-28 14:38 - 2013-08-28 14:38 - 00000020 ___SH C:\Users\ybevfytrb\ntuser.ini
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Šablony
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Soubory cookie
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Poslední
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Okolní tiskárny
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Okolní síť
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Nabídka Start
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Dokumenty
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Obrázky
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Hudba
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Documents\Filmy
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\Data aplikací
2013-08-28 14:38 - 2013-08-28 14:38 - 00000000 _SHDL C:\Users\ybevfytrb\AppData\Local\Data aplikací
2013-08-27 05:51 - 2013-08-26 20:52 - 00000000 ____D C:\Users\Lukáš\Documents\FIFA 13
2013-08-26 22:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\LiveKernelReports
2013-08-26 21:25 - 2013-08-26 21:25 - 00002984 _____ C:\Windows\System32\Tasks\{1C52C17B-7479-477B-9E21-32A2C27C5B9C}
2013-08-26 21:24 - 2013-08-26 21:24 - 00002984 _____ C:\Windows\System32\Tasks\{B8586BED-B061-473A-B80B-41AA007F62D0}
2013-08-23 06:53 - 2013-06-24 11:34 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-22 08:39 - 2011-02-10 15:16 - 00000000 ____D C:\Users\Lukáš\Documents\UPOL
2013-08-21 19:51 - 2013-08-21 19:51 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-13 13:40 - 2013-08-13 13:40 - 00000000 ____D C:\Users\Lukáš\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2013-08-12 19:28 - 2013-07-02 18:08 - 00000000 ____D C:\Program Files (x86)\Czech Soccer Manager 2002 FE
2013-08-12 19:25 - 2013-08-12 19:25 - 00009088 _____ C:\Users\Lukáš\Downloads\SKS back.zip

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



==================== Alternate Data Streams (whitelisted) ====


==================== Loaded Modules (whitelisted) ============

2012-02-06 15:04 - 2012-02-06 15:04 - 00722768 _____ (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpoFeedb.dll
2010-07-15 16:01 - 2010-07-15 16:01 - 00167760 _____ (DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpoSet.dll
2013-06-14 01:00 - 2013-06-14 01:00 - 00164016 _____ (Dropbox, Inc.) C:\Users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
2009-12-29 14:19 - 2009-12-29 14:19 - 00173344 _____ () C:\Program Files\WIDCOMM\Bluetooth Software\btkeyind.dll
2010-06-04 02:16 - 2010-06-04 02:16 - 00400168 _____ (Synaptics Incorporated) C:\Windows\system32\SynCOM.dll
2010-06-04 02:16 - 2010-06-04 02:16 - 00215336 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2010-04-05 11:15 - 2010-04-05 11:15 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HardwareAccess.dll
2010-04-05 11:15 - 2010-04-05 11:15 - 00028216 _____ (Root-Project) C:\Program Files\Hewlett-Packard\HP Power Assistant\LocalizeExtension.dll
2010-04-05 11:15 - 2010-04-05 11:15 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\HPCommon.XmlSerializers.dll
2010-04-05 11:15 - 2010-04-05 11:15 - 00055352 _____ () C:\Program Files\Hewlett-Packard\HP Power Assistant\Graphs.dll
2013-06-23 13:17 - 2013-06-23 13:17 - 00237112 _____ (Hewlett-Packard Development Company, L.P.) C:\Windows\assembly\GAC_MSIL\hpCASLLibrary\3.0.1.1__67b8d1b5179ba5f8\hpCASLLibrary.dll
2013-06-23 13:17 - 2013-06-23 13:17 - 00011320 _____ ( ) C:\Windows\assembly\GAC_MSIL\Interop.HPQWMIEXLib\1.0.0.0__67b8d1b5179ba5f8\Interop.HPQWMIEXLib.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 00254080 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiHips.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 00691288 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiScan.dll
2013-03-21 15:19 - 2013-03-21 15:19 - 00355008 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiAmon.dll
2013-03-21 15:19 - 2013-03-21 15:19 - 00123752 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiEmon.dll
2013-03-21 15:19 - 2013-03-21 15:19 - 00119144 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiDmon.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 01653320 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiEpfw.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 00241184 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiSmon.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 01010624 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiUpdate.dll
2013-03-21 15:20 - 2013-03-21 15:20 - 00111416 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiMailPlugins.dll
2013-03-21 15:19 - 2013-03-21 15:19 - 01083248 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\eguiParental.dll
2013-07-12 08:03 - 2013-07-12 08:02 - 01952256 _____ (IDT, Inc.) C:\Program Files\IDT\WDM\STLang64.dll
2013-07-12 08:03 - 2013-07-12 08:02 - 00651264 ____N (IDT, Inc.) C:\Windows\system32\stapi64.dll
2012-02-20 22:23 - 2012-02-20 22:23 - 00051200 _____ () C:\Program Files\Common Files\Common Desktop Agent\CDASrvPS.dll
2013-06-24 08:54 - 2013-07-01 21:00 - 00113056 _____ (Hewlett-Packard Development Company L.P.) C:\Windows\assembly\GAC_MSIL\CaslShared\3.5.1.1__9c6f83d5b7f3d097\CaslShared.dll
2013-06-24 08:55 - 2013-07-01 21:00 - 00092576 _____ (Hewlett-Packard Development Company L.P.) C:\Windows\assembly\GAC_MSIL\hpcasl\3.5.1.1__9c6f83d5b7f3d097\hpcasl.dll
2012-08-10 15:48 - 2012-08-10 15:48 - 00015776 _____ ( ) C:\Program Files (x86)\Hewlett-Packard\Shared\Interop.HPQWMIEXLib.dll
2010-04-05 11:11 - 2010-04-05 11:11 - 00030264 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWA_LogicLayer.dll
2010-04-05 11:12 - 2010-04-05 11:12 - 00052280 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HardwareAccess.dll
2010-04-05 11:12 - 2010-04-05 11:12 - 00028216 _____ (Root-Project) C:\Program Files\Hewlett-Packard\HP Wireless Assistant\LocalizeExtension.dll
2010-04-05 11:12 - 2010-04-05 11:12 - 00267832 _____ () C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPCommon.XmlSerializers.dll
2010-07-16 14:54 - 2010-07-16 14:54 - 00601936 _____ (DigitalPersona, Inc.) C:\Windows\system32\DPFPApi.DLL
2010-07-16 14:54 - 2010-07-16 14:54 - 00377680 _____ (DigitalPersona, Inc.) C:\Windows\system32\DPCLBACK.dll
2010-07-16 14:54 - 2010-07-16 14:54 - 00270160 _____ (DigitalPersona, Inc.) C:\Windows\system32\DPSCEL.dll
2012-02-06 15:04 - 2012-02-06 15:04 - 00488784 _____ (DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgentOtsPlugin.dll
2010-07-15 16:01 - 2010-07-15 16:01 - 00119632 _____ (DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpoSet.dll
2012-02-06 15:04 - 2012-02-06 15:04 - 00681296 _____ (DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOCache.dll
2012-02-06 15:04 - 2012-02-06 15:04 - 00509264 _____ (DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpoFeedb.dll
2013-09-10 17:33 - 2013-01-15 18:47 - 00893248 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 6\webres.dll
2013-06-24 10:36 - 2010-05-20 17:14 - 00061440 _____ () C:\Program Files (x86)\QIP\Plugins\docking.dll
2013-06-14 01:00 - 2013-06-14 01:00 - 00130736 _____ (Dropbox, Inc.) C:\Users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
2013-03-21 15:19 - 2013-03-21 15:19 - 00146864 _____ (ESET) C:\Program Files\ESET\ESET Smart Security\x86\DMON.dll
2013-07-04 19:46 - 2009-02-27 16:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2013-07-04 19:46 - 2008-12-14 10:33 - 00163840 ____N (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BRMFCWNDCze.dll
2013-07-04 19:46 - 2008-11-26 10:25 - 00208896 ____N (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BrFirmUpdateCheck.dll
2013-07-04 19:46 - 2008-02-05 19:17 - 00176128 ____N (Brother Industries, Ltd.) C:\Program Files (x86)\Brother\Brmfcmon\BroSNMP.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 00709584 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libglesv2.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 00099792 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\libegl.dll
2012-02-15 15:17 - 2012-02-15 15:17 - 00310272 _____ () C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\sslog.dll
2012-03-21 07:22 - 2012-03-21 07:22 - 00683520 _____ () C:\Program Files (x86)\Samsung\Easy Printer Manager\CDAS2PC\SASkin.dll
2012-02-20 22:22 - 2012-02-20 22:22 - 00050688 _____ () C:\Program Files (x86)\Common Files\Common Desktop Agent\CDASrvPS.dll
2012-04-23 12:14 - 2012-04-23 12:14 - 02013184 _____ () C:\Program Files (x86)\Samsung\Easy Printer Manager\sf.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 04053456 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\pdf.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 00410576 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ppGoogleNaClPluginChrome.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 01604560 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\ffmpegsumo.dll
2013-09-10 17:47 - 2013-09-10 17:47 - 00577856 _____ (IObit) C:\Users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Extensions\nfengeggddojhakldhlpjdlddgkkjkdd\1.0.0_1\Plugin\ASCPlugin_Protect.dll
2013-09-04 21:01 - 2013-09-02 22:35 - 13599184 _____ () C:\Program Files (x86)\Google\Chrome\Application\29.0.1547.66\PepperFlash\pepflashplayer.dll
Název chybujícího modulu: mfc90u.dll, verze: 9.0.30729.6161, časové razítko: 0x4dad06e1

