Prosim o kontrolu

Zpráva

imicro · #1 Příspěvek od **imicro** » 27 říj 2013 23:48

Dobry den, prosim o kontrolu.

Logfile of random's system information tool 1.09 (written by random/random)
Run by Tomas Spusta at 2013-10-27 23:47:03
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 32 GB (11%) free of 288 GB
Total RAM: 3066 MB (27% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:47:11, on 27. 10. 2013
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16720)
Boot mode: Normal

Running processes:
C:\windows\system32\taskhost.exe
C:\windows\system32\Dwm.exe
C:\windows\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Codebox\BitMeter\BitMeter2.exe
C:\Program Files\Stardock\ObjectDock Plus\ObjectDock.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\windows\explorer.exe
C:\windows\system32\taskmgr.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Users\Tomas Spusta\Downloads\Odstranovanie_Virov_RSIT\RSIT.exe
C:\Program Files\trend micro\Tomas Spusta.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.111.4.134:8080
O2 - BHO: (no name) - {089FD14D-132B-48FC-8861-0048AE113215} - (no file)
O2 - BHO: LinkSwift - {323420b6-65e5-4657-8106-a27392d4d4aa} - C:\Program Files\LinkSwift\LinkSwiftbho.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM\..\Run: [SynTPEnh] %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IAAnotif] C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [MSC] "c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS6ServiceManager] "C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKUS\S-1-5-21-2383188450-116661374-740416191-1021\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'postgres')
O4 - HKUS\S-1-5-21-2383188450-116661374-740416191-1021\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN (User 'postgres')
O4 - HKUS\S-1-5-21-2383188450-116661374-740416191-1021\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'postgres')
O4 - Global Startup: Bitmeter2.lnk = C:\Program Files\Codebox\BitMeter\BitMeter2.exe
O4 - Global Startup: ObjectDock Plus 2.lnk = C:\Program Files\Stardock\ObjectDock Plus\ObjectDock.exe
O8 - Extra context menu item: Append to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: E&xportovať do programu Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Odoslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&oslať do programu OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @C:\Program Files\WIDCOMM\Bluetooth Software\btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = kn.vutbr.cz
O17 - HKLM\Software\..\Telephony: DomainName = kn.vutbr.cz
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = kn.vutbr.cz
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = kn.vutbr.cz
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O22 - SharedTaskScheduler: ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB} - (no file)
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\windows\system32\AEADISRV.EXE
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - LSI Corporation - C:\Program Files\LSI SoftModem\agrsmsvc.exe
O23 - Service: AMD External Events Utility - AMD - C:\windows\system32\atiesrxx.exe
O23 - Service: Autodesk Content Service - Unknown owner - C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
O23 - Service: Com4QLBEx - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe
O23 - Service: FLEXnet Licensing Service - Flexera Software, Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\windows\system32\Hpservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\windows\system32\GameMon.des.exe (file missing)
O23 - Service: PostgreSQL Database Server 8.3 (pgsql-8.3) - PostgreSQL Global Development Group - C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe
O23 - Service: Sandboxie Service (SbieSvc) - SANDBOXIE L.T.D - C:\POCITAC\TOMAS\HRY\sandbox\SbieSvc.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files\Common Files\Steam\SteamService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\POCITAC\TOMAS\HRY\Tunngle\TnglCtrl.exe
O23 - Service: Update LinkSwift - LinkSwift - C:\Program Files\LinkSwift\updateLinkSwift.exe
O23 - Service: Util LinkSwift - LinkSwift - C:\Program Files\LinkSwift\bin\utilLinkSwift.exe

--
End of file - 13185 bytes

======Scheduled tasks folder======

C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.8.800.168 Plugin
"Path"=C:\windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3508.0205]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nexon.net/NxGame]
"Description"=Nexon Game Controller
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ngm.nexoneu.com/NxGame]
"Description"=Nexon Game Controller
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@soe.sony.com/installer,version=1.0.3]
"Description"=SOE Web Installer
"Path"=C:\Program Files\Sony Online Entertainment\npsoe.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.0.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@wolfram.com/Mathematica]
"Description"=Wolfram Mathematica Plug-in
"Path"=C:\Program Files\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{323420b6-65e5-4657-8106-a27392d4d4aa}]
LinkSwift - C:\Program Files\LinkSwift\LinkSwiftbho.dll [2013-10-17 249632]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE7CD045-E861-484f-8273-0445EE161910}]
Adobe PDF Conversion Toolbar Helper - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{47833539-D0C5-4125-9FA8-0819E2EAAC93} - Adobe PDF - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll [2007-05-10 321120]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2010-06-04 1791272]
"IAAnotif"=C:\Program Files\Intel\Intel Matrix Storage Manager\iaanotif.exe [2009-08-25 186904]
"StartCCC"=C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [2010-05-27 98304]
"SoundMAXPnP"=C:\Program Files\Analog Devices\Core\smax4pnp.exe [2009-05-18 1314816]
"GrooveMonitor"=C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2013-08-12 995176]
"SwitchBoard"=C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
"AdobeCS6ServiceManager"=C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2013-04-25 1075296]
"AdobeAAMUpdater-1.0"=C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2013-03-21 472992]
"Adobe ARM"=C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-05-11 958576]
"Acrobat Assistant 8.0"=C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Acrotray.exe [2007-05-10 624248]
"SunJavaUpdateSched"=C:\Program Files\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1174016]
"ISUSPM"=C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [2006-09-11 218032]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent]
C:\Program Files\BlueStacks\HD-Agent.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify]
C:\Program Files\Connectify\Connectify.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeAC]
C:\Users\Tomas Spusta\Downloads\FreeAlarmClockPortable\FreeAlarmClockPortable\FreeAlarmClock.exe [2012-12-11 1330008]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI]
C:\Program Files\LogMeIn\x86\LogMeInSystray.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl]
C:\POCITAC\TOMAS\HRY\sandbox\SbieCtrl.exe [2012-08-25 545552]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
C:\POCITAC\TOMAS\HRY\steam\Steam.exe [2013-06-06 1641896]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Bitmeter2.lnk - C:\Program Files\Codebox\BitMeter\BitMeter2.exe
ObjectDock Plus 2.lnk - C:\Program Files\Stardock\ObjectDock Plus\ObjectDock.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
ObjectDockShellExt - {1984D045-52CF-49cd-DB77-08F378FEA4DB}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=221
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe"="C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe:*:Enabled:PotPlayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe"="C:\Program Files\Daum\PotPlayer\PotPlayerMini.exe:*:Enabled:PotPlayer"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"vidc.cvid"=iccvid.dll
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.IV41"=IR41_32.AX
"vidc.mpeg"=bdmpegv.dll
"msacm.bdmpeg"=bdmpega.acm
"VIDC.FPS1"=frapsvid.dll
"vidc.mjpg"=bdmjpeg.dll
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"aux3"=wdmaud.drv
"vidc.tscc"=C:\windows\system32\tsccvid.dll
"vidc.tsc2"=C:\windows\system32\tsc2_codec32.dll
"msacm.siren"=sirenacm.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.scr - open - C:\windows\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2013-10-26 14:37:02 ----SHD---- C:\Config.Msi
2013-10-26 13:33:44 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\picpick
2013-10-26 13:32:55 ----D---- C:\Program Files\LinkSwift
2013-10-26 13:32:01 ----D---- C:\Program Files\PicPick
2013-10-22 14:15:10 ----D---- C:\ProgramData\Oracle
2013-10-22 14:14:58 ----D---- C:\Program Files\Common Files\Java
2013-10-22 14:14:52 ----A---- C:\windows\system32\javaws.exe
2013-10-22 14:14:41 ----A---- C:\windows\system32\WindowsAccessBridge.dll
2013-10-22 14:14:41 ----A---- C:\windows\system32\javaw.exe
2013-10-22 14:14:41 ----A---- C:\windows\system32\java.exe
2013-10-20 12:19:51 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\Publish Providers
2013-10-20 12:08:40 ----D---- C:\ProgramData\Sony
2013-10-20 12:08:38 ----D---- C:\Program Files\Sony
2013-10-20 12:06:52 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\Sony
2013-10-20 09:56:29 ----D---- C:\Program Files\Karen's Power Tools
2013-10-20 09:56:16 ----D---- C:\ProgramData\Karen's Power Tools
2013-10-19 23:13:51 ----D---- C:\windows\cs
2013-10-19 23:13:41 ----D---- C:\windows\sk
2013-10-19 23:13:01 ----D---- C:\Program Files\Microsoft SQL Server Compact Edition
2013-10-19 22:54:40 ----D---- C:\Sound
2013-10-19 22:54:40 ----D---- C:\Material
2013-10-19 21:50:50 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\click through wpf
2013-10-19 21:50:42 ----D---- C:\Program Files\Epic Pen
2013-10-19 21:25:58 ----A---- C:\windows\SETUPX32.EXE
2013-10-19 20:56:34 ----D---- C:\ProgramData\Geevs
2013-10-19 20:55:17 ----D---- C:\Program Files\Lightworks
2013-10-13 12:01:03 ----D---- C:\Program Files\Mozilla Thunderbird
2013-10-10 06:36:44 ----A---- C:\windows\system32\jscript.dll
2013-10-10 06:36:43 ----A---- C:\windows\system32\jscript9.dll
2013-10-10 06:36:42 ----A---- C:\windows\system32\jsproxy.dll
2013-10-10 06:36:41 ----A---- C:\windows\system32\ieui.dll
2013-10-10 06:36:41 ----A---- C:\windows\system32\iesetup.dll
2013-10-10 06:36:39 ----A---- C:\windows\system32\urlmon.dll
2013-10-10 06:36:39 ----A---- C:\windows\system32\RegisterIEPKEYs.exe
2013-10-10 06:36:39 ----A---- C:\windows\system32\msfeeds.dll
2013-10-10 06:36:39 ----A---- C:\windows\system32\iesysprep.dll
2013-10-10 06:36:39 ----A---- C:\windows\system32\iernonce.dll
2013-10-10 06:36:39 ----A---- C:\windows\system32\ie4uinit.exe
2013-10-10 06:36:37 ----A---- C:\windows\system32\iertutil.dll
2013-10-10 06:36:35 ----A---- C:\windows\system32\wininet.dll
2013-10-10 06:36:33 ----A---- C:\windows\system32\ieframe.dll
2013-10-10 06:36:30 ----A---- C:\windows\system32\mshtml.dll
2013-10-09 19:07:21 ----A---- C:\windows\system32\drivers\usbscan.sys
2013-10-09 19:07:21 ----A---- C:\windows\system32\drivers\hidclass.sys
2013-10-09 19:07:20 ----A---- C:\windows\system32\drivers\hidparse.sys
2013-10-09 19:07:19 ----A---- C:\windows\system32\comctl32.dll
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbuhci.sys
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbport.sys
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbhub.sys
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbehci.sys
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbd.sys
2013-10-09 19:07:18 ----A---- C:\windows\system32\drivers\usbccgp.sys
2013-10-09 19:07:17 ----A---- C:\windows\system32\drivers\usbohci.sys
2013-10-09 19:07:16 ----A---- C:\windows\system32\mswsock.dll
2013-10-09 19:07:16 ----A---- C:\windows\system32\drivers\tcpip.sys
2013-10-09 19:07:15 ----A---- C:\windows\system32\drivers\afd.sys
2013-10-09 19:07:13 ----A---- C:\windows\system32\drivers\dxgkrnl.sys
2013-10-09 19:07:11 ----A---- C:\windows\system32\ntoskrnl.exe
2013-10-09 19:07:11 ----A---- C:\windows\system32\ntkrnlpa.exe
2013-10-09 19:07:10 ----A---- C:\windows\system32\tdh.dll
2013-10-09 19:07:10 ----A---- C:\windows\system32\ntdll.dll
2013-10-09 19:07:09 ----A---- C:\windows\system32\advapi32.dll
2013-10-09 19:07:08 ----A---- C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:07:07 ----A---- C:\windows\system32\lpk.dll
2013-10-09 19:07:07 ----A---- C:\windows\system32\fontsub.dll
2013-10-09 19:07:07 ----A---- C:\windows\system32\dciman32.dll
2013-10-09 19:07:07 ----A---- C:\windows\system32\atmlib.dll
2013-10-09 19:07:07 ----A---- C:\windows\system32\atmfd.dll
2013-10-09 19:07:06 ----A---- C:\windows\system32\scavengeui.dll
2013-10-09 19:05:37 ----A---- C:\windows\system32\WebClnt.dll
2013-10-09 19:05:36 ----A---- C:\windows\system32\drivers\mrxdav.sys
2013-10-09 19:05:36 ----A---- C:\windows\system32\davclnt.dll
2013-10-09 19:05:35 ----A---- C:\windows\system32\win32k.sys
2013-10-09 19:05:16 ----A---- C:\windows\system32\drivers\usbvideo.sys
2013-10-09 19:05:16 ----A---- C:\windows\system32\drivers\usbcir.sys
2013-10-09 19:05:16 ----A---- C:\windows\system32\drivers\USBAUDIO.sys
2013-10-09 19:05:11 ----A---- C:\windows\system32\drivers\Wdf01000.sys
2013-10-08 21:11:45 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\EurekaLog
2013-10-05 10:57:43 ----D---- C:\Program Files\Mozilla Firefox

