low fps + spomaleny pc
Napsal: 28 úno 2014 19:48
Dobry den, po 2 dnoch som zapal pc a znicoho nic je spomaleny. Ked pozeram hocijake video na youtube, tak priemerne kazdych 6 sekund mi sekne na 2 sekundy a na hre counter strike global offensive mam fps cca 30 a predtym som maval cca 120. Pustal som spybot, prehladaval som pc cez antivirus a vraj vsetko ok. RSIT log davam do dalsej spravy, lebo sem sa nevosiel.
FRST log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by Allan (administrator) on ALLAN-PC on 28-02-2014 19:38:19
Running from C:\Users\Allan\Desktop
Microsoft Windows 7 Ultimate (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Comodo\Dragon\dragon_updater.exe
() C:\Windows\System32\XSrvSetup.exe
() C:\Windows\runservice.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Raxco Software, Inc.) C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
(Razer Inc.) C:\Program Files\Razer\Razer Game Booster\RzKLService.exe
(Solid Documents, LLC) C:\Windows\Installer\MSIDC04.tmp
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared Files\brs.exe
(Creative Technology Ltd.) C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
(Creative Technology Ltd.) C:\Windows\V0220Mon.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(SteelSeries ApS) C:\Program Files\SteelS\SteelSeries Engine\SteelSeriesEngine.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-02-27] (Realtek Semiconductor)
HKLM\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-09-25] (NEC Electronics Corporation)
HKLM\...\Run: [RemoteControl9] - C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM\...\Run: [PDVD9LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [50472 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-08-28] (cyberlink)
HKLM\...\Run: [CloneCDTray] - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2005-05-19] (SlySoft, Inc.)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM\...\Run: [AVFX Engine] - C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [24576 2006-06-09] (Creative Technology Ltd.)
HKLM\...\Run: [V0220Mon.exe] - C:\Windows\V0220Mon.exe [32768 2006-06-28] (Creative Technology Ltd.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-10-08] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RazerGameBooster] - C:\Program Files\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2014-02-25] (Razer Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\.DEFAULT\...\Run: [Configuring] - rundll32.exe C:\Windows\TEMP\466770.txt,M <===== ATTENTION
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] - C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2283808 2013-11-11] (IObit)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [AlcoholAutomount] - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [33120 2009-11-15] (Alcohol Soft Development Team)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [SteelSeries Engine] - C:\Program Files\SteelS\SteelSeries Engine\SteelSeriesEngine.exe [239104 2013-02-06] (SteelSeries ApS)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [17344176 2012-06-05] (Skype Technologies S.A.)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [EnableLUA] 0
Startup: C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Klaudinečka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RazossUpdater.lnk
ShortcutTarget: RazossUpdater.lnk -> C:\Users\Allan\AppData\Local\Razoss\Application\RazossUpdater.exe (No File)
GroupPolicyUsers\S-1-5-21-1000584301-333264054-3190057082-1002\User: Group Policy restriction detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.newversionchecker.com/?redr= ... tutils.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
URLSearchHook: HKLM - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
URLSearchHook: HKCU - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
SearchScopes: HKCU - DefaultScope {E62F10E7-00B9-4664-B563-EBED88662A8C} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {5D2E8B8F-24C2-42F3-A944-A4C3556459FC} URL = http://ZiggyTV.toolbaroptions.com/?tmp= ... earchTerms}
SearchScopes: HKCU - {776360F0-518B-4858-AFDD-93F8ED224637} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {E62F10E7-00B9-4664-B563-EBED88662A8C} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Program Files\PC Translator\webie.dll ()
Toolbar: HKLM - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Softonic-Eng7 Toolbar - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {4C350B19-6CA1-4569-B14C-296D8D65300C} - No File
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/stati ... 0.53.0.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: linkscanner - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ]
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.151.222.34 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default
FF user.js: detected! => C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\user.js
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @IObit.com/np_Asc_Plugin - C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files\Win7codecs\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ZiggyTV.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ZiggyTV.xml.bak
FF Extension: Ads Removal - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\adsremoval@adsremoval.net [2014-02-25]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\ascsurfingprotection@iobit.com [2013-11-20]
FF Extension: Firebug - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\firebug@software.joehewitt.com.xpi [2014-01-29]
FF Extension: ZwankySearch - C:\Program Files\Mozilla Firefox\extensions\{5F321A53-3F65-45F2-9903-587E3CA15404} [2013-09-03]
Chrome:
=======
CHR DefaultSearchKeyword: yahoo.com search
CHR DefaultSearchProvider: Yahoo
CHR DefaultSearchURL: http://search.yahoo.com/search?fr=chr-g ... earchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Google Docs) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google Search) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-19]
CHR Extension: (Google Wallet) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Gmail) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.1.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\ErrorAssistant_1.2.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2013-11-20]
CHR HKLM\...\Chrome\Extension: [ocphobfcfafpclibolpjdafgaffkaoci] - C:\Users\Allan\AppData\Local\GamePlayLabs Plugin\gplplugin.crx [2011-03-15]
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx [2011-03-15]
========================== Services (Whitelisted) =================
R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [276992 2013-10-08] (Advanced Micro Devices, Inc.)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [1868432 2012-12-24] ()
S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 JMB36X; C:\Windows\System32\XSrvSetup.exe [65536 2009-08-06] ()
R2 LicCtrlService; C:\Windows\runservice.exe [2560 2011-05-26] ()
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [237008 2011-06-17] (McAfee, Inc.)
S3 MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation)
R2 PDAgent; C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe [922888 2009-04-01] (Raxco Software, Inc.)
S3 PDEngine; C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe [1025288 2009-04-01] (Raxco Software, Inc.)
R2 RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 SCPDFReadSpool; C:\Windows\Installer\MSIDC04.tmp [177784 2012-07-09] (Solid Documents, LLC)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation)
S3 SRS Labs License Service; C:\Program Files\Common Files\SRS Labs Shared\Service\srslabslicenseservice.exe [72704 2013-11-30] (SRS Labs)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2010-03-26] (TuneUp Software)
S3 wampapache; c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe [18432 2012-05-13] (Apache Software Foundation)
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe [8177664 2012-04-19] ()
S2 wmcmgc; C:\Program Files\Common Files\\System\icm64.dll [14745600 2009-07-14] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48808 2012-11-20] (Advanced Micro Devices)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48808 2012-11-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [16640 2010-12-30] (Wondershare)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [210712 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22808 2014-01-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 AvgRkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R3 busenum; C:\Windows\System32\DRIVERS\SteelBus.sys [111360 2013-01-10] (SteelSeries Corporation)
R2 DefragFS; C:\Windows\system32\Drivers\DefragFS.sys [71184 2009-01-09] (Raxco Software, Inc.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [27392 2005-05-03] (SlySoft, Inc.)
