VIRY.CZ

Prosím o kontrolu tohoto Logu.

Logfile of random's system information tool 1.08 (written by random/random)
Run by Start at 2014-03-13 06:59:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 74 GB (51%) free of 144 GB
Total RAM: 1979 MB (51% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:59:25, on 13.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16521)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe
C:\Windows\sysWow64\SearchProtocolHost.exe
C:\Users\Start\Downloads\RSIT-1.06.exe
C:\Program Files (x86)\trend micro\Start.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {5BFEFF94-6411-4B74-A947-4969134B24DE} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 216.239.32.20 google.com http://www.google.com
O1 - Hosts: 216.239.32.20 google.com http://www.google.ad
O1 - Hosts: 216.239.32.20 google.com http://www.google.ae
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.af
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ag
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ai
O1 - Hosts: 216.239.32.20 google.com http://www.google.al
O1 - Hosts: 216.239.32.20 google.com http://www.google.am
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ao
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ar
O1 - Hosts: 216.239.32.20 google.com http://www.google.as
O1 - Hosts: 216.239.32.20 google.com http://www.google.at
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.au
O1 - Hosts: 216.239.32.20 google.com http://www.google.az
O1 - Hosts: 216.239.32.20 google.com http://www.google.ba
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bd
O1 - Hosts: 216.239.32.20 google.com http://www.google.be
O1 - Hosts: 216.239.32.20 google.com http://www.google.bf
O1 - Hosts: 216.239.32.20 google.com http://www.google.bg
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bh
O1 - Hosts: 216.239.32.20 google.com http://www.google.bi
O1 - Hosts: 216.239.32.20 google.com http://www.google.bj
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bn
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bo
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.br
O1 - Hosts: 216.239.32.20 google.com http://www.google.bs
O1 - Hosts: 216.239.32.20 google.com http://www.google.bt
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.bw
O1 - Hosts: 216.239.32.20 google.com http://www.google.by
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.bz
O1 - Hosts: 216.239.32.20 google.com http://www.google.ca
O1 - Hosts: 216.239.32.20 google.com http://www.google.cd
O1 - Hosts: 216.239.32.20 google.com http://www.google.cf
O1 - Hosts: 216.239.32.20 google.com http://www.google.cg
O1 - Hosts: 216.239.32.20 google.com http://www.google.ch
O1 - Hosts: 216.239.32.20 google.com http://www.google.ci
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ck
O1 - Hosts: 216.239.32.20 google.com http://www.google.cl
O1 - Hosts: 216.239.32.20 google.com http://www.google.cm
O1 - Hosts: 216.239.32.20 google.com http://www.google.cn
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.co
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.cr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.cu
O1 - Hosts: 216.239.32.20 google.com http://www.google.cv
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.cy
O1 - Hosts: 216.239.32.20 google.com http://www.google.cz
O1 - Hosts: 216.239.32.20 google.com http://www.google.de
O1 - Hosts: 216.239.32.20 google.com http://www.google.dj
O1 - Hosts: 216.239.32.20 google.com http://www.google.dk
O1 - Hosts: 216.239.32.20 google.com http://www.google.dm
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.do
O1 - Hosts: 216.239.32.20 google.com http://www.google.dz
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.ec
O1 - Hosts: 216.239.32.20 google.com http://www.google.ee
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.eg
O1 - Hosts: 216.239.32.20 google.com http://www.google.es
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.et
O1 - Hosts: 216.239.32.20 google.com http://www.google.fi
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.fj
O1 - Hosts: 216.239.32.20 google.com http://www.google.fm
O1 - Hosts: 216.239.32.20 google.com http://www.google.fr
O1 - Hosts: 216.239.32.20 google.com http://www.google.ga
O1 - Hosts: 216.239.32.20 google.com http://www.google.ge
O1 - Hosts: 216.239.32.20 google.com http://www.google.gg
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gh
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gi
O1 - Hosts: 216.239.32.20 google.com http://www.google.gl
O1 - Hosts: 216.239.32.20 google.com http://www.google.gm
O1 - Hosts: 216.239.32.20 google.com http://www.google.gp
O1 - Hosts: 216.239.32.20 google.com http://www.google.gr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.gt
O1 - Hosts: 216.239.32.20 google.com http://www.google.gy
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.hk
O1 - Hosts: 216.239.32.20 google.com http://www.google.hn
O1 - Hosts: 216.239.32.20 google.com http://www.google.hr
O1 - Hosts: 216.239.32.20 google.com http://www.google.ht
O1 - Hosts: 216.239.32.20 google.com http://www.google.hu
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.id
O1 - Hosts: 216.239.32.20 google.com http://www.google.ie
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.il
O1 - Hosts: 216.239.32.20 google.com http://www.google.im
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.in
O1 - Hosts: 216.239.32.20 google.com http://www.google.iq
O1 - Hosts: 216.239.32.20 google.com http://www.google.is
O1 - Hosts: 216.239.32.20 google.com http://www.google.it
O1 - Hosts: 216.239.32.20 google.com http://www.google.je
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.jm
O1 - Hosts: 216.239.32.20 google.com http://www.google.jo
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.jp
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ke
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.kh
O1 - Hosts: 216.239.32.20 google.com http://www.google.ki
O1 - Hosts: 216.239.32.20 google.com http://www.google.kg
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.kr
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.kw
O1 - Hosts: 216.239.32.20 google.com http://www.google.kz
O1 - Hosts: 216.239.32.20 google.com http://www.google.la
O1 - Hosts: 216.239.32.20 google.com http://www.google.com.lb
O1 - Hosts: 216.239.32.20 google.com http://www.google.li
O1 - Hosts: 216.239.32.20 google.com http://www.google.lk
O1 - Hosts: 216.239.32.20 google.com http://www.google.co.ls
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {5BFEFF94-6411-4B74-A947-4969134B24DE} - (no file)
O4 - HKCU\..\Run: [Advanced SystemCare 7] "C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe" /Auto
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~2\MICROS~1\Office14\ONBttnIE.dll/105
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: Advanced SystemCare Service 7 (AdvancedSystemCareService7) - IObit - C:\Program Files (x86)\Advanced SystemCare 7\ASCService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Session Launcher Service (FUSServices) - Unknown owner - C:\Windows\SysWOW64\FUSServices.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: LiveUpdate (LiveUpdateSvc) - IObit - C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14426 bytes

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\AutoKMS.job
C:\Windows\tasks\AutoKMSDaily.job
C:\Windows\tasks\Check for updates (Spybot - Search & Destroy).job
C:\Windows\tasks\DriverToolkit Autorun.job
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
C:\Windows\tasks\Refresh immunization (Spybot - Search & Destroy).job
C:\Windows\tasks\Scan the system (Spybot - Search & Destroy).job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-02-13 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL [2010-02-28 561552]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-02-13 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{5BFEFF94-6411-4B74-A947-4969134B24DE}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
""= []

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 7"=C:\Program Files (x86)\Advanced SystemCare 7\ASCTray.exe [2014-02-11 2288928]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL [2010-03-25 4222864]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 months======