==================== Scheduled Tasks (whitelisted) ===========

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce7ec42e6cc164.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForLukáš.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Supplementary Scan (All) ================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BrMfcWnd
c:\program files (x86)\brother\brmfcmon\brmfcwnd.exe /autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ControlCenter3
c:\program files (x86)\brother\controlcenter3\brctrcen.exe /autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMSS
c:\program files (x86)\intel\intel(r) management engine components\imss\piconstartup.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
c:\program files (x86)\samsung\kies\kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
c:\program files (x86)\samsung\kies\kiestrayagent.exe


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000000
"ConsentPromptBehaviorUser"=dword:00000003
"EnableInstallerDetection"=dword:00000001
"EnableLUA"=dword:00000000
"EnableSecureUIAPaths"=dword:00000001
"EnableUIADesktopToggle"=dword:00000000
"EnableVirtualization"=dword:00000001
"PromptOnSecureDesktop"=dword:00000000
"ValidateAdminCodeSignatures"=dword:00000000
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"scforceoption"=dword:00000000
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"FilterAdministratorToken"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=dword:00000001
"NoActiveDesktopChanges"=dword:00000001
"ForceActiveDesktopOn"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval"=dword:00000001
"AntiVirusOverride"=dword:00000000
"AntiSpywareOverride"=dword:00000000
"FirewallOverride"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"="msrle32.dll"
"vidc.msvc"="msvidc32.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msg711"="msg711.acm"
"msacm.msgsm610"="msgsm32.acm"
"msacm.msadpcm"="msadp32.acm"
"midimapper"="midimap.dll"
"wavemapper"="msacm32.drv"
"VIDC.UYVY"="msyuv.dll"
"VIDC.YUY2"="msyuv.dll"
"VIDC.YVYU"="msyuv.dll"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.i420"="iyuv_32.dll"
"VIDC.YVU9"="tsbyuv.dll"
"msacm.l3acm"="C:\\Windows\\System32\\l3codeca.acm"
"MSVideo8"="VfWWDM32.dll"
"wave2"="wdmaud.drv"
"midi2"="wdmaud.drv"
"mixer2"="wdmaud.drv"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"aux"="wdmaud.drv"
"wave1"="wdmaud.drv"
"midi1"="wdmaud.drv"
"mixer1"="wdmaud.drv"


==================== Drive and Memory info ===================

Drive c: (HDD) (Fixed) (Total:448.47 GB) (Free:39.03 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive d: (HP_RECOVERY) (Fixed) (Total:15 GB) (Free:1.78 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.4 GB) FAT32

Available physical RAM: 1339.36 MB
Total physical RAM: 3887.43 MB
Percentage of memory in use: 65%

LastRegBack: 2013-09-01 09:10

==================== End Of Log ==============================

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:

Start
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
C:\Users\LUK~1\AppData\Local\qb0F2B63.1F
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce7ec42e6cc164.job
End

Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Jen dotaz. Máte v PC profily s těmito názvy: C:\Users\ssuwlcbajqry a C:\Users\ybevfytrb? Resp. byly v něm vytvořeny, nebo je tam vytvořil nějaký šmejd?

Vkládám log. Ty účty vytvořil antivir jako fiktivní v rámci AntiTheft ochrany.
Díky

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-09-2013 02
Ran by Lukáš at 2013-09-12 07:56:05 Run:1
Running from C:\Users\Lukáš\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Policies\Explorer: [NoActiveDesktop] 1
HKLM\...\Policies\Explorer: [NoActiveDesktopChanges] 1
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
C:\Users\LUK~1\AppData\Local\qb0F2B63.1F
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce7ec42e6cc164.job
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoActiveDesktop => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoActiveDesktopChanges => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
"C:\Users\LUK~1\AppData\Local\qb0F2B63.1F" => File/Directory not found.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA1ce7ec42e6cc164.job => Moved successfully.

==== End of Fixlog ====

Nastala nějaká změna?