R2 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [10624 2005-04-21] (Elaborate Bytes AG)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [24504 2011-11-28] (Turtle Entertainment GmbH)
S3 etdrv; C:\Windows\etdrv.sys [17488 2013-08-19] (Windows (R) 2000 DDK provider)
S4 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 gdrv; C:\Windows\gdrv.sys [17488 2013-08-19] (Windows (R) 2000 DDK provider)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [5568 2011-09-02] (SweetLow)
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [106296 2014-02-27] (JMicron Technology Corp.)
R0 mv91cons; C:\Windows\System32\DRIVERS\mv91cons.sys [23912 2014-02-27] (Marvell Semiconductor Inc.)
R0 mvs91xx; C:\Windows\System32\DRIVERS\mvs91xx.sys [282472 2014-02-27] (Marvell Semiconductor, Inc.)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2014-02-27] (Renesas Electronics Corporation)
S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [155648 2009-07-17] (Realtek Semiconductor Corp.)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham.sys [34304 2012-10-15] (SteelSeries Corporation)
R3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [21920 2006-09-26] (Screaming Bee LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [15672 2013-05-22] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-11-28] ()
S3 SRS_SSCFilter; C:\Windows\System32\drivers\srs_sscfilter.sys [34048 2006-10-09] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25216 2010-02-25] (The OpenVPN Project)
S3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
S3 V0220Dev; C:\Windows\System32\DRIVERS\V0220Dev.sys [146112 2006-06-29] (Creative Technology Ltd.)
S3 V0220Vfx; C:\Windows\System32\DRIVERS\V0220Vfx.sys [6272 2006-06-08] (EyePower Games Pte. Ltd.)
S3 ZD1211BU(Atheros); C:\Windows\System32\DRIVERS\zd1211Bu.sys [722432 2008-04-11] (ZyDAS Technology Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files\CyberLink\PowerDVD9\000.fcl [87536 2009-08-28] (CyberLink Corp.)
U3 aglavsf0; C:\Windows\system32\Drivers\aglavsf0.sys [0 ] (Microsoft Corporation)
U3 aohsjwai; C:\Windows\system32\Drivers\aohsjwai.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Allan\AppData\Local\Temp\catchme.sys [X]
S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 ESEADriver2; \??\C:\Users\Allan\AppData\Local\Temp\ESEADriver2.sys [X]
S3 GarenaPEngine; \??\C:\Users\Allan\AppData\Local\Temp\QBGD807.tmp [X]
S3 GGSAFERDriver; \??\C:\Program Files\Garena\safedrv.sys [X]
U5 GVTDrv; C:\Windows\system32\Drivers\GVTDrv.sys [24944 2013-08-19] ()
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
S3 XDva389; \??\C:\Windows\system32\XDva389.sys [X]
S3 XDva390; \??\C:\Windows\system32\XDva390.sys [X]
S3 XDva391; \??\C:\Windows\system32\XDva391.sys [X]
S3 XDva392; \??\C:\Windows\system32\XDva392.sys [X]
S3 XDva393; \??\C:\Windows\system32\XDva393.sys [X]
S3 XDva394; \??\C:\Windows\system32\XDva394.sys [X]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X]
S3 XDva398; \??\C:\Windows\system32\XDva398.sys [X]
S3 XDva399; \??\C:\Windows\system32\XDva399.sys [X]
S3 XDva401; \??\C:\Windows\system32\XDva401.sys [X]
==================== NetSvcs (Whitelisted) ===================
NETSVC: wmcmgc -> C:\Program Files\Common Files\\System\icm64.dll (Microsoft Corporation)
==================== One Month Created Files and Folders ========
2014-02-28 19:38 - 2014-02-28 19:38 - 00028589 _____ () C:\Users\Allan\Desktop\FRST.txt
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Downloads\Unconfirmed 568814.crdownload
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
2014-02-28 19:32 - 2014-02-28 19:38 - 00000000 ____D () C:\FRST
2014-02-28 19:32 - 2014-02-28 19:32 - 01143808 _____ (Farbar) C:\Users\Allan\Desktop\FRST.exe
2014-02-28 17:14 - 2014-02-28 17:14 - 00000000 ___RD () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2014-02-28 17:13 - 2014-02-28 17:13 - 00000056 _____ () C:\Windows\setupact.log
2014-02-28 17:13 - 2014-02-28 17:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-27 20:09 - 2014-02-27 20:10 - 01214976 _____ () C:\Users\Allan\Desktop\LIVE Majster Reči - Prezentácia.ppt
2014-02-27 17:37 - 2014-02-27 17:37 - 00282472 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvs91xx.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00141952 _____ (Renesas Electronics Corporation) C:\Windows\system32\Drivers\nusb3xhc.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00034816 _____ (<Marvell>) C:\Windows\system32\mv91xxm.dll
2014-02-27 17:37 - 2014-02-27 17:37 - 00023912 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mv91cons.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00014184 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mvxxmm.sys
2014-02-27 17:36 - 2014-02-27 17:36 - 00106296 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-02-27 17:34 - 2014-02-27 17:34 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-02-27 17:34 - 2014-02-27 17:34 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 17:34 - 2014-02-27 17:34 - 00332568 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 24860160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 11527680 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 03461040 _____ () C:\Windows\system32\atiumdva.cap
2014-02-27 17:28 - 2014-02-27 17:28 - 00721296 _____ () C:\Windows\system32\atiicdxx.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00550456 _____ () C:\Windows\system32\atiapfxx.blb
2014-02-27 17:28 - 2014-02-27 17:28 - 00501248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 00493056 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00234036 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00233776 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00200704 _____ () C:\Windows\system32\clinfo.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00114688 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083552 _____ () C:\Windows\system32\ativce02.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00057344 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00047887 _____ () C:\Windows\atiogl.xml
2014-02-27 17:28 - 2014-02-27 17:28 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00030720 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Users\Public\Documents\Explorer Suite Signatures
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files\NTCore
2014-02-23 22:38 - 2014-02-23 22:45 - 48020350 _____ () C:\Users\Allan\Desktop\holky.rar
2014-02-19 16:18 - 2014-02-19 16:45 - 138643180 _____ () C:\Users\Allan\Downloads\13932_bshdbxsb320.rar
2014-02-18 16:56 - 2014-02-18 17:35 - 689612766 _____ () C:\Users\Allan\Downloads\Ivan-Horváth---Človek-na-ulici.zip
2014-02-17 17:13 - 2014-02-17 18:12 - 00004037 _____ () C:\Users\Allan\Desktop\b_lee.txt
2014-02-04 19:21 - 2014-02-04 19:21 - 00000000 ____D () C:\Users\Allan\Downloads\Gejza-Vámoš---Editino-očko
==================== One Month Modified Files and Folders =======
2014-02-28 19:38 - 2014-02-28 19:38 - 00028589 _____ () C:\Users\Allan\Desktop\FRST.txt
2014-02-28 19:38 - 2014-02-28 19:32 - 00000000 ____D () C:\FRST
2014-02-28 19:38 - 2013-12-28 11:14 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 19:36 - 2013-12-21 17:07 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\Skype
2014-02-28 19:36 - 2013-12-19 07:24 - 00000000 ____D () C:\Users\Allan\AppData\Local\CrashDumps
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Downloads\Unconfirmed 568814.crdownload
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
2014-02-28 19:32 - 2014-02-28 19:32 - 01143808 _____ (Farbar) C:\Users\Allan\Desktop\FRST.exe
2014-02-28 19:31 - 2010-03-26 20:33 - 00000000 ____D () C:\Users\Allan\Desktop\Programy
2014-02-28 19:25 - 2012-11-01 20:15 - 00000000 ____D () C:\Program Files\Steam
