prosím o kontrolu pc,zda-li tam nejsou viry diky
Napsal: 03 úno 2014 20:40
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-02-2014 04
Ran by KOTLAR .MARTIN (administrator) on KOTLARMARTIN-PC on 02-02-2014 22:16:33
Running from C:\Users\KOTLAR .MARTIN\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccsvchst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccsvchst.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seznam.cz a.s.) C:\Program Files (x86)\Seznam\Postak\Postak.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\Winamp\winampa.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit_manager.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [CmPCIaudio] - C:\Windows\Syswow64\CMICNFG3.dll [8765440 2011-04-01] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8768GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8768GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-11-11] (COMODO)
HKLM-x32\...\Run: [SMail] - C:\Program Files (x86)\Seznam\Postak\Postak.exe [450560 2006-05-18] (Seznam.cz a.s.)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [36352 2008-03-27] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mncgdrmtSrv] - C:\Windows\inf\mncgdrmt.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [MSStp] - C:\Windows\SysWOW64\msstp.vbe [1419 2014-01-19] ()
HKLM-x32\...\Run: [mncfyssrSrv] - C:\Windows\inf\mncfyssr.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [mswupkvSrv] - "C:\Windows\system32\mswupkv.vbe" mskcmuh mslgrq
HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Orb] - C:\Program Files (x86)\Winamp Remote\bin\OrbTray.exe [507904 2008-04-01] (Orb Networks)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Facebook Update] - C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-03] (Facebook Inc.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\MountPoints2: {0b13fcf2-4210-11e3-a3be-a0f3c105443e} - F:\Setup.exe
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\MountPoints2: {5a73a54e-4549-11e3-98fd-a0f3c105443e} - F:\Autorun.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
URLSearchHook: HKLM-x32 - Winamp Toolbar Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
URLSearchHook: HKCU - Winamp Toolbar Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
SearchScopes: HKLM-x32 - DefaultScope {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
SearchScopes: HKLM-x32 - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
SearchScopes: HKCU - E29C89E8500F49F0AEB05F4E1CE36654 URL = http://www.google.com/cse?cx=partner-pu ... earchTerms}
SearchScopes: HKCU - {66F753E7-8BB3-4f2e-AE76-93D7283186DF} URL = http://us.search.yahoo.com/search?p={se ... chr-comodo
SearchScopes: HKCU - {79D695BC-FE3A-4131-B6B1-9FB7605F397A} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13014
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
BHO: Apps Hat - {11111111-1111-1111-1111-110411851159} - C:\Program Files (x86)\Apps Hat\Apps Hat-bho64.dll (Nero)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6DECA789-D442-4213-994B-E935019D6719}: [NameServer]156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{89786DF4-D487-4DC5-A4BA-16D303028739}: [NameServer]156.154.70.22,156.154.71.22
FireFox:
========
FF ProfilePath: C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Apps Hat - C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com [2014-01-31]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFF [2013-10-28]
Chrome:
=======
CHR HomePage: hxxp://us.yahoo.com?fr=fpc-comodo
CHR DefaultSearchKeyword: us.yahoo.com
CHR DefaultSearchProvider: Yahoo! Search
CHR DefaultSearchURL: http://us.search.yahoo.com/search?fr=ch ... earchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Peněženka Google) - C:\Users\KOTLAR .MARTIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31]
CHR Extension: (Apps Hat) - C:\Users\KOTLAR .MARTIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbffpbffjfiigoledmkcibcbadpbenec [2014-01-31]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-03-09] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-01-20] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-01-28] ()
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.)
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-01-28] ()
==================== Drivers (Whitelisted) ====================
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [2491392 2011-03-30] (C-Media Inc)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-02-01] ()
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20140131.001\IDSvia64.sys [521944 2014-01-24] (Symantec Corporation)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\ENG64.SYS [126040 2014-01-07] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\EX64.SYS [2099288 2014-01-07] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [52736 2009-07-23] (Realtek Semiconductor Corporation )
R3 SRTSP; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-10-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1404000.028\Ironx64.SYS [224416 2012-09-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
S3 WinRing0_1_2_0; No ImagePath
========================== Drivers MD5 =======================
C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 79059559E89D06E8B80CE2944BE20228
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdiox64.sys 6A2EEB0C4133B20773BB3DD0B7B377B4
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys B934322C68C30DCECA96C0274A51F7B0
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys 0E2BA6DC63E9CF3BF275856735A3E3BE
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AppleCharger.sys 6BE11AD81D4527D299F0CB5F3731AABC
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys F14F048B4D05FBCE536250EA74BF9FDC
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\system32\drivers\NAVx64\1404000.028\ccSetx64.sys 56685951208AC81CF923B9B08BEDF3B7
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cmderd.sys E34DF9613C8D24C5CB6F8DF8D74E5586
C:\Windows\System32\DRIVERS\cmdguard.sys D8E4A9A691BBA24EE242A1FDDF6EBAA1
C:\Windows\System32\DRIVERS\cmdhlp.sys F6B424B925B67C306BAA85AC79F7A5CC
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\drivers\cmudax3.sys 277D3ED6B6901A9C15B7828D40269509
C:\Windows\System32\Drivers\cng.sys EBF28856F69CF094A902F884CF989706
C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 1B7AA375F711F66D5FF2B855F9EC987F
C:\Windows\System32\Drivers\ElbyCDIO.sys BE2902E13CA69383F449B6BF927844FB
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 7230C8B80DDE1F0524C353240B78CC0E
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fssfltr.sys 07DA62C960DDCCC2D35836AEAB4FC578
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\gdrv.sys 7907E14F9BCF3A4689C9A74A1A873CB6
C:\Windows\GVTDrv64.sys 8126331FBD4ED29EB3B356F9C905064D
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20140131.001\IDSvia64.sys 777612849691B0D9EE064F93481FEFF1
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\inspect.sys 7D3B8880385ACFA47174847983C4A7FA
C:\Windows\System32\drivers\RTKVHD64.sys C2F868881D48A568B525255F084EF063
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 8F489706472F7E9A06BAAA198703FA64
C:\Windows\System32\Drivers\ksecpkg.sys 868A2CAAB12EFC7A021682BCA0EEC54C
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\ENG64.SYS 702E07EC32F96ACDB873E9A5465D4401
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\EX64.SYS 302EA314A1AF0D7CEF0A3D0195F79561
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys E366A5681C50785D4ED04FCFD65C3415
C:\Windows\System32\DRIVERS\nvlddmkm.sys 0218E1CE8F7B5D404980192B9112D03A
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\drivers\nvvad64v.sys 09216A70CC364D0974F606F6F2109210
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RMCAST.sys CAF88D6573D21CD2AA27001DDBFDC74D
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rtnic64.sys 04C2D5BD8D0776320230978A0AEC3BD0
C:\Windows\System32\DRIVERS\Rt64win7.sys AC4CA62572CA516945AB92D6C9F501F4
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSP64.SYS 2FD9346F9D76CB4192D37329CFA47A82
C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSPX64.SYS 0E76CEF892C45734F7AED09FDDF35D4D
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\NAVx64\1404000.028\SYMDS64.SYS 52DC0048D667757A8A2E4C87182890AC
C:\Windows\System32\drivers\NAVx64\1404000.028\SYMEFA64.SYS 599872BAD7CFB45C7CE47CDED4B726D8
C:\Windows\system32\Drivers\SYMEVENT64x86.SYS F19E5E37ED8134B9E5F6287F2D3A75D7
C:\Windows\system32\drivers\NAVx64\1404000.028\Ironx64.SYS ADF37F1A715D6C56C8E065FD8569A9A4
C:\Windows\system32\drivers\NAVx64\1404000.028\SYMNETS.SYS 9CDCA70485BD6B9D230365F67C31F132
C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbfilter.sys 504901430B6E03B99EBB6BF26E0868C6
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\System32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\DRIVERS\VClone.sys 3C8E2C591345F38149C69FE8E5DF8C90
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-02 22:12 - 2014-02-02 22:16 - 00038306 _____ () C:\Users\KOTLAR .MARTIN\Desktop\FRST.txt
2014-02-02 22:12 - 2014-02-02 22:16 - 00000000 ____D () C:\FRST
2014-02-02 22:11 - 2014-02-02 22:11 - 02080256 _____ (Farbar) C:\Users\KOTLAR .MARTIN\Desktop\FRST64.exe
2014-02-02 22:03 - 2014-02-02 22:04 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-02-02 21:48 - 2014-02-02 22:09 - 00000000 ____D () C:\Program Files\trend micro
2014-02-02 21:48 - 2014-02-02 21:48 - 00000000 ____D () C:\rsit
2014-02-02 21:37 - 2014-02-02 21:49 - 800000000 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part1.rar
2014-02-02 21:37 - 2014-02-02 21:49 - 743801736 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part2.rar
2014-02-02 21:13 - 2014-02-02 21:38 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rar
2014-02-02 21:12 - 2014-02-02 21:37 - 1038090303 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rev
2014-02-02 21:12 - 2014-02-02 21:37 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part2.rar
2014-02-02 21:12 - 2014-02-02 21:13 - 15978867 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part3.rar
2014-02-02 16:05 - 2014-02-02 16:05 - 00003574 ___SH () C:\Windows\SysWOW64\sound.mod
2014-02-01 17:01 - 2014-02-01 17:38 - 00002536 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-02-01 17:01 - 2014-02-01 17:01 - 00000000 ___HD () C:\VTRoot
2014-02-01 16:48 - 2014-02-01 16:48 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-02-01 16:47 - 2014-02-02 22:08 - 00443409 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-02-01 16:47 - 2014-02-01 17:18 - 00001838 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-02-01 16:47 - 2014-02-01 16:47 - 00000593 _____ () C:\Users\Public\Desktop\Sdílený prostor.lnk
2014-02-01 16:46 - 2014-02-01 16:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-02-01 16:45 - 2014-02-01 16:56 - 00002043 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-02-01 16:45 - 2014-02-01 16:47 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-02-01 16:45 - 2014-02-01 16:47 - 00000000 ____D () C:\ProgramData\COMODO
2014-02-01 16:45 - 2014-02-01 16:45 - 00000000 ____D () C:\Program Files\COMODO
2014-02-01 16:44 - 2014-02-01 16:47 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-02-01 16:44 - 2014-02-01 16:47 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-02-01 16:44 - 2014-02-01 16:46 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00001120 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-02-01 16:22 - 2014-02-01 16:22 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-02-01 16:15 - 2014-02-02 22:08 - 00000420 _____ () C:\Windows\Tasks\FixCleaner Startup.job
2014-02-01 16:15 - 2014-02-01 16:36 - 00002864 _____ () C:\Windows\System32\Tasks\FixCleaner Startup
2014-02-01 16:15 - 2014-02-01 16:33 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\FixCleaner
2014-02-01 16:15 - 2014-02-01 16:21 - 00000480 _____ () C:\Windows\Tasks\FixCleaner Scan.job
2014-02-01 16:15 - 2014-02-01 16:15 - 00003226 _____ () C:\Windows\System32\Tasks\FixCleaner Scan
2014-02-01 16:14 - 2014-02-01 16:38 - 00000000 ____D () C:\Program Files (x86)\FixCleaner
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\ProgramData\I.CA SecureStore
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\Program Files\I.CA SecureStore
2014-02-01 15:26 - 2014-02-01 15:30 - 00000000 ____D () C:\Users\Public\Documents\DriverGenius
2014-02-01 15:23 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\Windows\SysWOW64\nircmdc.exe
2014-01-31 23:58 - 2014-02-02 22:08 - 00002806 _____ () C:\Windows\setupact.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000354 _____ () C:\Windows\PFRO.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 23:53 - 2014-01-31 23:58 - 00000446 _____ () C:\Windows\Tasks\WDAutoShutdownKOTLAR .MARTIN.job
2014-01-31 23:53 - 2014-01-31 23:53 - 00003192 _____ () C:\Windows\System32\Tasks\WDAutoShutdownKOTLAR .MARTIN
2014-01-31 23:28 - 2014-01-31 23:54 - 00000000 ____D () C:\Program Files (x86)\Windows Doctor
2014-01-31 23:17 - 2010-05-28 12:37 - 32472008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2014-01-31 22:42 - 2014-01-31 22:42 - 00000000 _____ () C:\autoexec.bat
2014-01-31 22:41 - 2014-01-31 22:41 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-31 22:40 - 2014-01-31 23:01 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-30 14:49 - 2014-01-31 20:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 14:49 - 2014-01-30 14:49 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:46 - 2014-01-30 17:10 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-30 14:45 - 2014-02-02 22:08 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-30 14:45 - 2014-02-02 21:56 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-30 14:45 - 2014-01-30 14:51 - 00003964 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-30 14:45 - 2014-01-30 14:51 - 00003712 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-30 14:39 - 2014-01-30 14:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-30 14:39 - 2014-01-30 14:39 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-28 17:42 - 2014-02-02 17:20 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-28 17:42 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\BFBC2
