Prosím o kontrolu logu (FRSTLauncher)
Napsal: 14 úno 2014 09:52
Ahoj,
Prosím o kontrolu logu níže.
PC se mi samo zapínalo což jsem pravděpodobně vyřešil v BIOSU, ale jistota je jistota.
Dále mi bylo od poskytovatele mého hostingu sděleno, že je můj pc byl napaden a je zneužit k rozesílání spamu (čemuž nevěřím), ale nejsem odborník proto se obracím na Vás.
Děkuji za Váš čas
při scenování vypnut NIS
Oxi
log níže a Addition v příloze
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by ox (administrator) on OX-PC on 14-02-2014 09:43:05
Running from C:\Users\ox\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Flux Software LLC) C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe
(Flux Software LLC) C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\ox\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Run: [F.lux] - C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Run: [Epkqtion] - regsvr32.exe C:\Users\ox\AppData\Local\Epkqtion\EP0NMF7A.DLL <===== ATTENTION
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: => File Not Found
AppInit_DLLs-x32: pZ9 => File Not Found
Startup: C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EPUHelp.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - URL http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKLM-x32 - SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... earchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKCU - DefaultScope {C6E8AC7D-E0CD-483F-B603-FAF1DB708038} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_2
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {C6E8AC7D-E0CD-483F-B603-FAF1DB708038} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_2
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: No Name - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
Handler: ftp - No CLSID Value -
Handler: https - No CLSID Value -
Handler-x32: ftp - No CLSID Value -
Handler-x32: https - No CLSID Value -
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
FireFox:
========
FF ProfilePath: C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default
FF DefaultSearchEngine: Startpage (SSL)
FF SearchEngineOrder.1: Porovnánà cen
FF SelectedSearchEngine: Startpage (SSL)
FF Homepage: hxxp://www.bing.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ox\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ox\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\searchplugins\startpage-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Classic Slideshow Theme Sepia - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{9146081B-E5CD-233E-248D-7535764A938A} [2014-02-14]
FF Extension: Sdílení Pridat.eu - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\info@pridat.eu.xpi [2014-01-24]
FF Extension: S3.Google Translator - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\s3google@translator.xpi [2014-01-19]
FF Extension: SEOProfesional - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\seo@profesional.xpi [2014-02-04]
FF Extension: SearchStatus - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{d57c9ff1-6389-48fc-b770-f78bd89b6e8a}.xpi [2014-01-19]
FF Extension: DownThemAll! - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-19]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-22]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
==================== Services (Whitelisted) =================
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [67400 2011-04-01] (Microsoft Corporation)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
==================== Drivers (Whitelisted) ====================
S3 AF9035BDA; C:\Windows\System32\Drivers\AF9035BDA.sys [492008 2009-07-16] (AfaTech )
S3 ASUSVRC64; C:\Windows\System32\DRIVERS\AsusVRC64.sys [23424 2008-10-13] (ASUSTeK COMPUTER INC.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-28] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140213.002\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-28] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\ENG64.SYS [126040 2013-12-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\EX64.SYS [2099288 2013-12-21] (Symantec Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology)
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-03-07] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-22] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 HWiNFO32; \??\C:\Users\ox\Desktop\hw32_401_1690\HWiNFO64A.SYS [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S0 rqbnnay; system32\drivers\pzqze.sys [X]
S0 uraggkgw; system32\drivers\ymejbqz.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-14 09:43 - 2014-02-14 09:43 - 00018454 _____ () C:\Users\ox\Desktop\FRST.txt
2014-02-14 09:42 - 2014-02-14 09:43 - 00000000 ____D () C:\FRST
2014-02-14 09:41 - 2013-12-05 16:07 - 00112640 _____ (forum.viry.cz) C:\Users\ox\Desktop\FRSTLauncher.exe
2014-02-14 09:40 - 2014-02-13 20:42 - 02152960 _____ (Farbar) C:\Users\ox\Desktop\FRST64.exe
2014-02-14 07:57 - 2014-02-14 07:57 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-14 07:16 - 2014-02-14 07:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 05:15 - 2014-02-14 07:51 - 00000112 _____ () C:\Windows\setupact.log
2014-02-14 05:15 - 2014-02-14 05:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-14 05:14 - 2014-02-14 05:15 - 00526360 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-13 19:13 - 2014-02-13 19:16 - 00000000 ____D () C:\Users\ox\Desktop\3
2014-02-13 15:23 - 2014-02-13 15:23 - 00003287 _____ () C:\Users\ox\Desktop\linkexplorer_2_13_2014.csv
2014-02-13 13:58 - 2014-02-13 13:58 - 00001163 _____ () C:\Users\ox\Desktop\Mozilla Firefox.lnk
2014-02-13 06:14 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-13 06:14 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-12 19:26 - 2014-02-12 19:29 - 00000000 ____D () C:\Users\ox\Desktop\2
2014-02-12 17:44 - 2014-02-12 17:44 - 00000000 ____D () C:\Users\ox\Desktop\wpxtube.1.1.0
2014-02-12 17:44 - 2014-02-03 05:23 - 02806957 _____ () C:\Users\ox\Desktop\wpxtube.1.1.0.zip
2014-02-12 17:40 - 2014-02-12 17:40 - 00008370 _____ () C:\Users\ox\Desktop\.htaccess
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Thunderbird
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Mozilla
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Local\Thunderbird
2014-02-12 10:08 - 2014-02-12 10:08 - 00000000 ____D () C:\Users\ox\Documents\My Weblog Posts
2014-02-12 06:25 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-12 06:25 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-12 06:25 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-12 06:25 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-12 06:25 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-12 06:25 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-12 06:25 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-12 06:25 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-12 06:25 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-12 06:25 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-12 06:25 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-12 06:25 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-12 06:25 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-12 06:25 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-12 06:25 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-12 06:25 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-12 06:25 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-12 06:25 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-12 06:09 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 06:09 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 06:09 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 06:09 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 06:09 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 06:09 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 06:09 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 06:09 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 06:09 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 06:09 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 06:09 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 06:09 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 06:09 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 06:09 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 06:09 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 06:09 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 06:09 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 06:09 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 06:09 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 06:09 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 06:09 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 06:09 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 06:09 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 06:09 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 06:09 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 06:09 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 06:09 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 06:09 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 06:09 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 06:09 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 06:09 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 06:09 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 06:09 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 06:09 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 06:09 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 06:09 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 06:09 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 06:09 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 06:09 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 06:09 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 06:09 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 06:09 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 06:09 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 06:09 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 06:09 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 06:09 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 06:09 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 06:09 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 06:09 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 06:09 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 06:09 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 06:09 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 06:09 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 06:09 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 06:09 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 06:09 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 19:18 - 2014-02-11 19:18 - 732012544 _____ () C:\Users\ox\Desktop\Sbal Prachy A Vypadni (1998 - CZ dabing).avi