2014-03-13 06:59:13 ----D---- C:\rsit
2014-03-13 06:59:13 ----D---- C:\Program Files (x86)\trend micro
2014-03-13 06:50:21 ----D---- C:\AdwCleaner
2014-03-12 23:47:58 ----D---- C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:42:04 ----D---- C:\ProgramData\Licenses
2014-03-12 23:38:57 ----AD---- C:\ProgramData\TEMP
2014-03-12 23:38:37 ----A---- C:\Windows\SysWOW64\MSSTDFMT.DLL
2014-03-12 14:43:08 ----A---- C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 14:11:02 ----A---- C:\Windows\wininit.ini
2014-03-12 13:59:01 ----D---- C:\ProgramData\Spybot - Search & Destroy
2014-03-12 06:02:59 ----A---- C:\Windows\SysWOW64\wer.dll
2014-03-12 06:02:56 ----A---- C:\Windows\SysWOW64\iernonce.dll
2014-03-12 06:02:55 ----A---- C:\Windows\SysWOW64\urlmon.dll
2014-03-12 06:02:55 ----A---- C:\Windows\SysWOW64\iertutil.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\mshtml.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 06:02:54 ----A---- C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\ieui.dll
2014-03-12 06:02:50 ----A---- C:\Windows\SysWOW64\iesetup.dll
2014-03-12 06:02:49 ----A---- C:\Windows\SysWOW64\ieframe.dll
2014-03-12 06:02:46 ----A---- C:\Windows\SysWOW64\jscript9.dll
2014-03-12 06:02:46 ----A---- C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 06:02:45 ----A---- C:\Windows\SysWOW64\wininet.dll
2014-03-12 06:02:45 ----A---- C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 06:02:44 ----A---- C:\Windows\SysWOW64\msrating.dll
2014-03-12 06:00:30 ----A---- C:\Windows\SysWOW64\qedit.dll
2014-03-12 06:00:29 ----A---- C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-11 07:22:04 ----A---- C:\Windows\KMSEmulator.exe
2014-03-08 10:05:51 ----D---- C:\sh4ldr
2014-03-08 10:05:51 ----D---- C:\Program Files (x86)\Enigma Software Group
2014-03-08 09:47:56 ----A---- C:\autoexec.bat
2014-03-08 09:45:51 ----D---- C:\Program Files (x86)\Common Files\Wise Installation Wizard
2014-03-07 20:51:50 ----D---- C:\ProgramData\Razer
2014-03-07 19:54:28 ----D---- C:\Program Files (x86)\Vtools Toolbar
2014-03-07 19:53:27 ----D---- C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 19:53:00 ----D---- C:\Program Files (x86)\Vtools
2014-03-07 19:52:15 ----D---- C:\Program Files (x86)\Free Window Registry Repair
2014-03-06 17:53:12 ----D---- C:\Program Files (x86)\Common Files\PDF Architect
2014-03-06 17:44:00 ----D---- C:\Program Files (x86)\WinRST
2014-03-06 17:42:14 ----D---- C:\output
2014-03-06 15:43:19 ----D---- C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:28:05 ----D---- C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-05 18:22:43 ----D---- C:\Windows\rescache
2014-03-04 08:10:02 ----D---- C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 15:25:28 ----A---- C:\Windows\SysWOW64\mstscax.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\wksprtPS.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\tsgqec.dll
2014-03-03 15:01:37 ----A---- C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-03 15:01:36 ----A---- C:\Windows\SysWOW64\mstsc.exe
2014-03-03 15:01:34 ----A---- C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-03 12:28:34 ----A---- C:\Windows\SysWOW64\vbscript.dll
2014-03-03 12:24:33 ----A---- C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-03 08:20:51 ----D---- C:\Program Files (x86)\Google
2014-02-27 06:35:11 ----D---- C:\ProgramData\Auslogics
2014-02-26 19:39:29 ----D---- C:\Program Files (x86)\Common Files\NetDragon
2014-02-26 19:37:04 ----D---- C:\Program Files (x86)\NetDragon
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\drivers\CBUSB.SYS
2014-02-25 15:47:49 ----A---- C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-25 15:47:34 ----D---- C:\Windows\SysWOW64\Temp
2014-02-24 17:08:38 ----D---- C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:07:43 ----D---- C:\Program Files (x86)\Common Files\Adobe AIR
2014-02-18 17:09:11 ----D---- C:\Program Files (x86)\Schrift 2 DXF und G-Code 3
2014-02-18 17:09:11 ----A---- C:\Windows\cadkasdeinst01.exe
2014-02-18 15:36:02 ----D---- C:\Program Files (x86)\CNC Editor 2002v1.5
2014-02-17 11:06:55 ----D---- C:\Programme
2014-02-17 10:17:38 ----D---- C:\Program Files (x86)\Advanced SystemCare 7
2014-02-16 19:00:59 ----D---- C:\ProgramData\Real
2014-02-16 12:10:42 ----D---- C:\Program Files (x86)\Mozilla Firefox

======List of files/folders modified in the last 1 months======

2014-03-13 06:59:16 ----D---- C:\Windows\Temp
2014-03-13 06:59:13 ----RD---- C:\Program Files (x86)
2014-03-13 06:54:11 ----D---- C:\Windows
2014-03-12 23:49:03 ----SHD---- C:\Windows\Installer
2014-03-12 23:48:54 ----D---- C:\Config.Msi
2014-03-12 23:48:12 ----D---- C:\Windows\Prefetch
2014-03-12 23:48:00 ----SHD---- C:\System Volume Information
2014-03-12 23:46:53 ----RD---- C:\Program Files
2014-03-12 23:46:45 ----HD---- C:\ProgramData
2014-03-12 23:46:45 ----D---- C:\Windows\Tasks
2014-03-12 23:46:28 ----D---- C:\Windows\System32
2014-03-12 23:46:25 ----SD---- C:\ProgramData\Microsoft
2014-03-12 23:38:37 ----D---- C:\Windows\SysWOW64
2014-03-12 14:44:10 ----A---- C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 12:50:45 ----SHD---- C:\BOOT
2014-03-12 12:34:50 ----D---- C:\Windows\SoftwareDistribution
2014-03-12 12:24:32 ----D---- C:\Windows\inf
2014-03-12 10:06:59 ----D---- C:\Windows\winsxs
2014-03-12 10:04:53 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-12 09:57:07 ----D---- C:\Qoobox
2014-03-10 11:34:51 ----D---- C:\ProgramData\ProductData
2014-03-08 11:33:58 ----D---- C:\Program Files (x86)\Companion Suite Pro LL2
2014-03-08 11:33:49 ----D---- C:\Program Files (x86)\Common Files
2014-03-08 06:21:06 ----D---- C:\Windows\debug
2014-03-08 06:17:34 ----D---- C:\Program Files (x86)\IObit
2014-03-08 06:15:14 ----D---- C:\Users\Start\AppData\Roaming\IObit
2014-03-07 22:29:25 ----D---- C:\ProgramData\IObit
2014-03-07 20:18:37 ----D---- C:\Program Files (x86)\Common Files\Apple
2014-03-06 18:54:56 ----D---- C:\Users\Start\AppData\Roaming\Apple Computer
2014-03-06 15:41:34 ----D---- C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-04 10:51:16 ----D---- C:\Windows\Panther
2014-03-04 10:51:16 ----D---- C:\Windows\Logs
2014-03-04 10:20:42 ----D---- C:\Windows\SysWOW64\cs-CZ
2014-03-04 10:08:02 ----D---- C:\Windows\SysWOW64\wbem
2014-03-03 10:32:55 ----SD---- C:\Users\Start\AppData\Roaming\Microsoft
2014-03-03 10:10:20 ----D---- C:\Windows\SysWOW64\migration
2014-03-03 10:10:20 ----D---- C:\Windows\SysWOW64\en-US
2014-03-03 10:10:20 ----D---- C:\Windows\PolicyDefinitions
2014-02-26 19:37:03 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-02-26 17:23:06 ----D---- C:\Program Files (x86)\NsPro
2014-02-26 16:10:02 ----D---- C:\Users\Start\AppData\Roaming\MOBILedit
2014-02-25 15:47:49 ----D---- C:\Windows\SysWOW64\drivers
2014-02-24 17:08:24 ----D---- C:\ProgramData\Adobe
2014-02-24 17:07:51 ----D---- C:\Program Files (x86)\Adobe
2014-02-24 17:06:42 ----D---- C:\Users\Start\AppData\Roaming\Adobe
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Windows Media Player
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Common Files\System
2014-02-24 07:20:04 ----D---- C:\Program Files (x86)\Common Files\microsoft shared
2014-02-24 07:13:21 ----D---- C:\ProgramData\redistpart
2014-02-24 07:13:21 ----D---- C:\ProgramData\launcher
2014-02-24 07:13:21 ----D---- C:\ProgramData\explauncher
2014-02-24 07:13:21 ----D---- C:\ProgramData\DriverGenius
2014-02-24 07:13:21 ----D---- C:\ProgramData\Atheros
2014-02-18 16:03:04 ----D---- C:\Windows\Microsoft.NET
2014-02-17 10:00:25 ----RSD---- C:\Windows\assembly
2014-02-17 09:07:34 ----D---- C:\Windows\Minidump
2014-02-16 19:49:45 ----A---- C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 19:29:20 ----D---- C:\Program Files (x86)\Java