2014-01-28 17:42 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\PunkBuster
2014-01-28 17:17 - 2014-02-02 17:20 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 02434856 _____ () C:\Windows\SysWOW64\pbsvc_bc2.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00000232 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Battlefield Bad Company™ 2.lnk
2014-01-28 17:14 - 2014-01-28 17:14 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-01-28 14:55 - 2014-01-28 14:56 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\Battlefield 4
2014-01-28 14:39 - 2014-01-28 14:43 - 00000000 ____D () C:\Program Files (x86)\ViUpdater
2014-01-28 14:28 - 2014-01-28 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\WebPlayer
2014-01-28 14:28 - 2014-01-28 14:28 - 00000000 ____D () C:\Program Files (x86)\Thoosje
2014-01-28 14:27 - 2014-02-02 22:08 - 00002016 _____ () C:\Windows\Tasks\Apps Hat-chromeinstaller.job
2014-01-28 14:27 - 2014-01-31 22:39 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-01-28 14:24 - 2014-01-28 14:24 - 00003214 _____ () C:\Windows\System32\Tasks\{616F5578-E3C5-4595-BFCF-AA2AF670736A}
2014-01-28 14:18 - 2014-01-28 14:28 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-28 14:16 - 2014-01-28 14:16 - 00930440 _____ (CNET Download.com) C:\Users\KOTLAR .MARTIN\Downloads\cbsidlm-cbsi176-Windows_7_Gadgets_Pack-ORG-75664936.exe
2014-01-28 14:05 - 2014-01-28 14:05 - 00000000 ____D () C:\Windows\System32\Tasks\PCMeter
2014-01-28 13:53 - 2014-01-31 23:47 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Seznam.cz
2014-01-27 20:13 - 2014-01-27 20:13 - 00003046 _____ () C:\Windows\System32\Tasks\{629871C6-33D0-497E-B17C-0981D9855A41}
2014-01-27 11:30 - 2009-07-23 22:03 - 00052736 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\Rtnic64.sys
2014-01-27 11:28 - 2012-08-28 13:27 - 00058536 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys
2014-01-27 11:24 - 2014-01-27 11:24 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA Corporation
2014-01-27 11:20 - 2014-01-27 20:11 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA
2014-01-27 11:20 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-27 11:20 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-27 11:19 - 2014-01-27 11:19 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-27 11:15 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-27 11:15 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-27 11:15 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-27 11:15 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-27 11:15 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-27 11:15 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-27 11:15 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-27 11:15 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-27 11:13 - 2013-11-26 15:49 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-01-27 11:13 - 2013-11-26 15:49 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00000317 _____ () C:\Windows\Cmicnfg3.ini.cfl
2014-01-27 11:06 - 2014-01-27 11:06 - 00000138 _____ () C:\Windows\system\Dlap.pfx
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files\C-Media PCI Audio Device
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-01-27 11:06 - 2011-04-01 15:20 - 08765440 ____N (C-Media Corporation) C:\Windows\SysWOW64\CMICNFG3.dll
2014-01-27 11:06 - 2011-02-24 16:52 - 00805376 ____N () C:\Windows\system32\Cmeaupci.exe
2014-01-27 11:06 - 2010-12-22 11:44 - 00143360 ____N () C:\Windows\SysWOW64\VmixP6.dll
2014-01-27 11:06 - 2010-09-17 13:53 - 00121856 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv642.dll
2014-01-27 11:06 - 2010-09-17 13:53 - 00121856 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv64.dll
2014-01-27 11:06 - 2010-09-17 13:52 - 00217088 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2014-01-27 11:06 - 2010-09-17 13:52 - 00217088 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2014-01-27 11:06 - 2008-07-23 18:59 - 00389120 ____N () C:\Windows\system32\CMICNFG3.cpl
2014-01-27 11:06 - 2008-07-11 15:04 - 00200704 ____N () C:\Windows\SysWOW64\HsMgr.exe
2014-01-27 11:06 - 2008-07-11 15:03 - 00282112 ____N () C:\Windows\system\HsMgr64.exe
2014-01-27 11:06 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2014-01-27 11:06 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2014-01-27 11:06 - 2007-11-05 01:30 - 01144983 ____N () C:\Windows\SysWOW64\KB936225x64.msu
2014-01-27 11:06 - 2006-09-14 02:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\CMPaOxy.dll
2014-01-27 11:04 - 2014-02-02 22:09 - 00001174 _____ () C:\Users\KOTLAR .MARTIN\rgmnr
2014-01-27 10:30 - 2014-01-27 11:06 - 00000193 _____ () C:\Windows\Cmicnfg3.ini.imi
2014-01-27 10:30 - 2014-01-27 11:06 - 00000132 _____ () C:\Windows\system\Cmicnfg3.ini
2014-01-27 10:30 - 2009-12-11 11:28 - 00002754 ____N () C:\Windows\cmudax3.ini
2014-01-27 10:30 - 2009-08-19 16:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-01-27 10:30 - 2008-10-15 15:41 - 00003518 ____N () C:\Windows\Cmicnfg3.ini.cfg
2014-01-27 10:30 - 2006-10-06 05:45 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2014-01-27 10:21 - 2014-01-19 19:57 - 00001419 ____S () C:\Windows\SysWOW64\msstp.vbe
2014-01-25 16:30 - 2014-01-25 16:35 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Ahead
2014-01-25 16:30 - 2014-01-25 16:30 - 00002754 _____ () C:\Users\Public\Desktop\Nero StartSmart.lnk
2014-01-25 16:29 - 2014-01-25 20:50 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Ahead
2014-01-25 16:28 - 2014-01-25 16:28 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-25 14:39 - 2014-01-25 14:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-25 14:39 - 2012-06-19 16:54 - 04065296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-25 14:39 - 2012-06-19 13:31 - 00293889 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-25 14:39 - 2012-06-08 16:23 - 00083072 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-01-25 14:39 - 2012-06-08 16:21 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-01-25 14:39 - 2012-06-08 16:21 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-01-25 14:39 - 2012-06-08 16:18 - 03615888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-25 14:39 - 2012-06-06 10:44 - 00869520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-25 14:39 - 2012-06-01 09:37 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-25 14:39 - 2012-05-31 18:08 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-25 14:39 - 2012-05-10 15:22 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-25 14:39 - 2012-04-03 18:42 - 01015640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-25 14:39 - 2012-02-21 19:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-01-25 14:39 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-01-25 14:39 - 2011-12-18 17:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-01-25 14:39 - 2011-12-16 14:57 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2014-01-25 14:39 - 2011-12-13 16:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-01-25 14:39 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-01-25 14:39 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-01-25 14:39 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-01-25 14:39 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2014-01-25 14:38 - 2012-04-10 14:40 - 02533952 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-01-25 14:38 - 2012-03-08 11:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-25 14:38 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-25 13:01 - 2014-01-25 13:01 - 56324562 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\64bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:59 - 2014-01-25 13:00 - 51733249 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\32bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:50 - 2014-01-25 12:50 - 00003192 _____ () C:\Windows\System32\Tasks\{DFF0DA29-55B9-44A9-9CA5-344EB6B33950}
2014-01-25 12:35 - 2014-02-01 17:47 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-01-24 20:36 - 2014-02-02 21:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Desktop\FILMY.avi CZ
2014-01-24 20:15 - 2014-01-24 20:15 - 00002824 _____ () C:\{F5B821E1-FEAC-453D-B1F4-39D178C2C4B0}
2014-01-24 20:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-24 20:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-24 20:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\AMD
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\ProgramData\ATI
2014-01-07 18:11 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-01-07 18:10 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\ProgramData\AMD
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-01-07 18:10 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys
2014-01-07 18:08 - 2014-01-07 18:08 - 00000000 ____D () C:\AMD
2014-01-07 16:49 - 2014-01-27 10:56 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-01-07 15:30 - 2014-01-07 15:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\SlimWare Utilities Inc
2014-01-07 14:53 - 2014-01-07 14:53 - 00000000 ____D () C:\ProgramData\RegClean
2014-01-07 14:42 - 2014-01-25 13:48 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-01-07 14:23 - 2014-01-07 14:23 - 00000000 ____D () C:\Program Files (x86)\Multimedia Card Reader
2014-01-07 14:00 - 2004-06-14 14:56 - 00427864 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\XceedZip.dll
2014-01-07 14:00 - 2004-03-09 16:45 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-01-03 16:08 - 2014-02-02 22:13 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA.job
2014-01-03 16:08 - 2014-02-02 16:13 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core.job
2014-01-03 16:08 - 2014-01-03 16:08 - 00003958 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA
2014-01-03 16:08 - 2014-01-03 16:08 - 00003590 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core
2014-01-03 16:08 - 2014-01-03 16:08 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook
==================== One Month Modified Files and Folders =======
2014-02-02 22:16 - 2014-02-02 22:12 - 00038306 _____ () C:\Users\KOTLAR .MARTIN\Desktop\FRST.txt
2014-02-02 22:16 - 2014-02-02 22:12 - 00000000 ____D () C:\FRST
2014-02-02 22:15 - 2009-07-14 05:45 - 00021504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:15 - 2009-07-14 05:45 - 00021504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:13 - 2014-01-03 16:08 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA.job
2014-02-02 22:11 - 2014-02-02 22:11 - 02080256 _____ (Farbar) C:\Users\KOTLAR .MARTIN\Desktop\FRST64.exe
2014-02-02 22:11 - 2013-12-23 18:45 - 01364310 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 22:09 - 2014-02-02 21:48 - 00000000 ____D () C:\Program Files\trend micro
2014-02-02 22:09 - 2014-01-27 11:04 - 00001174 _____ () C:\Users\KOTLAR .MARTIN\rgmnr
2014-02-02 22:08 - 2014-02-01 16:47 - 00443409 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-02-02 22:08 - 2014-02-01 16:15 - 00000420 _____ () C:\Windows\Tasks\FixCleaner Startup.job
2014-02-02 22:08 - 2014-01-31 23:58 - 00002806 _____ () C:\Windows\setupact.log
2014-02-02 22:08 - 2014-01-30 14:45 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-02 22:08 - 2014-01-28 14:27 - 00002016 _____ () C:\Windows\Tasks\Apps Hat-chromeinstaller.job
2014-02-02 22:08 - 2013-10-27 11:46 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-02 22:08 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-02 22:05 - 2013-10-27 11:51 - 00004034 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2E33D269-CE6D-4DDC-A81D-6E88A629D79D}
2014-02-02 22:04 - 2014-02-02 22:03 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-02-02 21:56 - 2014-01-30 14:45 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-02 21:54 - 2013-10-27 18:35 - 00001120 _____ () C:\Users\KOTLAR .MARTIN\AppData\Local\SRDownloader.nast
2014-02-02 21:49 - 2014-02-02 21:37 - 800000000 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part1.rar
2014-02-02 21:49 - 2014-02-02 21:37 - 743801736 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part2.rar
2014-02-02 21:48 - 2014-02-02 21:48 - 00000000 ____D () C:\rsit
2014-02-02 21:42 - 2013-12-27 11:54 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Skype
2014-02-02 21:38 - 2014-02-02 21:13 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rar
2014-02-02 21:37 - 2014-02-02 21:12 - 1038090303 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rev
2014-02-02 21:37 - 2014-02-02 21:12 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part2.rar
2014-02-02 21:30 - 2014-01-24 20:36 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Desktop\FILMY.avi CZ
2014-02-02 21:22 - 2013-10-27 18:43 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 21:13 - 2014-02-02 21:12 - 15978867 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part3.rar
2014-02-02 17:20 - 2014-01-28 17:42 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-02-02 17:20 - 2014-01-28 17:17 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-02-02 16:37 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\BFBC2
2014-02-02 16:13 - 2014-01-03 16:08 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core.job
2014-02-02 16:05 - 2014-02-02 16:05 - 00003574 ___SH () C:\Windows\SysWOW64\sound.mod
2014-02-01 19:16 - 2013-10-27 15:02 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-02-01 18:57 - 2013-11-05 12:37 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\CrashDumps
2014-02-01 18:14 - 2010-11-21 10:27 - 00668260 _____ () C:\Windows\system32\perfh005.dat
2014-02-01 18:14 - 2010-11-21 10:27 - 00140920 _____ () C:\Windows\system32\perfc005.dat
2014-02-01 18:14 - 2009-07-14 06:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-01 17:47 - 2014-01-25 12:35 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-02-01 17:47 - 2013-10-27 11:46 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-02-01 17:47 - 2013-10-27 11:46 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-02-01 17:38 - 2014-02-01 17:01 - 00002536 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-02-01 17:26 - 2009-07-14 06:08 - 00032546 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 17:18 - 2014-02-01 16:47 - 00001838 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-02-01 17:01 - 2014-02-01 17:01 - 00000000 ___HD () C:\VTRoot