2014-02-11 19:14 - 2014-02-11 19:15 - 00000000 ____D () C:\Users\ox\Desktop\1
2014-02-11 16:44 - 2014-02-11 16:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-10 12:01 - 2014-02-10 12:01 - 00002387 _____ () C:\Users\ox\Documents\MumbleAutomaticCertificateBackup.p12
2014-02-10 11:57 - 2014-02-10 12:30 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mumble
2014-02-10 11:57 - 2014-02-10 11:57 - 00001036 _____ () C:\Users\ox\Desktop\Mumble.lnk
2014-02-10 11:56 - 2014-02-10 11:56 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-07 08:29 - 2014-02-14 05:20 - 00346112 ___SH () C:\Users\ox\Desktop\Thumbs.db
2014-02-07 03:29 - 2014-02-14 07:55 - 00485199 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 05:56 - 2014-02-06 05:56 - 00001293 _____ () C:\Users\ox\Desktop\pes.txt
2014-02-04 20:13 - 2014-02-04 21:13 - 03544968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-04 19:23 - 2014-02-04 19:24 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-02-04 19:23 - 2014-02-04 19:23 - 00001039 _____ () C:\Users\ox\Desktop\KMPlayer.lnk
2014-02-04 19:23 - 2014-02-04 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-02-04 19:15 - 2014-02-04 19:15 - 00000000 ____D () C:\Program Files\ffdshow
2014-02-04 19:15 - 2013-12-03 18:19 - 00127488 _____ () C:\Windows\system32\ff_vfw.dll
2014-02-04 15:45 - 2014-02-04 15:45 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.info
2014-02-04 15:39 - 2014-02-04 15:41 - 277644182 _____ () C:\Users\ox\Desktop\seznamky.7z
2014-02-04 15:34 - 2014-02-04 15:38 - 287986687 _____ () C:\Users\ox\Desktop\seznamky.info.zip
2014-02-04 15:23 - 2014-02-04 15:23 - 01170722 _____ () C:\Users\ox\Desktop\d1305_seznam.sql
2014-02-04 10:07 - 2014-02-04 11:13 - 00000000 ____D () C:\Users\ox\Desktop\faktury2013
2014-02-04 09:53 - 2014-02-04 09:53 - 00000000 ____D () C:\Users\ox\Desktop\seznameni
2014-02-03 10:36 - 2014-02-03 10:36 - 00000000 ____D () C:\Users\secure\AppData\Roaming\NCH Software
2014-02-03 10:35 - 2014-02-03 10:35 - 00001397 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Adobe
2014-02-03 10:34 - 2014-02-03 10:34 - 00000644 __RSH () C:\Users\secure\ntuser.pol
2014-02-03 10:34 - 2014-02-03 10:34 - 00000020 ___SH () C:\Users\secure\ntuser.ini
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Šablony
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Soubory cookie
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Poslední
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní tiskárny
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní síť
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Nabídka Start
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Dokumenty
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Obrázky
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Hudba
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Filmy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Local\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 ____D () C:\Users\secure\AppData\Local\VirtualStore
2014-02-03 10:33 - 2014-02-03 10:37 - 00000000 ____D () C:\Users\secure\AppData\Local\Google
2014-02-03 10:33 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure
2014-02-03 10:33 - 2013-06-15 04:21 - 00002128 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-02-03 10:33 - 2012-06-27 19:21 - 00000000 ____D () C:\Users\secure\AppData\LocalGoogle
2014-02-03 10:33 - 2012-04-07 12:48 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Macromedia
2014-02-03 10:33 - 2011-01-11 18:57 - 00000000 ____D () C:\Users\secure\AppData\Local\Microsoft Help
2014-02-03 10:33 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-03 10:33 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-03 10:20 - 2013-09-10 03:47 - 00078936 ____R (Symantec Corporation) C:\Windows\system32\Drivers\SymIMV.sys
2014-02-01 18:15 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\ox\Desktop\Nová složka
2014-02-01 15:11 - 2014-02-01 15:11 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 09:01 - 2014-02-01 09:20 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Dogecoin
2014-01-31 15:25 - 2014-01-31 15:25 - 00371896 _____ () C:\Users\ox\Desktop\Recount-v4.2.0e_release.zip
2014-01-28 15:59 - 2012-07-05 21:06 - 00772544 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2014-01-28 15:59 - 2012-07-05 21:06 - 00687544 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-01-28 15:37 - 2014-01-28 15:37 - 23517637 _____ () C:\Users\ox\Desktop\Vyřešená rizika zabezpečení.mcf
2014-01-28 11:36 - 2014-01-28 11:36 - 00000079 _____ () C:\Users\ox\Desktop\ztřetzezzzezeze.txt
2014-01-27 18:47 - 2014-01-27 18:47 - 00000000 ____D () C:\Users\ox\Desktop\cfi
2014-01-27 14:10 - 2014-01-27 14:11 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.net
2014-01-23 17:32 - 2014-01-23 17:32 - 00000138 _____ () C:\Users\ox\Desktop\ollo@ollo.cz odkaz vymena.txt
2014-01-23 09:48 - 2014-02-03 21:34 - 00002187 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-21 16:45 - 2014-01-21 16:53 - 00000000 ___RD () C:\Users\ox\Desktop\livesex
2014-01-21 08:06 - 2014-01-21 08:08 - 00000053 _____ () C:\Users\ox\Desktop\soud.txt
2014-01-20 19:11 - 2014-01-23 17:41 - 00000000 ____D () C:\Users\ox\Desktop\AJ texty půjčky
2014-01-20 17:46 - 2014-01-21 16:51 - 00000000 ___RD () C:\Users\ox\Desktop\seznamkyprofily
2014-01-15 02:52 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 02:52 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 02:52 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-14 09:43 - 2014-02-14 09:43 - 00018454 _____ () C:\Users\ox\Desktop\FRST.txt
2014-02-14 09:43 - 2014-02-14 09:42 - 00000000 ____D () C:\FRST
2014-02-14 09:35 - 2013-12-09 14:19 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-14 09:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-14 09:13 - 2012-03-30 11:48 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 08:08 - 2014-01-14 08:13 - 00000000 ____D () C:\Users\ox\AppData\Local\Epkqtion
2014-02-14 07:59 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 07:59 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 07:57 - 2014-02-14 07:57 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-14 07:57 - 2014-01-14 16:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 07:55 - 2014-02-07 03:29 - 00485199 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 07:53 - 2012-05-02 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 07:52 - 2013-12-09 14:19 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 07:51 - 2014-02-14 05:15 - 00000112 _____ () C:\Windows\setupact.log
2014-02-14 07:51 - 2011-08-04 20:13 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-14 07:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 07:16 - 2014-02-14 07:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 05:20 - 2014-02-07 08:29 - 00346112 ___SH () C:\Users\ox\Desktop\Thumbs.db
2014-02-14 05:15 - 2014-02-14 05:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-14 05:15 - 2014-02-14 05:14 - 00526360 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-13 20:42 - 2014-02-14 09:40 - 02152960 _____ (Farbar) C:\Users\ox\Desktop\FRST64.exe
2014-02-13 19:16 - 2014-02-13 19:13 - 00000000 ____D () C:\Users\ox\Desktop\3
2014-02-13 18:00 - 2012-07-05 15:50 - 00000486 _____ () C:\Windows\Tasks\SpeedyPC Registration3.job
2014-02-13 15:23 - 2014-02-13 15:23 - 00003287 _____ () C:\Users\ox\Desktop\linkexplorer_2_13_2014.csv
2014-02-13 13:58 - 2014-02-13 13:58 - 00001163 _____ () C:\Users\ox\Desktop\Mozilla Firefox.lnk
2014-02-13 11:04 - 2013-07-31 15:11 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DA20C80D-0687-4F17-8A6D-71BABEEF8241}
2014-02-13 09:13 - 2012-01-21 15:59 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Notepad++
2014-02-12 21:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-12 19:29 - 2014-02-12 19:26 - 00000000 ____D () C:\Users\ox\Desktop\2
2014-02-12 19:13 - 2011-01-12 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Skype
2014-02-12 17:44 - 2014-02-12 17:44 - 00000000 ____D () C:\Users\ox\Desktop\wpxtube.1.1.0
2014-02-12 17:40 - 2014-02-12 17:40 - 00008370 _____ () C:\Users\ox\Desktop\.htaccess
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Thunderbird
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Mozilla
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Local\Thunderbird