======List of files/folders modified in the last 1 month======

2013-10-27 23:47:05 ----D---- C:\Program Files\trend micro
2013-10-27 23:46:52 ----D---- C:\ProgramData\Bitmeter2
2013-10-27 23:42:56 ----D---- C:\windows\temp
2013-10-27 23:29:36 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\Skype
2013-10-27 14:17:16 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\uTorrent
2013-10-27 14:03:47 ----A---- C:\speederr.txt
2013-10-27 11:47:44 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\HoldemManager
2013-10-27 11:39:55 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\Copy
2013-10-27 07:37:40 ----D---- C:\windows\system32\config
2013-10-27 07:25:36 ----SHD---- C:\System Volume Information
2013-10-27 07:19:30 ----D---- C:\windows\System32
2013-10-27 07:19:30 ----A---- C:\windows\system32\PerfStringBackup.INI
2013-10-27 07:19:29 ----D---- C:\windows\inf
2013-10-26 14:38:37 ----RD---- C:\Program Files
2013-10-26 14:38:28 ----SHD---- C:\windows\Installer
2013-10-26 14:37:25 ----D---- C:\Program Files\Google
2013-10-26 10:32:33 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\ApexDC++
2013-10-25 23:11:01 ----A---- C:\blitzerr.txt
2013-10-25 21:24:17 ----D---- C:\Poker
2013-10-25 18:55:05 ----D---- C:\POCITAC
2013-10-25 11:06:19 ----D---- C:\windows\system32\catroot2
2013-10-22 22:02:09 ----D---- C:\ProgramData\VirtualWifiRouter
2013-10-22 14:15:10 ----D---- C:\ProgramData
2013-10-22 14:14:58 ----D---- C:\Program Files\Common Files
2013-10-22 14:14:40 ----D---- C:\Program Files\Java
2013-10-21 22:08:15 ----D---- C:\windows\system32\drivers
2013-10-21 22:01:21 ----D---- C:\Users\Tomas Spusta\AppData\Roaming\Dropbox
2013-10-21 06:59:56 ----D---- C:\Program Files\Common Files\Adobe
2013-10-20 21:25:57 ----D---- C:\Program Files\Adobe
2013-10-20 09:11:21 ----D---- C:\Windows
2013-10-20 09:11:21 ----A---- C:\windows\Sandboxie.ini
2013-10-19 23:13:55 ----RSD---- C:\windows\assembly
2013-10-19 23:12:40 ----D---- C:\Program Files\Windows Live
2013-10-19 23:11:28 ----SD---- C:\ProgramData\Microsoft
2013-10-19 23:10:54 ----D---- C:\Program Files\Common Files\microsoft shared
2013-10-19 21:26:25 ----D---- C:\windows\system32\Tasks
2013-10-19 21:00:35 ----D---- C:\ProgramData\LogMeIn
2013-10-19 21:00:34 ----D---- C:\Program Files\LogMeIn
2013-10-17 16:51:36 ----D---- C:\ProgramData\Tunngle
2013-10-16 19:03:41 ----D---- C:\ProgramData\Skype
2013-10-16 19:03:35 ----RD---- C:\Program Files\Skype
2013-10-16 06:14:33 ----D---- C:\windows\system32\catroot
2013-10-16 06:14:32 ----D---- C:\Program Files\Microsoft Security Client
2013-10-14 06:33:56 ----D---- C:\Program Files\Mozilla Maintenance Service
2013-10-12 10:09:40 ----D---- C:\windows\rescache
2013-10-11 17:07:21 ----D---- C:\windows\Microsoft.NET
2013-10-10 12:19:46 ----D---- C:\windows\winsxs
2013-10-10 12:17:31 ----D---- C:\Program Files\Microsoft Silverlight
2013-10-10 06:46:41 ----D---- C:\windows\system32\en-US
2013-10-10 06:46:41 ----D---- C:\Program Files\Internet Explorer
2013-10-10 06:46:40 ----D---- C:\windows\system32\DriverStore
2013-10-10 06:44:35 ----D---- C:\ProgramData\Microsoft Help
2013-10-10 06:39:27 ----D---- C:\windows\system32\MRT
2013-10-10 06:39:25 ----A---- C:\windows\system32\MRT.exe
2013-10-06 16:47:57 ----SHD---- C:\windows\system32\AI_RecycleBin