Měla nastat změna? Já mám pocit, že se to zpomaluje, čím dál víc

OK. Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

ComboFix 13-09-12.01 - Lukáš 12.09.2013 18:35:52.2.4 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.3887.1880 [GMT 2:00]
Spuštěný z: c:\users\Lukáš\Downloads\ComboFix.exe
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Preferences
.
---- Předchozí spuštění -------
.
c:\users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\windows\security\Database\tmp.edb
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-12 do 2013-09-12 )))))))))))))))))))))))))))))))
.
.
2013-09-12 16:42 . 2013-09-12 16:42 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-12 16:37 . 2013-09-12 16:37 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F2E76F5-1CEB-4106-B1CF-F95DFD36FA2D}\offreg.dll
2013-09-11 13:11 . 2013-09-11 13:11 -------- d-----w- C:\FRST
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Apple Computer
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\users\Lukáš\AppData\Roaming\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\program files (x86)\IObit
2013-09-10 15:29 . 2013-08-06 08:58 9515512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F2E76F5-1CEB-4106-B1CF-F95DFD36FA2D}\mpengine.dll
2013-09-10 07:34 . 2013-09-10 08:22 -------- d-----w- c:\program files (x86)\RegCleaner
2013-09-09 08:15 . 2013-09-10 05:31 -------- d-----w- c:\programdata\BlazeVideo
2013-09-09 08:12 . 2013-09-09 08:12 -------- d-----w- c:\program files (x86)\BlazeVideo
2013-09-03 19:01 . 2013-09-03 19:01 -------- d-----w- c:\users\Lukáš\AppData\Local\SSScan
2013-09-03 18:48 . 2013-09-03 18:57 -------- d-----w- c:\program files (x86)\Common Files\Scan Process Machine
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files\Common Files\Common Desktop Agent
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files (x86)\Common Files\Common Desktop Agent
2013-09-03 18:44 . 2013-09-03 18:44 -------- d-----w- c:\program files (x86)\SamsungPrinterLiveUpdate
2013-08-28 16:51 . 2013-09-10 08:22 -------- d-----w- c:\users\ssuwlcbajqry
2013-08-28 16:44 . 2013-08-28 16:44 -------- d-sh--w- c:\programdata\DSS
2013-08-28 16:13 . 2013-08-28 16:13 -------- d-----w- c:\windows\system32\appmgmt
2013-08-28 12:38 . 2013-09-10 08:22 -------- d-----w- c:\users\ybevfytrb
2013-08-26 18:53 . 2013-09-03 18:56 -------- d-----w- c:\users\Lukáš\AppData\Local\CrashDumps
2013-08-26 18:48 . 2009-09-04 15:44 517960 ----a-w- c:\windows\system32\XAudio2_5.dll
2013-08-26 18:28 . 2013-09-11 12:30 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Electronic Arts
2013-08-16 13:05 . 2013-09-03 18:57 -------- d-----w- c:\programdata\boost_interprocess
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-11 12:48 . 2013-06-23 14:07 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-07-27 17:53 . 2013-07-27 17:53 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-27 17:53 . 2013-07-27 17:53 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-27 17:53 . 2013-07-27 17:53 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-12 07:09 . 2013-06-24 09:49 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-12 07:09 . 2013-06-24 09:49 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-12 06:02 . 2013-07-12 06:03 515584 ----a-w- c:\windows\system32\drivers\stwrt64.sys
2013-07-12 06:02 . 2013-06-23 11:19 489472 ----a-w- c:\windows\sttray64.exe
2013-07-12 06:02 . 2013-06-23 11:19 1952256 ----a-w- c:\windows\system32\stlang64.dll
2013-07-12 06:02 . 2013-07-12 06:03 651264 ------w- c:\windows\system32\stapi64.dll
2013-07-12 06:02 . 2013-07-12 06:03 431616 ----a-w- c:\windows\system32\stcplx64.dll
2013-07-12 06:02 . 2013-07-12 06:03 1484288 ----a-w- c:\windows\system32\stapo64.dll
2013-07-12 06:02 . 2013-06-23 11:18 219648 ----a-w- c:\windows\system32\staco64.dll
2013-07-12 06:02 . 2013-06-23 11:19 12861952 ----a-w- c:\windows\system32\idtcpl64.cpl
2013-07-12 06:02 . 2013-06-23 11:19 90624 ----a-w- c:\windows\system32\AESTCo64.dll
2013-07-12 06:02 . 2013-06-23 11:19 442368 ----a-w- c:\windows\system32\AESTEC64.dll
2013-07-12 06:02 . 2013-06-23 11:19 68608 ----a-w- c:\windows\system32\AESTAR64.dll
2013-07-12 06:02 . 2013-06-23 11:19 162816 ----a-w- c:\windows\system32\AESTAC64.dll
2013-07-12 05:58 . 2013-06-23 11:27 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2013-07-12 05:58 . 2013-06-23 11:27 95544 ----a-w- c:\windows\system32\bcmwlcoi.dll
2013-07-12 05:58 . 2013-06-23 11:27 3063360 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2013-07-12 05:58 . 2013-06-23 11:27 3891200 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2013-07-12 05:58 . 2013-06-23 11:27 3555840 ----a-w- c:\windows\system32\bcmihvui64.dll
2013-06-23 14:24 . 2013-06-23 14:24 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\jsproxy.dll
2013-06-23 14:24 . 2013-06-23 14:24 816640 ----a-w- c:\windows\system32\jscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-06-23 14:24 . 2013-06-23 14:24 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 2312704 ----a-w- c:\windows\system32\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 222208 ----a-w- c:\windows\system32\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 2147840 ----a-w- c:\windows\system32\iertutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 197120 ----a-w- c:\windows\system32\msrating.dll
2013-06-23 14:24 . 2013-06-23 14:24 17824768 ----a-w- c:\windows\system32\mshtml.dll
2013-06-23 14:24 . 2013-06-23 14:24 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-06-23 14:24 . 2013-06-23 14:24 149504 ----a-w- c:\windows\system32\occache.dll
2013-06-23 14:24 . 2013-06-23 14:24 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-06-23 14:24 . 2013-06-23 14:24 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 1346560 ----a-w- c:\windows\system32\urlmon.dll
2013-06-23 14:24 . 2013-06-23 14:24 12288 ----a-w- c:\windows\system32\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 114176 ----a-w- c:\windows\system32\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 82432 ----a-w- c:\windows\system32\icardie.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-06-23 14:24 . 2013-06-23 14:24 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-06-23 14:24 . 2013-06-23 14:24 448512 ----a-w- c:\windows\system32\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-06-23 14:24 . 2013-06-23 14:24 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-06-23 14:24 . 2013-06-23 14:24 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-06-23 14:24 . 2013-06-23 14:24 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-06-23 14:24 . 2013-06-23 14:24 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-06-23 14:24 . 2013-06-23 14:24 248320 ----a-w- c:\windows\system32\ieui.dll
2013-06-23 14:24 . 2013-06-23 14:24 237056 ----a-w- c:\windows\system32\url.dll
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-06-23 14:24 . 2013-06-23 14:24 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-06-23 14:24 . 2013-06-23 14:24 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-06-23 14:24 . 2013-06-23 14:24 96768 ----a-w- c:\windows\system32\mshtmled.dll
2013-06-23 14:24 . 2013-06-23 14:24 729088 ----a-w- c:\windows\system32\msfeeds.dll
2013-06-23 14:24 . 2013-06-23 14:24 599040 ----a-w- c:\windows\system32\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 103936 ----a-w- c:\windows\system32\inseng.dll
2013-06-23 13:02 . 2013-06-23 13:03 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2013-06-23 13:02 . 2013-06-23 13:03 73728 ----a-w- c:\windows\system32\wltrynt.dll
2013-06-23 13:02 . 2013-06-23 13:03 60928 ----a-w- c:\windows\system32\bcmwlrmt.dll
2013-06-23 13:02 . 2013-06-23 13:03 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2013-06-23 13:02 . 2013-06-23 13:03 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2013-06-23 13:02 . 2013-06-23 13:03 1022464 ----a-w- c:\windows\system32\BCMLogon.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2010-03-01 256056]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2013-08-16 1549120]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656]
Status Monitor.lnk - c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe Brother DCP-8085DN /STARTUP [2013-7-4 1159168]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
S2 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 hpHotkeyMonitor;HP Hotkey Monitor;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\risdpe64.sys [x]
S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\rixdpe64.sys [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
S3 WSDScan;Podpora skenování WSD přes UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - URLFILTER
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-04 18:58 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.66\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-24 07:09]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-23 12:01]
.
2013-09-10 c:\windows\Tasks\HPCeeScheduleForLukáš.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2010-01-08 186904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-26 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-26 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-26 413208]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" [2010-04-05 1691192]
"HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-04-05 8192]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11\WLTRAY.exe" [2013-06-23 5394944]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-07-12 489472]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\
FF - prefs.js: browser.search.selectedEngine - SluneÄŤnice
FF - prefs.js: browser.startup.homepage - hxxp://www.idnes.cz/
FF - ExtSQL: 2013-09-10 19:33; ascsurfingprotection@iobit.com; c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\extensions\ascsurfingprotection@iobit.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-09-12 18:58:28
ComboFix-quarantined-files.txt 2013-09-12 16:58
.
Před spuštěním: Volných bajtů: 40 754 286 592
Po spuštění: Volných bajtů: 40 758 796 288
.
- - End Of File - - 6ECD3F48138CCEAE4CBAAE6F5B991BAE
A36C5E4F47E84449FF07ED3517B43A31

Ještě dočistíme. Přesuňte ComboFix na plochu. Otevřte poznámkový blok a zkopírujte do něj:

KillAll::

File::
c:\windows\Tasks\GoogleUpdateTaskMachineCore.job

Firefox::
FF - ProfilePath - c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\
FF - ExtSQL: 2013-09-10 19:33; ascsurfingprotection@iobit.com; c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\extensions\ascsurfingprotection@iobit.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0

RegLock::
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

Reboot::

Uložte na plochu jako CFScript.txt. Pak jej myší přetáhněte nad ikonu ComboFix a pusťte. CF se spustí a vykoná příkazy ze skriptu.