2014-02-12 10:08 - 2014-02-12 10:08 - 00000000 ____D () C:\Users\ox\Documents\My Weblog Posts
2014-02-12 10:08 - 2011-01-12 10:33 - 00000000 ____D () C:\Users\ox\AppData\Local\Windows Live Writer
2014-02-12 09:37 - 2011-01-12 12:51 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Opera
2014-02-12 09:37 - 2011-01-12 12:51 - 00000000 ____D () C:\Users\ox\AppData\Local\Opera
2014-02-12 06:17 - 2013-07-30 19:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 06:15 - 2011-01-11 19:00 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 06:11 - 2011-04-26 09:15 - 01589432 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-12 06:11 - 2010-03-28 05:47 - 00679352 _____ () C:\Windows\system32\perfh005.dat
2014-02-12 06:11 - 2010-03-28 05:47 - 00146064 _____ () C:\Windows\system32\perfc005.dat
2014-02-12 06:11 - 2009-07-14 06:13 - 01589432 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-11 19:18 - 2014-02-11 19:18 - 732012544 _____ () C:\Users\ox\Desktop\Sbal Prachy A Vypadni (1998 - CZ dabing).avi
2014-02-11 19:15 - 2014-02-11 19:14 - 00000000 ____D () C:\Users\ox\Desktop\1
2014-02-11 16:44 - 2014-02-11 16:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-11 16:22 - 2011-01-11 18:15 - 00000000 ____D () C:\Users\ox\AppData\Local\Thunderbird
2014-02-11 15:30 - 2013-12-09 14:19 - 00003940 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 15:30 - 2013-12-09 14:19 - 00003688 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-10 20:51 - 2011-01-11 17:33 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Adobe
2014-02-10 20:51 - 2011-01-11 16:14 - 00000000 ___RD () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-10 12:30 - 2014-02-10 11:57 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mumble
2014-02-10 12:01 - 2014-02-10 12:01 - 00002387 _____ () C:\Users\ox\Documents\MumbleAutomaticCertificateBackup.p12
2014-02-10 11:57 - 2014-02-10 11:57 - 00001036 _____ () C:\Users\ox\Desktop\Mumble.lnk
2014-02-10 11:56 - 2014-02-10 11:56 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-07 03:25 - 2011-10-26 18:29 - 00000000 ____D () C:\Users\ox\AppData\Roaming\DAEMON Tools Lite
2014-02-07 03:25 - 2011-10-26 18:29 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-02-06 13:16 - 2014-02-12 06:09 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 06:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 06:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 06:09 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 06:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 06:09 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 06:09 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 06:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 06:09 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 06:09 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 06:09 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 06:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 06:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 06:09 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 06:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 06:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 06:09 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-12 06:09 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-12 06:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 06:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 06:09 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 06:09 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 06:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 06:09 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-12 06:09 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-12 06:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-12 06:09 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 06:09 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 06:09 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 06:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 06:09 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 06:09 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 06:09 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 06:09 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 06:09 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 06:09 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 09:17 - 2011-02-11 08:32 - 00000000 ____D () C:\Users\ox\AppData\Roaming\FileZilla
2014-02-06 05:56 - 2014-02-06 05:56 - 00001293 _____ () C:\Users\ox\Desktop\pes.txt
2014-02-06 05:07 - 2012-04-04 05:37 - 00000000 ____D () C:\Users\ox\AppData\Roaming\COWON
2014-02-06 05:07 - 2009-10-13 03:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-05 11:02 - 2011-02-17 20:03 - 00000000 ____D () C:\Users\ox\AppData\Roaming\uTorrent
2014-02-04 21:13 - 2014-02-04 20:13 - 03544968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-04 21:13 - 2012-03-30 11:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 21:13 - 2012-03-30 11:48 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 21:13 - 2011-05-18 12:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 19:24 - 2014-02-04 19:23 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-02-04 19:23 - 2014-02-04 19:23 - 00001039 _____ () C:\Users\ox\Desktop\KMPlayer.lnk
2014-02-04 19:23 - 2014-02-04 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-02-04 19:15 - 2014-02-04 19:15 - 00000000 ____D () C:\Program Files\ffdshow
2014-02-04 16:46 - 2011-10-15 17:56 - 00000000 ____D () C:\Users\ox\AppData\Local\CrashDumps
2014-02-04 15:45 - 2014-02-04 15:45 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.info
2014-02-04 15:41 - 2014-02-04 15:39 - 277644182 _____ () C:\Users\ox\Desktop\seznamky.7z
2014-02-04 15:38 - 2014-02-04 15:34 - 287986687 _____ () C:\Users\ox\Desktop\seznamky.info.zip
2014-02-04 15:23 - 2014-02-04 15:23 - 01170722 _____ () C:\Users\ox\Desktop\d1305_seznam.sql
2014-02-04 11:13 - 2014-02-04 10:07 - 00000000 ____D () C:\Users\ox\Desktop\faktury2013
2014-02-04 09:53 - 2014-02-04 09:53 - 00000000 ____D () C:\Users\ox\Desktop\seznameni
2014-02-03 21:34 - 2014-01-23 09:48 - 00002187 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-03 10:37 - 2014-02-03 10:33 - 00000000 ____D () C:\Users\secure\AppData\Local\Google
2014-02-03 10:36 - 2014-02-03 10:36 - 00000000 ____D () C:\Users\secure\AppData\Roaming\NCH Software
2014-02-03 10:35 - 2014-02-03 10:35 - 00001397 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Adobe
2014-02-03 10:35 - 2014-02-03 10:33 - 00000000 ____D () C:\Users\secure
2014-02-03 10:34 - 2014-02-03 10:34 - 00000644 __RSH () C:\Users\secure\ntuser.pol
2014-02-03 10:34 - 2014-02-03 10:34 - 00000020 ___SH () C:\Users\secure\ntuser.ini
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Šablony
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Soubory cookie
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Poslední
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní tiskárny
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní síť
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Nabídka Start
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Dokumenty
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Obrázky
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Hudba
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Filmy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Local\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 ____D () C:\Users\secure\AppData\Local\VirtualStore
2014-02-03 10:28 - 2012-06-13 13:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-03 10:27 - 2011-01-12 11:03 - 00004611 _____ () C:\Windows\WinInit.Ini
2014-02-03 10:25 - 2013-06-23 13:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-03 05:23 - 2014-02-12 17:44 - 02806957 _____ () C:\Users\ox\Desktop\wpxtube.1.1.0.zip
2014-02-02 18:57 - 2011-01-11 19:12 - 00000000 ____D () C:\Users\ox\AppData\Local\Adobe
2014-02-01 18:16 - 2014-02-01 18:15 - 00000000 ____D () C:\Users\ox\Desktop\Nová složka
2014-02-01 15:19 - 2011-01-11 18:51 - 00000000 ___RD () C:\Users\ox\Desktop\udržba
2014-02-01 15:11 - 2014-02-01 15:11 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 09:33 - 2013-11-27 08:38 - 00000000 ____D () C:\Program Files\trend micro
2014-02-01 09:20 - 2014-02-01 09:01 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Dogecoin
2014-01-31 16:27 - 2011-06-12 09:46 - 00000000 ____D () C:\Users\admin
2014-01-31 15:25 - 2014-01-31 15:25 - 00371896 _____ () C:\Users\ox\Desktop\Recount-v4.2.0e_release.zip
2014-01-29 18:41 - 2009-07-14 06:08 - 00032582 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-28 15:59 - 2012-10-14 01:02 - 00000000 ____D () C:\Users\ox\AppData\Local\NPE
2014-01-28 15:57 - 2011-01-21 06:44 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 15:56 - 2013-11-28 10:31 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-28 15:37 - 2014-01-28 15:37 - 23517637 _____ () C:\Users\ox\Desktop\Vyřešená rizika zabezpečení.mcf
2014-01-28 11:36 - 2014-01-28 11:36 - 00000079 _____ () C:\Users\ox\Desktop\ztřetzezzzezeze.txt
2014-01-27 18:47 - 2014-01-27 18:47 - 00000000 ____D () C:\Users\ox\Desktop\cfi
2014-01-27 14:11 - 2014-01-27 14:10 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.net
2014-01-23 17:41 - 2014-01-20 19:11 - 00000000 ____D () C:\Users\ox\Desktop\AJ texty půjčky
2014-01-23 17:32 - 2014-01-23 17:32 - 00000138 _____ () C:\Users\ox\Desktop\ollo@ollo.cz odkaz vymena.txt
2014-01-23 09:47 - 2009-10-13 04:22 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-23 06:12 - 2011-09-08 03:46 - 00000000 ___RD () C:\Users\ox\Desktop\Maglajs
2014-01-21 19:04 - 2013-12-20 03:37 - 00000000 ____D () C:\Users\ox\Desktop\частное фото