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aic78xx;aic78xx; C:\windows\system32\DRIVERS\djsvs.sys [2009-07-14 70720]
R0 hpdskflt;HP Filter; C:\windows\system32\DRIVERS\hpdskflt.sys [2011-05-13 25656]
R0 iaStor;Intel RAID Controller; C:\windows\system32\DRIVERS\iaStor.sys [2009-08-07 330264]
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys [2013-06-18 211560]
R0 pciide;pciide; C:\windows\system32\drivers\pciide.sys [2009-07-14 12368]
R0 PxHelp20;PxHelp20; C:\windows\System32\Drivers\PxHelp20.sys [2009-07-09 45200]
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys [2010-11-20 173440]
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys [2010-09-22 691696]
R1 mfehidk;McAfee Inc. mfehidk; C:\windows\system32\drivers\mfehidk.sys [2009-05-16 214024]
R1 mfetdik;McAfee Inc. mfetdik; C:\windows\system32\drivers\mfetdik.sys [2009-05-16 55336]
R1 MpKsl58c3a4c9;MpKsl58c3a4c9; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{2AF027FE-9E98-4B49-9A0C-5CE179CAE8C5}\MpKsl58c3a4c9.sys [2013-10-27 40392]
R1 ndisrd;WinpkFilter LightWeight Filter; C:\windows\system32\DRIVERS\ndisrd.sys [2011-02-22 26208]
R1 truecrypt;truecrypt; C:\windows\System32\drivers\truecrypt.sys [2012-11-23 231760]
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys [2009-07-14 48128]
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys [2011-11-13 281760]
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys [2011-11-13 25888]
R2 LMIRfsDriver;LogMeIn Remote File System Driver; \??\C:\windows\system32\drivers\LMIRfsDriver.sys [2013-04-30 47640]
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys [2013-06-18 107392]
R3 5U876UVC;HP Webcam [2 MP series]; C:\windows\system32\DRIVERS\5U876.sys [2009-06-30 118656]
R3 Accelerometer;HP Mobile Data Protection Sensor; C:\windows\system32\DRIVERS\Accelerometer.sys [2011-05-13 35896]
R3 ADIHdAudAddService;ADI UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\ADIHdAud.sys [2009-05-18 381440]
R3 AgereSoftModem;Agere Systems Soft Modem; C:\windows\system32\DRIVERS\AGRSM.sys [2010-01-26 1163328]
R3 amdkmdag;amdkmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
R3 amdkmdap;amdkmdap; C:\windows\system32\DRIVERS\atikmpag.sys [2010-05-27 209920]
R3 AtiHdmiService;ATI Service for HD Audio Codec; C:\windows\system32\drivers\AtiHdmi.sys [2009-07-24 103440]
R3 BCM43XX;Broadcom 802.11 - ovládač sieťového adaptéru; C:\windows\system32\DRIVERS\bcmwl6.sys [2010-06-09 2506232]
R3 BthEnum;Bluetooth Request Block Driver; C:\windows\system32\drivers\BthEnum.sys [2009-07-14 34816]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\windows\system32\DRIVERS\bthpan.sys [2009-07-14 93696]
R3 BTHUSB;Bluetooth Radio USB Driver; C:\windows\System32\Drivers\BTHUSB.sys [2011-04-28 60416]
R3 btwaudio;Bluetooth Audio Device Service; C:\windows\system32\drivers\btwaudio.sys [2009-07-01 86056]
R3 btwavdt;Bluetooth AVDT Service; C:\windows\system32\DRIVERS\btwavdt.sys [2009-07-01 108072]
R3 btwl2cap;Bluetooth L2CAP Service; C:\windows\system32\DRIVERS\btwl2cap.sys [2009-04-08 29472]
R3 btwrchid;btwrchid; C:\windows\system32\DRIVERS\btwrchid.sys [2009-07-01 18344]
R3 lmimirr;lmimirr; C:\windows\system32\DRIVERS\lmimirr.sys [2013-04-30 10144]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\windows\system32\DRIVERS\rfcomm.sys [2009-07-14 129536]
R3 SbieDrv;SbieDrv; \??\C:\POCITAC\TOMAS\HRY\sandbox\SbieDrv.sys [2012-08-25 157776]
R3 SynTP;Synaptics TouchPad Driver; C:\windows\system32\DRIVERS\SynTP.sys [2010-06-04 1303728]
R3 tap0901t;TAP-Win32 Adapter V9 (Tunngle); C:\windows\system32\DRIVERS\tap0901t.sys [2009-09-16 27136]
R3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\windows\system32\DRIVERS\vwifimp.sys [2009-07-14 14336]
S2 LMIInfo;LogMeIn Kernel Information Provider; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys []
S2 Parvdm;Parvdm; C:\windows\system32\DRIVERS\parvdm.sys [2009-07-14 8704]
S3 ALSysIO;ALSysIO; \??\C:\Users\TOMASS~1\AppData\Local\Temp\ALSysIO.sys []
S3 amdagp;AMD AGP Bus Filter Driver; C:\windows\system32\drivers\amdagp.sys [2009-07-14 53312]
S3 atikmdag;atikmdag; C:\windows\system32\DRIVERS\atikmdag.sys [2010-05-27 5586432]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0; C:\windows\system32\DRIVERS\b57nd60x.sys [2009-07-13 229888]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys [2009-07-14 78336]
S3 BTHPORT;Bluetooth Port Driver; C:\windows\System32\Drivers\BTHport.sys [2012-07-06 393728]
S3 dsnpfd;Dsnpfd Service; C:\windows\system32\DRIVERS\dsnpfd.sys []
S3 dsnpfdMP;dsnpfdMP; C:\windows\system32\DRIVERS\dsnpfd.sys []
S3 EagleNT;EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys []
S3 EagleXNt;EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys []
S3 gBTMouUsb;BT Mouse Device Drv; C:\windows\system32\DRIVERS\gBTMouUsb.sys []
S3 HpqKbFiltr;HpqKbFilter Driver; C:\windows\system32\DRIVERS\HpqKbFiltr.sys [2009-04-29 15872]
S3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd32.sys [2009-06-10 4756480]
S3 MfeAVFK;McAfee Inc. MfeAVFK; C:\windows\system32\drivers\MfeAVFK.sys [2009-05-16 79816]
S3 MfeBOPK;McAfee Inc. MfeBOPK; C:\windows\system32\drivers\MfeBOPK.sys [2009-05-16 35272]
S3 MfeRKDK;McAfee Inc. MfeRKDK; C:\windows\system32\drivers\MfeRKDK.sys [2009-05-16 34248]
S3 netw5v32;Intel(R) Wireless WiFi Link 5000 Series Adapter Driver for Windows Vista 32 Bit; C:\windows\system32\DRIVERS\netw5v32.sys [2009-07-13 4231168]
S3 pwdrvio;pwdrvio; \??\C:\windows\system32\pwdrvio.sys [2012-06-18 15576]
S3 pwdspio;pwdspio; \??\C:\windows\system32\pwdspio.sys [2012-06-18 10200]
S3 sisagp;SIS AGP Bus Filter; C:\windows\system32\drivers\sisagp.sys [2009-07-14 52304]
S3 TPM;TPM; C:\windows\system32\drivers\tpm.sys [2009-07-14 30720]
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
S3 usbscan;USB Scanner Driver; C:\windows\system32\drivers\usbscan.sys [2013-07-03 36352]
S3 viaagp;VIA AGP Bus Filter; C:\windows\system32\drivers\viaagp.sys [2009-07-14 53328]
S3 ViaC7;VIA C7 Processor Driver; C:\windows\system32\DRIVERS\viac7.sys [2009-07-14 52736]
S3 vncmirror;vncmirror; C:\windows\system32\DRIVERS\vncmirror.sys [2013-03-04 4608]
S4 LMIRfsClientNP;LMIRfsClientNP; C:\windows\system32\drivers\LMIRfsClientNP.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-05-11 65640]
R2 AEADIFilters;Andrea ADI Filters Service; C:\windows\system32\AEADISRV.EXE [2008-07-15 90112]
R2 AgereModemAudio;Agere Modem Call Progress Audio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [2009-12-03 26112]
R2 AMD External Events Utility;AMD External Events Utility; C:\windows\system32\atiesrxx.exe [2010-05-27 176128]
R2 Autodesk Content Service;Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [2011-02-02 18656]
R2 btwdins;Bluetooth Service; C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe [2009-07-30 582944]
R2 hpsrv;HP Service; C:\windows\system32\Hpservice.exe [2011-05-13 26168]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-08-25 354840]
R2 LightScribeService;LightScribeService Direct Disc Labeling Service; C:\Program Files\Common Files\LightScribe\LSSrvc.exe [2009-06-17 73728]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-08-12 22208]
R2 MSSQL$AUTODESKVAULT;SQL Server (AUTODESKVAULT); C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [2010-12-10 29293408]
R2 pgsql-8.3;PostgreSQL Database Server 8.3; C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe [2009-12-10 65536]
R2 PnkBstrA;PnkBstrA; C:\windows\system32\PnkBstrA.exe [2013-03-07 75136]
R2 SbieSvc;Sandboxie Service; C:\POCITAC\TOMAS\HRY\sandbox\SbieSvc.exe [2012-08-25 85776]
R2 SQLBrowser;SQL Server Browser; C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-12-10 238944]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-12-10 86880]
R2 Update LinkSwift;Update LinkSwift; C:\Program Files\LinkSwift\updateLinkSwift.exe [2013-10-17 65312]
R2 Util LinkSwift;Util LinkSwift; C:\Program Files\LinkSwift\bin\utilLinkSwift.exe [2013-10-27 65312]
R3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-06-13 1044816]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-08-12 295376]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-29 116648]
S2 SkypeUpdate;Skype Updater; C:\Program Files\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 aspnet_state;ASP.NET State Service; C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2010-09-28 79360]
S3 Com4QLBEx;Com4QLBEx; C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4QLBEx.exe [2009-05-05 228408]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files\Google\Update\GoogleUpdate.exe [2013-01-29 116648]
S3 hpqwmiex;hpqwmiex; C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe [2009-04-30 229944]
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe [2013-10-13 119408]
S3 npggsvc;nProtect GameGuard Service; C:\windows\system32\GameMon.des [2010-06-15 3583592]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2006-10-26 145184]
S3 RoxMediaDB10;RoxMediaDB10; c:\Program Files\Common Files\Roxio Shared\10.0\SharedCOM\RoxMediaDB10.exe [2009-06-13 1120752]
S3 Steam Client Service;Steam Client Service; C:\Program Files\Common Files\Steam\SteamService.exe [2013-06-06 543656]
S3 stllssvr;stllssvr; c:\Program Files\Common Files\SureThing Shared\stllssvr.exe [2009-04-30 74392]
S3 SwitchBoard;SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S3 TunngleService;TunngleService; C:\POCITAC\TOMAS\HRY\Tunngle\TnglCtrl.exe [2013-09-03 759192]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe [2010-06-12 1343400]
S4 MSSQLServerADHelper;SQL Server Active Directory Helper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [2010-12-10 44384]
S4 myAgtSvc;McAfee Virus and Spyware Protection Service; C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe /ServiceStart []
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 28 říj 2013 08:04

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

imicro · #3 Příspěvek od **imicro** » 28 říj 2013 09:30

Zdravim

Log z JRT:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.7 (10.15.2013:3)
OS: Windows 7 Home Premium x86
Ran by Tomas Spusta on po 28. 10. 2013 at 9:17:41,13
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

Successfully stopped: [Service] update linkswift
Successfully deleted: [Service] update linkswift

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\smbarbroker.exe
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\dt soft\daemon tools toolbar
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\linkswift
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\AskInstallChecker-1_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{323420b6-65e5-4657-8106-a27392d4d4aa}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{323420b6-65e5-4657-8106-a27392d4d4aa}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{171DEBEB-C3D4-40B7-AC73-056A5EBA4A7E}
Successfully deleted: [Registry Key] "hkey_current_user\software\apn pip"