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys []
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys []
R1 eamonm;eamonm; C:\Windows\system32\DRIVERS\eamonm.sys []
R1 ehdrv;ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys []
R2 epfwwfpr;epfwwfpr; C:\Windows\system32\DRIVERS\epfwwfpr.sys []
R3 ewusbnet;HUAWEI USB-NDIS miniport; C:\Windows\system32\DRIVERS\ewusbnet.sys []
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcHdmiAddService;Intel(R) High Definition Audio HDMI; C:\Windows\system32\drivers\IntcHdmi.sys []
R3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys []
R3 NETw1v64;Intel(R) Wireless WiFi Link 1000 Series Adapter Driver for Windows Vista 64 Bit; C:\Windows\system32\DRIVERS\NETw1v64.sys []
S3 androidusb;SAMSUNG Android Composite ADB Interface Driver; C:\Windows\System32\Drivers\ssadadb.sys []
S3 cxbu1x64;OEM USB Smart Card Reader; C:\Windows\system32\DRIVERS\cxbu1x64.sys []
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudbus.sys []
S3 DrvSnSht;DrvSnSht; \??\C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys []
S3 eGateUSB;eGateUSB; C:\Windows\System32\Drivers\eGateUSB.sys []
S3 euccihr;plug'n'crypt CCID token reader; C:\Windows\System32\Drivers\euccihr-amd64.sys []
S3 FTDIBUS;NsPro Converter Driver; C:\Windows\system32\drivers\ftdibus.sys []
S3 FTSER2K;USB Serial Port Driver; C:\Windows\system32\drivers\ftser2k.sys []
S3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\Windows\system32\DRIVERS\GEARAspiWDM.sys []
S3 GemCCID;GemCCID; C:\Windows\System32\Drivers\GemCCID.sys []
S3 HTCAND64;HTC Device Driver; C:\Windows\System32\Drivers\ANDROIDUSB.sys []
S3 hwdatacard;Huawei DataCard USB Modem and USB Serial; C:\Windows\system32\DRIVERS\ewusbmdm.sys []
S3 Netaapl;Apple Mobile Device Ethernet Service; C:\Windows\system32\DRIVERS\netaapl64.sys []
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys []
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys []
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys []
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys []
S3 NTIDrvr;NTIDrvr; \??\C:\Users\Start\NTIDrvr.sys []
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys []
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys []
S3 pneteth;PdaNet Broadband; C:\Windows\system32\DRIVERS\pneteth.sys []
S3 pwdrvio;pwdrvio; \??\C:\Windows\system32\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\system32\pwdspio.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys []
S3 R-ImageDisk;R-ImageDisk; \??\C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys []
S3 ssadbus;SAMSUNG Android USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\ssadbus.sys []
S3 ssadmdfl;SAMSUNG Android USB Modem (Filter); C:\Windows\system32\DRIVERS\ssadmdfl.sys []
S3 ssadmdm;SAMSUNG Android USB Modem Drivers; C:\Windows\system32\DRIVERS\ssadmdm.sys []
S3 ssadserd;SAMSUNG Android USB Diagnostic Serial Port (WDM); C:\Windows\system32\DRIVERS\ssadserd.sys []
S3 sscdbus;SAMSUNG USB Composite Device driver (WDM); C:\Windows\system32\DRIVERS\sscdbus.sys []
S3 sscdmdfl;SAMSUNG Mobile Modem Filter; C:\Windows\system32\DRIVERS\sscdmdfl.sys []
S3 sscdmdm;SAMSUNG Mobile Modem Drivers; C:\Windows\system32\DRIVERS\sscdmdm.sys []
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudmdm.sys []
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.); C:\Windows\system32\DRIVERS\ssudserd.sys []
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\Windows\system32\drivers\TsUsbGD.sys []
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys []
S3 USBAAPL64;Apple Mobile USB Driver; C:\Windows\System32\Drivers\usbaapl64.sys []
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys []
S3 usbser;USB Modem Driver; C:\Windows\system32\DRIVERS\usbser.sys []
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys []
S3 WinUsb;WinUSB Driver; C:\Windows\system32\DRIVERS\WinUsb.sys []
S4 RsFx0150;RsFx0150 Driver; C:\Windows\system32\DRIVERS\RsFx0150.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-21 65432]
R2 AdvancedSystemCareService7;Advanced SystemCare Service 7; C:\Program Files (x86)\Advanced SystemCare 7\ASCService.exe [2014-01-14 881952]
R2 Apple Mobile Device;Apple Mobile Device; C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [2014-01-07 43336]
R2 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2011-08-30 462184]
R2 ekrn;ESET Service; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [2013-09-12 1337752]
R2 EvtEng;Intel(R) PROSet/Wireless Event Log; C:\Program Files\Intel\WiFi\bin\EvtEng.exe [2009-07-01 1463056]
R2 FUSServices;Session Launcher Service; C:\Windows\SysWOW64\FUSServices.exe [2010-01-08 10752]
R2 IAANTMON;Intel(R) Matrix Storage Event Monitor; C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe [2009-06-04 354840]
R2 MSSQL$SFN;SQL Server (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [2010-04-03 61913952]
R2 RapiMgr;@%windir%\WindowsMobile\rapimgr.dll,-104; C:\Windows\system32\svchost.exe [2009-07-14 20992]
R2 RegSrvc;Intel(R) PROSet/Wireless Registry Service; C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe [2009-07-01 830224]
R2 SQLBrowser;SQL Server Browser; C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe [2010-04-03 267616]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2010-04-03 146272]
R2 WcesComm;@%windir%\WindowsMobile\wcescomm.dll,-40079; C:\Windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-03 116648]
S2 LiveUpdateSvc;LiveUpdate; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2013-12-03 2151200]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-12 257928]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-03-03 116648]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe /V []
S3 iPod Service;iPod Service; C:\Program Files\iPod\bin\iPodService.exe [2014-01-20 641352]
S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service; C:\Program Files (x86)\Microsoft Office\Office14\GROOVE.EXE [2010-03-25 30969208]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-16 118896]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2013-04-18 737616]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe []
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 MSSQLServerADHelper100;SQL Active Directory Helper Service; C:\Program Files\Microsoft SQL Server\100\Shared\SQLADHLP.EXE [2010-04-03 59744]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 SQLAgent$SFN;SQL Server Agent (SFN); C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [2010-04-03 428384]

-----------------EOF-----------------

Zdravim

Poprosim i o druhy log z RSIT s nazvem info.txt, je ulozen v c:\rsit

Predpokladam, ze ten ESET jak ma byt = zakoupena licence?? Nebo je cinknuty stejne jako ty Office?

Eset je ofic.