2014-01-21 16:53 - 2014-01-21 16:45 - 00000000 ___RD () C:\Users\ox\Desktop\livesex
2014-01-21 16:51 - 2014-01-20 17:46 - 00000000 ___RD () C:\Users\ox\Desktop\seznamkyprofily
2014-01-21 08:08 - 2014-01-21 08:06 - 00000053 _____ () C:\Users\ox\Desktop\soud.txt
2014-01-19 14:47 - 2011-05-13 07:16 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-01-19 10:06 - 2011-01-11 17:36 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mozilla
2014-01-18 20:04 - 2013-09-11 15:06 - 00000000 ___RD () C:\Users\ox\Desktop\webyinstalace
2014-01-18 17:24 - 2012-08-05 05:31 - 00000000 ___SD () C:\Users\ox\Disk Google
2014-01-18 09:21 - 2013-08-30 21:25 - 00000000 ____D () C:\Users\ox\AppData\Local\NVIDIA
2014-01-18 09:21 - 2013-08-30 21:20 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-18 09:21 - 2011-04-22 16:59 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-18 09:21 - 2011-01-11 19:56 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-18 09:18 - 2010-03-30 17:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-18 08:41 - 2011-01-11 16:10 - 00000000 ____D () C:\Users\ox
2014-01-15 03:05 - 2013-02-03 03:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
Some content of TEMP:
====================
C:\Users\ox\AppData\Local\Temp\bwcdakgl.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 20:09
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (Acer) (Fixed) (Total:290.95 GB) (Free:110.75 GB) NTFS
Drive d: (DATA) (Fixed) (Total:291.12 GB) (Free:238.59 GB) NTFS
Available physical RAM: 2293.29 MB
Total physical RAM: 4095.14 MB
Percentage of memory in use: 43%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 30B79D18)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=291 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=291 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SpeedyPC Registration3.job => C:\Program Files (x86)\Common Files\SpeedyPC Software\UUS3\UUS3.dll
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Norton Internet Security (Disabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ox\Desktop" je 74184 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader
"C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcadeDeluxeAgent
"C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\crsscmgr
C:\Users\ox\AppData\Roaming\AceBIT\crsscmgr\crssc.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epkqtion
regsvr32.exe C:\Users\ox\AppData\Local\Epkqtion\npnv3dvstreaming.dll [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\ox\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey Utility
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstallerLauncher
"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid
"C:\Program Files (x86)\Logitech\Vid HD\Vid.exe" -bootmode [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nvtmru
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie
"C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay
C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel
C:\Program Files\Realtek\Audio\HDA\Skytel.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^ox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Prosím o kontrolu logu níže.
PC se mi samo zapínalo což jsem pravděpodobně vyřešil v BIOSU, ale jistota je jistota.
Dále mi bylo od poskytovatele mého hostingu sděleno, že je můj pc byl napaden a je zneužit k rozesílání spamu (čemuž nevěřím), ale nejsem odborník proto se obracím na Vás.
Děkuji za Váš čas
při scenování vypnut NIS
Oxi
log níže a Addition v příloze
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-02-2014 01
Ran by ox (administrator) on OX-PC on 14-02-2014 09:43:05
Running from C:\Users\ox\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Registration\GregHSRW.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corporation) C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe
(Egis Technology Inc.) C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\MWLService.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
(Symantec Corporation) C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.22.5\GoogleCrashHandler64.exe
(Flux Software LLC) C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe
(Flux Software LLC) C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Microsoft Corporation) C:\Windows\SysWOW64\regsvr32.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_44.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\ox\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware] - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent [532040 2013-04-04] (Malwarebytes Corporation)
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Run: [F.lux] - C:\Users\ox\AppData\Local\FluxSoftware\Flux\flux.exe [1016712 2013-10-16] (Flux Software LLC)
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Run: [Epkqtion] - regsvr32.exe C:\Users\ox\AppData\Local\Epkqtion\EP0NMF7A.DLL <===== ATTENTION
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-2924783212-1197404565-261339847-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
AppInit_DLLs: => File Not Found
AppInit_DLLs-x32: pZ9 => File Not Found
Startup: C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EPUHelp.exe ()
==================== Internet (Whitelisted) ====================
ProxyServer: localhost:8080
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - URL http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKLM-x32 - SuggestionsURL_JSON http://api.widdit.com/suggestions/?form ... earchTerms}
SearchScopes: HKLM-x32 - TopResultURLFallback http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.certified-toolbar.com?si= ... earchTerms}
SearchScopes: HKCU - DefaultScope {C6E8AC7D-E0CD-483F-B603-FAF1DB708038} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_2
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={sear
SearchScopes: HKCU - {C6E8AC7D-E0CD-483F-B603-FAF1DB708038} URL = http://search.seznam.cz/?q={searchTerms ... ckSearch_2
BHO: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO: No Name - {6F6A5334-78E9-4D9B-8182-8B41EA8C39EF} - No File
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Norton Identity Protection - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
BHO-x32: Norton Vulnerability Protection - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\IPS\IPSBHO.DLL (Symantec Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\coIEPlg.dll (Symantec Corporation)
Toolbar: HKCU - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files (x86)\Norton Internet Security\Engine64\21.1.0.18\coIEPlg.dll (Symantec Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
Handler: ftp - No CLSID Value -
Handler: https - No CLSID Value -
Handler-x32: ftp - No CLSID Value -
Handler-x32: https - No CLSID Value -
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 213.46.172.37 213.46.172.36
FireFox:
========
FF ProfilePath: C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default
FF DefaultSearchEngine: Startpage (SSL)
FF SearchEngineOrder.1: Porovnánà cen
FF SelectedSearchEngine: Startpage (SSL)
FF Homepage: hxxp://www.bing.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_43.dll ()
FF Plugin: @java.com/DTPlugin,version=10.11.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.11.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.5.1 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/wpi,version=1.4 - C:\Program Files\Microsoft\Web Platform Installer\\npwpidetector.dll (Microsoft Corp)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll No File
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @talk.google.com/O3DPlugin - C:\Users\ox\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\ox\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\ox\AppData\Local\Google\Update\1.3.21.145\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npgtpo3dautoplugin.dll ()
FF Plugin ProgramFiles/Appdata: C:\Users\ox\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\searchplugins\startpage-ssl.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Classic Slideshow Theme Sepia - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{9146081B-E5CD-233E-248D-7535764A938A} [2014-02-14]
FF Extension: Sdílení Pridat.eu - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\info@pridat.eu.xpi [2014-01-24]
FF Extension: S3.Google Translator - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\s3google@translator.xpi [2014-01-19]
FF Extension: SEOProfesional - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\seo@profesional.xpi [2014-02-04]
FF Extension: SearchStatus - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{d57c9ff1-6389-48fc-b770-f78bd89b6e8a}.xpi [2014-01-19]
FF Extension: DownThemAll! - C:\Users\ox\AppData\Roaming\Mozilla\Firefox\Profiles\i6apjrc8.default\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2014-01-19]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [{BBDA0591-3099-440a-AA10-41764D9DB4DB}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF
FF Extension: Norton Vulnerability Protection - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\IPSFF [2013-12-22]
FF HKLM-x32\...\Firefox\Extensions: [{2D3F3651-74B9-4795-BDEC-6DA2F431CB62}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\
FF Extension: Norton Toolbar - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NIS_21.1.0.18\coFFPlgn\ []
==================== Services (Whitelisted) =================
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
R2 MsDepSvc; C:\Program Files\IIS\Microsoft Web Deploy\MsDepSvc.exe [67400 2011-04-01] (Microsoft Corporation)
R2 MWLService; C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\\MWLService.exe [305448 2009-09-10] (Egis Technology Inc.)