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\trymedia"
Failed to delete: [Folder] "C:\Program Files\linkswift"
Successfully deleted: [Folder] "C:\windows\system32\ai_recyclebin"
Successfully deleted: [Folder] "C:\ProgramData\ask"

~~~ FireFox

Successfully deleted the following from C:\Users\Tomas Spusta\AppData\Roaming\mozilla\firefox\profiles\0datutm4.default\prefs.js

user_pref("WebVideoDownloaderHistory.HistoryArray_14.url", "hxxp://o-o---preferred---gtsce-bts1---v17---lscache2.c.youtube.com/videoplayback?ip=213.215.67.13&upn=HVY1uUj-jyg&s
user_pref("WebVideoDownloaderHistory.HistoryArray_15.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=F9AQn8uU8fM&s
user_pref("WebVideoDownloaderHistory.HistoryArray_16.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=Nn_gttQy-04&s
user_pref("WebVideoDownloaderHistory.HistoryArray_18.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=AuB9Bx1KoG8&s
user_pref("WebVideoDownloaderHistory.HistoryArray_19.url", "hxxp://o-o---preferred---gtsce-bts1---v17---lscache2.c.youtube.com/videoplayback?ip=213.215.67.13&upn=bWheyiCZ-gc&s
user_pref("WebVideoDownloaderHistory.HistoryArray_20.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=Eazh-U3br9E&s
user_pref("WebVideoDownloaderHistory.HistoryArray_21.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=-RrLtZ4LPqI&s
user_pref("WebVideoDownloaderHistory.HistoryArray_22.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=ASra11oAunk&s
user_pref("WebVideoDownloaderHistory.HistoryArray_23.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=ua_GkGOhkMk&s
user_pref("WebVideoDownloaderHistory.HistoryArray_24.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=AriIEqJeE18&s
user_pref("WebVideoDownloaderHistory.HistoryArray_25.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=POQGbcsHFos&s
user_pref("WebVideoDownloaderHistory.HistoryArray_26.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=CDZm6Fa60w0&s
user_pref("WebVideoDownloaderHistory.HistoryArray_27.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=sNfkDtKvagw&s
user_pref("WebVideoDownloaderHistory.HistoryArray_28.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=qJmAAZj-9wM&s
user_pref("WebVideoDownloaderHistory.HistoryArray_29.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=akao_74mJn8&s
user_pref("WebVideoDownloaderHistory.HistoryArray_30.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=WPU52bGfNmM&s
user_pref("WebVideoDownloaderHistory.HistoryArray_31.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=oYSjOLNkhHg&s
user_pref("WebVideoDownloaderHistory.HistoryArray_32.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=EFpxMB6wFhY&s
user_pref("WebVideoDownloaderHistory.HistoryArray_33.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=13etT7aSTBs&s
user_pref("WebVideoDownloaderHistory.HistoryArray_34.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=VLkzStOiSfU&s
user_pref("WebVideoDownloaderHistory.HistoryArray_35.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=0CVmXzCQTNM&s
user_pref("WebVideoDownloaderHistory.HistoryArray_36.url", "hxxp://o-o---preferred---gtsce-bts1---v20---lscache1.c.youtube.com/videoplayback?ip=213.215.67.13&upn=3m0nyKfH_7Y&s
Emptied folder: C:\Users\Tomas Spusta\AppData\Roaming\mozilla\firefox\profiles\0datutm4.default\minidumps [17 files]

~~~ Chrome

Successfully deleted: [Folder] C:\Users\Tomas Spusta\appdata\local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on po 28. 10. 2013 at 9:21:44,96
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log z AdwCleaneru:

# AdwCleaner v3.010 - Report created 28/10/2013 at 09:24:32
# Updated 20/10/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (32 bits)
# Username : Tomas Spusta - B07-120A
# Running from : C:\Users\Tomas Spusta\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files\LinkSwift
Folder Deleted : C:\Users\Tomas Spusta\AppData\Local\PackageAware
File Deleted : C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default\Extensions\firefox@linkswift.co.xpi
File Deleted : C:\Users\TOMASS~1\AppData\Local\Temp\Uninstall.exe

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3A188115-B81B-48F2-A958-F974C8F3F309}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{78CE34FD-F6D4-4866-B79C-A37268D06A04}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{80904944-C726-4C7D-A452-3FFF2A882095}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2D9B1B31-D034-4738-8F6E-40F0AFCC742C}
Key Deleted : HKCU\Software\Headlight
Key Deleted : HKCU\Software\LinkSwift
Key Deleted : HKLM\Software\LinkSwift
Key Deleted : HKLM\Software\PIP

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16720

-\\ Mozilla Firefox v24.0 (en-US)

[ File : C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default\prefs.js ]

-\\ Google Chrome v30.0.1599.101

[ File : C:\Users\Tomas Spusta\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [2040 octets] - [28/10/2013 09:23:13]
AdwCleaner[S0].txt - [1798 octets] - [28/10/2013 09:24:32]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1858 octets] ##########

#4 Příspěvek od **vyosek** » 28 říj 2013 09:31

Tuhle proxy 212.111.4.134:8080 pouzivate??

Poprosim o log z FRSTL http://forum.viry.cz/viewtopic.php?f=30&t=133101

imicro · #5 Příspěvek od **imicro** » 28 říj 2013 09:55

Proxy nepouzivam (aspon o tom neviem), da sa jej nejako zbavit ?

Log:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-10-2013
Ran by Tomas Spusta (administrator) on B07-120A on 28-10-2013 09:46:51
Running from C:\Users\Tomas Spusta\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: 041B
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\windows\system32\atiesrxx.exe
(AMD) C:\windows\system32\atieclxx.exe
(Hewlett-Packard Company) C:\windows\system32\Hpservice.exe
(SANDBOXIE L.T.D) C:\POCITAC\TOMAS\HRY\sandbox\SbieSvc.exe
(Microsoft Corporation) C:\windows\system32\WLANExt.exe
(Andrea Electronics Corporation) C:\windows\system32\AEADISRV.EXE
(LSI Corporation) C:\Program Files\LSI SoftModem\agrsmsvc.exe
() C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Hewlett-Packard Company) C:\Program Files\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe
() C:\windows\system32\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(PostgreSQL Global Development Group) C:\Program Files\PostgreSQL\8.3\bin\postgres.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.21.165\GoogleCrashHandler.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Analog Devices, Inc.) C:\Program Files\Analog Devices\Core\smax4pnp.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Macrovision Corporation) C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
( ) C:\Program Files\Codebox\BitMeter\BitMeter2.exe
(Stardock) C:\Program Files\Stardock\ObjectDock Plus\ObjectDock.exe
(Flexera Software, Inc.) C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Tomas Spusta\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1791272 2010-06-04] (Synaptics Incorporated)
HKLM\...\Run: [IAAnotif] - C:\Program Files\Intel\Intel Matrix Storage Manager\IAAnotif.exe [186904 2009-08-25] (Intel Corporation)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-05-27] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [SoundMAXPnP] - C:\Program Files\Analog Devices\Core\smax4pnp.exe [1314816 2009-05-18] (Analog Devices, Inc.)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [995176 2013-08-12] (Microsoft Corporation)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe [624248 2007-05-10] (Adobe Systems Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [ISUSPM] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\Default\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN
HKU\Default User\...\Run: [HPADVISOR] - C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe autorun=AUTORUN

==================== Internet (Whitelisted) ====================

ProxyServer: 212.111.4.134:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {089FD14D-132B-48FC-8861-0048AE113215} - No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Handler: myrm - {4D034FC3-013F-4b95-B544-44D49ABE3E76} - No File
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - No File
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 147.229.190.143 147.229.191.143

FireFox:
========
FF ProfilePath: C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin: @soe.sony.com/installer,version=1.0.3 - C:\Program Files\Sony Online Entertainment\npsoe.dll ()
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.0.5 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin: @wolfram.com/Mathematica - C:\Program Files\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll (Wolfram Research, Inc.)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF Extension: artur.dubovoy - C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default\Extensions\artur.dubovoy@gmail.com.xpi
FF Extension: captiondownloader - C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default\Extensions\captiondownloader@hiephm.com.xpi
FF Extension: Adblock Plus - C:\Users\Tomas Spusta\AppData\Roaming\Mozilla\Firefox\Profiles\0datutm4.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi

Chrome:
=======
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\PepperFlash\pepflashplayer.dll ()
CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\30.0.1599.101\pdf.dll ()
CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java Deployment Toolkit 6.0.240.7) - C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U24) - C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
CHR Plugin: (Wolfram Mathematica) - C:\Program Files\Common Files\Wolfram Research\Browser\8.0.1.2063897\npmathplugin.dll (Wolfram Research, Inc.)
CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File
CHR Plugin: (SOE Web Installer) - C:\Program Files\Sony Online Entertainment\npsoe.dll ()
CHR Plugin: (VLC Web Plugin) - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
CHR Plugin: (Shockwave Flash) - C:\windows\system32\Macromed\Flash\NPSWF32_11_4_402_265.dll No File
CHR Plugin: (Silverlight Plug-In) - c:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Extension: (Google Docs) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.5_0
CHR Extension: (Google Drive) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\6.3_0
CHR Extension: (YouTube) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (AdBlock) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.10_0
CHR Extension: (Speed Dial 2) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpfpebmajhhopeonhlcgidhclcccjcik\1.7.0_0
CHR Extension: (Zoom) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\lajondecmobodlejlcjllhojikagldgd\1.1.0.6_0
CHR Extension: (Gmail) - C:\Users\TOMASS~1\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0
CHR HKLM\...\Chrome\Extension: [odpccdgkmiicgocepijnaeihjnjnomca] - C:\Program Files\LinkSwift\odpccdgkmiicgocepijnaeihjnjnomca.crx