2014-02-01 16:56 - 2014-02-01 16:45 - 00002043 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-02-01 16:48 - 2014-02-01 16:48 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-02-01 16:47 - 2014-02-01 16:47 - 00000593 _____ () C:\Users\Public\Desktop\Sdílený prostor.lnk
2014-02-01 16:47 - 2014-02-01 16:45 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-02-01 16:47 - 2014-02-01 16:45 - 00000000 ____D () C:\ProgramData\COMODO
2014-02-01 16:47 - 2014-02-01 16:44 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-02-01 16:47 - 2014-02-01 16:44 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-02-01 16:47 - 2013-10-27 11:46 - 00000000 ____D () C:\Users\KOTLAR~1~MAR
2014-02-01 16:46 - 2014-02-01 16:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-02-01 16:46 - 2014-02-01 16:44 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-02-01 16:45 - 2014-02-01 16:45 - 00000000 ____D () C:\Program Files\COMODO
2014-02-01 16:44 - 2014-02-01 16:44 - 00001120 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-02-01 16:38 - 2014-02-01 16:14 - 00000000 ____D () C:\Program Files (x86)\FixCleaner
2014-02-01 16:36 - 2014-02-01 16:15 - 00002864 _____ () C:\Windows\System32\Tasks\FixCleaner Startup
2014-02-01 16:33 - 2014-02-01 16:15 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\FixCleaner
2014-02-01 16:22 - 2014-02-01 16:22 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-02-01 16:21 - 2014-02-01 16:15 - 00000480 _____ () C:\Windows\Tasks\FixCleaner Scan.job
2014-02-01 16:15 - 2014-02-01 16:15 - 00003226 _____ () C:\Windows\System32\Tasks\FixCleaner Scan
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\ProgramData\I.CA SecureStore
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\Program Files\I.CA SecureStore
2014-02-01 15:33 - 2013-10-27 11:35 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-01 15:30 - 2014-02-01 15:26 - 00000000 ____D () C:\Users\Public\Documents\DriverGenius
2014-01-31 23:58 - 2014-01-31 23:58 - 00000354 _____ () C:\Windows\PFRO.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 23:58 - 2014-01-31 23:53 - 00000446 _____ () C:\Windows\Tasks\WDAutoShutdownKOTLAR .MARTIN.job
2014-01-31 23:54 - 2014-01-31 23:28 - 00000000 ____D () C:\Program Files (x86)\Windows Doctor
2014-01-31 23:53 - 2014-01-31 23:53 - 00003192 _____ () C:\Windows\System32\Tasks\WDAutoShutdownKOTLAR .MARTIN
2014-01-31 23:47 - 2014-01-28 13:53 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Seznam.cz
2014-01-31 23:47 - 2013-10-27 15:41 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-01-31 23:01 - 2014-01-31 22:40 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-31 22:42 - 2014-01-31 22:42 - 00000000 _____ () C:\autoexec.bat
2014-01-31 22:41 - 2014-01-31 22:41 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-31 22:39 - 2014-01-28 14:27 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-01-31 20:18 - 2014-01-30 14:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 19:52 - 2013-12-27 11:54 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 18:58 - 2013-12-11 11:05 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Winamp
2014-01-30 17:10 - 2014-01-30 14:46 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-30 14:51 - 2014-01-30 14:45 - 00003964 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-30 14:51 - 2014-01-30 14:45 - 00003712 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-30 14:50 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-30 14:49 - 2014-01-30 14:49 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:46 - 2013-10-31 11:24 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-30 14:39 - 2014-01-30 14:39 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-28 17:42 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\PunkBuster
2014-01-28 17:17 - 2014-01-28 17:17 - 02434856 _____ () C:\Windows\SysWOW64\pbsvc_bc2.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00000232 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Battlefield Bad Company™ 2.lnk
2014-01-28 17:14 - 2014-01-28 17:14 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-01-28 14:56 - 2014-01-28 14:55 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\Battlefield 4
2014-01-28 14:43 - 2014-01-28 14:39 - 00000000 ____D () C:\Program Files (x86)\ViUpdater
2014-01-28 14:43 - 2013-12-11 11:05 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-01-28 14:39 - 2014-01-28 14:28 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\WebPlayer
2014-01-28 14:28 - 2014-01-28 14:28 - 00000000 ____D () C:\Program Files (x86)\Thoosje
2014-01-28 14:28 - 2014-01-28 14:18 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-28 14:24 - 2014-01-28 14:24 - 00003214 _____ () C:\Windows\System32\Tasks\{616F5578-E3C5-4595-BFCF-AA2AF670736A}
2014-01-28 14:16 - 2014-01-28 14:16 - 00930440 _____ (CNET Download.com) C:\Users\KOTLAR .MARTIN\Downloads\cbsidlm-cbsi176-Windows_7_Gadgets_Pack-ORG-75664936.exe
2014-01-28 14:05 - 2014-01-28 14:05 - 00000000 ____D () C:\Windows\System32\Tasks\PCMeter
2014-01-27 20:16 - 2013-10-27 14:50 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Google
2014-01-27 20:13 - 2014-01-27 20:13 - 00003046 _____ () C:\Windows\System32\Tasks\{629871C6-33D0-497E-B17C-0981D9855A41}
2014-01-27 20:11 - 2014-01-27 11:20 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA
2014-01-27 18:58 - 2013-10-27 15:46 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-01-27 11:34 - 2013-10-27 15:32 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Vso
2014-01-27 11:30 - 2013-10-27 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-27 11:27 - 2013-11-04 17:53 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-27 11:24 - 2014-01-27 11:24 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA Corporation
2014-01-27 11:24 - 2013-10-27 11:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-27 11:20 - 2013-10-27 11:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-27 11:20 - 2013-10-27 11:44 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-27 11:19 - 2014-01-27 11:19 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-27 11:08 - 2013-10-27 11:29 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\VirtualStore
2014-01-27 11:06 - 2014-01-27 11:06 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00000317 _____ () C:\Windows\Cmicnfg3.ini.cfl
2014-01-27 11:06 - 2014-01-27 11:06 - 00000138 _____ () C:\Windows\system\Dlap.pfx
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files\C-Media PCI Audio Device
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-01-27 11:06 - 2014-01-27 10:30 - 00000193 _____ () C:\Windows\Cmicnfg3.ini.imi
2014-01-27 11:06 - 2014-01-27 10:30 - 00000132 _____ () C:\Windows\system\Cmicnfg3.ini
2014-01-27 11:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2014-01-27 11:04 - 2013-10-27 11:27 - 00000000 ____D () C:\Users\KOTLAR .MARTIN
2014-01-27 10:56 - 2014-01-07 16:49 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-01-26 19:30 - 2013-10-27 15:32 - 00001041 _____ () C:\Users\KOTLAR .MARTIN\AppData\Roaming\vso_ts_preview.xml
2014-01-25 20:50 - 2014-01-25 16:29 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Ahead
2014-01-25 16:35 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Ahead
2014-01-25 16:30 - 2014-01-25 16:30 - 00002754 _____ () C:\Users\Public\Desktop\Nero StartSmart.lnk
2014-01-25 16:28 - 2014-01-25 16:28 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-25 16:28 - 2013-10-28 12:39 - 00000000 ____D () C:\ProgramData\Nero
2014-01-25 14:39 - 2014-01-25 14:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-25 13:48 - 2014-01-07 14:42 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-01-25 13:01 - 2014-01-25 13:01 - 56324562 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\64bit_Vista_Win7_Win8_R270.exe
2014-01-25 13:00 - 2014-01-25 12:59 - 51733249 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\32bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:50 - 2014-01-25 12:50 - 00003192 _____ () C:\Windows\System32\Tasks\{DFF0DA29-55B9-44A9-9CA5-344EB6B33950}
2014-01-24 20:20 - 2009-07-14 05:45 - 00414904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-24 20:17 - 2013-12-09 10:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-24 20:16 - 2013-10-27 12:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-24 20:15 - 2014-01-24 20:15 - 00002824 _____ () C:\{F5B821E1-FEAC-453D-B1F4-39D178C2C4B0}
2014-01-24 20:14 - 2013-10-27 12:38 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-19 19:57 - 2014-01-27 10:21 - 00001419 ____S () C:\Windows\SysWOW64\msstp.vbe
2014-01-16 09:59 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-11 18:42 - 2013-12-27 11:15 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Windows Live
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\AMD
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\ProgramData\ATI
2014-01-07 18:11 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-01-07 18:11 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\ProgramData\AMD
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-01-07 18:08 - 2014-01-07 18:08 - 00000000 ____D () C:\AMD
2014-01-07 15:30 - 2014-01-07 15:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\SlimWare Utilities Inc
2014-01-07 14:53 - 2014-01-07 14:53 - 00000000 ____D () C:\ProgramData\RegClean
2014-01-07 14:46 - 2013-10-27 11:41 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-01-07 14:23 - 2014-01-07 14:23 - 00000000 ____D () C:\Program Files (x86)\Multimedia Card Reader
2014-01-07 13:35 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-07 13:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-07 12:51 - 2013-12-08 12:07 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2014-01-03 16:08 - 2014-01-03 16:08 - 00003958 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA
2014-01-03 16:08 - 2014-01-03 16:08 - 00003590 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core
2014-01-03 16:08 - 2014-01-03 16:08 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== BCD ================================
Spr vce spouçtŘnˇ syst‚mu Windows
--------------------
identifik tor {bootmgr}
device partition=C:
description Windows Boot Manager
locale cs-CZ
inherit {globalsettings}
default {current}
resumeobject {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Zav dŘcˇ program pro spouçtŘnˇ syst‚mu Windows
-------------------
identifik tor {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale cs-CZ
inherit {bootloadersettings}
recoverysequence {5e9f94c3-3ef1-11e3-9681-a100c8e4825e}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
nx OptIn
Zav dŘcˇ program pro spouçtŘnˇ syst‚mu Windows
-------------------
identifik tor {5e9f94c3-3ef1-11e3-9681-a100c8e4825e}
device ramdisk=[C:]\Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\Winre.wim,{5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\Winre.wim,{5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
systemroot \windows
nx OptIn
winpe Yes
Obnovenˇ z hibernace
---------------------
identifik tor {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale cs-CZ
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Testov nˇ pamŘti syst‚mu Windows
---------------------
identifik tor {memdiag}
device partition=C:
path \boot\memtest.exe
description Diagnostika pamŘti syst‚mu Windows
locale cs-CZ
inherit {globalsettings}
badmemoryaccess Yes
Nastavenˇ slu§by EMS
------------
identifik tor {emssettings}
bootems Yes
Nastavenˇ ladicˇho programu
-----------------
identifik tor {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Chyby pamŘti RAM
-----------
identifik tor {badmemory}
Glob lnˇ nastavenˇ
---------------
identifik tor {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Nastavenˇ spouçtŘcˇho zavadŘźe
--------------------
identifik tor {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Nastavenˇ hypervisoru
-------------------
identifik tor {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Nastavenˇ zavadŘźe obnovenˇ
----------------------
identifik tor {resumeloadersettings}
inherit {globalsettings}
Parametry zaýˇzenˇ
--------------
identifik tor {5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\boot.sdi
LastRegBack: 2013-12-18 15:17
==================== End Of Log ============================
Ran by KOTLAR .MARTIN (administrator) on KOTLARMARTIN-PC on 02-02-2014 22:16:33
Running from C:\Users\KOTLAR .MARTIN\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccsvchst.exe
(Symantec Corporation) C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccsvchst.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\HsMgr.exe
() C:\Windows\system\HsMgr64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\PanProcess.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Seznam.cz a.s.) C:\Program Files (x86)\Seznam\Postak\Postak.exe
(Elaborate Bytes AG) C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe
() C:\Program Files (x86)\Winamp\winampa.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit_manager.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Comodo Security Solutions, Inc.) C:\Program Files (x86)\Comodo\GeekBuddy\unit.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
(COMODO) C:\Program Files\COMODO\COMODO Internet Security\cis.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [CmPCIaudio] - C:\Windows\Syswow64\CMICNFG3.dll [8765440 2011-04-01] (C-Media Corporation)
HKLM\...\Run: [Cmaudio8768GX] - C:\Windows\syswow64\HsMgr.exe [200704 2008-07-11] ()
HKLM\...\Run: [Cmaudio8768GX64] - C:\Windows\system\HsMgr64.exe [282112 2008-07-11] ()
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\nvspcap64.dll [1100248 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [COMODO Internet Security] - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe [1612504 2013-11-11] (COMODO)
HKLM-x32\...\Run: [SMail] - C:\Program Files (x86)\Seznam\Postak\Postak.exe [450560 2006-05-18] (Seznam.cz a.s.)