2014-02-28 19:24 - 2011-03-26 20:00 - 00000000 ____D () C:\Users\Allan\AppData\Local\Google
2014-02-28 19:20 - 2012-04-02 20:11 - 00000000 ____D () C:\Program Files\Google
2014-02-28 19:12 - 2011-06-29 14:37 - 00007605 _____ () C:\Users\Allan\AppData\Local\Resmon.ResmonCfg
2014-02-28 19:03 - 2012-04-02 20:11 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 18:18 - 2010-03-26 10:55 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-28 18:06 - 2013-10-03 13:32 - 00000000 ____D () C:\ProgramData\AVG2014
2014-02-28 18:06 - 2011-04-05 13:00 - 00000000 ____D () C:\Users\Allan\AppData\Local\GamePlayLabs Plugin
2014-02-28 18:04 - 2010-08-11 13:18 - 00000000 ____D () C:\Program Files\Creative
2014-02-28 17:54 - 2013-10-03 13:08 - 00000000 ____D () C:\Users\Allan\AppData\Local\Avg2014
2014-02-28 17:42 - 2011-04-04 15:30 - 00000000 ____D () C:\ProgramData\MFAData
2014-02-28 17:18 - 2009-07-14 05:34 - 00013424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 17:18 - 2009-07-14 05:34 - 00013424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 17:17 - 2010-03-26 10:54 - 01966052 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 17:14 - 2014-02-28 17:14 - 00000000 ___RD () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2014-02-28 17:14 - 2013-10-13 19:20 - 00000272 _____ () C:\Windows\Tasks\Driver Booster Update.job
2014-02-28 17:14 - 2012-04-02 20:11 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 17:13 - 2014-02-28 17:13 - 00000056 _____ () C:\Windows\setupact.log
2014-02-28 17:13 - 2014-02-28 17:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-28 17:13 - 2011-05-26 21:09 - 00001033 ___SH () C:\Windows\system32\mmf.sys
2014-02-28 17:13 - 2010-12-12 22:34 - 00000302 ___SH () C:\Windows\Tasks\urnxgko.job
2014-02-28 17:13 - 2009-10-14 11:50 - 00000000 ____D () C:\Windows\Panther
2014-02-28 17:13 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 16:11 - 2013-11-24 16:54 - 68747264 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 02281472 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 00102400 _____ () C:\Windows\system32\config\SAM.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-02-28 16:11 - 2010-03-26 10:52 - 00000000 ____D () C:\Users\Allan
2014-02-27 20:10 - 2014-02-27 20:09 - 01214976 _____ () C:\Users\Allan\Desktop\LIVE Majster Reči - Prezentácia.ppt
2014-02-27 18:40 - 2010-04-26 21:23 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\TS3Client
2014-02-27 17:37 - 2014-02-27 17:37 - 00282472 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvs91xx.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00141952 _____ (Renesas Electronics Corporation) C:\Windows\system32\Drivers\nusb3xhc.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00034816 _____ (<Marvell>) C:\Windows\system32\mv91xxm.dll
2014-02-27 17:37 - 2014-02-27 17:37 - 00023912 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mv91cons.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00014184 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mvxxmm.sys
2014-02-27 17:36 - 2014-02-27 17:36 - 00106296 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-27 17:35 - 2010-03-26 10:57 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-27 17:35 - 2010-03-26 10:55 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-02-27 17:34 - 2014-02-27 17:34 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-02-27 17:34 - 2014-02-27 17:34 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-02-27 17:34 - 2014-02-27 17:34 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 17:34 - 2014-02-27 17:34 - 00332568 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-27 17:29 - 2012-01-28 13:33 - 00000000 ____D () C:\Program Files\AMD
2014-02-27 17:28 - 2014-02-27 17:28 - 24860160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 11527680 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 03461040 _____ () C:\Windows\system32\atiumdva.cap
2014-02-27 17:28 - 2014-02-27 17:28 - 00721296 _____ () C:\Windows\system32\atiicdxx.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00550456 _____ () C:\Windows\system32\atiapfxx.blb
2014-02-27 17:28 - 2014-02-27 17:28 - 00501248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 00493056 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00234036 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00233776 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00200704 _____ () C:\Windows\system32\clinfo.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00114688 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083552 _____ () C:\Windows\system32\ativce02.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00057344 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00047887 _____ () C:\Windows\atiogl.xml
2014-02-27 17:28 - 2014-02-27 17:28 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00030720 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-02-27 17:28 - 2013-10-08 13:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-02-27 17:28 - 2013-10-08 13:52 - 00209408 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-02-27 17:28 - 2013-10-08 13:28 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-02-27 17:28 - 2012-02-15 04:18 - 01100216 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx32.dll
2014-02-27 17:28 - 2012-02-15 03:34 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdag.dll
2014-02-27 17:28 - 2012-02-15 03:29 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdva.dll
2014-02-27 17:28 - 2012-02-15 03:12 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9pag.dll
2014-02-27 16:50 - 2013-12-01 11:56 - 00005396 _____ () C:\Windows\wininit.ini
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Users\Public\Documents\Explorer Suite Signatures
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files\NTCore
2014-02-27 14:15 - 2012-11-01 20:24 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-02-25 18:33 - 2009-11-11 06:43 - 00007100 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-24 08:48 - 2013-11-20 14:54 - 00000000 ____D () C:\ProgramData\ProductData
2014-02-23 22:45 - 2014-02-23 22:38 - 48020350 _____ () C:\Users\Allan\Desktop\holky.rar
2014-02-22 17:07 - 2010-05-17 20:59 - 00024576 _____ () C:\Users\Allan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-22 13:55 - 2010-03-26 20:37 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\uTorrent
2014-02-21 19:38 - 2013-12-25 16:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-21 19:38 - 2013-07-20 18:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-19 16:45 - 2014-02-19 16:18 - 138643180 _____ () C:\Users\Allan\Downloads\13932_bshdbxsb320.rar
2014-02-18 17:35 - 2014-02-18 16:56 - 689612766 _____ () C:\Users\Allan\Downloads\Ivan-Horváth---Človek-na-ulici.zip
2014-02-17 18:12 - 2014-02-17 17:13 - 00004037 _____ () C:\Users\Allan\Desktop\b_lee.txt
2014-02-04 19:21 - 2014-02-04 19:21 - 00000000 ____D () C:\Users\Allan\Downloads\Gejza-Vámoš---Editino-očko
2014-02-02 11:47 - 2010-03-26 12:10 - 00000000 ____D () C:\Users\Allan\AppData\Local\Adobe
2014-01-29 17:38 - 2014-01-12 14:08 - 00000000 ____D () C:\Users\Allan\Desktop\javascript docs
Some content of TEMP:
====================
C:\Users\Klaudinečka\AppData\Local\temp\EngineInstaller.exe
C:\Users\Klaudinečka\AppData\Local\temp\mgsqlite3.dll
C:\Users\Klaudinečka\AppData\Local\temp\RazossUpdater.exe
C:\Users\Klaudinečka\AppData\Local\temp\Shortcut_Shortcut_SweetIMSetup.exe
C:\Users\Klaudinečka\AppData\Local\temp\Shortcut_SweetIMSetup.exe
C:\Users\Klaudinečka\AppData\Local\temp\SIMEEI2Installer.exe
C:\Users\Klaudinečka\AppData\Local\temp\SIMEEIInstaller.exe
C:\Users\Klaudinečka\AppData\Local\temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!
nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Driver Booster Update.job => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\urnxgko.job => ?
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:05EE1EEF
AlternateDataStreams: C:\ProgramData\TEMP:D282699C
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Allan\Desktop" je 3032 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Malware Fighter
"C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
+ http://speedyshare.com/nqptB/Addition.rar
FRST log:
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 27-02-2014 02
Ran by Allan (administrator) on ALLAN-PC on 28-02-2014 19:38:19
Running from C:\Users\Allan\Desktop
Microsoft Windows 7 Ultimate (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(IObit) C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Program Files\Comodo\Dragon\dragon_updater.exe
() C:\Windows\System32\XSrvSetup.exe
() C:\Windows\runservice.exe
(IObit) C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Nero AG) C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
(Raxco Software, Inc.) C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe
(Razer Inc.) C:\Program Files\Razer\Razer Game Booster\RzKLService.exe
(Solid Documents, LLC) C:\Windows\Installer\MSIDC04.tmp
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(StarWind Software) C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
(NEC Electronics Corporation) C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared Files\brs.exe
(Creative Technology Ltd.) C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe
(Creative Technology Ltd.) C:\Windows\V0220Mon.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Valve Corporation) C:\Program Files\Steam\Steam.exe
(SteelSeries ApS) C:\Program Files\SteelS\SteelSeries Engine\SteelSeriesEngine.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\mobsync.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe
(Microsoft Corporation) C:\Windows\system32\AUDIODG.EXE
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [12017368 2014-02-27] (Realtek Semiconductor)
HKLM\...\Run: [JMB36X IDE Setup] - C:\Windows\RaidTool\xInsIDE.exe [36864 2007-03-20] ()
HKLM\...\Run: [NUSB3MON] - C:\Program Files\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-09-25] (NEC Electronics Corporation)
HKLM\...\Run: [RemoteControl9] - C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-07-06] (CyberLink Corp.)
HKLM\...\Run: [PDVD9LanguageShortcut] - C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [50472 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] - C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-08-28] (cyberlink)
HKLM\...\Run: [CloneCDTray] - C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe [57344 2005-05-19] (SlySoft, Inc.)
HKLM\...\Run: [SwitchBoard] - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM\...\Run: [AdobeCS5ServiceManager] - C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKLM\...\Run: [AVFX Engine] - C:\Program Files\Creative\Creative Live! Cam\VideoFX\StartFX.exe [24576 2006-06-09] (Creative Technology Ltd.)
HKLM\...\Run: [V0220Mon.exe] - C:\Windows\V0220Mon.exe [32768 2006-06-28] (Creative Technology Ltd.)
HKLM\...\Run: [APSDaemon] - C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc.)
HKLM\...\Run: [SDTray] - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [3825176 2012-11-13] (Safer-Networking Ltd.)
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [StartCCC] - C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\x86\CLIStart.exe [747264 2013-10-08] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [RazerGameBooster] - C:\Program Files\Razer\Razer Game Booster\RazerGameBooster.exe [61152 2014-02-25] (Razer Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKU\.DEFAULT\...\Run: [Configuring] - rundll32.exe C:\Windows\TEMP\466770.txt,M <===== ATTENTION
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] - C:\Program Files\IObit\Advanced SystemCare 7\ASCTray.exe [2283808 2013-11-11] (IObit)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [AlcoholAutomount] - C:\Program Files\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [33120 2009-11-15] (Alcohol Soft Development Team)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [Steam] - C:\Program Files\Steam\steam.exe [1821888 2014-02-25] (Valve Corporation)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [SteelSeries Engine] - C:\Program Files\SteelS\SteelSeries Engine\SteelSeriesEngine.exe [239104 2013-02-06] (SteelSeries ApS)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [17344176 2012-06-05] (Skype Technologies S.A.)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Run: [ISUSPM Startup] - C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe [249856 2005-08-11] (Macrovision Corporation)
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [LogonHoursAction] 2
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [DontDisplayLogonHoursWarnings] 1
HKU\S-1-5-21-1000584301-333264054-3190057082-1000\...\Policies\system: [EnableLUA] 0
Startup: C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma.lnk
ShortcutTarget: Adobe Gamma.lnk -> C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
Startup: C:\Users\Klaudinečka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RazossUpdater.lnk
ShortcutTarget: RazossUpdater.lnk -> C:\Users\Allan\AppData\Local\Razoss\Application\RazossUpdater.exe (No File)
GroupPolicyUsers\S-1-5-21-1000584301-333264054-3190057082-1002\User: Group Policy restriction detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.newversionchecker.com/?redr= ... tutils.com
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://search.qip.ru
URLSearchHook: HKLM - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
URLSearchHook: HKCU - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
URLSearchHook: HKCU - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
SearchScopes: HKCU - DefaultScope {E62F10E7-00B9-4664-B563-EBED88662A8C} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E} URL =
SearchScopes: HKCU - {5D2E8B8F-24C2-42F3-A944-A4C3556459FC} URL = http://ZiggyTV.toolbaroptions.com/?tmp= ... earchTerms}
SearchScopes: HKCU - {776360F0-518B-4858-AFDD-93F8ED224637} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {A55F9C95-2BB1-4EA2-BC77-DFAAB78832CE} URL = http://search.qip.ru/search?query={searchTerms}&from=IE
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {E62F10E7-00B9-4664-B563-EBED88662A8C} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
BHO: IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
BHO: Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy 2\SDHelper.dll (Safer-Networking Ltd.)
BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll (Adblock)
BHO: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
Toolbar: HKLM - WebTranslator - {BFC32E1D-EE75-4A48-BC60-104E11EE2431} - C:\Program Files\PC Translator\webie.dll ()
Toolbar: HKLM - Softonic-Eng7 Toolbar - {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
Toolbar: HKLM - Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
Toolbar: HKLM - IObit Apps Toolbar - {03EB0E9C-7A91-4381-A220-9B52B641CDB1} - C:\Program Files\IObit Apps Toolbar\IE\8.3\iobitappsToolbarIE.dll (Spigot, Inc.)
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Toolbar: HKCU - No Name - {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKCU - Softonic-Eng7 Toolbar - {414B6D9D-4A95-4E8D-B5B1-149DD2D93BB3} - C:\Program Files\Softonic-Eng7\prxtbSof0.dll (Conduit Ltd.)
Toolbar: HKCU - No Name - {4C350B19-6CA1-4569-B14C-296D8D65300C} - No File
DPF: {784797A8-342D-4072-9486-03C8D0F2F0A1} https://www.battlefieldheroes.com/stati ... 0.53.0.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Handler: linkscanner - No CLSID Value -
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: - {AEB6717E-7E19-11d0-97EE-00C04FD91972} - No File [ ]
Winsock: Catalog5 07 C:\Program Files\Bonjour\mdnsNSP.dll [121704] (Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 213.151.222.34 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default
FF user.js: detected! => C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\user.js
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\Windows\system32\Adobe\Director\np32dsw_1168638.dll (Adobe Systems, Inc.)
FF Plugin: @Apple.com/iTunes,version=1.0 - C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin: @Google.com/GoogleEarthPlugin - C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @IObit.com/np_Asc_Plugin - C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @pages.tvunetworks.com/WebPlayer - C:\Windows\system32\TVUAx\npTVUAx.dll (TVU networks)
FF Plugin: @pandonetworks.com/PandoWebPlugin - C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin: @real.com/nppl3260;version=6.0.12.448 - C:\Program Files\Win7codecs\rm\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
FF Plugin: @real.com/nprpjplug;version=6.0.12.448 - C:\Program Files\Win7codecs\rm\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll (Apple Inc.)
FF SearchPlugin: C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ZiggyTV.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\searchplugins\ZiggyTV.xml.bak
FF Extension: Ads Removal - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\adsremoval@adsremoval.net [2014-02-25]
FF Extension: Advanced SystemCare Surfing Protection - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\ascsurfingprotection@iobit.com [2013-11-20]
FF Extension: Firebug - C:\Users\Allan\AppData\Roaming\Mozilla\Firefox\Profiles\dpami5n7.default\Extensions\firebug@software.joehewitt.com.xpi [2014-01-29]
FF Extension: ZwankySearch - C:\Program Files\Mozilla Firefox\extensions\{5F321A53-3F65-45F2-9903-587E3CA15404} [2013-09-03]
Chrome:
=======
CHR DefaultSearchKeyword: yahoo.com search
CHR DefaultSearchProvider: Yahoo
CHR DefaultSearchURL: http://search.yahoo.com/search?fr=chr-g ... earchTerms}
CHR DefaultNewTabURL:
CHR Extension: (Google Docs) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Google Drive) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Google Search) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2011-12-19]
CHR Extension: (Google Wallet) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Gmail) - C:\Users\Allan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]
CHR HKLM\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files\Common Files\Spigot\GC\saebay_1.1.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files\Common Files\Spigot\GC\ErrorAssistant_1.2.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files\Common Files\Spigot\GC\coupons_2.4.crx [2014-02-28]
CHR HKLM\...\Chrome\Extension: [nfengeggddojhakldhlpjdlddgkkjkdd] - C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASC_GhromePlugin.crx [2013-11-20]
CHR HKLM\...\Chrome\Extension: [ocphobfcfafpclibolpjdafgaffkaoci] - C:\Users\Allan\AppData\Local\GamePlayLabs Plugin\gplplugin.crx [2011-03-15]
CHR HKLM\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files\Common Files\Spigot\GC\saamazon_1.0.crx [2011-03-15]
========================== Services (Whitelisted) =================
R2 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [878368 2013-10-25] (IObit)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [276992 2013-10-08] (Advanced Micro Devices, Inc.)
R2 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [1868432 2012-12-24] ()
S3 ICCS; C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2011-08-30] (Intel Corporation)
R2 IMFservice; C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe [341824 2013-11-11] (IObit)
R2 JMB36X; C:\Windows\System32\XSrvSetup.exe [65536 2009-08-06] ()
R2 LicCtrlService; C:\Windows\runservice.exe [2560 2011-05-26] ()
R2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.0.207\McCHSvc.exe [237008 2011-06-17] (McAfee, Inc.)
S3 MSSQL$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation)
S3 MSSQLServerADHelper; C:\Program Files\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation)
R2 PDAgent; C:\Program Files\Raxco\PerfectDisk10\PDAgent.exe [922888 2009-04-01] (Raxco Software, Inc.)
S3 PDEngine; C:\Program Files\Raxco\PerfectDisk10\PDEngine.exe [1025288 2009-04-01] (Raxco Software, Inc.)
R2 RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 SCPDFReadSpool; C:\Windows\Installer\MSIDC04.tmp [177784 2012-07-09] (Solid Documents, LLC)
R2 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1103392 2012-11-13] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [1369624 2012-11-13] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [168384 2012-11-13] (Safer-Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation)
S3 SRS Labs License Service; C:\Program Files\Common Files\SRS Labs Shared\Service\srslabslicenseservice.exe [72704 2013-11-30] (SRS Labs)
R2 StarWindServiceAE; C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
S3 TuneUp.Defrag; C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe [435016 2010-03-26] (TuneUp Software)
S3 wampapache; c:\wamp\bin\apache\apache2.2.22\bin\httpd.exe [18432 2012-05-13] (Apache Software Foundation)
S3 wampmysqld; c:\wamp\bin\mysql\mysql5.5.24\bin\mysqld.exe [8177664 2012-04-19] ()
S2 wmcmgc; C:\Program Files\Common Files\\System\icm64.dll [14745600 2009-07-14] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
R2 AODDriver4.01; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48808 2012-11-20] (Advanced Micro Devices)
S2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\i386\AODDriver2.sys [48808 2012-11-20] (Advanced Micro Devices)
S3 Apowersoft_AudioDevice; C:\Windows\System32\drivers\Apowersoft_AudioDevice.sys [16640 2010-12-30] (Wondershare)
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdriverx.sys [210712 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\Windows\System32\DRIVERS\avgidsshimx.sys [22808 2014-01-19] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 AvgRkx86; C:\Windows\System32\DRIVERS\avgrkx86.sys [27448 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R3 busenum; C:\Windows\System32\DRIVERS\SteelBus.sys [111360 2013-01-10] (SteelSeries Corporation)
R2 DefragFS; C:\Windows\system32\Drivers\DefragFS.sys [71184 2009-01-09] (Raxco Software, Inc.)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [27392 2005-05-03] (SlySoft, Inc.)