========================== Services (Whitelisted) =================

R2 AgereModemAudio; C:\Program Files\LSI SoftModem\agrsmsvc.exe [26112 2009-12-03] (LSI Corporation)
R2 Autodesk Content Service; C:\Program Files\Autodesk\Content Service\Connect.Service.ContentService.exe [18656 2011-02-02] ()
R3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [1044816 2013-06-13] (Flexera Software, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22208 2013-08-12] (Microsoft Corporation)
R2 MSSQL$AUTODESKVAULT; C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe [29293408 2010-12-10] (Microsoft Corporation)
S4 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [44384 2010-12-10] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [295376 2013-08-12] (Microsoft Corporation)
S3 npggsvc; C:\windows\system32\GameMon.des [3583592 2010-06-15] (INCA Internet Co., Ltd.)
R2 PnkBstrA; C:\windows\system32\PnkBstrA.exe [75136 2013-03-07] ()
R2 SbieSvc; C:\POCITAC\TOMAS\HRY\sandbox\SbieSvc.exe [85776 2012-08-25] (SANDBOXIE L.T.D)
S3 TunngleService; C:\POCITAC\TOMAS\HRY\Tunngle\TnglCtrl.exe [759192 2013-09-03] (Tunngle.net GmbH)
S4 myAgtSvc; "C:\Program Files\McAfee\Managed VirusScan\Agent\myAgtSvc.Exe" /ServiceStart [x]
R2 pgsql-8.3; "C:\Program Files\PostgreSQL\8.3\bin\pg_ctl.exe" runservice -w -N "pgsql-8.3" -D "C:\Program Files\PostgreSQL\8.3\data\"
S2 Util LinkSwift; "C:\Program Files\LinkSwift\bin\utilLinkSwift.exe" [x]

==================== Drivers (Whitelisted) ====================

R3 5U876UVC; C:\Windows\System32\DRIVERS\5U876.sys [118656 2009-06-30] (Ricoh co.,Ltd.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [281760 2011-11-13] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [25888 2011-11-13] ()
R2 LMIRfsDriver; C:\windows\system32\drivers\LMIRfsDriver.sys [47640 2013-04-30] (LogMeIn, Inc.)
S3 MfeAVFK; C:\Windows\System32\drivers\MfeAVFK.sys [79816 2009-05-16] (McAfee, Inc.)
S3 MfeBOPK; C:\Windows\System32\drivers\MfeBOPK.sys [35272 2009-05-16] (McAfee, Inc.)
R1 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [214024 2009-05-16] (McAfee, Inc.)
S3 MfeRKDK; C:\Windows\System32\drivers\MfeRKDK.sys [34248 2009-05-16] (McAfee, Inc.)
R1 mfetdik; C:\Windows\System32\drivers\mfetdik.sys [55336 2009-05-16] (McAfee, Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [211560 2013-06-18] (Microsoft Corporation)
R1 ndisrd; C:\Windows\System32\DRIVERS\ndisrd.sys [26208 2011-02-22] (NT Kernel Resources)
S3 pwdrvio; C:\windows\system32\pwdrvio.sys [15576 2012-06-18] ()
S3 pwdspio; C:\windows\system32\pwdspio.sys [10200 2012-06-18] ()
R3 SbieDrv; C:\POCITAC\TOMAS\HRY\sandbox\SbieDrv.sys [157776 2012-08-25] (SANDBOXIE L.T.D)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-09-22] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [27136 2009-09-16] (Tunngle.net)
S3 vncmirror; C:\Windows\System32\DRIVERS\vncmirror.sys [4608 2013-03-04] (RealVNC Ltd.)
R3 yukonw7; C:\Windows\System32\DRIVERS\yk62x86.sys [315392 2009-09-28] ()
U3 a686j8ml; C:\Windows\System32\Drivers\a686j8ml.sys [0 ] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\TOMASS~1\AppData\Local\Temp\ALSysIO.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 dsnpfd; system32\DRIVERS\dsnpfd.sys [x]
S3 dsnpfdMP; system32\DRIVERS\dsnpfd.sys [x]
S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [x]
S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [x]
S3 gBTMouUsb; system32\DRIVERS\gBTMouUsb.sys [x]
S2 LMIInfo; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 XDva349; \??\C:\windows\system32\XDva349.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-10-28 09:46 - 2013-10-28 09:46 - 00000000 ____D C:\FRST
2013-10-28 09:45 - 2013-10-28 09:45 - 01089183 _____ (Farbar) C:\Users\Tomas Spusta\Desktop\FRST.exe
2013-10-28 09:45 - 2013-10-28 09:45 - 00112128 _____ (forum.viry.cz) C:\Users\Tomas Spusta\Desktop\FRSTLauncher.exe
2013-10-28 09:22 - 2013-10-28 09:24 - 00000000 ____D C:\AdwCleaner
2013-10-28 09:21 - 2013-10-28 09:21 - 00007158 _____ C:\Users\Tomas Spusta\Desktop\JRT.txt
2013-10-28 09:17 - 2013-10-28 09:17 - 00000000 ____D C:\windows\ERUNT
2013-10-28 09:16 - 2013-10-28 09:16 - 01060070 _____ C:\Users\Tomas Spusta\Desktop\adwcleaner.exe
2013-10-28 09:16 - 2013-10-28 09:16 - 01033335 _____ (Thisisu) C:\Users\Tomas Spusta\Desktop\JRT.exe
2013-10-27 15:08 - 2013-10-27 15:08 - 00001672 _____ C:\Users\Tomas Spusta\Desktop\plochart.txt
2013-10-27 14:07 - 2013-10-27 14:15 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Upside Down (2012)
2013-10-27 09:35 - 2013-10-27 09:35 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Ashlynn Goes To College XXX DVDRip
2013-10-26 14:38 - 2013-10-26 14:38 - 00002170 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-10-26 13:33 - 2013-10-26 13:33 - 00000949 _____ C:\Users\Tomas Spusta\Desktop\PicPick.lnk
2013-10-26 13:33 - 2013-10-26 13:33 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\picpick
2013-10-26 13:33 - 2013-10-26 13:33 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicPick
2013-10-26 13:32 - 2013-10-26 13:33 - 00000000 ____D C:\Program Files\PicPick
2013-10-26 13:31 - 2013-10-26 13:31 - 11416432 _____ C:\Users\Tomas Spusta\Downloads\picpick_inst.exe
2013-10-26 10:33 - 2013-10-26 10:37 - 282521080 _____ C:\Users\Tomas Spusta\Downloads\The.Tomorrow.People.US.S01E03.HDTV.x264-LOL.mp4
2013-10-25 21:24 - 2013-10-25 22:29 - 00003035 _____ C:\Users\Tomas Spusta\Desktop\TableNinja.lnk
2013-10-25 15:49 - 2013-10-25 15:49 - 00000938 _____ C:\Users\Public\Desktop\HoldemManager2.lnk
2013-10-24 12:46 - 2013-10-26 10:33 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Arrow S02E03 HDTV x264-LOL[ettv]
2013-10-22 14:15 - 2013-10-22 14:15 - 00000000 ____D C:\ProgramData\Oracle
2013-10-22 14:14 - 2013-10-22 14:14 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-22 14:14 - 2013-10-08 06:50 - 00094632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2013-10-22 14:14 - 2013-10-08 06:46 - 00264616 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-10-22 14:14 - 2013-10-08 06:46 - 00175016 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-10-22 14:14 - 2013-10-08 06:46 - 00174504 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-10-22 14:13 - 2013-10-22 14:14 - 00004734 _____ C:\windows\system32\jupdate-1.7.0_45-b18.log
2013-10-21 21:55 - 2013-10-21 22:01 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\_amotivace
2013-10-21 21:15 - 2013-10-22 12:19 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\42.2013.BRRip.XviD-S4A
2013-10-21 16:15 - 2013-10-21 16:15 - 00040449 _____ C:\Users\Tomas Spusta\Downloads\Strike-Back-S04E10(0000225741).srt
2013-10-21 16:15 - 2013-10-21 16:15 - 00040449 _____ C:\Users\Tomas Spusta\Downloads\Strike-Back-S04E10(0000225741) (1).srt
2013-10-21 16:07 - 2013-10-21 16:13 - 453213602 _____ C:\Users\Tomas Spusta\Downloads\Strike.Back.S04E10.HDTV.x264-2HD.mp4
2013-10-20 15:48 - 2013-10-20 15:48 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Avatar The Last Airbender - Soundtrack
2013-10-20 15:07 - 2013-10-20 15:10 - 55080939 _____ C:\Users\Tomas Spusta\Downloads\Avatar The Last Airbender - Soundtrack.zip
2013-10-20 12:19 - 2013-10-20 12:19 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Publish Providers
2013-10-20 12:08 - 2013-10-20 12:17 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Sony
2013-10-20 12:08 - 2013-10-20 12:08 - 00000000 ____D C:\ProgramData\Sony
2013-10-20 12:08 - 2013-10-20 12:08 - 00000000 ____D C:\Program Files\Sony
2013-10-20 12:06 - 2013-10-20 12:19 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Sony
2013-10-20 11:58 - 2013-10-20 11:58 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Sony Vegas Pro 11