HKLM-x32\...\Run: [VirtualCloneDrive] - C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [WinampAgent] - C:\Program Files (x86)\Winamp\winampa.exe [36352 2008-03-27] ()
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [636032 2012-03-09] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [mncgdrmtSrv] - C:\Windows\inf\mncgdrmt.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [MSStp] - C:\Windows\SysWOW64\msstp.vbe [1419 2014-01-19] ()
HKLM-x32\...\Run: [mncfyssrSrv] - C:\Windows\inf\mncfyssr.vbe [1342 2014-01-19] ()
HKLM-x32\...\Run: [mswupkvSrv] - "C:\Windows\system32\mswupkv.vbe" mskcmuh mslgrq
HKLM-x32\...\Run: [tvncontrol] - C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Orb] - C:\Program Files (x86)\Winamp Remote\bin\OrbTray.exe [507904 2008-04-01] (Orb Networks)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Facebook Update] - C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-01-03] (Facebook Inc.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] - C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [153136 2007-03-12] (Nero AG)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\MountPoints2: {0b13fcf2-4210-11e3-a3be-a0f3c105443e} - F:\Setup.exe
HKU\S-1-5-21-2317273582-2740364107-1665321909-1000\...\MountPoints2: {5a73a54e-4549-11e3-98fd-a0f3c105443e} - F:\Autorun.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://us.yahoo.com?fr=fp-comodo
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/UP97_FRPage
URLSearchHook: HKLM-x32 - Winamp Toolbar Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
URLSearchHook: HKCU - Winamp Toolbar Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
SearchScopes: HKLM-x32 - DefaultScope {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
SearchScopes: HKLM-x32 - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
SearchScopes: HKCU - E29C89E8500F49F0AEB05F4E1CE36654 URL = http://www.google.com/cse?cx=partner-pu ... earchTerms}
SearchScopes: HKCU - {66F753E7-8BB3-4f2e-AE76-93D7283186DF} URL = http://us.search.yahoo.com/search?p={se ... chr-comodo
SearchScopes: HKCU - {79D695BC-FE3A-4131-B6B1-9FB7605F397A} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13014
SearchScopes: HKCU - {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} URL = http://slirsredirect.search.aol.com/red ... 11-12-2013
BHO: Apps Hat - {11111111-1111-1111-1111-110411851159} - C:\Program Files (x86)\Apps Hat\Apps Hat-bho64.dll (Nero)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Toolbar: HKLM-x32 - Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.)
Toolbar: HKLM-x32 - Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{6DECA789-D442-4213-994B-E935019D6719}: [NameServer]156.154.70.22,156.154.71.22
Tcpip\..\Interfaces\{89786DF4-D487-4DC5-A4BA-16D303028739}: [NameServer]156.154.70.22,156.154.71.22
FireFox:
========
FF ProfilePath: C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default
FF SearchEngineOrder.3: Bing
FF Homepage: hxxp://www.seznam.cz/
FF Keyword.URL: hxxp://www.bing.com/search?FORM=UP97DF&PC=UP97&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.13.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.13.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF SearchPlugin: C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default\searchplugins\bingp.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Apps Hat - C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla\Firefox\Profiles\edhmk039.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com [2014-01-31]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2014-01-30]
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\IPSFF [2013-10-28]
Chrome:
=======
CHR HomePage: hxxp://us.yahoo.com?fr=fpc-comodo
CHR DefaultSearchKeyword: us.yahoo.com
CHR DefaultSearchProvider: Yahoo! Search
CHR DefaultSearchURL: http://us.search.yahoo.com/search?fr=ch ... earchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Peněženka Google) - C:\Users\KOTLAR .MARTIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-10-31]
CHR Extension: (Apps Hat) - C:\Users\KOTLAR .MARTIN\AppData\Local\Google\Chrome\User Data\Default\Extensions\pbffpbffjfiigoledmkcibcbadpbenec [2014-01-31]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2013-10-09]
==================== Services (Whitelisted) =================
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-03-09] (Advanced Micro Devices, Inc.)
S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 CLPSLauncher; C:\Program Files (x86)\Common Files\COMODO\launcher_service.exe [70352 2014-01-20] (Comodo Security Solutions, Inc.)
R2 cmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [6254152 2013-10-20] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [164056 2013-09-24] (COMODO)
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-01-28] ()
R2 GeekBuddyRSP; C:\Program Files (x86)\Common Files\COMODO\GeekBuddyRSP.exe [2327248 2014-01-20] (Comodo Security Solutions, Inc.)
R2 NAV; C:\Program Files (x86)\Norton AntiVirus\Engine\20.4.0.40\ccSvcHst.exe [144368 2013-05-20] (Symantec Corporation)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [271920 2007-03-12] (Nero AG)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625304 2012-09-28] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2014-01-28] ()
==================== Drivers (Whitelisted) ====================
S3 AODDriver; C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys [52280 2010-03-12] (Advanced Micro Devices)
R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [55936 2012-01-03] (Advanced Micro Devices)
R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R1 BHDrvx64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NAV; C:\Windows\system32\drivers\NAVx64\1404000.028\ccSetx64.sys [169048 2013-04-15] (Symantec Corporation)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [23168 2013-09-24] (COMODO)
R1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [709144 2013-11-14] (COMODO)
R1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [48872 2013-09-24] (COMODO)
R3 cmuda3; C:\Windows\System32\drivers\cmudax3.sys [2491392 2011-03-30] (C-Media Inc)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-11-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-11-21] (Symantec Corporation)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2014-02-01] ()
R1 IDSVia64; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20140131.001\IDSvia64.sys [521944 2014-01-24] (Symantec Corporation)
R1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [96800 2013-09-24] (COMODO)
R3 NAVENG; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\ENG64.SYS [126040 2014-01-07] (Symantec Corporation)
R3 NAVEX15; C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\EX64.SYS [2099288 2014-01-07] (Symantec Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 RTL8023x64; C:\Windows\System32\DRIVERS\Rtnic64.sys [52736 2009-07-23] (Realtek Semiconductor Corporation )
R3 SRTSP; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSP64.SYS [796760 2013-05-15] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSPX64.SYS [36952 2013-03-04] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMDS64.SYS [493656 2013-05-20] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NAVx64\1404000.028\SYMEFA64.SYS [1139800 2013-05-22] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177312 2013-10-27] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NAVx64\1404000.028\Ironx64.SYS [224416 2012-09-06] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NAVx64\1404000.028\SYMNETS.SYS [433752 2013-04-24] (Symantec Corporation)
S3 WinRing0_1_2_0; No ImagePath
========================== Drivers MD5 =======================
C:\Windows\system32\drivers\1394ohci.sys ==> MD5 is legit
C:\Windows\System32\drivers\ACPI.sys ==> MD5 is legit
C:\Windows\system32\drivers\acpipmi.sys ==> MD5 is legit
C:\Windows\system32\drivers\adp94xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\adpu320.sys ==> MD5 is legit
C:\Windows\system32\drivers\afd.sys 79059559E89D06E8B80CE2944BE20228
C:\Windows\system32\drivers\agp440.sys ==> MD5 is legit
C:\Windows\system32\drivers\aliide.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdide.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdiox64.sys 6A2EEB0C4133B20773BB3DD0B7B377B4
C:\Windows\system32\drivers\amdk8.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\amdppm.sys ==> MD5 is legit
C:\Windows\system32\drivers\amdsata.sys D4121AE6D0C0E7E13AA221AA57EF2D49
C:\Windows\system32\drivers\amdsbs.sys ==> MD5 is legit
C:\Windows\System32\drivers\amdxata.sys 540DAF1CEA6094886D72126FD7C33048
C:\Program Files (x86)\GIGABYTE\ET6\amd64\AODDriver.sys B934322C68C30DCECA96C0274A51F7B0
C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys 0E2BA6DC63E9CF3BF275856735A3E3BE
C:\Windows\system32\drivers\appid.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AppleCharger.sys 6BE11AD81D4527D299F0CB5F3731AABC
C:\Windows\system32\drivers\arc.sys ==> MD5 is legit
C:\Windows\system32\drivers\arcsas.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\asyncmac.sys ==> MD5 is legit
C:\Windows\System32\drivers\atapi.sys ==> MD5 is legit
C:\Windows\system32\drivers\bxvbda.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\b57nd60a.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Beep.sys ==> MD5 is legit
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\BASHDefs\20140121.001\BHDrvx64.sys F14F048B4D05FBCE536250EA74BF9FDC
C:\Windows\System32\DRIVERS\blbdrive.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\bowser.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltLo.sys ==> MD5 is legit
C:\Windows\system32\drivers\BrFiltUp.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Brserid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrSerWdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\BrUsbSer.sys ==> MD5 is legit
C:\Windows\system32\drivers\bthmodem.sys ==> MD5 is legit
C:\Windows\system32\drivers\NAVx64\1404000.028\ccSetx64.sys 56685951208AC81CF923B9B08BEDF3B7
C:\Windows\System32\DRIVERS\cdfs.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cdrom.sys ==> MD5 is legit
C:\Windows\system32\drivers\circlass.sys ==> MD5 is legit
C:\Windows\System32\CLFS.sys ==> MD5 is legit
C:\Windows\system32\drivers\CmBatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\cmderd.sys E34DF9613C8D24C5CB6F8DF8D74E5586
C:\Windows\System32\DRIVERS\cmdguard.sys D8E4A9A691BBA24EE242A1FDDF6EBAA1
C:\Windows\System32\DRIVERS\cmdhlp.sys F6B424B925B67C306BAA85AC79F7A5CC
C:\Windows\system32\drivers\cmdide.sys ==> MD5 is legit
C:\Windows\System32\drivers\cmudax3.sys 277D3ED6B6901A9C15B7828D40269509
C:\Windows\System32\Drivers\cng.sys EBF28856F69CF094A902F884CF989706
C:\Windows\system32\drivers\compbatt.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\CompositeBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\crcdisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\csc.sys ==> MD5 is legit
C:\Windows\System32\Drivers\dfsc.sys ==> MD5 is legit
C:\Windows\System32\drivers\discache.sys ==> MD5 is legit
C:\Windows\System32\drivers\disk.sys ==> MD5 is legit
C:\Windows\system32\drivers\dmvsc.sys 5DB085A8A6600BE6401F2B24EECB5415
C:\Windows\system32\drivers\drmkaud.sys ==> MD5 is legit
C:\Windows\System32\drivers\dxgkrnl.sys 88612F1CE3BF42256913BF6E61C70D52
C:\Windows\system32\drivers\evbda.sys ==> MD5 is legit
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys 1B7AA375F711F66D5FF2B855F9EC987F
C:\Windows\System32\Drivers\ElbyCDIO.sys BE2902E13CA69383F449B6BF927844FB
C:\Windows\system32\drivers\elxstor.sys ==> MD5 is legit
C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys 7230C8B80DDE1F0524C353240B78CC0E
C:\Windows\system32\drivers\errdev.sys ==> MD5 is legit
C:\Windows\System32\Drivers\exfat.sys ==> MD5 is legit
C:\Windows\System32\Drivers\fastfat.sys ==> MD5 is legit
C:\Windows\system32\drivers\fdc.sys ==> MD5 is legit
C:\Windows\System32\drivers\fileinfo.sys ==> MD5 is legit
C:\Windows\System32\drivers\filetrace.sys ==> MD5 is legit
C:\Windows\system32\drivers\flpydisk.sys ==> MD5 is legit