Děkuji.
¨info.txt logfile of random's system information tool 1.08 2014-03-13 06:59:29

======Uninstall list======

Adobe AIR-->C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
Adobe AIR-->MsiExec.exe /I{B92C2C6C-F70E-497B-88A7-1FEF9888272B}
Adobe Flash Player 12 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe -maintain activex
Adobe Flash Player 12 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -maintain plugin
Adobe Reader XI (11.0.06) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AB0000000001}
Advanced SystemCare 7-->"C:\Program Files (x86)\Advanced SystemCare 7\unins000.exe"
Apple Application Support-->MsiExec.exe /I{A922C4B7-50E0-4787-A94C-59DBF3C65DBE}
Apple Software Update-->MsiExec.exe /I{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}
Companion Suite Pro LL2 Drivers-->MsiExec.exe /X{4ACE3E86-78B6-43A1-B104-E3F3006FC576}
Companion Suite Pro LL2-->MsiExec.exe /x {ABDB5A8F-A163-4FD7-A8AE-E2695ACFEA90} /qb
Google Chrome-->"C:\Program Files (x86)\Google\Chrome\Application\33.0.1750.146\Installer\setup.exe" --uninstall --multi-install --chrome --system-level
Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
IObit Uninstaller-->"C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallDisplay.exe" uninstall_start
IrfanView (remove only)-->C:\Program Files (x86)\IrfanView\iv_uninstall.exe
iTNC530 (606424)-->RunDll32 C:\PROGRA~2\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files (x86)\InstallShield Installation Information\{EC28CE20-D196-4604-9145-11CD48F10E11}\Setup.exe" -l0x0009
Java 7 Update 51-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217051FF}
Malwarebytes Anti-Malware verze 1.75.0.1300-->"C:\Program Files (x86)\Malwarebytes' Anti-Malware\unins000.exe"
Microsoft Office 2010 Aktivator version for Windows-->"C:\Program Files (x86)\Microsoft Office 2010 Aktivator\unins000.exe"
Microsoft Office Access MUI (Czech) 2010-->MsiExec.exe /X{90140000-0015-0405-0000-0000000FF1CE}
Microsoft Office Excel MUI (Czech) 2010-->MsiExec.exe /X{90140000-0016-0405-0000-0000000FF1CE}
Microsoft Office Groove MUI (Czech) 2010-->MsiExec.exe /X{90140000-00BA-0405-0000-0000000FF1CE}
Microsoft Office InfoPath MUI (Czech) 2010-->MsiExec.exe /X{90140000-0044-0405-0000-0000000FF1CE}
Microsoft Office OneNote MUI (Czech) 2010-->MsiExec.exe /X{90140000-00A1-0405-0000-0000000FF1CE}
Microsoft Office Outlook MUI (Czech) 2010-->MsiExec.exe /X{90140000-001A-0405-0000-0000000FF1CE}
Microsoft Office PowerPoint MUI (Czech) 2010-->MsiExec.exe /X{90140000-0018-0405-0000-0000000FF1CE}
Microsoft Office Professional Plus 2010-->"C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\Office Setup Controller\setup.exe" /uninstall PROPLUS /dll OSETUP.DLL
Microsoft Office Professional Plus 2010-->MsiExec.exe /X{90140000-0011-0000-0000-0000000FF1CE}
Microsoft Office Proof (Czech) 2010-->MsiExec.exe /X{90140000-001F-0405-0000-0000000FF1CE}
Microsoft Office Proof (English) 2010-->MsiExec.exe /X{90140000-001F-0409-0000-0000000FF1CE}
Microsoft Office Proof (German) 2010-->MsiExec.exe /X{90140000-001F-0407-0000-0000000FF1CE}
Microsoft Office Proof (Slovak) 2010-->MsiExec.exe /X{90140000-001F-041B-0000-0000000FF1CE}
Microsoft Office Proofing (Czech) 2010-->MsiExec.exe /X{90140000-002C-0405-0000-0000000FF1CE}
Microsoft Office Publisher MUI (Czech) 2010-->MsiExec.exe /X{90140000-0019-0405-0000-0000000FF1CE}
Microsoft Office Shared MUI (Czech) 2010-->MsiExec.exe /X{90140000-006E-0405-0000-0000000FF1CE}
Microsoft Office Word MUI (Czech) 2010-->MsiExec.exe /X{90140000-001B-0405-0000-0000000FF1CE}
Microsoft SQL Server Browser-->MsiExec.exe /X{BF9BF038-FE03-429D-9B26-2FA0FD756052}
Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022-->MsiExec.exe /X{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319-->MsiExec.exe /X{196BB40D-1578-3D01-B289-BEFC77A11A1E}
Microsoft_VC100_CRT_SP1_x86-->MsiExec.exe /I{E3B64CC5-C011-40C0-92BC-7316CD5E5688}
MOBILedit! Enterprise ver. 7.5.1.4181-->"C:\Program Files (x86)\MOBILedit! Enterprise\Setup\unins000.exe"
MOBILedit! Support Libraries-->MsiExec.exe /I{1A834332-A9EE-440C-9505-2D07F445F05A}
Mozilla Firefox 27.0.1 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
MSVC80_x86_v2-->MsiExec.exe /I{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}
MSVC90_x86-->MsiExec.exe /I{AF111648-99A1-453E-81DD-80DBBF6DAD0D}
MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
MSXML 4.0 SP2 (KB973688)-->MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}
Nokia Connectivity Cable Driver-->MsiExec.exe /I{29373274-977E-413C-A4DE-DC0F8E80C429}
PC Connectivity Solution-->MsiExec.exe /I{6D01D1B1-17BD-4F10-BB11-F08F0C47D42B}
PCSMS Free Client v1.0-->MsiExec.exe /X{9F32412C-90C6-4FA1-847A-61FD087DE2A4}
Samsung Kies-->"C:\Program Files (x86)\InstallShield Installation Information\{758C8301-2696-4855-AF45-534B1200980A}\setup.exe" -runfromtemp -l0x0409 -removeonly
Samsung Kies-->MsiExec.exe /I{758C8301-2696-4855-AF45-534B1200980A}
Security Update for Microsoft .NET Framework 4.5.1 (KB2898869)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {BD0F9F7E-62B2-3971-9E2E-B87B832CE89D}
Security Update for Microsoft .NET Framework 4.5.1 (KB2901126)-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\v4.5.50938\setup.exe /uninstallpatch {513BC47F-0560-33C2-A029-C5387642233A}
SMS Performer 1.3-->C:\Program Files (x86)\SMSPerformer\Uninstall.exe

======Hosts File======

216.239.32.20 google.com www.google.com
216.239.32.20 google.com www.google.ad
216.239.32.20 google.com www.google.ae
216.239.32.20 google.com www.google.com.af
216.239.32.20 google.com www.google.com.ag
216.239.32.20 google.com www.google.com.ai
216.239.32.20 google.com www.google.al
216.239.32.20 google.com www.google.am
216.239.32.20 google.com www.google.co.ao
216.239.32.20 google.com www.google.com.ar

======System event log======

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Distributed Link Tracking Client byl změněn na: stopped
Record Number: 5
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Desktop Window Manager Session Manager byl změněn na: stopped
Record Number: 4
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Power byl změněn na: stopped
Record Number: 3
Source Name: Service Control Manager
Time Written: 20101121035831.108772-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Windows Event Log byl změněn na: stopped
Record Number: 2
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 7036
Message: Stav služby Diagnostic Policy Service byl změněn na: stopped
Record Number: 1
Source Name: Service Control Manager
Time Written: 20101121035831.093172-000
Event Type: Informace
User:

=====Application event log=====

Computer Name: 37L4247F27-25
Event Code: 5617
Message: Windows Management Instrumentation Service subsystems initialized successfully
Record Number: 5
Source Name: Microsoft-Windows-WMI
Time Written: 20131213063154.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 5615
Message: Windows Management Instrumentation Service started sucessfully
Record Number: 4
Source Name: Microsoft-Windows-WMI
Time Written: 20131213063146.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1531
Message: Služba Profil uživatele byla úspěšně spuštěna.