2013-10-20 09:56 - 2013-10-20 09:56 - 00673048 _____ (Karen Kenworthy) C:\Users\Tomas Spusta\Downloads\ptclpvue-setup.exe
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karen's Power Tools
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\ProgramData\Karen's Power Tools
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\Program Files\Karen's Power Tools
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\windows\sk
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\windows\cs
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-10-19 23:05 - 2013-10-19 23:22 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Windows Live
2013-10-19 22:54 - 2013-10-20 11:48 - 00000000 ____D C:\Material
2013-10-19 22:54 - 2013-10-19 22:54 - 00000000 ____D C:\Sound
2013-10-19 21:50 - 2013-10-19 21:54 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\click through wpf
2013-10-19 21:49 - 2013-10-19 21:49 - 01108366 _____ (Brian Hoary ) C:\Users\Tomas Spusta\Downloads\Epic Pen Setup.exe
2013-10-19 21:42 - 2013-10-19 21:43 - 00000000 ____D C:\Users\Tomas Spusta\Documents\PenWorks
2013-10-19 21:41 - 2013-10-19 21:42 - 01834073 _____ C:\Users\Tomas Spusta\Downloads\pwd100602.zip
2013-10-19 21:25 - 2003-11-25 06:58 - 00315392 _____ (UC-Logic Technology Corp.) C:\windows\SETUPX32.EXE
2013-10-19 20:57 - 2013-10-19 20:57 - 00000000 ____D C:\Users\Tomas Spusta\.MCReferenceSdk
2013-10-19 20:56 - 2013-10-19 22:49 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2013-10-19 20:56 - 2013-10-19 20:56 - 00000000 ____D C:\ProgramData\Geevs
2013-10-19 20:55 - 2013-10-20 12:08 - 00000000 ____D C:\Program Files\Lightworks
2013-10-19 20:49 - 2013-10-19 20:52 - 72720560 _____ (Lightworks) C:\Users\Tomas Spusta\Downloads\setup_11.1_full_32bit.exe
2013-10-19 15:32 - 2013-10-19 15:33 - 24278649 _____ C:\Users\Tomas Spusta\Downloads\vlc-2.1.0-win32.exe
2013-10-19 11:31 - 2013-10-27 10:38 - 07349248 _____ C:\Users\Tomas Spusta\Desktop\WZ1.xls
2013-10-17 16:10 - 2013-10-17 16:15 - 322908531 _____ C:\Users\Tomas Spusta\Downloads\Arrow.S02E02.HDTV.x264-LOL.mp4
2013-10-15 20:05 - 2013-10-15 20:05 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2013-10-15 20:05 - 2013-10-15 20:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2013-10-13 16:42 - 2013-10-13 18:23 - 00000134 _____ C:\Users\Tomas Spusta\Desktop\Nový textový dokument.txt
2013-10-13 15:16 - 2013-10-13 15:21 - 00771581 _____ C:\Users\Tomas Spusta\Desktop\Rozvrh.psd
2013-10-13 12:01 - 2013-10-13 15:48 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-10-10 06:36 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-10-10 06:36 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-10-10 06:36 - 2013-09-23 00:28 - 00042496 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-10-10 06:36 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\windows\system32\jscript.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\windows\system32\msfeeds.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\windows\system32\iesysprep.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-10-10 06:36 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-10-10 06:36 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-10-10 06:36 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\windows\system32\RegisterIEPKEYs.exe
2013-10-09 19:07 - 2013-09-14 01:48 - 00338944 _____ (Microsoft Corporation) C:\windows\system32\Drivers\afd.sys
2013-10-09 19:07 - 2013-09-08 03:07 - 01294272 _____ (Microsoft Corporation) C:\windows\system32\Drivers\tcpip.sys
2013-10-09 19:07 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\windows\system32\mswsock.dll
2013-10-09 19:07 - 2013-09-04 02:15 - 00258560 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbhub.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00284672 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbport.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00076288 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbccgp.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00043008 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbehci.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00024064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbuhci.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00020480 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbohci.sys
2013-10-09 19:07 - 2013-09-04 02:14 - 00006016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbd.sys
2013-10-09 19:07 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\windows\system32\ntkrnlpa.exe
2013-10-09 19:07 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\windows\system32\ntoskrnl.exe
2013-10-09 19:07 - 2013-08-29 02:50 - 01289096 _____ (Microsoft Corporation) C:\windows\system32\ntdll.dll
2013-10-09 19:07 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\windows\system32\tdh.dll
2013-10-09 19:07 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\windows\system32\advapi32.dll
2013-10-09 19:07 - 2013-08-28 01:57 - 00434688 _____ (Microsoft Corporation) C:\windows\system32\scavengeui.dll
2013-10-09 19:07 - 2013-08-01 12:03 - 00729024 _____ (Microsoft Corporation) C:\windows\system32\Drivers\dxgkrnl.sys
2013-10-09 19:07 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:07 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\windows\system32\comctl32.dll
2013-10-09 19:07 - 2013-07-03 05:02 - 00036352 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbscan.sys
2013-10-09 19:07 - 2013-07-03 04:36 - 00055808 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidclass.sys
2013-10-09 19:07 - 2013-07-03 04:36 - 00025728 _____ (Microsoft Corporation) C:\windows\system32\Drivers\hidparse.sys
2013-10-09 19:07 - 2013-06-06 05:52 - 00026112 _____ (Microsoft Corporation) C:\windows\system32\lpk.dll
2013-10-09 19:07 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\windows\system32\fontsub.dll
2013-10-09 19:07 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\windows\system32\dciman32.dll
2013-10-09 19:07 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\windows\system32\atmfd.dll
2013-10-09 19:07 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\windows\system32\atmlib.dll
2013-10-09 19:05 - 2013-08-28 02:04 - 02348544 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-10-09 19:05 - 2013-07-12 11:08 - 00146816 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbvideo.sys
2013-10-09 19:05 - 2013-07-12 11:07 - 00086016 _____ (Microsoft Corporation) C:\windows\system32\Drivers\usbcir.sys
2013-10-09 19:05 - 2013-07-12 11:07 - 00080896 _____ (Microsoft Corporation) C:\windows\system32\Drivers\USBAUDIO.sys
2013-10-09 19:05 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\windows\system32\WebClnt.dll
2013-10-09 19:05 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\windows\system32\davclnt.dll
2013-10-09 19:05 - 2013-07-04 10:48 - 00115712 _____ (Microsoft Corporation) C:\windows\system32\Drivers\mrxdav.sys
2013-10-09 19:05 - 2013-06-25 23:56 - 00527064 _____ (Microsoft Corporation) C:\windows\system32\Drivers\Wdf01000.sys
2013-10-08 21:11 - 2013-10-08 21:24 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\EurekaLog
2013-10-06 16:47 - 2013-10-06 16:47 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Copy
2013-10-06 16:40 - 2013-10-06 16:43 - 48530640 _____ (Barracuda Networks, Inc.) C:\Users\Tomas Spusta\Downloads\Copy-1.37.0546.exe
2013-10-05 10:57 - 2013-10-06 11:48 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-04 22:13 - 2013-10-04 22:13 - 00059962 _____ C:\Users\Tomas Spusta\Downloads\Turbo(0000224540).srt