C:\Windows\System32\drivers\fltmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\FsDepends.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\fssfltr.sys 07DA62C960DDCCC2D35836AEAB4FC578
C:\Windows\System32\Drivers\Fs_Rec.sys 6BD9295CC032DD3077C671FCCF579A7B
C:\Windows\System32\DRIVERS\fvevol.sys 8F6322049018354F45F05A2FD2D4E5E0
C:\Windows\system32\drivers\gagp30kx.sys ==> MD5 is legit
C:\Windows\gdrv.sys 7907E14F9BCF3A4689C9A74A1A873CB6
C:\Windows\GVTDrv64.sys 8126331FBD4ED29EB3B356F9C905064D
C:\Windows\system32\drivers\hcw85cir.sys ==> MD5 is legit
C:\Windows\System32\drivers\HdAudio.sys 975761C778E33CD22498059B91E7373A
C:\Windows\System32\DRIVERS\HDAudBus.sys ==> MD5 is legit
C:\Windows\system32\drivers\HidBatt.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidbth.sys ==> MD5 is legit
C:\Windows\system32\drivers\hidir.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\hidusb.sys ==> MD5 is legit
C:\Windows\system32\drivers\HpSAMD.sys ==> MD5 is legit
C:\Windows\System32\drivers\HTTP.sys ==> MD5 is legit
C:\Windows\System32\drivers\hwpolicy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\i8042prt.sys ==> MD5 is legit
C:\Windows\system32\drivers\iaStorV.sys AAAF44DB3BD0B9D1FB6969B23ECC8366
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\IPSDefs\20140131.001\IDSvia64.sys 777612849691B0D9EE064F93481FEFF1
C:\Windows\system32\drivers\iirsp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\inspect.sys 7D3B8880385ACFA47174847983C4A7FA
C:\Windows\System32\drivers\RTKVHD64.sys C2F868881D48A568B525255F084EF063
C:\Windows\system32\drivers\intelide.sys ==> MD5 is legit
C:\Windows\system32\drivers\intelppm.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\IPMIDrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\ipnat.sys ==> MD5 is legit
C:\Windows\System32\drivers\irenum.sys ==> MD5 is legit
C:\Windows\system32\drivers\isapnp.sys ==> MD5 is legit
C:\Windows\system32\drivers\msiscsi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\kbdclass.sys ==> MD5 is legit
C:\Windows\system32\drivers\kbdhid.sys ==> MD5 is legit
C:\Windows\System32\Drivers\ksecdd.sys 8F489706472F7E9A06BAAA198703FA64
C:\Windows\System32\Drivers\ksecpkg.sys 868A2CAAB12EFC7A021682BCA0EEC54C
C:\Windows\system32\drivers\ksthunk.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\lltdio.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_fc.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_sas2.sys ==> MD5 is legit
C:\Windows\system32\drivers\lsi_scsi.sys ==> MD5 is legit
C:\Windows\system32\drivers\luafv.sys ==> MD5 is legit
C:\Windows\system32\drivers\megasas.sys ==> MD5 is legit
C:\Windows\system32\drivers\MegaSR.sys ==> MD5 is legit
C:\Windows\System32\drivers\modem.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\monitor.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouclass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mouhid.sys ==> MD5 is legit
C:\Windows\System32\drivers\mountmgr.sys ==> MD5 is legit
C:\Windows\system32\drivers\mpio.sys ==> MD5 is legit
C:\Windows\System32\drivers\mpsdrv.sys ==> MD5 is legit
C:\Windows\system32\drivers\mrxdav.sys 1A4F75E63C9FB84B85DFFC6B63FD5404
C:\Windows\System32\DRIVERS\mrxsmb.sys A5D9106A73DC88564C825D317CAC68AC
C:\Windows\System32\DRIVERS\mrxsmb10.sys D711B3C1D5F42C0C2415687BE09FC163
C:\Windows\System32\DRIVERS\mrxsmb20.sys 9423E9D355C8D303E76B8CFBD8A5C30C
C:\Windows\system32\drivers\msahci.sys ==> MD5 is legit
C:\Windows\system32\drivers\msdsm.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Msfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\mshidkmdf.sys ==> MD5 is legit
C:\Windows\System32\drivers\msisadrv.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSKSSRV.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPCLOCK.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSPQM.sys ==> MD5 is legit
C:\Windows\System32\Drivers\MsRPC.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\mssmbios.sys ==> MD5 is legit
C:\Windows\System32\drivers\MSTEE.sys ==> MD5 is legit
C:\Windows\system32\drivers\MTConfig.sys ==> MD5 is legit
C:\Windows\System32\Drivers\mup.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\nwifi.sys ==> MD5 is legit
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\ENG64.SYS 702E07EC32F96ACDB873E9A5465D4401
C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NAV_20.2.0.19\Definitions\VirusDefs\20140201.002\EX64.SYS 302EA314A1AF0D7CEF0A3D0195F79561
C:\Windows\System32\drivers\ndis.sys 760E38053BF56E501D562B70AD796B88
C:\Windows\System32\DRIVERS\ndiscap.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndistapi.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndisuio.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\ndiswan.sys ==> MD5 is legit
C:\Windows\System32\Drivers\NDProxy.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbios.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\netbt.sys ==> MD5 is legit
C:\Windows\system32\drivers\nfrd960.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Npfs.sys ==> MD5 is legit
C:\Windows\System32\drivers\nsiproxy.sys ==> MD5 is legit
C:\Windows\System32\Drivers\Ntfs.sys B98F8C6E31CD07B2E6F71F7F648E38C0
C:\Windows\System32\Drivers\Null.sys ==> MD5 is legit
C:\Windows\System32\drivers\nvhda64v.sys E366A5681C50785D4ED04FCFD65C3415
C:\Windows\System32\DRIVERS\nvlddmkm.sys 0218E1CE8F7B5D404980192B9112D03A
C:\Windows\system32\drivers\nvraid.sys 0A92CB65770442ED0DC44834632F66AD
C:\Windows\system32\drivers\nvstor.sys DAB0E87525C10052BF65F06152F37E4A
C:\Windows\System32\drivers\nvvad64v.sys 09216A70CC364D0974F606F6F2109210
C:\Windows\system32\drivers\nv_agp.sys ==> MD5 is legit
C:\Windows\system32\drivers\ohci1394.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\parport.sys ==> MD5 is legit
C:\Windows\System32\drivers\partmgr.sys E9766131EEADE40A27DC27D2D68FBA9C
C:\Windows\System32\drivers\pci.sys ==> MD5 is legit
C:\Windows\System32\drivers\pciide.sys ==> MD5 is legit
C:\Windows\system32\drivers\pcmcia.sys ==> MD5 is legit
C:\Windows\System32\drivers\pcw.sys ==> MD5 is legit
C:\Windows\System32\drivers\peauth.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspptp.sys ==> MD5 is legit
C:\Windows\system32\drivers\processr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\pacer.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql2300.sys ==> MD5 is legit
C:\Windows\system32\drivers\ql40xx.sys ==> MD5 is legit
C:\Windows\system32\drivers\qwavedrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasacd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\raspppoe.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rassstp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdbss.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\rdpbus.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpdr.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpencdd.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdprefmp.sys ==> MD5 is legit
C:\Windows\System32\drivers\rdpvideominiport.sys 313F68E1A3E6345A4F47A36B07062F34
C:\Windows\System32\Drivers\RDPWD.sys E61608AA35E98999AF9AAEEEA6114B0A
C:\Windows\System32\drivers\rdyboost.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\RMCAST.sys CAF88D6573D21CD2AA27001DDBFDC74D
C:\Windows\System32\DRIVERS\rspndr.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\Rtnic64.sys 04C2D5BD8D0776320230978A0AEC3BD0
C:\Windows\System32\DRIVERS\Rt64win7.sys AC4CA62572CA516945AB92D6C9F501F4
C:\Windows\system32\drivers\vms3cap.sys ==> MD5 is legit
C:\Windows\system32\drivers\sbp2port.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\scfilter.sys ==> MD5 is legit
C:\Windows\System32\Drivers\secdrv.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serenum.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\serial.sys ==> MD5 is legit
C:\Windows\system32\drivers\sermouse.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffdisk.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_mmc.sys ==> MD5 is legit
C:\Windows\system32\drivers\sffp_sd.sys ==> MD5 is legit
C:\Windows\system32\drivers\sfloppy.sys ==> MD5 is legit
C:\Windows\system32\drivers\SiSRaid2.sys ==> MD5 is legit
C:\Windows\system32\drivers\sisraid4.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\smb.sys ==> MD5 is legit
C:\Windows\System32\Drivers\spldr.sys ==> MD5 is legit
C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSP64.SYS 2FD9346F9D76CB4192D37329CFA47A82
C:\Windows\system32\drivers\NAVx64\1404000.028\SRTSPX64.SYS 0E76CEF892C45734F7AED09FDDF35D4D
C:\Windows\System32\DRIVERS\srv.sys 441FBA48BFF01FDB9D5969EBC1838F0B
C:\Windows\System32\DRIVERS\srv2.sys B4ADEBBF5E3677CCE9651E0F01F7CC28
C:\Windows\System32\DRIVERS\srvnet.sys 27E461F0BE5BFF5FC737328F749538C3
C:\Windows\system32\drivers\stexstor.sys ==> MD5 is legit
C:\Windows\System32\drivers\vmstorfl.sys ==> MD5 is legit
C:\Windows\system32\drivers\storvsc.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\swenum.sys ==> MD5 is legit
C:\Windows\System32\drivers\NAVx64\1404000.028\SYMDS64.SYS 52DC0048D667757A8A2E4C87182890AC
C:\Windows\System32\drivers\NAVx64\1404000.028\SYMEFA64.SYS 599872BAD7CFB45C7CE47CDED4B726D8
C:\Windows\system32\Drivers\SYMEVENT64x86.SYS F19E5E37ED8134B9E5F6287F2D3A75D7
C:\Windows\system32\drivers\NAVx64\1404000.028\Ironx64.SYS ADF37F1A715D6C56C8E065FD8569A9A4
C:\Windows\system32\drivers\NAVx64\1404000.028\SYMNETS.SYS 9CDCA70485BD6B9D230365F67C31F132
C:\Windows\System32\drivers\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\DRIVERS\tcpip.sys 40AF23633D197905F03AB5628C558C51
C:\Windows\System32\drivers\tcpipreg.sys 1B16D0BD9841794A6E0CDE0CEF744ABC
C:\Windows\System32\drivers\tdpipe.sys ==> MD5 is legit
C:\Windows\System32\drivers\tdtcp.sys 51C5ECEB1CDEE2468A1748BE550CFBC8
C:\Windows\System32\DRIVERS\tdx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\termdd.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\tssecsrv.sys 4CE278FC9671BA81A138D70823FCAA09
C:\Windows\System32\drivers\tsusbflt.sys E9981ECE8D894CEF7038FD1D040EB426
C:\Windows\system32\drivers\TsUsbGD.sys AD64450A4ABE076F5CB34CC08EEACB07
C:\Windows\System32\DRIVERS\tunnel.sys ==> MD5 is legit
C:\Windows\system32\drivers\uagp35.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\udfs.sys ==> MD5 is legit
C:\Windows\system32\drivers\uliagpkx.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\umbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\umpass.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\usbccgp.sys DCA68B0943D6FA415F0C56C92158A83A
C:\Windows\system32\drivers\usbcir.sys 80B0F7D5CCF86CEB5D402EAAF61FEC31
C:\Windows\System32\DRIVERS\usbehci.sys 18A85013A3E0F7E1755365D287443965
C:\Windows\System32\DRIVERS\usbfilter.sys 504901430B6E03B99EBB6BF26E0868C6
C:\Windows\System32\DRIVERS\usbhub.sys 8D1196CFBB223621F2C67D45710F25BA
C:\Windows\System32\DRIVERS\usbohci.sys 765A92D428A8DB88B960DA5A8D6089DC
C:\Windows\System32\DRIVERS\usbprint.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\USBSTOR.SYS FED648B01349A3C8395A5169DB5FB7D6
C:\Windows\system32\drivers\usbuhci.sys DD253AFC3BC6CBA412342DE60C3647F3
C:\Windows\System32\Drivers\usbvideo.sys 1F775DA4CF1A3A1834207E975A72E9D7
C:\Windows\System32\DRIVERS\VClone.sys 3C8E2C591345F38149C69FE8E5DF8C90
C:\Windows\System32\drivers\vdrvroot.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\vgapnp.sys ==> MD5 is legit
C:\Windows\System32\drivers\vga.sys ==> MD5 is legit
C:\Windows\system32\drivers\vhdmp.sys ==> MD5 is legit
C:\Windows\system32\drivers\viaide.sys ==> MD5 is legit
C:\Windows\system32\drivers\vmbus.sys ==> MD5 is legit
C:\Windows\system32\drivers\VMBusHID.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgr.sys ==> MD5 is legit
C:\Windows\System32\drivers\volmgrx.sys ==> MD5 is legit
C:\Windows\System32\drivers\volsnap.sys ==> MD5 is legit
C:\Windows\system32\drivers\vsmraid.sys ==> MD5 is legit
C:\Windows\System32\drivers\vwifibus.sys ==> MD5 is legit
C:\Windows\system32\drivers\wacompen.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\System32\DRIVERS\wanarp.sys ==> MD5 is legit
C:\Windows\system32\drivers\wd.sys ==> MD5 is legit
C:\Windows\System32\drivers\Wdf01000.sys E2C933EDBC389386EBE6D2BA953F43D8