ComboFix 13-09-12.01 - Lukáš 12.09.2013 20:14:33.3.4 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.3887.1090 [GMT 2:00]
Spuštěný z: c:\users\LukßÜ\Downloads\ComboFix.exe
Použité ovládací přepínače :: c:\users\LukßÜ\Desktop\CFScript.txt
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\LUK~1\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll
c:\users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Preferences
c:\users\Lukáš\AppData\Local\Temp\HP Support Framework\HPSF_Config1.dll
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-12 do 2013-09-12 )))))))))))))))))))))))))))))))
.
.
2013-09-12 18:21 . 2013-09-12 18:21 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-12 16:37 . 2013-09-12 16:37 76232 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F2E76F5-1CEB-4106-B1CF-F95DFD36FA2D}\offreg.dll
2013-09-11 13:11 . 2013-09-11 13:11 -------- d-----w- C:\FRST
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Apple Computer
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\users\Lukáš\AppData\Roaming\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\program files (x86)\IObit
2013-09-10 15:29 . 2013-08-06 08:58 9515512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F2E76F5-1CEB-4106-B1CF-F95DFD36FA2D}\mpengine.dll
2013-09-10 07:34 . 2013-09-10 08:22 -------- d-----w- c:\program files (x86)\RegCleaner
2013-09-09 08:15 . 2013-09-10 05:31 -------- d-----w- c:\programdata\BlazeVideo
2013-09-09 08:12 . 2013-09-09 08:12 -------- d-----w- c:\program files (x86)\BlazeVideo
2013-09-03 19:01 . 2013-09-03 19:01 -------- d-----w- c:\users\Lukáš\AppData\Local\SSScan
2013-09-03 18:48 . 2013-09-03 18:57 -------- d-----w- c:\program files (x86)\Common Files\Scan Process Machine
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files\Common Files\Common Desktop Agent
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files (x86)\Common Files\Common Desktop Agent
2013-09-03 18:44 . 2013-09-03 18:44 -------- d-----w- c:\program files (x86)\SamsungPrinterLiveUpdate
2013-08-28 16:51 . 2013-09-10 08:22 -------- d-----w- c:\users\ssuwlcbajqry
2013-08-28 16:44 . 2013-08-28 16:44 -------- d-sh--w- c:\programdata\DSS
2013-08-28 16:13 . 2013-08-28 16:13 -------- d-----w- c:\windows\system32\appmgmt
2013-08-28 12:38 . 2013-09-10 08:22 -------- d-----w- c:\users\ybevfytrb
2013-08-26 18:53 . 2013-09-03 18:56 -------- d-----w- c:\users\Lukáš\AppData\Local\CrashDumps
2013-08-26 18:48 . 2009-09-04 15:44 517960 ----a-w- c:\windows\system32\XAudio2_5.dll
2013-08-26 18:28 . 2013-09-11 12:30 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Electronic Arts
2013-08-16 13:05 . 2013-09-03 18:57 -------- d-----w- c:\programdata\boost_interprocess
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-11 12:48 . 2013-06-23 14:07 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-07-27 17:53 . 2013-07-27 17:53 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-27 17:53 . 2013-07-27 17:53 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-27 17:53 . 2013-07-27 17:53 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-12 07:09 . 2013-06-24 09:49 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-12 07:09 . 2013-06-24 09:49 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-12 06:02 . 2013-07-12 06:03 515584 ----a-w- c:\windows\system32\drivers\stwrt64.sys
2013-07-12 06:02 . 2013-06-23 11:19 489472 ----a-w- c:\windows\sttray64.exe
2013-07-12 06:02 . 2013-06-23 11:19 1952256 ----a-w- c:\windows\system32\stlang64.dll
2013-07-12 06:02 . 2013-07-12 06:03 651264 ------w- c:\windows\system32\stapi64.dll
2013-07-12 06:02 . 2013-07-12 06:03 431616 ----a-w- c:\windows\system32\stcplx64.dll
2013-07-12 06:02 . 2013-07-12 06:03 1484288 ----a-w- c:\windows\system32\stapo64.dll
2013-07-12 06:02 . 2013-06-23 11:18 219648 ----a-w- c:\windows\system32\staco64.dll
2013-07-12 06:02 . 2013-06-23 11:19 12861952 ----a-w- c:\windows\system32\idtcpl64.cpl
2013-07-12 06:02 . 2013-06-23 11:19 90624 ----a-w- c:\windows\system32\AESTCo64.dll
2013-07-12 06:02 . 2013-06-23 11:19 442368 ----a-w- c:\windows\system32\AESTEC64.dll
2013-07-12 06:02 . 2013-06-23 11:19 68608 ----a-w- c:\windows\system32\AESTAR64.dll
2013-07-12 06:02 . 2013-06-23 11:19 162816 ----a-w- c:\windows\system32\AESTAC64.dll
2013-07-12 05:58 . 2013-06-23 11:27 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2013-07-12 05:58 . 2013-06-23 11:27 95544 ----a-w- c:\windows\system32\bcmwlcoi.dll
2013-07-12 05:58 . 2013-06-23 11:27 3063360 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2013-07-12 05:58 . 2013-06-23 11:27 3891200 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2013-07-12 05:58 . 2013-06-23 11:27 3555840 ----a-w- c:\windows\system32\bcmihvui64.dll
2013-06-23 14:24 . 2013-06-23 14:24 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\jsproxy.dll
2013-06-23 14:24 . 2013-06-23 14:24 816640 ----a-w- c:\windows\system32\jscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-06-23 14:24 . 2013-06-23 14:24 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 2312704 ----a-w- c:\windows\system32\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 222208 ----a-w- c:\windows\system32\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 2147840 ----a-w- c:\windows\system32\iertutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 197120 ----a-w- c:\windows\system32\msrating.dll
2013-06-23 14:24 . 2013-06-23 14:24 17824768 ----a-w- c:\windows\system32\mshtml.dll
2013-06-23 14:24 . 2013-06-23 14:24 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-06-23 14:24 . 2013-06-23 14:24 149504 ----a-w- c:\windows\system32\occache.dll
2013-06-23 14:24 . 2013-06-23 14:24 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-06-23 14:24 . 2013-06-23 14:24 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 1346560 ----a-w- c:\windows\system32\urlmon.dll
2013-06-23 14:24 . 2013-06-23 14:24 12288 ----a-w- c:\windows\system32\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 114176 ----a-w- c:\windows\system32\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 82432 ----a-w- c:\windows\system32\icardie.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-06-23 14:24 . 2013-06-23 14:24 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-06-23 14:24 . 2013-06-23 14:24 448512 ----a-w- c:\windows\system32\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-06-23 14:24 . 2013-06-23 14:24 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-06-23 14:24 . 2013-06-23 14:24 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-06-23 14:24 . 2013-06-23 14:24 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-06-23 14:24 . 2013-06-23 14:24 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-06-23 14:24 . 2013-06-23 14:24 248320 ----a-w- c:\windows\system32\ieui.dll
2013-06-23 14:24 . 2013-06-23 14:24 237056 ----a-w- c:\windows\system32\url.dll
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-06-23 14:24 . 2013-06-23 14:24 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-06-23 14:24 . 2013-06-23 14:24 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-06-23 14:24 . 2013-06-23 14:24 96768 ----a-w- c:\windows\system32\mshtmled.dll
2013-06-23 14:24 . 2013-06-23 14:24 729088 ----a-w- c:\windows\system32\msfeeds.dll
2013-06-23 14:24 . 2013-06-23 14:24 599040 ----a-w- c:\windows\system32\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 103936 ----a-w- c:\windows\system32\inseng.dll
2013-06-23 13:02 . 2013-06-23 13:03 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2013-06-23 13:02 . 2013-06-23 13:03 73728 ----a-w- c:\windows\system32\wltrynt.dll
2013-06-23 13:02 . 2013-06-23 13:03 60928 ----a-w- c:\windows\system32\bcmwlrmt.dll
2013-06-23 13:02 . 2013-06-23 13:03 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2013-06-23 13:02 . 2013-06-23 13:03 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2013-06-23 13:02 . 2013-06-23 13:03 1022464 ----a-w- c:\windows\system32\BCMLogon.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2010-03-01 256056]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2013-08-16 1549120]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656]
Status Monitor.lnk - c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe Brother DCP-8085DN /STARTUP [2013-7-4 1159168]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R4 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
S2 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 hpHotkeyMonitor;HP Hotkey Monitor;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\risdpe64.sys [x]
S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\rixdpe64.sys [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
S3 WSDScan;Podpora skenování WSD přes UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
.
.
--- Ostatní služby/ovladače v paměti ---
.
*NewlyCreated* - URLFILTER
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-04 18:58 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.66\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-24 07:09]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-23 12:01]
.
2013-09-10 c:\windows\Tasks\HPCeeScheduleForLukáš.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2010-01-08 186904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-26 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-26 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-26 413208]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" [2010-04-05 1691192]
"HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-04-05 8192]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11\WLTRAY.exe" [2013-06-23 5394944]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-07-12 489472]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\
FF - prefs.js: browser.search.selectedEngine - SluneÄŤnice
FF - prefs.js: browser.startup.homepage - hxxp://www.idnes.cz/
FF - ExtSQL: 2013-09-10 19:33; ascsurfingprotection@iobit.com; c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\extensions\ascsurfingprotection@iobit.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2013-09-12 20:24:35
ComboFix-quarantined-files.txt 2013-09-12 18:24
ComboFix2.txt 2013-09-12 16:58
.
Před spuštěním: Volných bajtů: 40 680 886 272
Po spuštění: Volných bajtů: 40 605 790 208
.
- - End Of File - - 030147C776E1F8D44504F796456747FF
A36C5E4F47E84449FF07ED3517B43A31