==================== One Month Modified Files and Folders =======

2013-10-28 09:49 - 2013-02-11 16:17 - 00000000 ____D C:\ProgramData\Bitmeter2
2013-10-28 09:46 - 2013-10-28 09:46 - 00000000 ____D C:\FRST
2013-10-28 09:45 - 2013-10-28 09:45 - 01089183 _____ (Farbar) C:\Users\Tomas Spusta\Desktop\FRST.exe
2013-10-28 09:45 - 2013-10-28 09:45 - 00112128 _____ (forum.viry.cz) C:\Users\Tomas Spusta\Desktop\FRSTLauncher.exe
2013-10-28 09:45 - 2013-09-19 17:18 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Chrome_Dowlnoad
2013-10-28 09:38 - 2010-06-14 18:04 - 01357156 _____ C:\windows\WindowsUpdate.log
2013-10-28 09:34 - 2012-07-08 20:37 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\_SKOLA
2013-10-28 09:34 - 2009-07-14 05:34 - 00019760 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-10-28 09:34 - 2009-07-14 05:34 - 00019760 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-10-28 09:30 - 2009-09-20 08:17 - 00849264 _____ C:\windows\system32\PerfStringBackup.INI
2013-10-28 09:26 - 2013-01-29 17:28 - 00000932 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-10-28 09:26 - 2013-01-20 23:09 - 00000580 _____ C:\windows\system32\Drivers\etc\hosts.ics
2013-10-28 09:26 - 2013-01-20 15:30 - 00047173 _____ C:\windows\setupact.log
2013-10-28 09:26 - 2009-07-14 05:53 - 00000006 ____H C:\windows\Tasks\SA.DAT
2013-10-28 09:24 - 2013-10-28 09:22 - 00000000 ____D C:\AdwCleaner
2013-10-28 09:23 - 2011-07-28 20:22 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Skype
2013-10-28 09:21 - 2013-10-28 09:21 - 00007158 _____ C:\Users\Tomas Spusta\Desktop\JRT.txt
2013-10-28 09:17 - 2013-10-28 09:17 - 00000000 ____D C:\windows\ERUNT
2013-10-28 09:16 - 2013-10-28 09:16 - 01060070 _____ C:\Users\Tomas Spusta\Desktop\adwcleaner.exe
2013-10-28 09:16 - 2013-10-28 09:16 - 01033335 _____ (Thisisu) C:\Users\Tomas Spusta\Desktop\JRT.exe
2013-10-28 09:03 - 2013-01-29 17:28 - 00000936 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-10-28 07:05 - 2012-06-22 08:54 - 00000000 ____D C:\Users\postgres
2013-10-27 23:47 - 2011-05-31 14:49 - 00000000 ____D C:\Program Files\trend micro
2013-10-27 23:30 - 2013-01-17 20:52 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\CrashDumps
2013-10-27 15:08 - 2013-10-27 15:08 - 00001672 _____ C:\Users\Tomas Spusta\Desktop\plochart.txt
2013-10-27 14:17 - 2011-06-13 09:57 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\uTorrent
2013-10-27 14:15 - 2013-10-27 14:07 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Upside Down (2012)
2013-10-27 14:03 - 2013-09-18 10:07 - 00009086 _____ C:\speederr.txt
2013-10-27 11:47 - 2012-12-16 22:17 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\HoldemManager
2013-10-27 11:39 - 2013-05-28 08:02 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Copy
2013-10-27 10:38 - 2013-10-19 11:31 - 07349248 _____ C:\Users\Tomas Spusta\Desktop\WZ1.xls
2013-10-27 09:35 - 2013-10-27 09:35 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Ashlynn Goes To College XXX DVDRip
2013-10-26 15:03 - 2012-10-13 14:01 - 00007600 _____ C:\Users\Tomas Spusta\AppData\Local\Resmon.ResmonCfg
2013-10-26 14:38 - 2013-10-26 14:38 - 00002170 _____ C:\Users\Public\Desktop\Google Earth.lnk
2013-10-26 14:37 - 2013-01-29 17:27 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Google
2013-10-26 14:37 - 2013-01-29 17:27 - 00000000 ____D C:\Program Files\Google
2013-10-26 13:33 - 2013-10-26 13:33 - 00000949 _____ C:\Users\Tomas Spusta\Desktop\PicPick.lnk
2013-10-26 13:33 - 2013-10-26 13:33 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\picpick
2013-10-26 13:33 - 2013-10-26 13:33 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PicPick
2013-10-26 13:33 - 2013-10-26 13:32 - 00000000 ____D C:\Program Files\PicPick
2013-10-26 13:31 - 2013-10-26 13:31 - 11416432 _____ C:\Users\Tomas Spusta\Downloads\picpick_inst.exe
2013-10-26 10:37 - 2013-10-26 10:33 - 282521080 _____ C:\Users\Tomas Spusta\Downloads\The.Tomorrow.People.US.S01E03.HDTV.x264-LOL.mp4
2013-10-26 10:33 - 2013-10-24 12:46 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Arrow S02E03 HDTV x264-LOL[ettv]
2013-10-26 10:32 - 2010-10-10 19:00 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\ApexDC++
2013-10-25 23:11 - 2012-12-16 22:20 - 00183278 _____ C:\blitzerr.txt
2013-10-25 23:00 - 2012-09-05 14:42 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\PokerStars
2013-10-25 22:29 - 2013-10-25 21:24 - 00003035 _____ C:\Users\Tomas Spusta\Desktop\TableNinja.lnk
2013-10-25 22:29 - 2013-07-14 15:53 - 00002995 _____ C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TableNinja.lnk
2013-10-25 21:24 - 2012-05-20 19:20 - 00000000 ____D C:\Poker
2013-10-25 18:55 - 2010-06-13 19:14 - 00000000 ____D C:\POCITAC
2013-10-25 15:49 - 2013-10-25 15:49 - 00000938 _____ C:\Users\Public\Desktop\HoldemManager2.lnk
2013-10-22 22:02 - 2013-01-29 22:31 - 00000000 ____D C:\ProgramData\VirtualWifiRouter
2013-10-22 18:19 - 2010-11-13 11:21 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\qwertz
2013-10-22 17:40 - 2011-01-30 18:06 - 00000985 _____ C:\Users\Tomas Spusta\SciTE.session
2013-10-22 15:00 - 2012-07-08 20:45 - 00000000 ____D C:\Users\Public\Documents\CCleaner_registre
2013-10-22 14:15 - 2013-10-22 14:15 - 00000000 ____D C:\ProgramData\Oracle
2013-10-22 14:14 - 2013-10-22 14:14 - 00000000 ____D C:\Program Files\Common Files\Java
2013-10-22 14:14 - 2013-10-22 14:13 - 00004734 _____ C:\windows\system32\jupdate-1.7.0_45-b18.log
2013-10-22 14:14 - 2010-06-22 12:39 - 00000000 ____D C:\Program Files\Java
2013-10-22 12:19 - 2013-10-21 21:15 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\42.2013.BRRip.XviD-S4A
2013-10-21 22:01 - 2013-10-21 21:55 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\_amotivace
2013-10-21 22:01 - 2013-03-02 17:47 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Dropbox
2013-10-21 16:15 - 2013-10-21 16:15 - 00040449 _____ C:\Users\Tomas Spusta\Downloads\Strike-Back-S04E10(0000225741).srt
2013-10-21 16:15 - 2013-10-21 16:15 - 00040449 _____ C:\Users\Tomas Spusta\Downloads\Strike-Back-S04E10(0000225741) (1).srt
2013-10-21 16:13 - 2013-10-21 16:07 - 453213602 _____ C:\Users\Tomas Spusta\Downloads\Strike.Back.S04E10.HDTV.x264-2HD.mp4
2013-10-21 06:59 - 2010-07-03 10:34 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-10-20 21:25 - 2010-06-22 12:49 - 00000000 ____D C:\Program Files\Adobe
2013-10-20 19:10 - 2013-01-30 07:11 - 00016560 _____ C:\windows\PFRO.log
2013-10-20 15:48 - 2013-10-20 15:48 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Avatar The Last Airbender - Soundtrack
2013-10-20 15:10 - 2013-10-20 15:07 - 55080939 _____ C:\Users\Tomas Spusta\Downloads\Avatar The Last Airbender - Soundtrack.zip
2013-10-20 12:19 - 2013-10-20 12:19 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Publish Providers
2013-10-20 12:19 - 2013-10-20 12:06 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Sony
2013-10-20 12:17 - 2013-10-20 12:08 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Sony
2013-10-20 12:08 - 2013-10-20 12:08 - 00000000 ____D C:\ProgramData\Sony
2013-10-20 12:08 - 2013-10-20 12:08 - 00000000 ____D C:\Program Files\Sony
2013-10-20 12:08 - 2013-10-19 20:55 - 00000000 ____D C:\Program Files\Lightworks
2013-10-20 11:58 - 2013-10-20 11:58 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\Sony Vegas Pro 11
2013-10-20 11:48 - 2013-10-19 22:54 - 00000000 ____D C:\Material
2013-10-20 09:56 - 2013-10-20 09:56 - 00673048 _____ (Karen Kenworthy) C:\Users\Tomas Spusta\Downloads\ptclpvue-setup.exe
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Karen's Power Tools
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\ProgramData\Karen's Power Tools
2013-10-20 09:56 - 2013-10-20 09:56 - 00000000 ____D C:\Program Files\Karen's Power Tools
2013-10-20 09:11 - 2012-12-16 13:28 - 00001776 _____ C:\windows\Sandboxie.ini
2013-10-19 23:22 - 2013-10-19 23:05 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Windows Live
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\windows\sk
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\windows\cs
2013-10-19 23:13 - 2013-10-19 23:13 - 00000000 ____D C:\Program Files\Microsoft SQL Server Compact Edition
2013-10-19 23:12 - 2010-06-09 09:43 - 00000000 ____D C:\Program Files\Windows Live
2013-10-19 23:10 - 2009-07-14 03:37 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2013-10-19 22:54 - 2013-10-19 22:54 - 00000000 ____D C:\Sound
2013-10-19 22:49 - 2013-10-19 20:56 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2013-10-19 21:54 - 2013-10-19 21:50 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\click through wpf
2013-10-19 21:49 - 2013-10-19 21:49 - 01108366 _____ (Brian Hoary ) C:\Users\Tomas Spusta\Downloads\Epic Pen Setup.exe
2013-10-19 21:43 - 2013-10-19 21:42 - 00000000 ____D C:\Users\Tomas Spusta\Documents\PenWorks
2013-10-19 21:42 - 2013-10-19 21:41 - 01834073 _____ C:\Users\Tomas Spusta\Downloads\pwd100602.zip
2013-10-19 21:00 - 2013-07-07 17:05 - 00000000 ____D C:\ProgramData\LogMeIn
2013-10-19 21:00 - 2013-07-07 17:04 - 00000000 ____D C:\Program Files\LogMeIn
2013-10-19 20:57 - 2013-10-19 20:57 - 00000000 ____D C:\Users\Tomas Spusta\.MCReferenceSdk
2013-10-19 20:57 - 2010-06-09 07:35 - 00000000 ____D C:\Users\Tomas Spusta
2013-10-19 20:56 - 2013-10-19 20:56 - 00000000 ____D C:\ProgramData\Geevs
2013-10-19 20:52 - 2013-10-19 20:49 - 72720560 _____ (Lightworks) C:\Users\Tomas Spusta\Downloads\setup_11.1_full_32bit.exe
2013-10-19 15:33 - 2013-10-19 15:32 - 24278649 _____ C:\Users\Tomas Spusta\Downloads\vlc-2.1.0-win32.exe
2013-10-17 16:51 - 2013-09-27 09:38 - 00000000 ____D C:\ProgramData\Tunngle
2013-10-17 16:15 - 2013-10-17 16:10 - 322908531 _____ C:\Users\Tomas Spusta\Downloads\Arrow.S02E02.HDTV.x264-LOL.mp4
2013-10-16 19:03 - 2013-01-24 08:13 - 00000000 ___RD C:\Program Files\Skype
2013-10-16 19:03 - 2010-06-09 09:46 - 00000000 ____D C:\ProgramData\Skype
2013-10-16 06:14 - 2011-11-21 21:21 - 00001912 _____ C:\windows\epplauncher.mif
2013-10-16 06:14 - 2011-11-21 21:20 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-10-15 20:05 - 2013-10-15 20:05 - 00000000 ____D C:\Users\Default\AppData\Local\Google
2013-10-15 20:05 - 2013-10-15 20:05 - 00000000 ____D C:\Users\Default User\AppData\Local\Google
2013-10-14 06:33 - 2012-08-19 21:35 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-10-13 18:23 - 2013-10-13 16:42 - 00000134 _____ C:\Users\Tomas Spusta\Desktop\Nový textový dokument.txt
2013-10-13 18:01 - 2013-01-16 20:02 - 00000000 ____D C:\Users\Tomas Spusta\Documents\Camtasia Studio
2013-10-13 15:48 - 2013-10-13 12:01 - 00000000 ____D C:\Program Files\Mozilla Thunderbird
2013-10-13 15:21 - 2013-10-13 15:16 - 00771581 _____ C:\Users\Tomas Spusta\Desktop\Rozvrh.psd
2013-10-13 08:34 - 2009-07-14 05:53 - 00032496 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-10-12 10:09 - 2009-07-14 03:37 - 00000000 ____D C:\windows\rescache
2013-10-11 17:07 - 2009-07-14 03:37 - 00000000 ____D C:\windows\Microsoft.NET
2013-10-10 12:18 - 2009-07-14 05:33 - 04339552 _____ C:\windows\system32\FNTCACHE.DAT
2013-10-10 12:17 - 2011-06-30 10:10 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2013-10-10 06:44 - 2009-09-20 08:23 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-10-10 06:42 - 2013-08-18 23:30 - 00000000 ____D C:\windows\system32\MRT
2013-10-10 06:39 - 2010-06-09 11:12 - 78106760 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-10-08 21:24 - 2013-10-08 21:11 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\EurekaLog
2013-10-08 21:09 - 2012-07-19 11:01 - 00000000 ____D C:\Users\Tomas Spusta\Downloads\HM_stiahnute veci
2013-10-08 06:50 - 2013-10-22 14:14 - 00094632 _____ (Oracle Corporation) C:\windows\system32\WindowsAccessBridge.dll
2013-10-08 06:46 - 2013-10-22 14:14 - 00264616 _____ (Oracle Corporation) C:\windows\system32\javaws.exe
2013-10-08 06:46 - 2013-10-22 14:14 - 00175016 _____ (Oracle Corporation) C:\windows\system32\javaw.exe
2013-10-08 06:46 - 2013-10-22 14:14 - 00174504 _____ (Oracle Corporation) C:\windows\system32\java.exe
2013-10-06 16:47 - 2013-10-06 16:47 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Copy
2013-10-06 16:43 - 2013-10-06 16:40 - 48530640 _____ (Barracuda Networks, Inc.) C:\Users\Tomas Spusta\Downloads\Copy-1.37.0546.exe
2013-10-06 11:48 - 2013-10-05 10:57 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-10-06 11:48 - 2011-05-31 11:27 - 00000000 ____D C:\Users\Tomas Spusta\AppData\Local\Mozilla
2013-10-04 22:13 - 2013-10-04 22:13 - 00059962 _____ C:\Users\Tomas Spusta\Downloads\Turbo(0000224540).srt