C:\Windows\System32\DRIVERS\wfplwf.sys ==> MD5 is legit
C:\Windows\System32\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\SysWOW64\drivers\wimmount.sys ==> MD5 is legit
C:\Windows\system32\drivers\wmiacpi.sys ==> MD5 is legit
C:\Windows\system32\drivers\ws2ifsl.sys ==> MD5 is legit
C:\Windows\System32\drivers\WudfPf.sys AB886378EEB55C6C75B4F2D14B6C869F
C:\Windows\System32\DRIVERS\WUDFRd.sys DDA4CAF29D8C0A297F886BFE561E6659
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-02 22:12 - 2014-02-02 22:16 - 00038306 _____ () C:\Users\KOTLAR .MARTIN\Desktop\FRST.txt
2014-02-02 22:12 - 2014-02-02 22:16 - 00000000 ____D () C:\FRST
2014-02-02 22:11 - 2014-02-02 22:11 - 02080256 _____ (Farbar) C:\Users\KOTLAR .MARTIN\Desktop\FRST64.exe
2014-02-02 22:03 - 2014-02-02 22:04 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-02-02 21:48 - 2014-02-02 22:09 - 00000000 ____D () C:\Program Files\trend micro
2014-02-02 21:48 - 2014-02-02 21:48 - 00000000 ____D () C:\rsit
2014-02-02 21:37 - 2014-02-02 21:49 - 800000000 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part1.rar
2014-02-02 21:37 - 2014-02-02 21:49 - 743801736 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part2.rar
2014-02-02 21:13 - 2014-02-02 21:38 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rar
2014-02-02 21:12 - 2014-02-02 21:37 - 1038090303 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rev
2014-02-02 21:12 - 2014-02-02 21:37 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part2.rar
2014-02-02 21:12 - 2014-02-02 21:13 - 15978867 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part3.rar
2014-02-02 16:05 - 2014-02-02 16:05 - 00003574 ___SH () C:\Windows\SysWOW64\sound.mod
2014-02-01 17:01 - 2014-02-01 17:38 - 00002536 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-02-01 17:01 - 2014-02-01 17:01 - 00000000 ___HD () C:\VTRoot
2014-02-01 16:48 - 2014-02-01 16:48 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-02-01 16:47 - 2014-02-02 22:08 - 00443409 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-02-01 16:47 - 2014-02-01 17:18 - 00001838 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-02-01 16:47 - 2014-02-01 16:47 - 00000593 _____ () C:\Users\Public\Desktop\Sdílený prostor.lnk
2014-02-01 16:46 - 2014-02-01 16:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-02-01 16:45 - 2014-02-01 16:56 - 00002043 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-02-01 16:45 - 2014-02-01 16:47 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-02-01 16:45 - 2014-02-01 16:47 - 00000000 ____D () C:\ProgramData\COMODO
2014-02-01 16:45 - 2014-02-01 16:45 - 00000000 ____D () C:\Program Files\COMODO
2014-02-01 16:44 - 2014-02-01 16:47 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-02-01 16:44 - 2014-02-01 16:47 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-02-01 16:44 - 2014-02-01 16:46 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00001120 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-02-01 16:22 - 2014-02-01 16:22 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-02-01 16:15 - 2014-02-02 22:08 - 00000420 _____ () C:\Windows\Tasks\FixCleaner Startup.job
2014-02-01 16:15 - 2014-02-01 16:36 - 00002864 _____ () C:\Windows\System32\Tasks\FixCleaner Startup
2014-02-01 16:15 - 2014-02-01 16:33 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\FixCleaner
2014-02-01 16:15 - 2014-02-01 16:21 - 00000480 _____ () C:\Windows\Tasks\FixCleaner Scan.job
2014-02-01 16:15 - 2014-02-01 16:15 - 00003226 _____ () C:\Windows\System32\Tasks\FixCleaner Scan
2014-02-01 16:14 - 2014-02-01 16:38 - 00000000 ____D () C:\Program Files (x86)\FixCleaner
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\ProgramData\I.CA SecureStore
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\Program Files\I.CA SecureStore
2014-02-01 15:26 - 2014-02-01 15:30 - 00000000 ____D () C:\Users\Public\Documents\DriverGenius
2014-02-01 15:23 - 2013-08-11 15:40 - 00043520 ____S (NirSoft) C:\Windows\SysWOW64\nircmdc.exe
2014-01-31 23:58 - 2014-02-02 22:08 - 00002806 _____ () C:\Windows\setupact.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000354 _____ () C:\Windows\PFRO.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 23:53 - 2014-01-31 23:58 - 00000446 _____ () C:\Windows\Tasks\WDAutoShutdownKOTLAR .MARTIN.job
2014-01-31 23:53 - 2014-01-31 23:53 - 00003192 _____ () C:\Windows\System32\Tasks\WDAutoShutdownKOTLAR .MARTIN
2014-01-31 23:28 - 2014-01-31 23:54 - 00000000 ____D () C:\Program Files (x86)\Windows Doctor
2014-01-31 23:17 - 2010-05-28 12:37 - 32472008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MRT.exe
2014-01-31 22:42 - 2014-01-31 22:42 - 00000000 _____ () C:\autoexec.bat
2014-01-31 22:41 - 2014-01-31 22:41 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-31 22:40 - 2014-01-31 23:01 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-30 14:49 - 2014-01-31 20:18 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 14:49 - 2014-01-30 14:49 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:46 - 2014-01-30 17:10 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-30 14:45 - 2014-02-02 22:08 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-30 14:45 - 2014-02-02 21:56 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-30 14:45 - 2014-01-30 14:51 - 00003964 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-30 14:45 - 2014-01-30 14:51 - 00003712 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-30 14:39 - 2014-01-30 14:50 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-30 14:39 - 2014-01-30 14:39 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-28 17:42 - 2014-02-02 17:20 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-01-28 17:42 - 2014-02-02 16:37 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\BFBC2
2014-01-28 17:42 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\PunkBuster
2014-01-28 17:17 - 2014-02-02 17:20 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 02434856 _____ () C:\Windows\SysWOW64\pbsvc_bc2.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00000232 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Battlefield Bad Company™ 2.lnk
2014-01-28 17:14 - 2014-01-28 17:14 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-01-28 14:55 - 2014-01-28 14:56 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\Battlefield 4
2014-01-28 14:39 - 2014-01-28 14:43 - 00000000 ____D () C:\Program Files (x86)\ViUpdater
2014-01-28 14:28 - 2014-01-28 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\WebPlayer
2014-01-28 14:28 - 2014-01-28 14:28 - 00000000 ____D () C:\Program Files (x86)\Thoosje
2014-01-28 14:27 - 2014-02-02 22:08 - 00002016 _____ () C:\Windows\Tasks\Apps Hat-chromeinstaller.job
2014-01-28 14:27 - 2014-01-31 22:39 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-01-28 14:24 - 2014-01-28 14:24 - 00003214 _____ () C:\Windows\System32\Tasks\{616F5578-E3C5-4595-BFCF-AA2AF670736A}
2014-01-28 14:18 - 2014-01-28 14:28 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-28 14:16 - 2014-01-28 14:16 - 00930440 _____ (CNET Download.com) C:\Users\KOTLAR .MARTIN\Downloads\cbsidlm-cbsi176-Windows_7_Gadgets_Pack-ORG-75664936.exe
2014-01-28 14:05 - 2014-01-28 14:05 - 00000000 ____D () C:\Windows\System32\Tasks\PCMeter
2014-01-28 13:53 - 2014-01-31 23:47 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Seznam.cz
2014-01-27 20:13 - 2014-01-27 20:13 - 00003046 _____ () C:\Windows\System32\Tasks\{629871C6-33D0-497E-B17C-0981D9855A41}
2014-01-27 11:30 - 2009-07-23 22:03 - 00052736 _____ (Realtek Semiconductor Corporation ) C:\Windows\system32\Drivers\Rtnic64.sys
2014-01-27 11:28 - 2012-08-28 13:27 - 00058536 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\usbfilter.sys
2014-01-27 11:24 - 2014-01-27 11:24 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA Corporation
2014-01-27 11:20 - 2014-01-27 20:11 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA
2014-01-27 11:20 - 2013-12-10 03:15 - 00982232 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2014-01-27 11:20 - 2013-12-10 03:14 - 01100248 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2014-01-27 11:19 - 2014-01-27 11:19 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-27 11:15 - 2013-12-19 21:33 - 30372640 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 22960416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 15877216 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 12645664 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-01-27 11:15 - 2013-12-19 21:33 - 11605752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 11554264 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 09700224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 09657464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433221.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433221.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00882464 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00879392 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00852768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00847648 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-01-27 11:15 - 2013-12-19 21:33 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-01-27 11:15 - 2013-12-05 09:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-01-27 11:15 - 2013-12-05 09:42 - 00035104 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2014-01-27 11:15 - 2013-12-05 09:42 - 00032544 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-01-27 11:15 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-01-27 11:15 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-01-27 11:15 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-01-27 11:13 - 2013-11-26 15:49 - 00888536 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2014-01-27 11:13 - 2013-11-26 15:49 - 00073800 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00000317 _____ () C:\Windows\Cmicnfg3.ini.cfl
2014-01-27 11:06 - 2014-01-27 11:06 - 00000138 _____ () C:\Windows\system\Dlap.pfx
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files\C-Media PCI Audio Device
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-01-27 11:06 - 2011-04-01 15:20 - 08765440 ____N (C-Media Corporation) C:\Windows\SysWOW64\CMICNFG3.dll
2014-01-27 11:06 - 2011-02-24 16:52 - 00805376 ____N () C:\Windows\system32\Cmeaupci.exe
2014-01-27 11:06 - 2010-12-22 11:44 - 00143360 ____N () C:\Windows\SysWOW64\VmixP6.dll
2014-01-27 11:06 - 2010-09-17 13:53 - 00121856 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv642.dll
2014-01-27 11:06 - 2010-09-17 13:53 - 00121856 ____N (C-Media Electronics Inc.) C:\Windows\system\HsSrv64.dll
2014-01-27 11:06 - 2010-09-17 13:52 - 00217088 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv2.dll
2014-01-27 11:06 - 2010-09-17 13:52 - 00217088 ____N (C-Media Electronics Inc.) C:\Windows\SysWOW64\HsSrv.dll
2014-01-27 11:06 - 2008-07-23 18:59 - 00389120 ____N () C:\Windows\system32\CMICNFG3.cpl
2014-01-27 11:06 - 2008-07-11 15:04 - 00200704 ____N () C:\Windows\SysWOW64\HsMgr.exe
2014-01-27 11:06 - 2008-07-11 15:03 - 00282112 ____N () C:\Windows\system\HsMgr64.exe
2014-01-27 11:06 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\SysWOW64\Cm_Oal.dll
2014-01-27 11:06 - 2007-12-13 17:12 - 00122880 ____N (CMedia Electronics Inc.) C:\Windows\system32\Cm_Oal.dll
2014-01-27 11:06 - 2007-11-05 01:30 - 01144983 ____N () C:\Windows\SysWOW64\KB936225x64.msu
2014-01-27 11:06 - 2006-09-14 02:21 - 00200704 ____N (C-Media) C:\Windows\SysWOW64\CMPaOxy.dll
2014-01-27 11:04 - 2014-02-02 22:09 - 00001174 _____ () C:\Users\KOTLAR .MARTIN\rgmnr
2014-01-27 10:30 - 2014-01-27 11:06 - 00000193 _____ () C:\Windows\Cmicnfg3.ini.imi
2014-01-27 10:30 - 2014-01-27 11:06 - 00000132 _____ () C:\Windows\system\Cmicnfg3.ini
2014-01-27 10:30 - 2009-12-11 11:28 - 00002754 ____N () C:\Windows\cmudax3.ini
2014-01-27 10:30 - 2009-08-19 16:00 - 00359424 ____N () C:\Windows\system32\CmiInstallResAll64.dll
2014-01-27 10:30 - 2008-10-15 15:41 - 00003518 ____N () C:\Windows\Cmicnfg3.ini.cfg