R2 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [10624 2005-04-21] (Elaborate Bytes AG)
S3 ESLvnic1; C:\Windows\System32\DRIVERS\ESLvnic.sys [24504 2011-11-28] (Turtle Entertainment GmbH)
S3 etdrv; C:\Windows\etdrv.sys [17488 2013-08-19] (Windows (R) 2000 DDK provider)
S4 FileMonitor; C:\Program Files\IObit\IObit Malware Fighter\Drivers\win7_x86\FileMonitor.sys [21480 2013-03-23] (IObit)
S3 gdrv; C:\Windows\gdrv.sys [17488 2013-08-19] (Windows (R) 2000 DDK provider)
S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [26176 2009-03-18] (LogMeIn, Inc.)
S3 hidusbf; C:\Windows\System32\DRIVERS\hidusbf.sys [5568 2011-09-02] (SweetLow)
R0 JRAID; C:\Windows\System32\DRIVERS\jraid.sys [106296 2014-02-27] (JMicron Technology Corp.)
R0 mv91cons; C:\Windows\System32\DRIVERS\mv91cons.sys [23912 2014-02-27] (Marvell Semiconductor Inc.)
R0 mvs91xx; C:\Windows\System32\DRIVERS\mvs91xx.sys [282472 2014-02-27] (Marvell Semiconductor, Inc.)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [141952 2014-02-27] (Renesas Electronics Corporation)
S3 RegFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\regfilter.sys [32288 2013-11-19] (IObit.com)
S3 RTHDMIAzAudService; C:\Windows\System32\drivers\RtHDMIV.sys [155648 2009-07-17] (Realtek Semiconductor Corp.)
R3 SAlphamHid; C:\Windows\System32\DRIVERS\SAlpham.sys [34304 2012-10-15] (SteelSeries Corporation)
R3 SCREAMINGBDRIVER; C:\Windows\System32\drivers\ScreamingBAudio.sys [21920 2006-09-26] (Screaming Bee LLC)
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [15672 2013-05-22] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2010-11-28] ()
S3 SRS_SSCFilter; C:\Windows\System32\drivers\srs_sscfilter.sys [34048 2006-10-09] ()
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [25216 2010-02-25] (The OpenVPN Project)
S3 UrlFilter; C:\Program Files\IObit\IObit Malware Fighter\drivers\win7_x86\UrlFilter.sys [20944 2013-11-19] (IObit.com)
S3 V0220Dev; C:\Windows\System32\DRIVERS\V0220Dev.sys [146112 2006-06-29] (Creative Technology Ltd.)
S3 V0220Vfx; C:\Windows\System32\DRIVERS\V0220Vfx.sys [6272 2006-06-08] (EyePower Games Pte. Ltd.)
S3 ZD1211BU(Atheros); C:\Windows\System32\DRIVERS\zd1211Bu.sys [722432 2008-04-11] (ZyDAS Technology Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files\CyberLink\PowerDVD9\000.fcl [87536 2009-08-28] (CyberLink Corp.)
U3 aglavsf0; C:\Windows\system32\Drivers\aglavsf0.sys [0 ] (Microsoft Corporation)
U3 aohsjwai; C:\Windows\system32\Drivers\aohsjwai.sys [0 ] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Allan\AppData\Local\Temp\catchme.sys [X]
S3 EagleNT; \??\C:\Windows\system32\drivers\EagleNT.sys [X]
S3 EagleXNt; \??\C:\Windows\system32\drivers\EagleXNt.sys [X]
S3 ESEADriver2; \??\C:\Users\Allan\AppData\Local\Temp\ESEADriver2.sys [X]
S3 GarenaPEngine; \??\C:\Users\Allan\AppData\Local\Temp\QBGD807.tmp [X]
S3 GGSAFERDriver; \??\C:\Program Files\Garena\safedrv.sys [X]
U5 GVTDrv; C:\Windows\system32\Drivers\GVTDrv.sys [24944 2013-08-19] ()
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [48128 2009-07-14] (Microsoft Corporation)
S3 XDva389; \??\C:\Windows\system32\XDva389.sys [X]
S3 XDva390; \??\C:\Windows\system32\XDva390.sys [X]
S3 XDva391; \??\C:\Windows\system32\XDva391.sys [X]
S3 XDva392; \??\C:\Windows\system32\XDva392.sys [X]
S3 XDva393; \??\C:\Windows\system32\XDva393.sys [X]
S3 XDva394; \??\C:\Windows\system32\XDva394.sys [X]
S3 XDva397; \??\C:\Windows\system32\XDva397.sys [X]
S3 XDva398; \??\C:\Windows\system32\XDva398.sys [X]
S3 XDva399; \??\C:\Windows\system32\XDva399.sys [X]
S3 XDva401; \??\C:\Windows\system32\XDva401.sys [X]
==================== NetSvcs (Whitelisted) ===================
NETSVC: wmcmgc -> C:\Program Files\Common Files\\System\icm64.dll (Microsoft Corporation)
==================== One Month Created Files and Folders ========
2014-02-28 19:38 - 2014-02-28 19:38 - 00028589 _____ () C:\Users\Allan\Desktop\FRST.txt
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Downloads\Unconfirmed 568814.crdownload
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
2014-02-28 19:32 - 2014-02-28 19:38 - 00000000 ____D () C:\FRST
2014-02-28 19:32 - 2014-02-28 19:32 - 01143808 _____ (Farbar) C:\Users\Allan\Desktop\FRST.exe
2014-02-28 17:14 - 2014-02-28 17:14 - 00000000 ___RD () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2014-02-28 17:13 - 2014-02-28 17:13 - 00000056 _____ () C:\Windows\setupact.log
2014-02-28 17:13 - 2014-02-28 17:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-27 20:09 - 2014-02-27 20:10 - 01214976 _____ () C:\Users\Allan\Desktop\LIVE Majster Reči - Prezentácia.ppt
2014-02-27 17:37 - 2014-02-27 17:37 - 00282472 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvs91xx.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00141952 _____ (Renesas Electronics Corporation) C:\Windows\system32\Drivers\nusb3xhc.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00034816 _____ (<Marvell>) C:\Windows\system32\mv91xxm.dll
2014-02-27 17:37 - 2014-02-27 17:37 - 00023912 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mv91cons.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00014184 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mvxxmm.sys
2014-02-27 17:36 - 2014-02-27 17:36 - 00106296 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-02-27 17:34 - 2014-02-27 17:34 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-02-27 17:34 - 2014-02-27 17:34 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 17:34 - 2014-02-27 17:34 - 00332568 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 24860160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 11527680 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 03461040 _____ () C:\Windows\system32\atiumdva.cap
2014-02-27 17:28 - 2014-02-27 17:28 - 00721296 _____ () C:\Windows\system32\atiicdxx.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00550456 _____ () C:\Windows\system32\atiapfxx.blb
2014-02-27 17:28 - 2014-02-27 17:28 - 00501248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 00493056 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00234036 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00233776 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00200704 _____ () C:\Windows\system32\clinfo.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00114688 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083552 _____ () C:\Windows\system32\ativce02.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00057344 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00047887 _____ () C:\Windows\atiogl.xml
2014-02-27 17:28 - 2014-02-27 17:28 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00030720 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Users\Public\Documents\Explorer Suite Signatures