Jelikož máte v názvu profilu diakritiku, CF není schopen načíst skript a nesmaže skriptované položky. Uložte obojí (CF i skript) na kořenový adresář c:\ a přetažení proveďte v průzkumníku windows, nebo jiném souborovém manažeru. Omlouvám se za přehlédnutí.

ComboFix 13-09-12.01 - Lukáš 12.09.2013 21:22:20.4.4 - x64
Microsoft Windows 7 Professional 6.1.7600.0.1250.420.1029.18.3887.1443 [GMT 2:00]
Spuštěný z: c:\users\LukßÜ\Downloads\ComboFix.exe
Použité ovládací přepínače :: C:\CFScript.txt
AV: ESET Smart Security 6.0 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
FW: ESET personal firewall *Enabled* {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
SP: ESET Smart Security 6.0 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: IObit Malware Fighter *Disabled/Updated* {A751AC20-3B48-5237-898A-78C4436BB78D}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Rezidentní štít AV je zapnutý
.
.
FILE ::
"c:\windows\Tasks\GoogleUpdateTaskMachineCore.job"
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\Lukáš\AppData\Local\Google\Chrome\User Data\Default\Preferences
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2013-08-12 do 2013-09-12 )))))))))))))))))))))))))))))))
.
.
2013-09-12 19:28 . 2013-09-12 19:28 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-09-11 13:11 . 2013-09-11 13:11 -------- d-----w- C:\FRST
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\{CED89F1A-945F-46EC-B23C-5EAF6D2DB12A}
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Apple Computer
2013-09-10 15:33 . 2013-09-10 15:33 -------- d-----w- c:\programdata\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\users\Lukáš\AppData\Roaming\IObit
2013-09-10 15:33 . 2013-09-10 15:54 -------- d-----w- c:\program files (x86)\IObit
2013-09-10 15:29 . 2013-08-06 08:58 9515512 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{2F2E76F5-1CEB-4106-B1CF-F95DFD36FA2D}\mpengine.dll
2013-09-10 07:34 . 2013-09-10 08:22 -------- d-----w- c:\program files (x86)\RegCleaner
2013-09-09 08:15 . 2013-09-10 05:31 -------- d-----w- c:\programdata\BlazeVideo
2013-09-09 08:12 . 2013-09-09 08:12 -------- d-----w- c:\program files (x86)\BlazeVideo
2013-09-03 19:01 . 2013-09-03 19:01 -------- d-----w- c:\users\Lukáš\AppData\Local\SSScan
2013-09-03 18:48 . 2013-09-03 18:57 -------- d-----w- c:\program files (x86)\Common Files\Scan Process Machine
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files\Common Files\Common Desktop Agent
2013-09-03 18:47 . 2013-09-03 18:47 -------- d-----w- c:\program files (x86)\Common Files\Common Desktop Agent
2013-09-03 18:44 . 2013-09-03 18:44 -------- d-----w- c:\program files (x86)\SamsungPrinterLiveUpdate
2013-08-28 16:51 . 2013-09-10 08:22 -------- d-----w- c:\users\ssuwlcbajqry
2013-08-28 16:44 . 2013-08-28 16:44 -------- d-sh--w- c:\programdata\DSS
2013-08-28 16:13 . 2013-08-28 16:13 -------- d-----w- c:\windows\system32\appmgmt
2013-08-28 12:38 . 2013-09-10 08:22 -------- d-----w- c:\users\ybevfytrb
2013-08-26 18:53 . 2013-09-03 18:56 -------- d-----w- c:\users\Lukáš\AppData\Local\CrashDumps
2013-08-26 18:48 . 2009-09-04 15:44 517960 ----a-w- c:\windows\system32\XAudio2_5.dll
2013-08-26 18:28 . 2013-09-11 12:30 -------- d-----w- c:\users\Lukáš\AppData\Roaming\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Origin
2013-08-26 18:27 . 2013-09-11 12:30 -------- d-----w- c:\programdata\Electronic Arts
2013-08-16 13:05 . 2013-09-03 18:57 -------- d-----w- c:\programdata\boost_interprocess
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-09-11 12:48 . 2013-06-23 14:07 79143768 ----a-w- c:\windows\system32\MRT.exe
2013-07-27 17:53 . 2013-07-27 17:53 96168 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2013-07-27 17:53 . 2013-07-27 17:53 867240 ----a-w- c:\windows\SysWow64\npDeployJava1.dll
2013-07-27 17:53 . 2013-07-27 17:53 789416 ----a-w- c:\windows\SysWow64\deployJava1.dll
2013-07-12 07:09 . 2013-06-24 09:49 71048 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2013-07-12 07:09 . 2013-06-24 09:49 692104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2013-07-12 06:02 . 2013-07-12 06:03 515584 ----a-w- c:\windows\system32\drivers\stwrt64.sys
2013-07-12 06:02 . 2013-06-23 11:19 489472 ----a-w- c:\windows\sttray64.exe
2013-07-12 06:02 . 2013-06-23 11:19 1952256 ----a-w- c:\windows\system32\stlang64.dll
2013-07-12 06:02 . 2013-07-12 06:03 651264 ------w- c:\windows\system32\stapi64.dll
2013-07-12 06:02 . 2013-07-12 06:03 431616 ----a-w- c:\windows\system32\stcplx64.dll
2013-07-12 06:02 . 2013-07-12 06:03 1484288 ----a-w- c:\windows\system32\stapo64.dll
2013-07-12 06:02 . 2013-06-23 11:18 219648 ----a-w- c:\windows\system32\staco64.dll
2013-07-12 06:02 . 2013-06-23 11:19 12861952 ----a-w- c:\windows\system32\idtcpl64.cpl
2013-07-12 06:02 . 2013-06-23 11:19 90624 ----a-w- c:\windows\system32\AESTCo64.dll
2013-07-12 06:02 . 2013-06-23 11:19 442368 ----a-w- c:\windows\system32\AESTEC64.dll
2013-07-12 06:02 . 2013-06-23 11:19 68608 ----a-w- c:\windows\system32\AESTAR64.dll
2013-07-12 06:02 . 2013-06-23 11:19 162816 ----a-w- c:\windows\system32\AESTAC64.dll
2013-07-12 05:58 . 2013-06-23 11:27 6656 ----a-w- c:\windows\system32\bcmwlrc.dll
2013-07-12 05:58 . 2013-06-23 11:27 95544 ----a-w- c:\windows\system32\bcmwlcoi.dll
2013-07-12 05:58 . 2013-06-23 11:27 3063360 ----a-w- c:\windows\system32\drivers\BCMWL664.SYS
2013-07-12 05:58 . 2013-06-23 11:27 3891200 ----a-w- c:\windows\system32\bcmihvsrv64.dll
2013-07-12 05:58 . 2013-06-23 11:27 3555840 ----a-w- c:\windows\system32\bcmihvui64.dll
2013-06-23 14:24 . 2013-06-23 14:24 86528 ----a-w- c:\windows\SysWow64\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\SysWow64\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 63488 ----a-w- c:\windows\SysWow64\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\SysWow64\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 367104 ----a-w- c:\windows\SysWow64\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 1800704 ----a-w- c:\windows\SysWow64\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 161792 ----a-w- c:\windows\SysWow64\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 1129472 ----a-w- c:\windows\SysWow64\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 110592 ----a-w- c:\windows\SysWow64\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 74752 ----a-w- c:\windows\SysWow64\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 420864 ----a-w- c:\windows\SysWow64\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 35840 ----a-w- c:\windows\SysWow64\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\SysWow64\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 23552 ----a-w- c:\windows\SysWow64\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 152064 ----a-w- c:\windows\SysWow64\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 150528 ----a-w- c:\windows\SysWow64\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 142848 ----a-w- c:\windows\SysWow64\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 1427968 ----a-w- c:\windows\SysWow64\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 11776 ----a-w- c:\windows\SysWow64\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 101888 ----a-w- c:\windows\SysWow64\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\jsproxy.dll