2014-01-27 10:30 - 2006-10-06 05:45 - 00524768 _____ (Microsoft Corporation) C:\Windows\difxapi.dll
2014-01-27 10:21 - 2014-01-19 19:57 - 00001419 ____S () C:\Windows\SysWOW64\msstp.vbe
2014-01-25 16:30 - 2014-01-25 16:35 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Ahead
2014-01-25 16:30 - 2014-01-25 16:30 - 00002754 _____ () C:\Users\Public\Desktop\Nero StartSmart.lnk
2014-01-25 16:29 - 2014-01-25 20:50 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Ahead
2014-01-25 16:28 - 2014-01-25 16:28 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-25 14:39 - 2014-01-25 14:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-25 14:39 - 2012-06-19 16:54 - 04065296 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2014-01-25 14:39 - 2012-06-19 13:31 - 00293889 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-01-25 14:39 - 2012-06-08 16:23 - 00083072 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp64.dll
2014-01-25 14:39 - 2012-06-08 16:21 - 00897152 _____ (Creative Technology Ltd.) C:\Windows\system32\MBAPO64.dll
2014-01-25 14:39 - 2012-06-08 16:21 - 00753280 _____ (Creative Technology Ltd.) C:\Windows\SysWOW64\MBAPO32.dll
2014-01-25 14:39 - 2012-06-08 16:18 - 03615888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
2014-01-25 14:39 - 2012-06-06 10:44 - 00869520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2014-01-25 14:39 - 2012-06-01 09:37 - 02674320 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2014-01-25 14:39 - 2012-05-31 18:08 - 00105616 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2014-01-25 14:39 - 2012-05-10 15:22 - 01262696 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2014-01-25 14:39 - 2012-04-03 18:42 - 01015640 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
2014-01-25 14:39 - 2012-02-21 19:45 - 02605400 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib.dll
2014-01-25 14:39 - 2011-12-20 15:32 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2014-01-25 14:39 - 2011-12-18 17:58 - 02131288 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ.dll
2014-01-25 14:39 - 2011-12-16 14:57 - 00065112 _____ (Creative Technology Ltd.) C:\Windows\system32\MBppld64.dll
2014-01-25 14:39 - 2011-12-13 16:58 - 01560168 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2014-01-25 14:39 - 2011-11-22 16:28 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2014-01-25 14:39 - 2010-11-08 07:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2014-01-25 14:39 - 2010-11-03 18:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2014-01-25 14:39 - 2010-09-27 09:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
2014-01-25 14:39 - 2009-11-24 09:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2014-01-25 14:39 - 2009-11-18 07:13 - 00060504 _____ (Creative Technology Ltd.) C:\Windows\system32\MBPPCn64.dll
2014-01-25 14:38 - 2012-04-10 14:40 - 02533952 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
2014-01-25 14:38 - 2012-03-08 11:47 - 00202336 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
2014-01-25 14:38 - 2012-03-08 11:47 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
2014-01-25 13:01 - 2014-01-25 13:01 - 56324562 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\64bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:59 - 2014-01-25 13:00 - 51733249 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\32bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:50 - 2014-01-25 12:50 - 00003192 _____ () C:\Windows\System32\Tasks\{DFF0DA29-55B9-44A9-9CA5-344EB6B33950}
2014-01-25 12:35 - 2014-02-01 17:47 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-01-24 20:36 - 2014-02-02 21:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Desktop\FILMY.avi CZ
2014-01-24 20:15 - 2014-01-24 20:15 - 00002824 _____ () C:\{F5B821E1-FEAC-453D-B1F4-39D178C2C4B0}
2014-01-24 20:12 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-24 20:12 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-24 20:12 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-24 20:12 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\AMD
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\ProgramData\ATI
2014-01-07 18:11 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-01-07 18:10 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\ProgramData\AMD
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-01-07 18:10 - 2010-02-18 09:18 - 00046136 _____ (Advanced Micro Devices) C:\Windows\system32\Drivers\amdiox64.sys
2014-01-07 18:08 - 2014-01-07 18:08 - 00000000 ____D () C:\AMD
2014-01-07 16:49 - 2014-01-27 10:56 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-01-07 15:30 - 2014-01-07 15:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\SlimWare Utilities Inc
2014-01-07 14:53 - 2014-01-07 14:53 - 00000000 ____D () C:\ProgramData\RegClean
2014-01-07 14:42 - 2014-01-25 13:48 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-01-07 14:23 - 2014-01-07 14:23 - 00000000 ____D () C:\Program Files (x86)\Multimedia Card Reader
2014-01-07 14:00 - 2004-06-14 14:56 - 00427864 _____ (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) C:\Windows\SysWOW64\XceedZip.dll
2014-01-07 14:00 - 2004-03-09 16:45 - 00662288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCOMCT2.OCX
2014-01-03 16:08 - 2014-02-02 22:13 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA.job
2014-01-03 16:08 - 2014-02-02 16:13 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core.job
2014-01-03 16:08 - 2014-01-03 16:08 - 00003958 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA
2014-01-03 16:08 - 2014-01-03 16:08 - 00003590 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core
2014-01-03 16:08 - 2014-01-03 16:08 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook
==================== One Month Modified Files and Folders =======
2014-02-02 22:16 - 2014-02-02 22:12 - 00038306 _____ () C:\Users\KOTLAR .MARTIN\Desktop\FRST.txt
2014-02-02 22:16 - 2014-02-02 22:12 - 00000000 ____D () C:\FRST
2014-02-02 22:15 - 2009-07-14 05:45 - 00021504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:15 - 2009-07-14 05:45 - 00021504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-02 22:13 - 2014-01-03 16:08 - 00000964 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA.job
2014-02-02 22:11 - 2014-02-02 22:11 - 02080256 _____ (Farbar) C:\Users\KOTLAR .MARTIN\Desktop\FRST64.exe
2014-02-02 22:11 - 2013-12-23 18:45 - 01364310 _____ () C:\Windows\WindowsUpdate.log
2014-02-02 22:09 - 2014-02-02 21:48 - 00000000 ____D () C:\Program Files\trend micro
2014-02-02 22:09 - 2014-01-27 11:04 - 00001174 _____ () C:\Users\KOTLAR .MARTIN\rgmnr
2014-02-02 22:08 - 2014-02-01 16:47 - 00443409 _____ () C:\Windows\system32\Drivers\sfi.dat
2014-02-02 22:08 - 2014-02-01 16:15 - 00000420 _____ () C:\Windows\Tasks\FixCleaner Startup.job
2014-02-02 22:08 - 2014-01-31 23:58 - 00002806 _____ () C:\Windows\setupact.log
2014-02-02 22:08 - 2014-01-30 14:45 - 00000964 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-02 22:08 - 2014-01-28 14:27 - 00002016 _____ () C:\Windows\Tasks\Apps Hat-chromeinstaller.job
2014-02-02 22:08 - 2013-10-27 11:46 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-02-02 22:08 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-02 22:05 - 2013-10-27 11:51 - 00004034 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{2E33D269-CE6D-4DDC-A81D-6E88A629D79D}
2014-02-02 22:04 - 2014-02-02 22:03 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-02-02 21:56 - 2014-01-30 14:45 - 00000968 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-02 21:54 - 2013-10-27 18:35 - 00001120 _____ () C:\Users\KOTLAR .MARTIN\AppData\Local\SRDownloader.nast
2014-02-02 21:49 - 2014-02-02 21:37 - 800000000 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part1.rar
2014-02-02 21:49 - 2014-02-02 21:37 - 743801736 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Million Dollar Baby (2004) DVDRip CZ EN.part2.rar
2014-02-02 21:48 - 2014-02-02 21:48 - 00000000 ____D () C:\rsit
2014-02-02 21:42 - 2013-12-27 11:54 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Skype
2014-02-02 21:38 - 2014-02-02 21:13 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rar
2014-02-02 21:37 - 2014-02-02 21:12 - 1038090303 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part1.rev
2014-02-02 21:37 - 2014-02-02 21:12 - 1038090240 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part2.rar
2014-02-02 21:30 - 2014-01-24 20:36 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Desktop\FILMY.avi CZ
2014-02-02 21:22 - 2013-10-27 18:43 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-02 21:13 - 2014-02-02 21:12 - 15978867 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Americky-prezident.1995.CZ.dabing.part3.rar
2014-02-02 17:20 - 2014-01-28 17:42 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-02-02 17:20 - 2014-01-28 17:17 - 00215128 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-02-02 16:37 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\BFBC2
2014-02-02 16:13 - 2014-01-03 16:08 - 00000942 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core.job
2014-02-02 16:05 - 2014-02-02 16:05 - 00003574 ___SH () C:\Windows\SysWOW64\sound.mod
2014-02-01 19:16 - 2013-10-27 15:02 - 00001912 _____ () C:\Windows\epplauncher.mif
2014-02-01 18:57 - 2013-11-05 12:37 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\CrashDumps
2014-02-01 18:14 - 2010-11-21 10:27 - 00668260 _____ () C:\Windows\system32\perfh005.dat
2014-02-01 18:14 - 2010-11-21 10:27 - 00140920 _____ () C:\Windows\system32\perfc005.dat
2014-02-01 18:14 - 2009-07-14 06:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-01 17:47 - 2014-01-25 12:35 - 00000004 _____ () C:\Windows\SysWOW64\GVTunner.ref
2014-02-01 17:47 - 2013-10-27 11:46 - 00030528 _____ () C:\Windows\GVTDrv64.sys
2014-02-01 17:47 - 2013-10-27 11:46 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\Windows\gdrv.sys
2014-02-01 17:38 - 2014-02-01 17:01 - 00002536 _____ () C:\Windows\system32\Drivers\fvstore.dat
2014-02-01 17:26 - 2009-07-14 06:08 - 00032546 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-02-01 17:18 - 2014-02-01 16:47 - 00001838 _____ () C:\Users\Public\Desktop\COMODO Internet Security.lnk
2014-02-01 17:01 - 2014-02-01 17:01 - 00000000 ___HD () C:\VTRoot
2014-02-01 16:56 - 2014-02-01 16:45 - 00002043 _____ () C:\Users\Public\Desktop\GeekBuddy.lnk
2014-02-01 16:48 - 2014-02-01 16:48 - 00000000 ____D () C:\Windows\System32\Tasks\COMODO
2014-02-01 16:47 - 2014-02-01 16:47 - 00000593 _____ () C:\Users\Public\Desktop\Sdílený prostor.lnk
2014-02-01 16:47 - 2014-02-01 16:45 - 00000000 ___SD () C:\ProgramData\Shared Space
2014-02-01 16:47 - 2014-02-01 16:45 - 00000000 ____D () C:\ProgramData\COMODO
2014-02-01 16:47 - 2014-02-01 16:44 - 00057096 _____ (COMODO CA Limited) C:\Windows\system32\certsentry.dll
2014-02-01 16:47 - 2014-02-01 16:44 - 00048392 _____ (COMODO CA Limited) C:\Windows\SysWOW64\certsentry.dll
2014-02-01 16:47 - 2013-10-27 11:46 - 00000000 ____D () C:\Users\KOTLAR~1~MAR
2014-02-01 16:46 - 2014-02-01 16:46 - 01700352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdiplus.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2014-02-01 16:46 - 2014-02-01 16:46 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2014-02-01 16:46 - 2014-02-01 16:44 - 00000000 ____D () C:\Program Files (x86)\Comodo
2014-02-01 16:45 - 2014-02-01 16:45 - 00000000 ____D () C:\Program Files\COMODO
2014-02-01 16:44 - 2014-02-01 16:44 - 00001120 _____ () C:\Users\Public\Desktop\Comodo Dragon.lnk
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Comodo
2014-02-01 16:44 - 2014-02-01 16:44 - 00000000 ____D () C:\ProgramData\Comodo Downloader
2014-02-01 16:38 - 2014-02-01 16:14 - 00000000 ____D () C:\Program Files (x86)\FixCleaner
2014-02-01 16:36 - 2014-02-01 16:15 - 00002864 _____ () C:\Windows\System32\Tasks\FixCleaner Startup
2014-02-01 16:33 - 2014-02-01 16:15 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\FixCleaner
2014-02-01 16:22 - 2014-02-01 16:22 - 00000000 ____D () C:\Users\Public\Documents\Downloaded Installers
2014-02-01 16:21 - 2014-02-01 16:15 - 00000480 _____ () C:\Windows\Tasks\FixCleaner Scan.job