Record Number: 3
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20131213063139.162564-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

Computer Name: 37L4247F27-25
Event Code: 4625
Message: Subsystém EventSystem zabraňuje vytváření duplicitních záznamů v protokolu událostí po dobu 86400 sekund. Tuto dobu lze změnit pomocí hodnoty REG_DWORD s názvem SuppressDuplicateDuration v následujícím klíči registru: HKLM\Software\Microsoft\EventSystem\EventLog.
Record Number: 2
Source Name: Microsoft-Windows-EventSystem
Time Written: 20131213063139.000000-000
Event Type: Informace
User:

Computer Name: 37L4247F27-25
Event Code: 1532
Message: Služba Profil uživatele byla zastavena.


Record Number: 1
Source Name: Microsoft-Windows-User Profiles Service
Time Written: 20101121035831.124372-000
Event Type: Informace
User: NT AUTHORITY\SYSTEM

=====Security event log=====

Computer Name: 37L4247F27-25
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063112.205717-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: 37L4247F27-25$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1e0
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063112.205717-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4902
Message: Tabulka zásad auditu pro jednotlivé uživatele byla vytvořena.

Počet prvků: 0
ID zásady: 0x309c8
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063057.541691-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-0-0
Název účtu: -
Doména účtu: -
ID přihlášení: 0x0

Typ přihlášení: 0

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x4
Název procesu:

Informace o síti:
Název pracovní stanice: -
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: -
Balíček ověření: -
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063054.686886-000
Event Type: Úspěšný audit
User:

Computer Name: 37L4247F27-25
Event Code: 4608
Message: Spouští se systém Windows.

Tato událost je zaznamenána při spuštění procesu LSASS.EXE a inicializaci kontrolního podsystému.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20131213063054.484086-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=C:\Program Files (x86)\PC Connectivity Solution\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files (x86)\Bitvise SSH Client;C:\Program Files (x86)\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\Tools\Binn\;C:\Program Files\Microsoft SQL Server\100\DTS\Binn\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=1
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 23 Stepping 10, GenuineIntel
"PROCESSOR_REVISION"=170a
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"asl.log"=Destination=file
"ESET_OPTIONS"=

-----------------EOF-----------------

Odinstalujte Advanced SystemCare a nasledne i vse od IOBit - jsou to cinske smejdy a spise jen skodi nez jsou uzitkem. Hledaji nesmyslne a neexistujici problemy, databazi haveti ukradli jine renomovane spolecnosti

Odinstalujte Spybot - Search & Destroy - program ma uz nejlepsi leta davno za sebou a posledni cca 3 roky neni schopen celit aktualnim hrozbam

Ty nelegalni Office tez nejsou to prave orechove

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by Start on źt 13.03.2014 at 11:32:37,61.
Microsoft Windows 7 Home Premium 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Start\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.3.2014 11:34:19 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\SearchScopes\{C93AE7C9-7019-40B8-BCC7-4D583A28E397} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully
HKEY_USERS\S-1-5-21-4108338615-47190094-49143065-1000\Software\Microsoft\Internet Explorer\Approved Extensions\{9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{5BFEFF94-6411-4B74-A947-4969134B24DE} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\prefs.js:
user_pref("browser.startup.homepage", "https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ");
user_pref("browser.search.selectedEngine", "Google");

Added to C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default

user.js not found
---- Lines buenosearch removed from prefs.js ----
user_pref("extensions.buenosearch.admin", false);
user_pref("extensions.buenosearch.aflt", "babsst");
user_pref("extensions.buenosearch.appId", "{37EB75F2-7392-4DBE-B5AD-147EC6D7BF5F}");
user_pref("extensions.buenosearch.autoRvrt", "false");
user_pref("extensions.buenosearch.dfltLng", "en");
user_pref("extensions.buenosearch.excTlbr", false);
user_pref("extensions.buenosearch.ffxUnstlRst", true);
user_pref("extensions.buenosearch.id", "66c1a1c4000000000000001e101f8924");
user_pref("extensions.buenosearch.instlDay", "16100");
user_pref("extensions.buenosearch.instlRef", "sst");
user_pref("extensions.buenosearch.newTab", false);
user_pref("extensions.buenosearch.prdct", "buenosearch");
user_pref("extensions.buenosearch.prtnrId", "buenosearch");
user_pref("extensions.buenosearch.rvrt", "false");
user_pref("extensions.buenosearch.smplGrp", "none");
user_pref("extensions.buenosearch.tb_url", "http://www.buenosearch.com/?q={searchTe ... 5&tsp=5143");
user_pref("extensions.buenosearch.tlbrId", "base");
user_pref("extensions.buenosearch.tlbrSrchUrl", "http://www.buenosearch.com/?q={searchTe ... 35&tsp=514
user_pref("extensions.buenosearch.vrsn", "1.8.28.7");
user_pref("extensions.buenosearch.vrsni", "1.8.28.7");
user_pref("extensions.buenosearch.vrsnTs", "1.8.28.75:50:57");
---- Lines spigot removed from prefs.js ----
user_pref("startpage.ntsearch_url", "http://search.yahoo.com/search?fr=spigo ... earchTerms}");
---- Lines mybrowserbar modified from prefs.js ----

user_pref("extensions.installCache", "[{\"name\":\"app-global\",\"addons\":{\"{972ce4c6-7e08-4474-a285-3208198ce6fd}\":{\"descriptor\":\"C:\\\\Program
---- FireFox user.js and prefs.js backups ----

prefs_13.03.2014_1153_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D} deleted
C:\Users\Start\daemonprocess.txt deleted
C:\Users\Start\.android deleted
C:\PROGRA~3\ProductData deleted
C:\Users\Start\AppData\Local\cache deleted
C:\Users\Start\AppData\LocalLow\ADSRemoval deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\Application Updater deleted
C:\Windows\wininit.ini deleted
C:\windows\SysNative\tasks\YourFile DownloaderUpdate deleted
C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\searchplugins\buenosearch.xml deleted
C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\firefox@mega.co.nz.xpi deleted
"C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\vtools@mybrowserbar.com" deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
- Start Page - %ProfilePath%\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
FD6ACD9D85177259D442A0C4AC15F7B8 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_44.dll - Shockwave Flash


==== Deleted Firefox Extensions ======================

C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\extensions\{58d2a791-6199-482f-a9aa-9b725ec61362} deleted

==== Chrome Look ======================

Ads Removal - Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen

==== Chrome Fix ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\fopdddcinljmpmioaklghcalngfhbaen deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{C93AE7C9-7019-40B8-BCC7-4D583A28E397}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{C93AE7C9-7019-40B8-BCC7-4D583A28E397}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EaseUS EPM tray deleted successfully
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NokiaSuite.exe deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Start\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Start\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\Start\AppData\Local\Mozilla\Firefox\Profiles\xawll829.default\Cache emptied successfully

==== Empty Chrome Cache ======================

C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1041 folders=36 24087809 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Start\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Start\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 13.03.2014 at 12:07:12,97 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by Start (administrator) on START-PC on 13-03-2014 14:07:45
Running from C:\Users\Start\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Windows\system32\WLANExt.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
() C:\Windows\SysWOW64\FUSServices.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAANTMon.exe
() C:\Windows\system32\LFOGRPOW.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\IAAnotif.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\system32\igfxsrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\OUTLOOK.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD.EXE
(forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5618456 2013-09-12] (ESET)
HKLM\...\Run: [IAAnotif] - C:\Program Files (x86)\Intel\Intel Matrix Storage Manager\iaanotif.exe [186904 2009-06-04] (Intel Corporation)
HKLM-x32\...\Run: [] - [X]
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\ScCertProp: wlnotify.dll [X]
HKU\S-1-5-21-4108338615-47190094-49143065-1000\...\MountPoints2: {9b73a6a2-9793-11e3-bba1-001e101f2b52} - G:\AutoRun.exe