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files\NTCore
2014-02-23 22:38 - 2014-02-23 22:45 - 48020350 _____ () C:\Users\Allan\Desktop\holky.rar
2014-02-19 16:18 - 2014-02-19 16:45 - 138643180 _____ () C:\Users\Allan\Downloads\13932_bshdbxsb320.rar
2014-02-18 16:56 - 2014-02-18 17:35 - 689612766 _____ () C:\Users\Allan\Downloads\Ivan-Horváth---Človek-na-ulici.zip
2014-02-17 17:13 - 2014-02-17 18:12 - 00004037 _____ () C:\Users\Allan\Desktop\b_lee.txt
2014-02-04 19:21 - 2014-02-04 19:21 - 00000000 ____D () C:\Users\Allan\Downloads\Gejza-Vámoš---Editino-očko
==================== One Month Modified Files and Folders =======
2014-02-28 19:38 - 2014-02-28 19:38 - 00028589 _____ () C:\Users\Allan\Desktop\FRST.txt
2014-02-28 19:38 - 2014-02-28 19:32 - 00000000 ____D () C:\FRST
2014-02-28 19:38 - 2013-12-28 11:14 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-02-28 19:36 - 2013-12-21 17:07 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\Skype
2014-02-28 19:36 - 2013-12-19 07:24 - 00000000 ____D () C:\Users\Allan\AppData\Local\CrashDumps
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Downloads\Unconfirmed 568814.crdownload
2014-02-28 19:35 - 2014-02-28 19:35 - 00112640 _____ (forum.viry.cz) C:\Users\Allan\Desktop\FRSTLauncher.exe
2014-02-28 19:32 - 2014-02-28 19:32 - 01143808 _____ (Farbar) C:\Users\Allan\Desktop\FRST.exe
2014-02-28 19:31 - 2010-03-26 20:33 - 00000000 ____D () C:\Users\Allan\Desktop\Programy
2014-02-28 19:25 - 2012-11-01 20:15 - 00000000 ____D () C:\Program Files\Steam
2014-02-28 19:24 - 2011-03-26 20:00 - 00000000 ____D () C:\Users\Allan\AppData\Local\Google
2014-02-28 19:20 - 2012-04-02 20:11 - 00000000 ____D () C:\Program Files\Google
2014-02-28 19:12 - 2011-06-29 14:37 - 00007605 _____ () C:\Users\Allan\AppData\Local\Resmon.ResmonCfg
2014-02-28 19:03 - 2012-04-02 20:11 - 00000922 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-02-28 18:18 - 2010-03-26 10:55 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information
2014-02-28 18:06 - 2013-10-03 13:32 - 00000000 ____D () C:\ProgramData\AVG2014
2014-02-28 18:06 - 2011-04-05 13:00 - 00000000 ____D () C:\Users\Allan\AppData\Local\GamePlayLabs Plugin
2014-02-28 18:04 - 2010-08-11 13:18 - 00000000 ____D () C:\Program Files\Creative
2014-02-28 17:54 - 2013-10-03 13:08 - 00000000 ____D () C:\Users\Allan\AppData\Local\Avg2014
2014-02-28 17:42 - 2011-04-04 15:30 - 00000000 ____D () C:\ProgramData\MFAData
2014-02-28 17:18 - 2009-07-14 05:34 - 00013424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-02-28 17:18 - 2009-07-14 05:34 - 00013424 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-02-28 17:17 - 2010-03-26 10:54 - 01966052 _____ () C:\Windows\WindowsUpdate.log
2014-02-28 17:14 - 2014-02-28 17:14 - 00000000 ___RD () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD 9
2014-02-28 17:14 - 2013-10-13 19:20 - 00000272 _____ () C:\Windows\Tasks\Driver Booster Update.job
2014-02-28 17:14 - 2012-04-02 20:11 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-02-28 17:13 - 2014-02-28 17:13 - 00000056 _____ () C:\Windows\setupact.log
2014-02-28 17:13 - 2014-02-28 17:13 - 00000000 _____ () C:\Windows\setuperr.log
2014-02-28 17:13 - 2011-05-26 21:09 - 00001033 ___SH () C:\Windows\system32\mmf.sys
2014-02-28 17:13 - 2010-12-12 22:34 - 00000302 ___SH () C:\Windows\Tasks\urnxgko.job
2014-02-28 17:13 - 2009-10-14 11:50 - 00000000 ____D () C:\Windows\Panther
2014-02-28 17:13 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-02-28 16:11 - 2013-11-24 16:54 - 68747264 _____ () C:\Windows\system32\config\SOFTWARE.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 02281472 _____ () C:\Windows\system32\config\DEFAULT.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 00102400 _____ () C:\Windows\system32\config\SAM.iobit
2014-02-28 16:11 - 2013-11-24 16:54 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iobit
2014-02-28 16:11 - 2010-03-26 10:52 - 00000000 ____D () C:\Users\Allan
2014-02-27 20:10 - 2014-02-27 20:09 - 01214976 _____ () C:\Users\Allan\Desktop\LIVE Majster Reči - Prezentácia.ppt
2014-02-27 18:40 - 2010-04-26 21:23 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\TS3Client
2014-02-27 17:37 - 2014-02-27 17:37 - 00282472 _____ (Marvell Semiconductor, Inc.) C:\Windows\system32\Drivers\mvs91xx.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00141952 _____ (Renesas Electronics Corporation) C:\Windows\system32\Drivers\nusb3xhc.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00034816 _____ (<Marvell>) C:\Windows\system32\mv91xxm.dll
2014-02-27 17:37 - 2014-02-27 17:37 - 00023912 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mv91cons.sys
2014-02-27 17:37 - 2014-02-27 17:37 - 00014184 _____ (Marvell Semiconductor Inc.) C:\Windows\system32\Drivers\mvxxmm.sys
2014-02-27 17:36 - 2014-02-27 17:36 - 00106296 _____ (JMicron Technology Corp.) C:\Windows\system32\Drivers\jraid.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00683736 _____ (Realtek ) C:\Windows\system32\Drivers\Rt86win7.sys
2014-02-27 17:35 - 2014-02-27 17:35 - 00076872 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp32.dll
2014-02-27 17:35 - 2010-03-26 10:57 - 00100896 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst32.dll
2014-02-27 17:35 - 2010-03-26 10:55 - 00000000 ____D () C:\Windows\system32\RTCOM
2014-02-27 17:34 - 2014-02-27 17:34 - 02947160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHDA.sys
2014-02-27 17:34 - 2014-02-27 17:34 - 02329816 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 01892056 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSndMgr.cpl
2014-02-27 17:34 - 2014-02-27 17:34 - 00696013 _____ () C:\Windows\system32\Drivers\RTAIODAT.DAT
2014-02-27 17:34 - 2014-02-27 17:34 - 00332568 _____ (Creative Technology Ltd.) C:\Windows\system32\MBWrp32.dll
2014-02-27 17:34 - 2014-02-27 17:34 - 00125144 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoInstII.dll
2014-02-27 17:29 - 2012-01-28 13:33 - 00000000 ____D () C:\Program Files\AMD
2014-02-27 17:28 - 2014-02-27 17:28 - 24860160 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdocl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 22157824 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atioglxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 14302208 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticaldd.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 11527680 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmdag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 08406024 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atidxx32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 03461040 _____ () C:\Windows\system32\atiumdva.cap