R2 NIS; C:\Program Files (x86)\Norton Internet Security\Engine\21.1.0.18\NIS.exe [275696 2013-10-08] (Symantec Corporation)
==================== Drivers (Whitelisted) ====================
S3 AF9035BDA; C:\Windows\System32\Drivers\AF9035BDA.sys [492008 2009-07-16] (AfaTech )
S3 ASUSVRC64; C:\Windows\System32\DRIVERS\AsusVRC64.sys [23424 2008-10-13] (ASUSTeK COMPUTER INC.)
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-01-28] ()
R1 BHDrvx64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\BASHDefs\20140121.001\BHDrvx64.sys [1526488 2013-12-18] (Symantec Corporation)
R1 ccSet_NIS; C:\Windows\system32\drivers\NISx64\1501000.012\ccSetx64.sys [162392 2013-09-26] (Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [484952 2013-12-21] (Symantec Corporation)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [137648 2013-12-21] (Symantec Corporation)
R1 IDSVia64; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\IPSDefs\20140213.002\IDSvia64.sys [521944 2014-01-21] (Symantec Corporation)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-01-28] ()
S3 LVPr2M64; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2M64.sys [30304 2010-05-07] ()
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NAVENG; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\ENG64.SYS [126040 2013-12-21] (Symantec Corporation)
R3 NAVEX15; C:\Program Files (x86)\Norton Internet Security\NortonData\21.1.0.18\Definitions\VirusDefs\20140213.033\EX64.SYS [2099288 2013-12-21] (Symantec Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology)
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology)
S3 Serial; C:\Windows\system32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-03-07] (Duplex Secure Ltd.)
R3 SRTSP; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSP64.SYS [858200 2013-09-27] (Symantec Corporation)
R1 SRTSPX; C:\Windows\system32\drivers\NISx64\1501000.012\SRTSPX64.SYS [36952 2013-09-10] (Symantec Corporation)
R0 SymDS; C:\Windows\System32\drivers\NISx64\1501000.012\SYMDS64.SYS [493656 2013-09-10] (Symantec Corporation)
R0 SymEFA; C:\Windows\System32\drivers\NISx64\1501000.012\SYMEFA64.SYS [1147480 2013-09-27] (Symantec Corporation)
R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [177752 2013-12-22] (Symantec Corporation)
R1 SymIM; C:\Windows\System32\DRIVERS\SymIMv.sys [78936 2013-09-10] (Symantec Corporation)
R1 SymIRON; C:\Windows\system32\drivers\NISx64\1501000.012\Ironx64.SYS [264280 2013-09-27] (Symantec Corporation)
R1 SymNetS; C:\Windows\system32\drivers\NISx64\1501000.012\SYMNETS.SYS [590936 2013-09-26] (Symantec Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [X]
S1 HWiNFO32; \??\C:\Users\ox\Desktop\hw32_401_1690\HWiNFO64A.SYS [X]
S4 nvvad_WaveExtensible; system32\drivers\nvvad64v.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S0 rqbnnay; system32\drivers\pzqze.sys [X]
S0 uraggkgw; system32\drivers\ymejbqz.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-02-14 09:43 - 2014-02-14 09:43 - 00018454 _____ () C:\Users\ox\Desktop\FRST.txt
2014-02-14 09:42 - 2014-02-14 09:43 - 00000000 ____D () C:\FRST
2014-02-14 09:41 - 2013-12-05 16:07 - 00112640 _____ (forum.viry.cz) C:\Users\ox\Desktop\FRSTLauncher.exe
2014-02-14 09:40 - 2014-02-13 20:42 - 02152960 _____ (Farbar) C:\Users\ox\Desktop\FRST64.exe
2014-02-14 07:57 - 2014-02-14 07:57 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-14 07:16 - 2014-02-14 07:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 05:15 - 2014-02-14 07:51 - 00000112 _____ () C:\Windows\setupact.log
2014-02-14 05:15 - 2014-02-14 05:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-14 05:14 - 2014-02-14 05:15 - 00526360 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-13 19:13 - 2014-02-13 19:16 - 00000000 ____D () C:\Users\ox\Desktop\3
2014-02-13 15:23 - 2014-02-13 15:23 - 00003287 _____ () C:\Users\ox\Desktop\linkexplorer_2_13_2014.csv
2014-02-13 13:58 - 2014-02-13 13:58 - 00001163 _____ () C:\Users\ox\Desktop\Mozilla Firefox.lnk
2014-02-13 06:14 - 2013-11-27 00:29 - 05693440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-02-13 06:14 - 2013-11-26 23:49 - 06573056 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-02-12 19:26 - 2014-02-12 19:29 - 00000000 ____D () C:\Users\ox\Desktop\2
2014-02-12 17:44 - 2014-02-12 17:44 - 00000000 ____D () C:\Users\ox\Desktop\wpxtube.1.1.0
2014-02-12 17:44 - 2014-02-03 05:23 - 02806957 _____ () C:\Users\ox\Desktop\wpxtube.1.1.0.zip
2014-02-12 17:40 - 2014-02-12 17:40 - 00008370 _____ () C:\Users\ox\Desktop\.htaccess
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Thunderbird
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Mozilla
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Local\Thunderbird
2014-02-12 10:08 - 2014-02-12 10:08 - 00000000 ____D () C:\Users\ox\Documents\My Weblog Posts
2014-02-12 06:25 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-02-12 06:25 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-02-12 06:25 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-02-12 06:25 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-02-12 06:25 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-02-12 06:25 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-02-12 06:25 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-02-12 06:25 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-02-12 06:25 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-02-12 06:25 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-02-12 06:25 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-02-12 06:25 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-02-12 06:25 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-02-12 06:25 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-02-12 06:25 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-02-12 06:25 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-02-12 06:25 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-02-12 06:25 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-02-12 06:09 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-12 06:09 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-12 06:09 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-12 06:09 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-12 06:09 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-12 06:09 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-12 06:09 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-12 06:09 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-12 06:09 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-12 06:09 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-12 06:09 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-12 06:09 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-12 06:09 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-12 06:09 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-12 06:09 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-12 06:09 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-12 06:09 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-12 06:09 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-12 06:09 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-12 06:09 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-12 06:09 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-12 06:09 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-12 06:09 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-12 06:09 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-12 06:09 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-12 06:09 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-12 06:09 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-12 06:09 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-12 06:09 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-12 06:09 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-12 06:09 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-12 06:09 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-12 06:09 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-12 06:09 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-12 06:09 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-12 06:09 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-12 06:09 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-12 06:09 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-12 06:09 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-12 06:09 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 06:09 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 06:09 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 06:09 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 06:09 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-12 06:09 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-12 06:09 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 06:09 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 06:09 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 06:09 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 06:09 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 06:09 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 06:09 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 06:09 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 06:09 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 06:09 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 06:09 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 06:09 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 06:09 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 06:09 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 06:09 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 19:18 - 2014-02-11 19:18 - 732012544 _____ () C:\Users\ox\Desktop\Sbal Prachy A Vypadni (1998 - CZ dabing).avi