2013-06-23 14:24 . 2013-06-23 14:24 816640 ----a-w- c:\windows\system32\jscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 65024 ----a-w- c:\windows\system32\pngfilt.dll
2013-06-23 14:24 . 2013-06-23 14:24 49664 ----a-w- c:\windows\system32\imgutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 267776 ----a-w- c:\windows\system32\ieaksie.dll
2013-06-23 14:24 . 2013-06-23 14:24 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2013-06-23 14:24 . 2013-06-23 14:24 2312704 ----a-w- c:\windows\system32\jscript9.dll
2013-06-23 14:24 . 2013-06-23 14:24 222208 ----a-w- c:\windows\system32\msls31.dll
2013-06-23 14:24 . 2013-06-23 14:24 2147840 ----a-w- c:\windows\system32\iertutil.dll
2013-06-23 14:24 . 2013-06-23 14:24 197120 ----a-w- c:\windows\system32\msrating.dll
2013-06-23 14:24 . 2013-06-23 14:24 17824768 ----a-w- c:\windows\system32\mshtml.dll
2013-06-23 14:24 . 2013-06-23 14:24 173056 ----a-w- c:\windows\system32\ieUnatt.exe
2013-06-23 14:24 . 2013-06-23 14:24 163840 ----a-w- c:\windows\system32\ieakui.dll
2013-06-23 14:24 . 2013-06-23 14:24 149504 ----a-w- c:\windows\system32\occache.dll
2013-06-23 14:24 . 2013-06-23 14:24 145920 ----a-w- c:\windows\system32\iepeers.dll
2013-06-23 14:24 . 2013-06-23 14:24 1392128 ----a-w- c:\windows\system32\wininet.dll
2013-06-23 14:24 . 2013-06-23 14:24 1346560 ----a-w- c:\windows\system32\urlmon.dll
2013-06-23 14:24 . 2013-06-23 14:24 12288 ----a-w- c:\windows\system32\mshta.exe
2013-06-23 14:24 . 2013-06-23 14:24 114176 ----a-w- c:\windows\system32\admparse.dll
2013-06-23 14:24 . 2013-06-23 14:24 91648 ----a-w- c:\windows\system32\SetIEInstalledDate.exe
2013-06-23 14:24 . 2013-06-23 14:24 89088 ----a-w- c:\windows\system32\ie4uinit.exe
2013-06-23 14:24 . 2013-06-23 14:24 85504 ----a-w- c:\windows\system32\iesetup.dll
2013-06-23 14:24 . 2013-06-23 14:24 82432 ----a-w- c:\windows\system32\icardie.dll
2013-06-23 14:24 . 2013-06-23 14:24 76800 ----a-w- c:\windows\system32\tdc.ocx
2013-06-23 14:24 . 2013-06-23 14:24 55296 ----a-w- c:\windows\system32\msfeedsbs.dll
2013-06-23 14:24 . 2013-06-23 14:24 534528 ----a-w- c:\windows\system32\ieapfltr.dll
2013-06-23 14:24 . 2013-06-23 14:24 48640 ----a-w- c:\windows\system32\mshtmler.dll
2013-06-23 14:24 . 2013-06-23 14:24 452608 ----a-w- c:\windows\system32\dxtmsft.dll
2013-06-23 14:24 . 2013-06-23 14:24 448512 ----a-w- c:\windows\system32\html.iec
2013-06-23 14:24 . 2013-06-23 14:24 403248 ----a-w- c:\windows\system32\iedkcs32.dll
2013-06-23 14:24 . 2013-06-23 14:24 39936 ----a-w- c:\windows\system32\iernonce.dll
2013-06-23 14:24 . 2013-06-23 14:24 3695416 ----a-w- c:\windows\system32\ieapfltr.dat
2013-06-23 14:24 . 2013-06-23 14:24 282112 ----a-w- c:\windows\system32\dxtrans.dll
2013-06-23 14:24 . 2013-06-23 14:24 249344 ----a-w- c:\windows\system32\webcheck.dll
2013-06-23 14:24 . 2013-06-23 14:24 248320 ----a-w- c:\windows\system32\ieui.dll
2013-06-23 14:24 . 2013-06-23 14:24 237056 ----a-w- c:\windows\system32\url.dll
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\ieakeng.dll
2013-06-23 14:24 . 2013-06-23 14:24 1494528 ----a-w- c:\windows\system32\inetcpl.cpl
2013-06-23 14:24 . 2013-06-23 14:24 135168 ----a-w- c:\windows\system32\IEAdvpack.dll
2013-06-23 14:24 . 2013-06-23 14:24 111616 ----a-w- c:\windows\system32\iesysprep.dll
2013-06-23 14:24 . 2013-06-23 14:24 10926080 ----a-w- c:\windows\system32\ieframe.dll
2013-06-23 14:24 . 2013-06-23 14:24 10752 ----a-w- c:\windows\system32\msfeedssync.exe
2013-06-23 14:24 . 2013-06-23 14:24 96768 ----a-w- c:\windows\system32\mshtmled.dll
2013-06-23 14:24 . 2013-06-23 14:24 729088 ----a-w- c:\windows\system32\msfeeds.dll
2013-06-23 14:24 . 2013-06-23 14:24 599040 ----a-w- c:\windows\system32\vbscript.dll
2013-06-23 14:24 . 2013-06-23 14:24 30720 ----a-w- c:\windows\system32\licmgr10.dll
2013-06-23 14:24 . 2013-06-23 14:24 165888 ----a-w- c:\windows\system32\iexpress.exe
2013-06-23 14:24 . 2013-06-23 14:24 160256 ----a-w- c:\windows\system32\wextract.exe
2013-06-23 14:24 . 2013-06-23 14:24 103936 ----a-w- c:\windows\system32\inseng.dll
2013-06-23 13:02 . 2013-06-23 13:03 47632 ----a-w- c:\windows\system32\drivers\npf.sys
2013-06-23 13:02 . 2013-06-23 13:03 73728 ----a-w- c:\windows\system32\wltrynt.dll
2013-06-23 13:02 . 2013-06-23 13:03 60928 ----a-w- c:\windows\system32\bcmwlrmt.dll
2013-06-23 13:02 . 2013-06-23 13:03 457 ----a-w- c:\windows\system32\vcredist_x64.bat
2013-06-23 13:02 . 2013-06-23 13:03 3161088 ----a-w- c:\windows\system32\vcredist_x64.exe
2013-06-23 13:02 . 2013-06-23 13:03 1022464 ----a-w- c:\windows\system32\BCMLogon.dll
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 130736 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt.19.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-07-14 1475072]
"Advanced SystemCare 6"="c:\program files (x86)\IObit\Advanced SystemCare 6\ASCTray.exe" [2013-04-18 491840]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"QLBController"="c:\program files (x86)\Hewlett-Packard\HP HotKey Support\QLBController.exe" [2010-03-01 256056]
"IObit Malware Fighter"="c:\program files (x86)\IObit\IObit Malware Fighter\IMF.exe" [2013-08-16 1549120]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2009-12-29 1082656]
Status Monitor.lnk - c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe Brother DCP-8085DN /STARTUP [2013-7-4 1159168]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Notification Packages REG_MULTI_SZ DPPassFilter scecli
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice]
@="Service"
.
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R2 vcsFPService;Validity VCS Fingerprint Service;c:\windows\system32\vcsFPService.exe;c:\windows\SYSNATIVE\vcsFPService.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dgderdrv;dgderdrv;c:\windows\system32\drivers\dgderdrv.sys;c:\windows\SYSNATIVE\drivers\dgderdrv.sys [x]
R3 RoxMediaDB10;RoxMediaDB10;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe;c:\program files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
R3 WSDScan;Podpora skenování WSD přes UMB;c:\windows\system32\DRIVERS\WSDScan.sys;c:\windows\SYSNATIVE\DRIVERS\WSDScan.sys [x]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys;c:\windows\SYSNATIVE\DRIVERS\epfwwfp.sys [x]
S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys;c:\windows\SYSNATIVE\Drivers\PxHlpa64.sys [x]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys;c:\windows\SYSNATIVE\DRIVERS\eamonm.sys [x]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys;c:\windows\SYSNATIVE\DRIVERS\ehdrv.sys [x]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys;c:\windows\SYSNATIVE\DRIVERS\EpfwLWF.sys [x]
S2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 6\ASCService.exe [x]