2014-02-27 17:28 - 2014-02-27 17:28 - 00721296 _____ () C:\Windows\system32\atiicdxx.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00550456 _____ () C:\Windows\system32\atiapfxx.blb
2014-02-27 17:28 - 2014-02-27 17:28 - 00501248 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\atikmpag.sys
2014-02-27 17:28 - 2014-02-27 17:28 - 00493056 _____ (AMD) C:\Windows\system32\atieclxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00368640 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiapfxx.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00234036 _____ () C:\Windows\system32\ativvaxy_cik.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00233776 _____ () C:\Windows\system32\ativvaxy_cik_nd.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00200704 _____ () C:\Windows\system32\clinfo.exe
2014-02-27 17:28 - 2014-02-27 17:28 - 00164352 _____ (AMD) C:\Windows\system32\atitmmxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00126336 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiuxpag.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00114688 _____ (AMD) C:\Windows\system32\coinst_13.251.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00096768 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atigktxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083968 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OpenVideo.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00083552 _____ () C:\Windows\system32\ativce02.dat
2014-02-27 17:28 - 2014-02-27 17:28 - 00073728 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\OVDecode.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00071704 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom32.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00069632 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiglpxx.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00057344 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00052224 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalrt.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00049152 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\aticalcl.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00047887 _____ () C:\Windows\atiogl.xml
2014-02-27 17:28 - 2014-02-27 17:28 - 00043520 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Drivers\ati2erec.dll
2014-02-27 17:28 - 2014-02-27 17:28 - 00030720 _____ (AMD) C:\Windows\system32\atimuixx.dll
2014-02-27 17:28 - 2013-10-08 13:54 - 00442368 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2014-02-27 17:28 - 2013-10-08 13:52 - 00209408 _____ (AMD) C:\Windows\system32\atiesrxx.exe
2014-02-27 17:28 - 2013-10-08 13:28 - 00825344 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atiadlxx.dll
2014-02-27 17:28 - 2012-02-15 04:18 - 01100216 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx32.dll
2014-02-27 17:28 - 2012-02-15 03:34 - 06630232 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdag.dll
2014-02-27 17:28 - 2012-02-15 03:29 - 08287008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiumdva.dll
2014-02-27 17:28 - 2012-02-15 03:12 - 00098496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atiu9pag.dll
2014-02-27 16:50 - 2013-12-01 11:56 - 00005396 _____ () C:\Windows\wininit.ini
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Users\Public\Documents\Explorer Suite Signatures
2014-02-27 14:57 - 2014-02-27 14:57 - 00000000 ____D () C:\Program Files\NTCore
2014-02-27 14:15 - 2012-11-01 20:24 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-02-25 18:33 - 2009-11-11 06:43 - 00007100 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-24 08:48 - 2013-11-20 14:54 - 00000000 ____D () C:\ProgramData\ProductData
2014-02-23 22:45 - 2014-02-23 22:38 - 48020350 _____ () C:\Users\Allan\Desktop\holky.rar
2014-02-22 17:07 - 2010-05-17 20:59 - 00024576 _____ () C:\Users\Allan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-02-22 13:55 - 2010-03-26 20:37 - 00000000 ____D () C:\Users\Allan\AppData\Roaming\uTorrent
2014-02-21 19:38 - 2013-12-25 16:16 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-02-21 19:38 - 2013-07-20 18:42 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-02-19 16:45 - 2014-02-19 16:18 - 138643180 _____ () C:\Users\Allan\Downloads\13932_bshdbxsb320.rar
2014-02-18 17:35 - 2014-02-18 16:56 - 689612766 _____ () C:\Users\Allan\Downloads\Ivan-Horváth---Človek-na-ulici.zip
2014-02-17 18:12 - 2014-02-17 17:13 - 00004037 _____ () C:\Users\Allan\Desktop\b_lee.txt
2014-02-04 19:21 - 2014-02-04 19:21 - 00000000 ____D () C:\Users\Allan\Downloads\Gejza-Vámoš---Editino-očko
2014-02-02 11:47 - 2010-03-26 12:10 - 00000000 ____D () C:\Users\Allan\AppData\Local\Adobe
2014-01-29 17:38 - 2014-01-12 14:08 - 00000000 ____D () C:\Users\Allan\Desktop\javascript docs
Some content of TEMP:
====================
C:\Users\Klaudinečka\AppData\Local\temp\EngineInstaller.exe
C:\Users\Klaudinečka\AppData\Local\temp\mgsqlite3.dll
C:\Users\Klaudinečka\AppData\Local\temp\RazossUpdater.exe
C:\Users\Klaudinečka\AppData\Local\temp\Shortcut_Shortcut_SweetIMSetup.exe
C:\Users\Klaudinečka\AppData\Local\temp\Shortcut_SweetIMSetup.exe
C:\Users\Klaudinečka\AppData\Local\temp\SIMEEI2Installer.exe
C:\Users\Klaudinečka\AppData\Local\temp\SIMEEIInstaller.exe
C:\Users\Klaudinečka\AppData\Local\temp\SkypeSetup.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit
testsigning: ==> Check for possible unsigned rootkit driver <===== ATTENTION!
nointegritychecks: ==> Integrity Checks is disabled <===== ATTENTION!
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\Driver Booster Update.job => C:\Program Files\IObit\Driver Booster\AutoUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\urnxgko.job => ?
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:05EE1EEF
AlternateDataStreams: C:\ProgramData\TEMP:D282699C
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Allan\Desktop" je 3032 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IObit Malware Fighter
"C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDTray.exe:*:Enabled:Spybot-S&D 2 Tray Icon"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDFSSvc.exe:*:Enabled:Spybot-S&D 2 Scanner Service"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdate.exe:*:Enabled:Spybot-S&D 2 Updater"
"C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe"="C:\\Program Files\\Spybot - Search & Destroy 2\\SDUpdSvc.exe:*:Enabled:Spybot-S&D 2 Background update service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
+ http://speedyshare.com/nqptB/Addition.rar