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.cz/?gws_rd=cr&ei=Zwy ... tAb4v4CQCQ
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 85.13.80.80 85.13.80.90

FireFox:
========
FF ProfilePath: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Start\AppData\Roaming\Mozilla\Firefox\Profiles\xawll829.default\searchplugins\yahoo_ff.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-12-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2013-12-13]

Chrome:
=======
Error reading preferences. Please check "preferences" file for possible corruption. <======= ATTENTION
CHR Extension: (Google Docs) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-03]
CHR Extension: (Google Drive) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-03]
CHR Extension: (YouTube) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-03]
CHR Extension: (Google Search) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-03]
CHR Extension: (Google Wallet) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-03]
CHR Extension: (Gmail) - C:\Users\Start\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-03]

==================== Services (Whitelisted) =================

R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\x86\ekrn.exe [1337752 2013-09-12] (ESET)
R2 FUSServices; C:\Windows\SysWOW64\FUSServices.exe [10752 2010-01-08] ()
R2 MSSQL$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\sqlservr.exe [61913952 2010-04-03] (Microsoft Corporation)
S4 SQLAgent$SFN; C:\Program Files\Microsoft SQL Server\MSSQL10_50.SFN\MSSQL\Binn\SQLAGENT.EXE [428384 2010-04-03] (Microsoft Corporation)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [X]