2014-02-11 19:14 - 2014-02-11 19:15 - 00000000 ____D () C:\Users\ox\Desktop\1
2014-02-11 16:44 - 2014-02-11 16:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-10 12:01 - 2014-02-10 12:01 - 00002387 _____ () C:\Users\ox\Documents\MumbleAutomaticCertificateBackup.p12
2014-02-10 11:57 - 2014-02-10 12:30 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mumble
2014-02-10 11:57 - 2014-02-10 11:57 - 00001036 _____ () C:\Users\ox\Desktop\Mumble.lnk
2014-02-10 11:56 - 2014-02-10 11:56 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-07 08:29 - 2014-02-14 05:20 - 00346112 ___SH () C:\Users\ox\Desktop\Thumbs.db
2014-02-07 03:29 - 2014-02-14 07:55 - 00485199 _____ () C:\Windows\WindowsUpdate.log
2014-02-06 05:56 - 2014-02-06 05:56 - 00001293 _____ () C:\Users\ox\Desktop\pes.txt
2014-02-04 20:13 - 2014-02-04 21:13 - 03544968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-04 19:23 - 2014-02-04 19:24 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-02-04 19:23 - 2014-02-04 19:23 - 00001039 _____ () C:\Users\ox\Desktop\KMPlayer.lnk
2014-02-04 19:23 - 2014-02-04 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-02-04 19:15 - 2014-02-04 19:15 - 00000000 ____D () C:\Program Files\ffdshow
2014-02-04 19:15 - 2013-12-03 18:19 - 00127488 _____ () C:\Windows\system32\ff_vfw.dll
2014-02-04 15:45 - 2014-02-04 15:45 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.info
2014-02-04 15:39 - 2014-02-04 15:41 - 277644182 _____ () C:\Users\ox\Desktop\seznamky.7z
2014-02-04 15:34 - 2014-02-04 15:38 - 287986687 _____ () C:\Users\ox\Desktop\seznamky.info.zip
2014-02-04 15:23 - 2014-02-04 15:23 - 01170722 _____ () C:\Users\ox\Desktop\d1305_seznam.sql
2014-02-04 10:07 - 2014-02-04 11:13 - 00000000 ____D () C:\Users\ox\Desktop\faktury2013
2014-02-04 09:53 - 2014-02-04 09:53 - 00000000 ____D () C:\Users\ox\Desktop\seznameni
2014-02-03 10:36 - 2014-02-03 10:36 - 00000000 ____D () C:\Users\secure\AppData\Roaming\NCH Software
2014-02-03 10:35 - 2014-02-03 10:35 - 00001397 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Adobe
2014-02-03 10:34 - 2014-02-03 10:34 - 00000644 __RSH () C:\Users\secure\ntuser.pol
2014-02-03 10:34 - 2014-02-03 10:34 - 00000020 ___SH () C:\Users\secure\ntuser.ini
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Šablony
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Soubory cookie
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Poslední
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní tiskárny
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní síť
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Nabídka Start
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Dokumenty
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Obrázky
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Hudba
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Filmy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Local\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 ____D () C:\Users\secure\AppData\Local\VirtualStore
2014-02-03 10:33 - 2014-02-03 10:37 - 00000000 ____D () C:\Users\secure\AppData\Local\Google
2014-02-03 10:33 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure
2014-02-03 10:33 - 2013-06-15 04:21 - 00002128 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft SkyDrive.lnk
2014-02-03 10:33 - 2012-06-27 19:21 - 00000000 ____D () C:\Users\secure\AppData\LocalGoogle
2014-02-03 10:33 - 2012-04-07 12:48 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Macromedia
2014-02-03 10:33 - 2011-01-11 18:57 - 00000000 ____D () C:\Users\secure\AppData\Local\Microsoft Help
2014-02-03 10:33 - 2009-07-14 05:54 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-02-03 10:33 - 2009-07-14 05:49 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-02-03 10:20 - 2013-09-10 03:47 - 00078936 ____R (Symantec Corporation) C:\Windows\system32\Drivers\SymIMV.sys
2014-02-01 18:15 - 2014-02-01 18:16 - 00000000 ____D () C:\Users\ox\Desktop\Nová složka
2014-02-01 15:11 - 2014-02-01 15:11 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 09:01 - 2014-02-01 09:20 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Dogecoin
2014-01-31 15:25 - 2014-01-31 15:25 - 00371896 _____ () C:\Users\ox\Desktop\Recount-v4.2.0e_release.zip
2014-01-28 15:59 - 2012-07-05 21:06 - 00772544 _____ (Oracle Corporation) C:\Windows\SysWOW64\npDeployJava1.dll
2014-01-28 15:59 - 2012-07-05 21:06 - 00687544 _____ (Oracle Corporation) C:\Windows\SysWOW64\deployJava1.dll
2014-01-28 15:37 - 2014-01-28 15:37 - 23517637 _____ () C:\Users\ox\Desktop\Vyřešená rizika zabezpečení.mcf
2014-01-28 11:36 - 2014-01-28 11:36 - 00000079 _____ () C:\Users\ox\Desktop\ztřetzezzzezeze.txt
2014-01-27 18:47 - 2014-01-27 18:47 - 00000000 ____D () C:\Users\ox\Desktop\cfi
2014-01-27 14:10 - 2014-01-27 14:11 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.net
2014-01-23 17:32 - 2014-01-23 17:32 - 00000138 _____ () C:\Users\ox\Desktop\ollo@ollo.cz odkaz vymena.txt
2014-01-23 09:48 - 2014-02-03 21:34 - 00002187 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-01-21 16:45 - 2014-01-21 16:53 - 00000000 ___RD () C:\Users\ox\Desktop\livesex
2014-01-21 08:06 - 2014-01-21 08:08 - 00000053 _____ () C:\Users\ox\Desktop\soud.txt
2014-01-20 19:11 - 2014-01-23 17:41 - 00000000 ____D () C:\Users\ox\Desktop\AJ texty půjčky
2014-01-20 17:46 - 2014-01-21 16:51 - 00000000 ___RD () C:\Users\ox\Desktop\seznamkyprofily
2014-01-15 02:52 - 2013-11-27 02:41 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2014-01-15 02:52 - 2013-11-27 02:41 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2014-01-15 02:52 - 2013-11-26 12:40 - 00376768 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\netio.sys
2014-01-15 02:52 - 2013-11-26 11:32 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
==================== One Month Modified Files and Folders =======
2014-02-14 09:43 - 2014-02-14 09:43 - 00018454 _____ () C:\Users\ox\Desktop\FRST.txt
2014-02-14 09:43 - 2014-02-14 09:42 - 00000000 ____D () C:\FRST
2014-02-14 09:35 - 2013-12-09 14:19 - 00000944 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-14 09:17 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\tracing
2014-02-14 09:13 - 2012-03-30 11:48 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-14 08:08 - 2014-01-14 08:13 - 00000000 ____D () C:\Users\ox\AppData\Local\Epkqtion
2014-02-14 07:59 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-14 07:59 - 2009-07-14 05:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-14 07:57 - 2014-02-14 07:57 - 00001113 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-02-14 07:57 - 2014-01-14 16:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-02-14 07:55 - 2014-02-07 03:29 - 00485199 _____ () C:\Windows\WindowsUpdate.log
2014-02-14 07:53 - 2012-05-02 16:23 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-14 07:52 - 2013-12-09 14:19 - 00000940 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-14 07:51 - 2014-02-14 05:15 - 00000112 _____ () C:\Windows\setupact.log
2014-02-14 07:51 - 2011-08-04 20:13 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-02-14 07:51 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-14 07:16 - 2014-02-14 07:16 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 05:20 - 2014-02-07 08:29 - 00346112 ___SH () C:\Users\ox\Desktop\Thumbs.db