Some content of TEMP:
====================
C:\Users\Tomas Spusta\AppData\Local\temp\AcDeltree.exe
C:\Users\Tomas Spusta\AppData\Local\temp\install_flashplayer11x32_mssd_aaa_aih.exe
C:\Users\Tomas Spusta\AppData\Local\temp\install_reader11_en_mssd_aaa_aih.exe
C:\Users\Tomas Spusta\AppData\Local\temp\jre-7u45-windows-i586-iftw.exe
C:\Users\Tomas Spusta\AppData\Local\temp\Quarantine.exe
C:\Users\Tomas Spusta\AppData\Local\temp\riftuninstall.exe
C:\Users\Tomas Spusta\AppData\Local\temp\SkypeSetup.exe
C:\Users\Tomas Spusta\AppData\Local\temp\smdczwgq.dll
C:\Users\Tomas Spusta\AppData\Local\temp\ubiB257.tmp.exe
C:\Users\Tomas Spusta\AppData\Local\temp\ubiE68A.tmp.exe
C:\Users\Tomas Spusta\AppData\Local\temp\Uninst.exe
C:\Users\Tomas Spusta\AppData\Local\temp\xfire_installer_10650.exe

==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-10-22 16:02

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:280.8 GB) (Free:30.59 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (HP_TOOLS) (Fixed) (Total:1.99 GB) (Free:1.92 GB) FAT32

Available physical RAM: 2069.8 MB
Total physical RAM: 3066.27 MB
Percentage of memory in use: 32%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 298 GB) (Disk ID: DCB86D34)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=281 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=15 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=2 GB) - (Type=0C)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Tomas Spusta\Desktop" je 190 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent
C:\Program Files\BlueStacks\HD-Agent.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify
C:\Program Files\Connectify\Connectify.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeAC
C:\Users\Tomas Spusta\Downloads\FreeAlarmClockPortable\FreeAlarmClockPortable\FreeAlarmClock.exe -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI
"C:\Program Files\LogMeIn\x86\LogMeInSystray.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SandboxieControl
"C:\POCITAC\TOMAS\HRY\sandbox\SbieCtrl.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam
"C:\POCITAC\TOMAS\HRY\steam\Steam.exe" -silent [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DisableUnicastResponsesToMulticastBroadcast REG_DWORD 0x0
DefaultOutboundAction REG_DWORD 0x0
DefaultInboundAction REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DefaultOutboundAction REG_DWORD 0x0
DefaultInboundAction REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\\Program Files\\Daum\\PotPlayer\\PotPlayerMini.exe"="C:\\Program Files\\Daum\\PotPlayer\\PotPlayerMini.exe:*:Enabled:PotPlayer"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Daum\\PotPlayer\\PotPlayerMini.exe"="C:\\Program Files\\Daum\\PotPlayer\\PotPlayerMini.exe:*:Enabled:PotPlayer"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

#6 Příspěvek od **vyosek** » 28 říj 2013 09:59

Proxy odsrelim skriptem

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe [624248 2007-05-10] (Adobe Systems Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [ISUSPM] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

ProxyServer: 212.111.4.134:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {089FD14D-132B-48FC-8861-0048AE113215} - No File
Handler: myrm - {4D034FC3-013F-4b95-B544-44D49ABE3E76} - No File
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - No File

CHR HKLM\...\Chrome\Extension: [odpccdgkmiicgocepijnaeihjnjnomca] - C:\Program Files\LinkSwift\odpccdgkmiicgocepijnaeihjnjnomca.crx

S2 Util LinkSwift; "C:\Program Files\LinkSwift\bin\utilLinkSwift.exe" [x]

S3 dsnpfd; system32\DRIVERS\dsnpfd.sys [x]
S3 dsnpfdMP; system32\DRIVERS\dsnpfd.sys [x]
S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [x]
S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [x]
S3 gBTMouUsb; system32\DRIVERS\gBTMouUsb.sys [x]
S2 LMIInfo; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 XDva349; \??\C:\windows\system32\XDva349.sys [x]

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeAC" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f

C:\Program Files\LinkSwift

Hosts:

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

imicro · #7 Příspěvek od **imicro** » 28 říj 2013 10:10

Fixlog:

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 28-10-2013
Ran by Tomas Spusta at 2013-10-28 10:04:52 Run:1
Running from C:\Users\Tomas Spusta\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS6ServiceManager] - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472992 2013-03-21] (Adobe Systems Incorporated)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-05-11] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] - C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe [624248 2007-05-10] (Adobe Systems Inc.)
HKLM\...\Run: [SunJavaUpdateSched] - C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKCU\...\Run: [ISUSPM] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [218032 2006-09-11] (Macrovision Corporation)
HKCU\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

ProxyServer: 212.111.4.134:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.msn.com/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKLM - DefaultScope value is missing.
BHO: No Name - {089FD14D-132B-48FC-8861-0048AE113215} - No File
Handler: myrm - {4D034FC3-013F-4b95-B544-44D49ABE3E76} - No File
Handler: siteadvisor - {3A5DC592-7723-4EAA-9EE6-AF4222BCF879} - No File

CHR HKLM\...\Chrome\Extension: [odpccdgkmiicgocepijnaeihjnjnomca] - C:\Program Files\LinkSwift\odpccdgkmiicgocepijnaeihjnjnomca.crx

S2 Util LinkSwift; "C:\Program Files\LinkSwift\bin\utilLinkSwift.exe" [x]

S3 dsnpfd; system32\DRIVERS\dsnpfd.sys [x]
S3 dsnpfdMP; system32\DRIVERS\dsnpfd.sys [x]
S3 EagleNT; \??\C:\windows\system32\drivers\EagleNT.sys [x]
S3 EagleXNt; \??\C:\windows\system32\drivers\EagleXNt.sys [x]
S3 gBTMouUsb; system32\DRIVERS\gBTMouUsb.sys [x]
S2 LMIInfo; \??\C:\Program Files\LogMeIn\x86\RaInfo.sys [x]
S4 LMIRfsClientNP; No ImagePath
S3 XDva349; \??\C:\windows\system32\XDva349.sys [x]

Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeAC" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI" /f
REG: reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f

C:\Program Files\LinkSwift

Hosts:

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Acrobat Assistant 8.0 => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSPM => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{089FD14D-132B-48FC-8861-0048AE113215} => Key deleted successfully.
HKCR\CLSID\{089FD14D-132B-48FC-8861-0048AE113215} => Key not found.
HKCR\PROTOCOLS\Handler\myrm => Key deleted successfully.
HKCR\CLSID\{4D034FC3-013F-4b95-B544-44D49ABE3E76} => Key not found.
HKCR\PROTOCOLS\Handler\siteadvisor => Key deleted successfully.
HKCR\CLSID\{3A5DC592-7723-4EAA-9EE6-AF4222BCF879} => Key not found.
HKLM\SOFTWARE\Google\Chrome\Extensions\odpccdgkmiicgocepijnaeihjnjnomca => Key deleted successfully.
"C:\Program Files\LinkSwift\odpccdgkmiicgocepijnaeihjnjnomca.crx" => File/Directory not found.
Util LinkSwift => Service deleted successfully.
dsnpfd => Service deleted successfully.
dsnpfdMP => Service deleted successfully.
EagleNT => Service deleted successfully.
EagleXNt => Service deleted successfully.
gBTMouUsb => Service deleted successfully.
LMIInfo => Service deleted successfully.
LMIRfsClientNP => Service deleted successfully.
XDva349 => Service deleted successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BlueStacks Agent" /f =========

Oper cia sa Łspeçne dokonźila.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Connectify" /f =========

Oper cia sa Łspeçne dokonźila.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FreeAC" /f =========

Oper cia sa Łspeçne dokonźila.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI" /f =========

Oper cia sa Łspeçne dokonźila.

========= End of Reg: =========

========= reg delete "HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam" /f =========

Oper cia sa Łspeçne dokonźila.

========= End of Reg: =========

"C:\Program Files\LinkSwift" => File/Directory not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====

#8 Příspěvek od **vyosek** » 28 říj 2013 23:41

Jak se chova PC

imicro · #9 Příspěvek od **imicro** » 29 říj 2013 07:17

Pc sa chova velmi pozitivne. Mam taky dojem, ze trosku zrychlilo (start je o poznanie sviznejsi).

#10 Příspěvek od **vyosek** » 29 říj 2013 08:20

Tak jeste uklidime

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

imicro · #11 Příspěvek od **imicro** » 29 říj 2013 16:24

Vdaka za pomoc

Mozeme uzamknut (ak sa to tu este robi)

#12 Příspěvek od **vyosek** » 29 říj 2013 16:43

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Prosim o kontrolu

Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu

Re: Prosim o kontrolu