==================== Drivers (Whitelisted) ====================

S3 cxbu1x64; C:\Windows\System32\DRIVERS\cxbu1x64.sys [128896 2009-08-28] ( )
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
S3 eGateUSB; C:\Windows\System32\Drivers\eGateUSB.sys [98816 2007-05-09] (Gemalto)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [157432 2013-09-17] (ESET)
S3 euccihr; C:\Windows\System32\Drivers\euccihr-amd64.sys [120360 2006-12-15] (Eutron)
R3 ewusbnet; C:\Windows\System32\DRIVERS\ewusbnet.sys [132608 2013-12-13] (Huawei Technologies Co., Ltd.)
S3 GemCCID; C:\Windows\System32\Drivers\GemCCID.sys [119680 2009-08-10] (Gemalto)
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
S3 Serial; C:\Windows\system32\drivers\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-22] (DEVGURU Co., LTD.(www.devguru.co.kr))
S3 XMLDIUSB; C:\Windows\System32\Drivers\XMLDIUSB.sys [55808 2010-01-29] (OEM)
S3 DrvSnSht; \??\C:\Program Files (x86)\R-Drive Image\DrvSnSht64.sys [X]
S3 NTIDrvr; \??\C:\Users\Start\NTIDrvr.sys [X]
S3 R-ImageDisk; \??\C:\Program Files (x86)\R-Drive Image\R-ImageDisk64.sys [X]
U2 SBKUPNT;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-13 14:07 - 2014-03-13 14:09 - 00011763 _____ () C:\Users\Start\Desktop\FRST.txt
2014-03-13 14:07 - 2014-03-13 14:07 - 00000000 ____D () C:\FRST
2014-03-13 14:06 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Desktop\FRST64.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Downloads\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe
2014-03-13 14:05 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Downloads\FRST64.exe
2014-03-13 12:06 - 2014-03-13 12:06 - 00001656 _____ () C:\Windows\PFRO.log
2014-03-13 12:02 - 2014-03-13 11:32 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 11:33 - 2014-03-13 12:07 - 00011959 _____ () C:\zoek-results.log
2014-03-13 11:32 - 2014-03-13 11:58 - 00000000 ____D () C:\zoek_backup
2014-03-13 11:25 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Desktop\zoek.exe
2014-03-13 11:23 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Downloads\zoek.exe
2014-03-13 10:54 - 2014-03-13 12:06 - 00000112 _____ () C:\Windows\setupact.log
2014-03-13 10:54 - 2014-03-13 10:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 09:08 - 2014-03-13 09:08 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\hijackthis(1).exe
2014-03-13 08:48 - 2014-03-13 09:16 - 00000000 ____D () C:\Users\Start\Downloads\backups
2014-03-13 08:43 - 2014-03-13 09:19 - 00008366 _____ () C:\Users\Start\Downloads\hijackthis.log
2014-03-13 08:43 - 2014-03-13 08:43 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\HiJackThis.exe
2014-03-13 06:58 - 2014-03-13 06:58 - 00339991 _____ () C:\Users\Start\Downloads\RSIT-1.06.exe
2014-03-13 06:49 - 2014-03-13 06:49 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner(1).exe
2014-03-12 23:47 - 2014-03-12 23:48 - 00000000 ____D () C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:46 - 2014-03-12 23:46 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-03-12 23:42 - 2014-03-12 23:42 - 00000000 ____D () C:\ProgramData\Licenses
2014-03-12 23:41 - 2014-03-12 23:41 - 04095448 _____ (BrightFort LLC ) C:\Users\Start\Downloads\spywareblastersetup50.exe
2014-03-12 23:38 - 2010-01-10 18:40 - 00118784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSSTDFMT.DLL
2014-03-12 14:43 - 2014-03-12 14:43 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 13:59 - 2014-03-12 23:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-12 13:58 - 2014-03-12 13:58 - 00000632 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-03-12 13:51 - 2014-03-12 13:52 - 03230781 _____ (Evonsoft ) C:\Users\Start\Downloads\ASRLSetup.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 18265192 _____ (SUPERAntiSpyware) C:\Users\Start\Downloads\SUPERAntiSpyware.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 08003752 _____ ( ) C:\Users\Start\Downloads\setupfree.exe
2014-03-12 13:50 - 2014-03-12 13:51 - 05088576 _____ (Crawler, LLC ) C:\Users\Start\Downloads\SpywareTerminatorSetup.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 03255248 _____ (Javacool Software LLC ) C:\Users\Start\Downloads\spywareblastersetup46.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 00027898 _____ () C:\Users\Start\Downloads\lang.cesky.zip
2014-03-12 13:49 - 2014-03-12 13:53 - 55454464 _____ (Safer-Networking Ltd. ) C:\Users\Start\Downloads\SpybotSD2.exe
2014-03-12 11:50 - 2014-03-12 11:50 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner.exe
2014-03-12 09:56 - 2014-03-12 09:56 - 00448512 _____ (OldTimer Tools) C:\Users\Start\Downloads\TFC.exe
2014-03-12 09:55 - 2014-03-12 09:56 - 00165888 _____ () C:\Users\Start\Downloads\T-Cleaner.exe
2014-03-12 06:03 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-12 06:02 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-12 06:02 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-12 06:02 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-12 06:02 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-12 06:02 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-12 06:02 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-12 06:02 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-12 06:02 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-12 06:02 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-12 06:02 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-12 06:02 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-12 06:02 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-12 06:02 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-12 06:02 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-12 06:02 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-12 06:02 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-12 06:02 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-12 06:02 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-12 06:02 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-12 06:02 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-12 06:02 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-12 06:02 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-12 06:02 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-12 06:02 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-12 06:02 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-12 06:02 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-12 06:02 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-12 06:02 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-12 06:02 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-12 06:02 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-12 06:02 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-12 06:02 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-12 06:02 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-12 06:02 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-12 06:02 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-12 06:02 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-12 06:02 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-12 06:02 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-12 06:02 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-12 06:02 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-12 06:02 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-12 06:02 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-12 06:02 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-12 06:00 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-12 06:00 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-12 06:00 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-12 06:00 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-11 07:22 - 2014-03-13 07:26 - 00078848 _____ () C:\Windows\KMSEmulator.exe
2014-03-08 10:00 - 2014-03-08 10:02 - 24361384 _____ () C:\Users\Start\Downloads\SpyHunter-4.6.1.3664+patch.rar
2014-03-08 09:47 - 2014-03-08 09:47 - 00000000 _____ () C:\autoexec.bat
2014-03-08 09:46 - 2014-03-08 09:46 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-08 09:43 - 2014-03-08 09:43 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Start\Downloads\SpyHunter-Installer-k.exe
2014-03-07 20:51 - 2014-03-07 20:51 - 00000000 ____D () C:\ProgramData\Razer
2014-03-07 19:54 - 2014-03-07 19:54 - 00003168 _____ () C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2014-03-07 19:54 - 2014-03-07 19:54 - 00003098 _____ () C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2014-03-07 19:53 - 2014-03-07 19:53 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 19:50 - 2014-03-10 11:03 - 00000000 ____D () C:\Users\Start\Downloads\Download
2014-03-07 11:13 - 2014-03-07 11:13 - 00072256 _____ () C:\Users\Start\Documents\cc_20140307_111344.reg
2014-03-07 10:57 - 2014-03-07 10:59 - 04765152 _____ (Piriform Ltd) C:\Users\Start\Downloads\ccsetup411.exe
2014-03-06 17:44 - 2014-03-08 11:33 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-06 17:44 - 2014-03-06 17:44 - 00000000 ____D () C:\Users\Start\AppData\Local\WinRST
2014-03-06 17:41 - 2014-03-06 17:41 - 02513790 _____ () C:\Users\Start\Downloads\Free-JPG-To-PDF-Converter-Setup.rar
2014-03-06 17:38 - 2014-03-06 17:38 - 01119224 _____ (www.JPGPDF.net ) C:\Users\Start\Downloads\jpgtopdf.exe
2014-03-06 15:43 - 2014-03-06 15:43 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:28 - 2014-03-06 19:29 - 00000000 ____D () C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-06 15:12 - 2014-03-06 15:12 - 18277248 _____ (pdfforge ) C:\Users\Start\Downloads\PDFCreator-1_7_2_setup.exe
2014-03-06 15:10 - 2014-03-06 15:10 - 03921526 _____ () C:\Users\Start\Documents\scan.zip
2014-03-05 18:22 - 2014-03-05 18:42 - 00000000 ____D () C:\Windows\rescache
2014-03-05 09:56 - 2014-03-05 10:07 - 00050688 _____ () C:\Users\Start\Documents\Kopie - optimalizace 11 2 2014.xls
2014-03-05 09:21 - 2014-03-05 10:02 - 626820112 _____ () C:\Users\Start\Downloads\SinuTrainTrialV0705ED2.zip
2014-03-04 10:36 - 2014-03-04 10:37 - 381034498 _____ () C:\Users\Start\Documents\backup.reg
2014-03-04 08:10 - 2014-03-04 08:10 - 00000000 ____D () C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 15:25 - 2014-01-09 03:22 - 05694464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-03-03 15:25 - 2014-01-03 23:44 - 06574592 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-03-03 15:01 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-03-03 15:01 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-03-03 15:01 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-03-03 15:01 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-03-03 15:01 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-03-03 15:01 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-03-03 15:01 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-03-03 15:01 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-03-03 15:01 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-03-03 15:01 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-03-03 15:01 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-03-03 15:01 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-03-03 15:01 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-03-03 15:01 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-03-03 15:01 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-03-03 15:01 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-03-03 12:28 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-03 12:28 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-03 12:24 - 2013-09-25 03:23 - 01030144 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-03-03 12:24 - 2013-09-25 02:57 - 00792576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-03-03 12:17 - 2014-03-03 12:17 - 00003274 _____ () C:\Windows\System32\Tasks\{6BEC8282-6298-4687-8ACA-597D87B0AC87}
2014-03-03 08:21 - 2014-03-04 12:58 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-03 08:20 - 2014-03-13 13:25 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-03 08:20 - 2014-03-13 12:06 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-03 08:20 - 2014-03-03 08:22 - 00000000 ____D () C:\Users\Start\AppData\Local\Google
2014-03-03 08:20 - 2014-03-03 08:21 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-03 08:20 - 2014-03-03 08:20 - 00003946 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-03 08:20 - 2014-03-03 08:20 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-03 08:19 - 2014-03-03 08:20 - 00000000 ____D () C:\Users\Start\AppData\Local\Deployment
2014-03-03 08:19 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Apps\2.0
2014-03-02 09:51 - 2012-01-10 06:27 - 09666048 _____ (The Private Dev Team) C:\Users\Start\Downloads\Bluefreeze.exe
2014-03-02 09:51 - 2011-12-22 23:40 - 00000224 _____ () C:\Users\Start\Downloads\README.txt
2014-03-02 09:51 - 2010-11-13 20:25 - 00346624 _____ (Microsoft) C:\Users\Start\Downloads\Ionic.Zip.dll
2014-03-02 09:51 - 2010-11-13 20:25 - 00192512 _____ (ICSharpCode.net) C:\Users\Start\Downloads\ICSharpCode.SharpZipLib.dll
2014-02-27 15:16 - 2013-11-19 16:52 - 00034080 _____ (IObit) C:\Windows\system32\SmartDefragBootTime.exe
2014-02-27 15:14 - 2014-01-26 17:55 - 00128288 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll20140307222920.dll
2014-02-27 15:14 - 2014-01-08 15:54 - 00121856 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll20140307222933.dll
2014-02-27 15:14 - 2014-01-08 15:54 - 00121856 _____ (IObit) C:\Windows\system32\IObitSmartDefragExtension.dll
2014-02-27 06:35 - 2014-02-27 06:35 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-26 19:39 - 2014-02-26 19:39 - 00000000 ____D () C:\Users\Start\AppData\Local\NetDragon
2014-02-26 19:37 - 2014-02-26 19:37 - 00000000 ____D () C:\Program Files (x86)\NetDragon
2014-02-26 16:28 - 2014-02-26 16:28 - 00004608 _____ () C:\Users\Start\Documents\Apple iPhone 4S.med
2014-02-25 15:47 - 2014-02-25 15:47 - 00376832 _____ (MARX CryptoTech LP ) C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47 - 2014-02-25 15:47 - 00045056 _____ (MARX CryptoTech LP) C:\Windows\SysWOW64\Drivers\CBUSB.SYS
2014-02-25 15:47 - 2014-02-25 15:47 - 00043520 _____ () C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-24 17:08 - 2014-02-24 17:08 - 00000000 ____D () C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-24 07:45 - 2014-03-13 12:59 - 01062033 _____ () C:\Windows\WindowsUpdate.log
2014-02-24 07:36 - 2014-02-24 07:37 - 11140364 _____ () C:\Users\Start\Downloads\cc-setup.exe
2014-02-20 19:58 - 2014-02-22 05:59 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InfinityBox
2014-02-20 18:51 - 2014-02-20 18:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ZuneDriver_01_09_00.Wdf
2014-02-20 18:49 - 2014-02-20 18:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-02-18 17:09 - 2014-02-18 17:09 - 00087704 _____ () C:\Windows\cadkasdeinst01.exe
2014-02-18 15:36 - 2014-03-07 20:54 - 00000000 ____D () C:\Program Files (x86)\CNC Editor 2002v1.5
2014-02-17 11:49 - 2014-02-17 11:49 - 00000000 ____D () C:\Users\Start\AppData\Local\#Bqb
2014-02-17 11:45 - 2014-02-17 11:45 - 00000000 ____D () C:\Users\Start\AppData\Local\IsolatedStorage
2014-02-17 11:09 - 2014-02-17 11:09 - 00001545 _____ () C:\Users\Public\Desktop\iTNC530 (606424).lnk
2014-02-17 11:06 - 2014-02-17 11:06 - 00000000 ____D () C:\Programme
2014-02-17 10:22 - 2014-02-17 10:22 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-17 09:17 - 2014-02-17 09:22 - 41640395 _____ (diakov.net) C:\Users\Start\Downloads\Advanced-SystemCare-PRO-v7.2.0.431-Final-RePack-by-D!akov---aktivovaný.exe
2014-02-16 19:00 - 2014-02-16 19:00 - 00000000 ____D () C:\ProgramData\Real
2014-02-16 18:07 - 2014-02-17 10:57 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2014-02-16 12:10 - 2014-02-16 12:11 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 15:25 - 2014-02-13 15:25 - 00000000 ____D () C:\ProgramData\Sun
2014-02-13 15:24 - 2014-02-13 15:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-13 15:24 - 2014-02-13 15:23 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 15:24 - 2014-02-13 15:23 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-02-13 15:18 - 2014-02-16 19:29 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-12 17:04 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 17:04 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 17:04 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 17:04 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 17:04 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 17:04 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 17:04 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 17:04 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 17:04 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 17:03 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 17:03 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 17:03 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 17:03 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 17:03 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 17:03 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 17:03 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 17:03 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-11 06:34 - 2014-02-17 09:07 - 00000000 ____D () C:\Windows\Minidump