2014-02-01 16:15 - 2014-02-01 16:15 - 00003226 _____ () C:\Windows\System32\Tasks\FixCleaner Scan
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\ProgramData\I.CA SecureStore
2014-02-01 15:40 - 2014-02-01 15:40 - 00000000 ____D () C:\Program Files\I.CA SecureStore
2014-02-01 15:33 - 2013-10-27 11:35 - 00000000 ____D () C:\Program Files (x86)\Realtek
2014-02-01 15:30 - 2014-02-01 15:26 - 00000000 ____D () C:\Users\Public\Documents\DriverGenius
2014-01-31 23:58 - 2014-01-31 23:58 - 00000354 _____ () C:\Windows\PFRO.log
2014-01-31 23:58 - 2014-01-31 23:58 - 00000000 _____ () C:\Windows\setuperr.log
2014-01-31 23:58 - 2014-01-31 23:53 - 00000446 _____ () C:\Windows\Tasks\WDAutoShutdownKOTLAR .MARTIN.job
2014-01-31 23:54 - 2014-01-31 23:28 - 00000000 ____D () C:\Program Files (x86)\Windows Doctor
2014-01-31 23:53 - 2014-01-31 23:53 - 00003192 _____ () C:\Windows\System32\Tasks\WDAutoShutdownKOTLAR .MARTIN
2014-01-31 23:47 - 2014-01-28 13:53 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Seznam.cz
2014-01-31 23:47 - 2013-10-27 15:41 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-01-31 23:01 - 2014-01-31 22:40 - 00000000 ____D () C:\Windows\1F7E4FF9D2E542589AE1E16E6CB3252A.TMP
2014-01-31 22:42 - 2014-01-31 22:42 - 00000000 _____ () C:\autoexec.bat
2014-01-31 22:41 - 2014-01-31 22:41 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-01-31 22:39 - 2014-01-28 14:27 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-01-31 20:18 - 2014-01-30 14:49 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-01-30 19:52 - 2013-12-27 11:54 - 00000000 ____D () C:\ProgramData\Skype
2014-01-30 18:58 - 2013-12-11 11:05 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Winamp
2014-01-30 17:10 - 2014-01-30 14:46 - 00002259 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-30 14:51 - 2014-01-30 14:45 - 00003964 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-01-30 14:51 - 2014-01-30 14:45 - 00003712 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-01-30 14:50 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-01-30 14:49 - 2014-01-30 14:49 - 00002533 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-01-30 14:46 - 2013-10-31 11:24 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-30 14:39 - 2014-01-30 14:39 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Mozilla
2014-01-30 14:39 - 2014-01-30 14:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-01-28 17:42 - 2014-01-28 17:42 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\PunkBuster
2014-01-28 17:17 - 2014-01-28 17:17 - 02434856 _____ () C:\Windows\SysWOW64\pbsvc_bc2.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00075064 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2014-01-28 17:17 - 2014-01-28 17:17 - 00000232 _____ () C:\Users\KOTLAR .MARTIN\Desktop\Battlefield Bad Company™ 2.lnk
2014-01-28 17:14 - 2014-01-28 17:14 - 00000000 ____D () C:\Program Files (x86)\Electronic Arts
2014-01-28 14:56 - 2014-01-28 14:55 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\Documents\Battlefield 4
2014-01-28 14:43 - 2014-01-28 14:39 - 00000000 ____D () C:\Program Files (x86)\ViUpdater
2014-01-28 14:43 - 2013-12-11 11:05 - 00000000 ____D () C:\Program Files (x86)\Winamp
2014-01-28 14:39 - 2014-01-28 14:28 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\WebPlayer
2014-01-28 14:28 - 2014-01-28 14:28 - 00000000 ____D () C:\Program Files (x86)\Thoosje
2014-01-28 14:28 - 2014-01-28 14:18 - 00003148 _____ () C:\Windows\System32\Tasks\SidebarExecute
2014-01-28 14:24 - 2014-01-28 14:24 - 00003214 _____ () C:\Windows\System32\Tasks\{616F5578-E3C5-4595-BFCF-AA2AF670736A}
2014-01-28 14:16 - 2014-01-28 14:16 - 00930440 _____ (CNET Download.com) C:\Users\KOTLAR .MARTIN\Downloads\cbsidlm-cbsi176-Windows_7_Gadgets_Pack-ORG-75664936.exe
2014-01-28 14:05 - 2014-01-28 14:05 - 00000000 ____D () C:\Windows\System32\Tasks\PCMeter
2014-01-27 20:16 - 2013-10-27 14:50 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Google
2014-01-27 20:13 - 2014-01-27 20:13 - 00003046 _____ () C:\Windows\System32\Tasks\{629871C6-33D0-497E-B17C-0981D9855A41}
2014-01-27 20:11 - 2014-01-27 11:20 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA
2014-01-27 18:58 - 2013-10-27 15:46 - 00000000 ____D () C:\Program Files (x86)\Canon
2014-01-27 11:34 - 2013-10-27 15:32 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Vso
2014-01-27 11:30 - 2013-10-27 11:35 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-01-27 11:27 - 2013-11-04 17:53 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-27 11:24 - 2014-01-27 11:24 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\NVIDIA Corporation
2014-01-27 11:24 - 2013-10-27 11:45 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-27 11:20 - 2013-10-27 11:46 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-27 11:20 - 2013-10-27 11:44 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-27 11:19 - 2014-01-27 11:19 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-01-27 11:08 - 2013-10-27 11:29 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\VirtualStore
2014-01-27 11:06 - 2014-01-27 11:06 - 00419840 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00413696 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00111616 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00102400 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2014-01-27 11:06 - 2014-01-27 11:06 - 00000317 _____ () C:\Windows\Cmicnfg3.ini.cfl
2014-01-27 11:06 - 2014-01-27 11:06 - 00000138 _____ () C:\Windows\system\Dlap.pfx
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files\C-Media PCI Audio Device
2014-01-27 11:06 - 2014-01-27 11:06 - 00000000 ____D () C:\Program Files (x86)\OpenAL
2014-01-27 11:06 - 2014-01-27 10:30 - 00000193 _____ () C:\Windows\Cmicnfg3.ini.imi
2014-01-27 11:06 - 2014-01-27 10:30 - 00000132 _____ () C:\Windows\system\Cmicnfg3.ini
2014-01-27 11:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system
2014-01-27 11:04 - 2013-10-27 11:27 - 00000000 ____D () C:\Users\KOTLAR .MARTIN
2014-01-27 10:56 - 2014-01-07 16:49 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-01-26 19:30 - 2013-10-27 15:32 - 00001041 _____ () C:\Users\KOTLAR .MARTIN\AppData\Roaming\vso_ts_preview.xml
2014-01-25 20:50 - 2014-01-25 16:29 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\Ahead
2014-01-25 16:35 - 2014-01-25 16:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Ahead
2014-01-25 16:30 - 2014-01-25 16:30 - 00002754 _____ () C:\Users\Public\Desktop\Nero StartSmart.lnk
2014-01-25 16:28 - 2014-01-25 16:28 - 00000000 ____D () C:\Program Files (x86)\Nero
2014-01-25 16:28 - 2013-10-28 12:39 - 00000000 ____D () C:\ProgramData\Nero
2014-01-25 14:39 - 2014-01-25 14:39 - 00000000 ____D () C:\Windows\SysWOW64\RTCOM
2014-01-25 13:48 - 2014-01-07 14:42 - 00000000 ____D () C:\Program Files (x86)\SmartTweak
2014-01-25 13:01 - 2014-01-25 13:01 - 56324562 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\64bit_Vista_Win7_Win8_R270.exe
2014-01-25 13:00 - 2014-01-25 12:59 - 51733249 _____ (Realtek Semiconductor Corp.) C:\Users\KOTLAR .MARTIN\Downloads\32bit_Vista_Win7_Win8_R270.exe
2014-01-25 12:50 - 2014-01-25 12:50 - 00003192 _____ () C:\Windows\System32\Tasks\{DFF0DA29-55B9-44A9-9CA5-344EB6B33950}
2014-01-24 20:20 - 2009-07-14 05:45 - 00414904 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-01-24 20:17 - 2013-12-09 10:56 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-01-24 20:16 - 2013-10-27 12:38 - 00000000 ____D () C:\Windows\system32\MRT
2014-01-24 20:15 - 2014-01-24 20:15 - 00002824 _____ () C:\{F5B821E1-FEAC-453D-B1F4-39D178C2C4B0}
2014-01-24 20:14 - 2013-10-27 12:38 - 86054176 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-01-19 19:57 - 2014-01-27 10:21 - 00001419 ____S () C:\Windows\SysWOW64\msstp.vbe
2014-01-16 09:59 - 2010-11-21 04:27 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-01-11 18:42 - 2013-12-27 11:15 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Windows Live
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Roaming\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\ATI
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\AMD
2014-01-07 18:12 - 2014-01-07 18:12 - 00000000 ____D () C:\ProgramData\ATI
2014-01-07 18:11 - 2014-01-07 18:11 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2014-01-07 18:11 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI Technologies
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\ProgramData\AMD
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files\ATI
2014-01-07 18:10 - 2014-01-07 18:10 - 00000000 ____D () C:\Program Files (x86)\ATI Technologies
2014-01-07 18:08 - 2014-01-07 18:08 - 00000000 ____D () C:\AMD
2014-01-07 15:30 - 2014-01-07 15:30 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\SlimWare Utilities Inc
2014-01-07 14:53 - 2014-01-07 14:53 - 00000000 ____D () C:\ProgramData\RegClean
2014-01-07 14:46 - 2013-10-27 11:41 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-01-07 14:23 - 2014-01-07 14:23 - 00000000 ____D () C:\Program Files (x86)\Multimedia Card Reader
2014-01-07 13:35 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-01-07 13:30 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-01-07 12:51 - 2013-12-08 12:07 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2014-01-03 16:08 - 2014-01-03 16:08 - 00003958 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000UA
2014-01-03 16:08 - 2014-01-03 16:08 - 00003590 _____ () C:\Windows\System32\Tasks\FacebookUpdateTaskUserS-1-5-21-2317273582-2740364107-1665321909-1000Core
2014-01-03 16:08 - 2014-01-03 16:08 - 00000000 ____D () C:\Users\KOTLAR .MARTIN\AppData\Local\Facebook
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
==================== BCD ================================
Spr vce spouçtŘnˇ syst‚mu Windows
--------------------
identifik tor {bootmgr}
device partition=C:
description Windows Boot Manager
locale cs-CZ
inherit {globalsettings}
default {current}
resumeobject {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Zav dŘcˇ program pro spouçtŘnˇ syst‚mu Windows
-------------------
identifik tor {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale cs-CZ
inherit {bootloadersettings}
recoverysequence {5e9f94c3-3ef1-11e3-9681-a100c8e4825e}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
nx OptIn
Zav dŘcˇ program pro spouçtŘnˇ syst‚mu Windows
-------------------
identifik tor {5e9f94c3-3ef1-11e3-9681-a100c8e4825e}
device ramdisk=[C:]\Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\Winre.wim,{5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\Winre.wim,{5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
systemroot \windows
nx OptIn
winpe Yes
Obnovenˇ z hibernace
---------------------
identifik tor {5e9f94c1-3ef1-11e3-9681-a100c8e4825e}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale cs-CZ
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Testov nˇ pamŘti syst‚mu Windows
---------------------
identifik tor {memdiag}
device partition=C:
path \boot\memtest.exe
description Diagnostika pamŘti syst‚mu Windows
locale cs-CZ
inherit {globalsettings}
badmemoryaccess Yes
Nastavenˇ slu§by EMS
------------
identifik tor {emssettings}
bootems Yes
Nastavenˇ ladicˇho programu
-----------------
identifik tor {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Chyby pamŘti RAM
-----------
identifik tor {badmemory}
Glob lnˇ nastavenˇ
---------------
identifik tor {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Nastavenˇ spouçtŘcˇho zavadŘźe
--------------------
identifik tor {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Nastavenˇ hypervisoru
-------------------
identifik tor {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Nastavenˇ zavadŘźe obnovenˇ
----------------------
identifik tor {resumeloadersettings}
inherit {globalsettings}
Parametry zaýˇzenˇ
--------------
identifik tor {5e9f94c4-3ef1-11e3-9681-a100c8e4825e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\5e9f94c3-3ef1-11e3-9681-a100c8e4825e\boot.sdi
LastRegBack: 2013-12-18 15:17
==================== End Of Log ============================
Stahnete Zoek.exe 