2014-02-14 05:15 - 2014-02-14 05:15 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-14 05:15 - 2014-02-14 05:14 - 00526360 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-02-13 20:42 - 2014-02-14 09:40 - 02152960 _____ (Farbar) C:\Users\ox\Desktop\FRST64.exe
2014-02-13 19:16 - 2014-02-13 19:13 - 00000000 ____D () C:\Users\ox\Desktop\3
2014-02-13 18:00 - 2012-07-05 15:50 - 00000486 _____ () C:\Windows\Tasks\SpeedyPC Registration3.job
2014-02-13 15:23 - 2014-02-13 15:23 - 00003287 _____ () C:\Users\ox\Desktop\linkexplorer_2_13_2014.csv
2014-02-13 13:58 - 2014-02-13 13:58 - 00001163 _____ () C:\Users\ox\Desktop\Mozilla Firefox.lnk
2014-02-13 11:04 - 2013-07-31 15:11 - 00003946 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{DA20C80D-0687-4F17-8A6D-71BABEEF8241}
2014-02-13 09:13 - 2012-01-21 15:59 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Notepad++
2014-02-12 21:08 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-12 19:29 - 2014-02-12 19:26 - 00000000 ____D () C:\Users\ox\Desktop\2
2014-02-12 19:13 - 2011-01-12 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Skype
2014-02-12 17:44 - 2014-02-12 17:44 - 00000000 ____D () C:\Users\ox\Desktop\wpxtube.1.1.0
2014-02-12 17:40 - 2014-02-12 17:40 - 00008370 _____ () C:\Users\ox\Desktop\.htaccess
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Thunderbird
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Mozilla
2014-02-12 12:55 - 2014-02-12 12:55 - 00000000 ____D () C:\Users\secure\AppData\Local\Thunderbird
2014-02-12 10:08 - 2014-02-12 10:08 - 00000000 ____D () C:\Users\ox\Documents\My Weblog Posts
2014-02-12 10:08 - 2011-01-12 10:33 - 00000000 ____D () C:\Users\ox\AppData\Local\Windows Live Writer
2014-02-12 09:37 - 2011-01-12 12:51 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Opera
2014-02-12 09:37 - 2011-01-12 12:51 - 00000000 ____D () C:\Users\ox\AppData\Local\Opera
2014-02-12 06:17 - 2013-07-30 19:17 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-12 06:15 - 2011-01-11 19:00 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-12 06:11 - 2011-04-26 09:15 - 01589432 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-12 06:11 - 2010-03-28 05:47 - 00679352 _____ () C:\Windows\system32\perfh005.dat
2014-02-12 06:11 - 2010-03-28 05:47 - 00146064 _____ () C:\Windows\system32\perfc005.dat
2014-02-12 06:11 - 2009-07-14 06:13 - 01589432 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-11 19:18 - 2014-02-11 19:18 - 732012544 _____ () C:\Users\ox\Desktop\Sbal Prachy A Vypadni (1998 - CZ dabing).avi
2014-02-11 19:15 - 2014-02-11 19:14 - 00000000 ____D () C:\Users\ox\Desktop\1
2014-02-11 16:44 - 2014-02-11 16:44 - 00000000 ____D () C:\Program Files (x86)\Mozilla Thunderbird
2014-02-11 16:22 - 2011-01-11 18:15 - 00000000 ____D () C:\Users\ox\AppData\Local\Thunderbird
2014-02-11 15:30 - 2013-12-09 14:19 - 00003940 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-02-11 15:30 - 2013-12-09 14:19 - 00003688 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-02-10 20:51 - 2011-01-11 17:33 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Adobe
2014-02-10 20:51 - 2011-01-11 16:14 - 00000000 ___RD () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-10 12:30 - 2014-02-10 11:57 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mumble
2014-02-10 12:01 - 2014-02-10 12:01 - 00002387 _____ () C:\Users\ox\Documents\MumbleAutomaticCertificateBackup.p12
2014-02-10 11:57 - 2014-02-10 11:57 - 00001036 _____ () C:\Users\ox\Desktop\Mumble.lnk
2014-02-10 11:56 - 2014-02-10 11:56 - 00000000 ____D () C:\Program Files (x86)\Mumble
2014-02-07 03:25 - 2011-10-26 18:29 - 00000000 ____D () C:\Users\ox\AppData\Roaming\DAEMON Tools Lite
2014-02-07 03:25 - 2011-10-26 18:29 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-02-06 13:16 - 2014-02-12 06:09 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-06 12:30 - 2014-02-12 06:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-06 12:30 - 2014-02-12 06:09 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-06 12:12 - 2014-02-12 06:09 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-06 12:07 - 2014-02-12 06:09 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-06 12:06 - 2014-02-12 06:09 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-06 11:57 - 2014-02-12 06:09 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-06 11:56 - 2014-02-12 06:09 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-06 11:52 - 2014-02-12 06:09 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-06 11:49 - 2014-02-12 06:09 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-06 11:48 - 2014-02-12 06:09 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-06 11:48 - 2014-02-12 06:09 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-06 11:38 - 2014-02-12 06:09 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-06 11:32 - 2014-02-12 06:09 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-06 11:20 - 2014-02-12 06:09 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-06 11:17 - 2014-02-12 06:09 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-06 11:11 - 2014-02-12 06:09 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-06 11:01 - 2014-02-12 06:09 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-06 11:00 - 2014-02-12 06:09 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-06 10:57 - 2014-02-12 06:09 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-06 10:57 - 2014-02-12 06:09 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-06 10:52 - 2014-02-12 06:09 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-06 10:52 - 2014-02-12 06:09 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-06 10:50 - 2014-02-12 06:09 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-06 10:49 - 2014-02-12 06:09 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-06 10:47 - 2014-02-12 06:09 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-06 10:46 - 2014-02-12 06:09 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-06 10:25 - 2014-02-12 06:09 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-06 10:25 - 2014-02-12 06:09 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-06 10:24 - 2014-02-12 06:09 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-06 10:22 - 2014-02-12 06:09 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-06 10:13 - 2014-02-12 06:09 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-06 10:09 - 2014-02-12 06:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-06 10:03 - 2014-02-12 06:09 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-06 09:55 - 2014-02-12 06:09 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-06 09:41 - 2014-02-12 06:09 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-06 09:40 - 2014-02-12 06:09 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-06 09:36 - 2014-02-12 06:09 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-06 09:34 - 2014-02-12 06:09 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-06 09:17 - 2011-02-11 08:32 - 00000000 ____D () C:\Users\ox\AppData\Roaming\FileZilla
2014-02-06 05:56 - 2014-02-06 05:56 - 00001293 _____ () C:\Users\ox\Desktop\pes.txt
2014-02-06 05:07 - 2012-04-04 05:37 - 00000000 ____D () C:\Users\ox\AppData\Roaming\COWON
2014-02-06 05:07 - 2009-10-13 03:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-05 11:02 - 2011-02-17 20:03 - 00000000 ____D () C:\Users\ox\AppData\Roaming\uTorrent
2014-02-04 21:13 - 2014-02-04 20:13 - 03544968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-02-04 21:13 - 2012-03-30 11:48 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-02-04 21:13 - 2012-03-30 11:48 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-02-04 21:13 - 2011-05-18 12:58 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-02-04 19:24 - 2014-02-04 19:23 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-02-04 19:23 - 2014-02-04 19:23 - 00001039 _____ () C:\Users\ox\Desktop\KMPlayer.lnk
2014-02-04 19:23 - 2014-02-04 19:23 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-02-04 19:15 - 2014-02-04 19:15 - 00000000 ____D () C:\Program Files\ffdshow
2014-02-04 16:46 - 2011-10-15 17:56 - 00000000 ____D () C:\Users\ox\AppData\Local\CrashDumps
2014-02-04 15:45 - 2014-02-04 15:45 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.info
2014-02-04 15:41 - 2014-02-04 15:39 - 277644182 _____ () C:\Users\ox\Desktop\seznamky.7z
2014-02-04 15:38 - 2014-02-04 15:34 - 287986687 _____ () C:\Users\ox\Desktop\seznamky.info.zip
2014-02-04 15:23 - 2014-02-04 15:23 - 01170722 _____ () C:\Users\ox\Desktop\d1305_seznam.sql
2014-02-04 11:13 - 2014-02-04 10:07 - 00000000 ____D () C:\Users\ox\Desktop\faktury2013