S2 AESTFilters;Andrea ST Filters Service;c:\program files\IDT\WDM\AESTSr64.exe;c:\program files\IDT\WDM\AESTSr64.exe [x]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe;c:\program files\ESET\ESET Smart Security\x86\ekrn.exe [x]
S2 HP Power Assistant Service;HP Power Assistant Service;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe;c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Service.exe [x]
S2 HP ProtectTools Service;HP ProtectTools Service;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe;c:\program files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [x]
S2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [x]
S2 HP Wireless Assistant Service;HP Wireless Assistant Service;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe;c:\program files\Hewlett-Packard\HP Wireless Assistant\HPWA_Service.exe [x]
S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [x]
S2 hpHotkeyMonitor;HP Hotkey Monitor;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe;c:\program files (x86)\Hewlett-Packard\HP HotKey Support\hpHotkeyMonitor.exe [x]
S2 hpsrv;HP Service;c:\windows\system32\Hpservice.exe;c:\windows\SYSNATIVE\Hpservice.exe [x]
S2 IMFservice;IMF Service;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe;c:\program files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [x]
S2 rimspci;rimspci;c:\windows\system32\DRIVERS\rimspe64.sys;c:\windows\SYSNATIVE\DRIVERS\rimspe64.sys [x]
S2 risdpcie;risdpcie;c:\windows\system32\DRIVERS\risdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\risdpe64.sys [x]
S2 rixdpcie;rixdpcie;c:\windows\system32\DRIVERS\rixdpe64.sys;c:\windows\SYSNATIVE\DRIVERS\rixdpe64.sys [x]
S2 SSPORT;SSPORT;c:\windows\system32\Drivers\SSPORT.sys;c:\windows\SYSNATIVE\Drivers\SSPORT.sys [x]
S2 UNS;Intel(R) Management & Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 btwl2cap;Bluetooth L2CAP Service;c:\windows\system32\DRIVERS\btwl2cap.sys;c:\windows\SYSNATIVE\DRIVERS\btwl2cap.sys [x]
S3 e1kexpress;Intel(R) PRO/1000 PCI Express Network Connection Driver K;c:\windows\system32\DRIVERS\e1k62x64.sys;c:\windows\SYSNATIVE\DRIVERS\e1k62x64.sys [x]
S3 FileMonitor;FileMonitor;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys;c:\program files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [x]
S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys;c:\windows\SYSNATIVE\DRIVERS\HECIx64.sys [x]
S3 Impcd;Impcd;c:\windows\system32\DRIVERS\Impcd.sys;c:\windows\SYSNATIVE\DRIVERS\Impcd.sys [x]
S3 IntcDAud;Intel(R) Display Audio;c:\windows\system32\DRIVERS\IntcDAud.sys;c:\windows\SYSNATIVE\DRIVERS\IntcDAud.sys [x]
S3 RegFilter;RegFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [x]
S3 UrlFilter;UrlFilter;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys;c:\program files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [x]
.
.
[HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2013-09-04 18:58 1177552 ----a-w- c:\program files (x86)\Google\Chrome\Application\29.0.1547.66\Installer\chrmstp.exe
.
Obsah adresáře 'Naplánované úlohy'
.
2013-09-12 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-06-24 07:09]
.
2013-09-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files (x86)\Google\Update\GoogleUpdate.exe [2013-06-23 12:01]
.
2013-09-10 c:\windows\Tasks\HPCeeScheduleForLukáš.job
- c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-13 20:15]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt1]
@="{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt2]
@="{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt3]
@="{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\DropboxExt4]
@="{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}"
[HKEY_CLASSES_ROOT\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}]
2013-06-13 23:00 164016 ----a-w- c:\users\Lukáš\AppData\Roaming\Dropbox\bin\DropboxExt64.19.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IAAnotif"="c:\program files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2010-01-08 186904]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-04-26 161304]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-04-26 386584]
"Persistence"="c:\windows\system32\igfxpers.exe" [2010-04-26 413208]
"SynTPEnh"="c:\program files (x86)\Synaptics\SynTP\SynTPEnh.exe" [BU]
"HPPowerAssistant"="c:\program files\Hewlett-Packard\HP Power Assistant\HPPA_Main.exe" [2010-04-05 1691192]
"HPWirelessAssistant"="c:\program files\Hewlett-Packard\HP Wireless Assistant\DelayedAppStarter.exe" [2010-04-05 8192]
"Broadcom Wireless Manager UI"="c:\program files\Broadcom\Broadcom 802.11\WLTRAY.exe" [2013-06-23 5394944]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-03-21 6330568]
"SysTrayApp"="c:\program files\IDT\WDM\sttray64.exe" [2013-07-12 489472]
"CDAServer"="c:\program files\Common Files\Common Desktop Agent\CDASrv.exe" [2012-02-20 456704]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: Odeslat obrázek do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: Odeslat stránku do zařízení &Bluetooth... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
TCP: DhcpNameServer = 213.46.172.36 213.46.172.37
FF - ProfilePath - c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\
FF - prefs.js: browser.search.selectedEngine - SluneÄŤnice
FF - prefs.js: browser.startup.homepage - hxxp://www.idnes.cz/
FF - ExtSQL: 2013-09-10 19:33; ascsurfingprotection@iobit.com; c:\users\Lukáš\AppData\Roaming\Mozilla\Firefox\Profiles\j2skmwcf.default\extensions\ascsurfingprotection@iobit.com
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
AddRemove-{EE202411-2C26-49E8-9784-1BC1DBF7DE96} - c:\program files (x86)\InstallShield Installation Information\{EE202411-2C26-49E8-9784-1BC1DBF7DE96}\setup.exe
.
.
.
------------------------ Jiné spuštené procesy ------------------------
.
c:\program files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
c:\program files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
c:\program files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
c:\program files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
c:\program files (x86)\Google\Update\1.3.21.153\GoogleCrashHandler.exe
c:\program files (x86)\IObit\Advanced SystemCare 6\Monitor.exe
c:\program files (x86)\Brother\Brmfcmon\BrMfcWnd.exe
c:\program files (x86)\Brother\Brmfcmon\BrMfimon.exe
c:\program files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAS2PC.exe
c:\program files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
c:\program files (x86)\Samsung\Easy Printer Manager\CDAS2PC\CDAHelper.exe
.
**************************************************************************
.
Celkový čas: 2013-09-12 21:38:13 - počítač byl restartován
ComboFix-quarantined-files.txt 2013-09-12 19:38
ComboFix2.txt 2013-09-12 18:24
ComboFix3.txt 2013-09-12 16:58
.
Před spuštěním: Volných bajtů: 40 674 758 656
Po spuštění: Volných bajtů: 40 599 392 256
.
- - End Of File - - 7D6D48EB95DE3617AC3DBEA75EF1EC5C
A36C5E4F47E84449FF07ED3517B43A31