2014-02-04 09:53 - 2014-02-04 09:53 - 00000000 ____D () C:\Users\ox\Desktop\seznameni
2014-02-03 21:34 - 2014-01-23 09:48 - 00002187 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-02-03 10:37 - 2014-02-03 10:33 - 00000000 ____D () C:\Users\secure\AppData\Local\Google
2014-02-03 10:36 - 2014-02-03 10:36 - 00000000 ____D () C:\Users\secure\AppData\Roaming\NCH Software
2014-02-03 10:35 - 2014-02-03 10:35 - 00001397 _____ () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ___RD () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-02-03 10:35 - 2014-02-03 10:35 - 00000000 ____D () C:\Users\secure\AppData\Roaming\Adobe
2014-02-03 10:35 - 2014-02-03 10:33 - 00000000 ____D () C:\Users\secure
2014-02-03 10:34 - 2014-02-03 10:34 - 00000644 __RSH () C:\Users\secure\ntuser.pol
2014-02-03 10:34 - 2014-02-03 10:34 - 00000020 ___SH () C:\Users\secure\ntuser.ini
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Šablony
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Soubory cookie
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Poslední
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní tiskárny
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Okolní síť
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Nabídka Start
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Dokumenty
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Obrázky
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Hudba
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Documents\Filmy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 _SHDL () C:\Users\secure\AppData\Local\Data aplikací
2014-02-03 10:34 - 2014-02-03 10:34 - 00000000 ____D () C:\Users\secure\AppData\Local\VirtualStore
2014-02-03 10:28 - 2012-06-13 13:35 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-02-03 10:27 - 2011-01-12 11:03 - 00004611 _____ () C:\Windows\WinInit.Ini
2014-02-03 10:25 - 2013-06-23 13:07 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-02-03 05:23 - 2014-02-12 17:44 - 02806957 _____ () C:\Users\ox\Desktop\wpxtube.1.1.0.zip
2014-02-02 18:57 - 2011-01-11 19:12 - 00000000 ____D () C:\Users\ox\AppData\Local\Adobe
2014-02-01 18:16 - 2014-02-01 18:15 - 00000000 ____D () C:\Users\ox\Desktop\Nová složka
2014-02-01 15:19 - 2011-01-11 18:51 - 00000000 ___RD () C:\Users\ox\Desktop\udržba
2014-02-01 15:11 - 2014-02-01 15:11 - 00000000 ____D () C:\ProgramData\McAfee
2014-02-01 09:33 - 2013-11-27 08:38 - 00000000 ____D () C:\Program Files\trend micro
2014-02-01 09:20 - 2014-02-01 09:01 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Dogecoin
2014-01-31 16:27 - 2011-06-12 09:46 - 00000000 ____D () C:\Users\admin
2014-01-31 15:25 - 2014-01-31 15:25 - 00371896 _____ () C:\Users\ox\Desktop\Recount-v4.2.0e_release.zip
2014-01-29 18:41 - 2009-07-14 06:08 - 00032582 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-01-28 15:59 - 2012-10-14 01:02 - 00000000 ____D () C:\Users\ox\AppData\Local\NPE
2014-01-28 15:57 - 2011-01-21 06:44 - 00000000 ____D () C:\Program Files (x86)\Java
2014-01-28 15:56 - 2013-11-28 10:31 - 00000000 ____D () C:\ProgramData\Package Cache
2014-01-28 15:37 - 2014-01-28 15:37 - 23517637 _____ () C:\Users\ox\Desktop\Vyřešená rizika zabezpečení.mcf
2014-01-28 11:36 - 2014-01-28 11:36 - 00000079 _____ () C:\Users\ox\Desktop\ztřetzezzzezeze.txt
2014-01-27 18:47 - 2014-01-27 18:47 - 00000000 ____D () C:\Users\ox\Desktop\cfi
2014-01-27 14:11 - 2014-01-27 14:10 - 00000000 ____D () C:\Users\ox\Desktop\seznamky.net
2014-01-23 17:41 - 2014-01-20 19:11 - 00000000 ____D () C:\Users\ox\Desktop\AJ texty půjčky
2014-01-23 17:32 - 2014-01-23 17:32 - 00000138 _____ () C:\Users\ox\Desktop\ollo@ollo.cz odkaz vymena.txt
2014-01-23 09:47 - 2009-10-13 04:22 - 00000000 ____D () C:\Program Files (x86)\Google
2014-01-23 06:12 - 2011-09-08 03:46 - 00000000 ___RD () C:\Users\ox\Desktop\Maglajs
2014-01-21 19:04 - 2013-12-20 03:37 - 00000000 ____D () C:\Users\ox\Desktop\частное фото
2014-01-21 16:53 - 2014-01-21 16:45 - 00000000 ___RD () C:\Users\ox\Desktop\livesex
2014-01-21 16:51 - 2014-01-20 17:46 - 00000000 ___RD () C:\Users\ox\Desktop\seznamkyprofily
2014-01-21 08:08 - 2014-01-21 08:06 - 00000053 _____ () C:\Users\ox\Desktop\soud.txt
2014-01-19 14:47 - 2011-05-13 07:16 - 00000000 ____D () C:\Windows\System32\Tasks\NCH Software
2014-01-19 10:06 - 2011-01-11 17:36 - 00000000 ____D () C:\Users\ox\AppData\Roaming\Mozilla
2014-01-18 20:04 - 2013-09-11 15:06 - 00000000 ___RD () C:\Users\ox\Desktop\webyinstalace
2014-01-18 17:24 - 2012-08-05 05:31 - 00000000 ___SD () C:\Users\ox\Disk Google
2014-01-18 09:21 - 2013-08-30 21:25 - 00000000 ____D () C:\Users\ox\AppData\Local\NVIDIA
2014-01-18 09:21 - 2013-08-30 21:20 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-01-18 09:21 - 2011-04-22 16:59 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-01-18 09:21 - 2011-01-11 19:56 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-01-18 09:18 - 2010-03-30 17:21 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-01-18 08:41 - 2011-01-11 16:10 - 00000000 ____D () C:\Users\ox
2014-01-15 03:05 - 2013-02-03 03:05 - 00000000 ____D () C:\ProgramData\Microsoft Help
Some content of TEMP:
====================
C:\Users\ox\AppData\Local\Temp\bwcdakgl.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-02-08 20:09
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (Acer) (Fixed) (Total:290.95 GB) (Free:110.75 GB) NTFS
Drive d: (DATA) (Fixed) (Total:291.12 GB) (Free:238.59 GB) NTFS
Available physical RAM: 2293.29 MB
Total physical RAM: 4095.14 MB
Percentage of memory in use: 43%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596 GB) (Disk ID: 30B79D18)
Partition 1: (Not Active) - (Size=14 GB) - (Type=27)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=291 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=291 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SpeedyPC Registration3.job => C:\Program Files (x86)\Common Files\SpeedyPC Software\UUS3\UUS3.dll
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Norton Internet Security (Disabled - Up to date) {63DF5164-9100-186D-2187-8DC619EFD8BF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Norton Internet Security (Disabled - Up to date) {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security (Enabled) {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\ox\Desktop" je 74184 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader
"C:\Program Files (x86)\Adobe\Photoshop Elements 5.0\apdproxy.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher
"C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcadeDeluxeAgent
"C:\Program Files (x86)\Acer Arcade Deluxe\Acer Arcade Deluxe\ArcadeDeluxeAgent.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BackupManagerTray
"C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\BackupManagerTray.exe" -h -k [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\crsscmgr
C:\Users\ox\AppData\Roaming\AceBIT\crsscmgr\crssc.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Epkqtion
regsvr32.exe C:\Users\ox\AppData\Local\Epkqtion\npnv3dvstreaming.dll [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\ox\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Hotkey Utility
C:\Program Files (x86)\Acer\Hotkey Utility\HotkeyUtility.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\InstallerLauncher
"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\setuplauncher.exe" /run:"C:\Program Files\Common Files\Bitdefender\SetupInformation\{6F57816A-791A-4159-A75F-CFD0C7EA4FBF}\Installer.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Vid
"C:\Program Files (x86)\Logitech\Vid HD\Vid.exe" -bootmode [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LWS
C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe -hide [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mwlDaemon
C:\Program Files (x86)\EgisTec\MyWinLocker 3\x86\mwlDaemon.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nvtmru
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlayMovie
"C:\Program Files (x86)\Acer Arcade Deluxe\PlayMovie\PMVService.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE
C:\Program Files (x86)\PowerISO\PWRISOVM.EXE -startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SDTray
"C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay
C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skytel
C:\Program Files\Realtek\Audio\HDA\Skytel.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^ox^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Adobe Gamma.lnk
C:\PROGRA~2\COMMON~1\Adobe\CALIBR~1\ADOBEG~1.EXE [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================