Teď je to OK. Nastala nějaká změna?

Zdravím, bohužel ne.. Se bojím, že to budu muset celý přeinstalovat

CF odinstalujte pomocí T-Cleaneru: http://vyosek.ic.cz/pro_usery/T-Cleaner.exe . Stáhněte, nainstalujte a spusťte CrystalDiskInfo: http://www.stahuj.centrum.cz/utility_a_ ... ldiskinfo/ a přes Úpravy>kopírovat sem dejte log.

Zdravím, přikládám log

----------------------------------------------------------------------------
CrystalDiskInfo 5.6.1 Shizuku Edition (C) 2008-2013 hiyohiyo
Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

OS : Windows 7 Professional [6.1 Build 7600] (x64)
Date : 2013/09/13 17:50:07

-- Controller Map ----------------------------------------------------------
+ Intel(R) PCHM SATA AHCI Controller 6 Port [ATA]
- ST9500420AS
- hp DVDRAM GT30L
- Ricoh PCIe Memory Stick Host Controller [ATA]
- Ricoh PCIe SD/MMC Host Controller [ATA]
- Ricoh PCIe xD-Picture Card Controller [ATA]

-- Disk List ---------------------------------------------------------------
(1) ST9500420AS : 500,1 GB [0/0/0, pd1] - st

----------------------------------------------------------------------------
(1) ST9500420AS
----------------------------------------------------------------------------
Model : ST9500420AS
Firmware : 0006HPM1
Serial Number : 5VJ4VYKC
Disk Size : 500,1 GB (8,4/137,4/500,1/500,1)
Buffer Size : 16384 KB
Queue Depth : 32
# of Sectors : 976773168
Rotation Rate : 7200 RPM
Interface : Serial ATA
Major Version : ATA8-ACS
Minor Version : ATA8-ACS version 4
Transfer Mode : SATA/300
Power On Hours : 5380 hod.
Power On Count : 3049 krát
Temparature : 48 C (118 F)
Health Status : Pozor
Features : S.M.A.R.T., APM, 48bit LBA, NCQ
APM Level : 8080h [ON]
AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 119 _99 __6 00000CC7B011 Počet chyb čtení
03 _97 _97 __0 000000000000 Čas na roztočení ploten
04 _98 _98 __0 000000000BF3 Počet spuštění/zastavení
05 _99 _99 _36 000000000023 Počet přemapovaných sektorů
07 _73 _60 _30 000609AB2410 Počet chybných hledání
09 _94 _94 __0 000000001504 Hodin v činnosti
0A 100 100 _97 000000000000 Počet opakovaných pokusů o roztočení ploten
0C _98 _37 _20 000000000BE9 Počet cyklů zapnutí zařízení
B7 100 253 __0 000000000000 Neznámý
B8 100 100 _97 000000000000 Ukončovacích chyb
BB _99 _99 __0 000000000001 Ohlášeno neopravitelných chyb
BC 100 _99 __0 000100020007 Časový limit příkazu
BD 100 100 __0 000000000000 Vysoká rychlost zápisu
BE _52 _38 _45 001230140030 Teplota toku vzduchu
BF 100 100 __0 0000000000BA Počet udalostí zaznamenaných otřesovým senzorem
C0 100 100 __0 00000000000E Počet vypnutí disku
C1 _89 _89 __0 0000000059F3 Počet cyklů načítání/vymazání
C2 _48 _62 __0 000D00000030 Teplota
C3 _49 _38 __0 00000CC7B011 Počet oprav chybného čtení
C4 _99 _99 _36 000000000023 Počet udalostí s číslem realokování sektorů
C5 100 100 __0 000000000000 Počet podezřelých sektorů
C6 100 100 __0 000000000000 Počet neopravitelných sektorů
C7 200 200 __0 000000000000 Počet chyb v kontrolním součtu UltraDMA
FE 100 100 __0 000000000000 Ochrana proti pádu

-- IDENTIFY_DEVICE ---------------------------------------------------------
0 1 2 3 4 5 6 7 8 9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 3556 4A34 5659 4B43 2020 2020 2020 2020 2020 2020
020: 0000 8000 0004 3030 3036 4850 4D31 5354 3935 3030
030: 3432 3041 5320 2020 2020 2020 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 0000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 0D06 0000 004C 004C
080: 01F8 0029 306B 7C09 6123 3069 BC09 6123 203F 0033
090: 0033 8080 FFFE 0000 0000 0000 0000 0000 0000 0000
100: 6030 3A38 0000 0000 0000 0000 0000 0000 5000 C500
110: 243C 656D 0000 0000 0000 0000 0000 0000 0000 401C
120: 401C 0000 0000 0000 0000 0000 0000 0000 0021 6030
130: 3A38 6030 3A38 2020 0002 0140 0108 5000 3C06 3C0A
140: 0000 0078 0000 0008 0000 0000 001F 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 3E00 8000
160: 0000 0000 0000 0000 0000 0000 0000 0000 0003 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 103F 0000 0000 0000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 1010 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0001 0080 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 8BA5

-- SMART_READ_DATA ---------------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 77 63 11 B0 C7 0C 00 00 00 03 02
010: 00 61 61 00 00 00 00 00 00 00 04 33 00 62 62 F3
020: 0B 00 00 00 00 00 05 33 00 63 63 23 00 00 00 00
030: 00 00 07 0F 00 49 3C 10 24 AB 09 06 00 00 09 32
040: 00 5E 5E 04 15 00 00 00 00 00 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 33 00 62 25 E9 0B 00 00 00
060: 00 00 B7 32 00 64 FD 00 00 00 00 00 00 00 B8 33
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 63 63 01
080: 00 00 00 00 00 00 BC 32 00 64 63 07 00 02 00 01
090: 00 00 BD 3A 00 64 64 00 00 00 00 00 00 00 BE 22
0A0: 00 34 26 30 00 14 30 12 00 00 BF 32 00 64 64 BA
0B0: 00 00 00 00 00 00 C0 32 00 64 64 0E 00 00 00 00
0C0: 00 00 C1 32 00 59 59 F3 59 00 00 00 00 00 C2 22
0D0: 00 30 3E 30 00 00 00 0D 00 00 C3 1A 00 31 26 11
0E0: B0 C7 0C 00 00 00 C4 33 00 63 63 23 00 00 00 00
0F0: 00 00 C5 12 00 64 64 00 00 00 00 00 00 00 C6 10
100: 00 64 64 00 00 00 00 00 00 00 C7 3E 00 C8 C8 00
110: 00 00 00 00 00 00 FE 32 00 64 64 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 53
170: 03 00 01 00 02 6C 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 05 03 03 03 03 03 03 03
190: 03 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 BA 00 00 00 53 D6 9D 65 A0 11 00 00
1B0: 00 00 00 00 01 00 DE 06 23 F2 8C 0E 36 27 02 00
1C0: 0F 5D 4D 56 A5 17 17 00 00 00 00 00 BA 68 BA 00
1D0: 01 00 00 00 00 00 00 00 C3 05 00 00 79 00 02 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3B
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 9A

-- SMART_READ_THRESHOLD ----------------------------------------------------
+0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 00 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B7 00 00 00 00 00 00 00 00 00 00 00 B8 61
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 BC 00 00 00 00 00 00 00 00 00
090: 00 00 BD 00 00 00 00 00 00 00 00 00 00 00 BE 2D
0A0: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
0B0: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
0C0: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0D0: 00 00 00 00 00 00 00 00 00 00 C3 00 00 00 00 00
0E0: 00 00 00 00 00 00 C4 24 00 00 00 00 00 00 00 00
0F0: 00 00 C5 00 00 00 00 00 00 00 00 00 00 00 C6 00
100: 00 00 00 00 00 00 00 00 00 00 C7 00 00 00 00 00
110: 00 00 00 00 00 00 FE 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1A