==================== One Month Modified Files and Folders =======

2014-03-13 14:09 - 2014-03-13 14:07 - 00011763 _____ () C:\Users\Start\Desktop\FRST.txt
2014-03-13 14:07 - 2014-03-13 14:07 - 00000000 ____D () C:\FRST
2014-03-13 14:07 - 2013-12-13 14:12 - 00003970 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{1C1FF3F2-C7BD-41C7-A7CE-A2505EC78A63}
2014-03-13 14:06 - 2014-03-13 14:06 - 02157056 _____ (Farbar) C:\Users\Start\Desktop\FRST64.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Downloads\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:06 - 00112640 _____ (forum.viry.cz) C:\Users\Start\Desktop\FRSTLauncher.exe
2014-03-13 14:06 - 2014-03-13 14:05 - 02157056 _____ (Farbar) C:\Users\Start\Downloads\FRST64.exe
2014-03-13 13:42 - 2013-12-13 15:19 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 13:25 - 2014-03-03 08:20 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-03-13 12:59 - 2014-02-24 07:45 - 01062033 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 12:14 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 12:14 - 2009-07-14 05:45 - 00021872 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 12:07 - 2014-03-13 11:33 - 00011959 _____ () C:\zoek-results.log
2014-03-13 12:06 - 2014-03-13 12:06 - 00001656 _____ () C:\Windows\PFRO.log
2014-03-13 12:06 - 2014-03-13 10:54 - 00000112 _____ () C:\Windows\setupact.log
2014-03-13 12:06 - 2014-03-03 08:20 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-03-13 12:06 - 2014-01-13 06:32 - 00000358 _____ () C:\Windows\Tasks\DriverToolkit Autorun.job
2014-03-13 12:06 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 11:58 - 2014-03-13 11:32 - 00000000 ____D () C:\zoek_backup
2014-03-13 11:54 - 2013-12-13 09:31 - 00000000 ____D () C:\Users\Start
2014-03-13 11:32 - 2014-03-13 12:02 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 11:23 - 2014-03-13 11:25 - 01285120 _____ () C:\Users\Start\Desktop\zoek.exe
2014-03-13 11:23 - 2014-03-13 11:23 - 01285120 _____ () C:\Users\Start\Downloads\zoek.exe
2014-03-13 10:54 - 2014-03-13 10:54 - 00000000 _____ () C:\Windows\setuperr.log
2014-03-13 09:19 - 2014-03-13 08:43 - 00008366 _____ () C:\Users\Start\Downloads\hijackthis.log
2014-03-13 09:16 - 2014-03-13 08:48 - 00000000 ____D () C:\Users\Start\Downloads\backups
2014-03-13 09:08 - 2014-03-13 09:08 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\hijackthis(1).exe
2014-03-13 08:43 - 2014-03-13 08:43 - 00388608 _____ (Trend Micro Inc.) C:\Users\Start\Downloads\HiJackThis.exe
2014-03-13 07:26 - 2014-03-11 07:22 - 00078848 _____ () C:\Windows\KMSEmulator.exe
2014-03-13 07:26 - 2014-02-10 19:55 - 00002740 _____ () C:\Windows\System32\Tasks\AutoKMSDaily
2014-03-13 07:26 - 2014-02-10 19:55 - 00000202 _____ () C:\Windows\Tasks\AutoKMSDaily.job
2014-03-13 06:58 - 2014-03-13 06:58 - 00339991 _____ () C:\Users\Start\Downloads\RSIT-1.06.exe
2014-03-13 06:49 - 2014-03-13 06:49 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner(1).exe
2014-03-12 23:57 - 2014-03-12 13:59 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-03-12 23:48 - 2014-03-12 23:47 - 00000000 ____D () C:\Windows\D3F93A5A7A5D4867B2A16F46500D006C.TMP
2014-03-12 23:46 - 2014-03-12 23:46 - 00000000 ____D () C:\Windows\System32\Tasks\Safer-Networking
2014-03-12 23:42 - 2014-03-12 23:42 - 00000000 ____D () C:\ProgramData\Licenses
2014-03-12 23:41 - 2014-03-12 23:41 - 04095448 _____ (BrightFort LLC ) C:\Users\Start\Downloads\spywareblastersetup50.exe
2014-03-12 14:44 - 2013-12-13 15:19 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 14:44 - 2013-12-13 15:19 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 14:44 - 2013-12-13 15:19 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-12 14:43 - 2014-03-12 14:43 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 13:58 - 2014-03-12 13:58 - 00000632 _____ () C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000628 _____ () C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2014-03-12 13:58 - 2014-03-12 13:58 - 00000458 _____ () C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job
2014-03-12 13:53 - 2014-03-12 13:49 - 55454464 _____ (Safer-Networking Ltd. ) C:\Users\Start\Downloads\SpybotSD2.exe
2014-03-12 13:52 - 2014-03-12 13:51 - 03230781 _____ (Evonsoft ) C:\Users\Start\Downloads\ASRLSetup.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 18265192 _____ (SUPERAntiSpyware) C:\Users\Start\Downloads\SUPERAntiSpyware.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 08003752 _____ ( ) C:\Users\Start\Downloads\setupfree.exe
2014-03-12 13:51 - 2014-03-12 13:50 - 05088576 _____ (Crawler, LLC ) C:\Users\Start\Downloads\SpywareTerminatorSetup.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 03255248 _____ (Javacool Software LLC ) C:\Users\Start\Downloads\spywareblastersetup46.exe
2014-03-12 13:50 - 2014-03-12 13:50 - 00027898 _____ () C:\Users\Start\Downloads\lang.cesky.zip
2014-03-12 12:50 - 2013-12-16 17:38 - 72790016 _____ () C:\Windows\system32\config\SOFTWARE.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00290816 _____ () C:\Windows\system32\config\DEFAULT.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00028672 _____ () C:\Windows\system32\config\SAM.iodefrag.bak
2014-03-12 12:50 - 2013-12-16 17:38 - 00024576 _____ () C:\Windows\system32\config\SECURITY.iodefrag.bak
2014-03-12 11:50 - 2014-03-12 11:50 - 01949184 _____ () C:\Users\Start\Downloads\adwcleaner.exe
2014-03-12 10:06 - 2009-07-14 05:45 - 00416952 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-12 09:57 - 2013-09-14 10:14 - 00000000 ____D () C:\Qoobox
2014-03-12 09:56 - 2014-03-12 09:56 - 00448512 _____ (OldTimer Tools) C:\Users\Start\Downloads\TFC.exe
2014-03-12 09:56 - 2014-03-12 09:55 - 00165888 _____ () C:\Users\Start\Downloads\T-Cleaner.exe
2014-03-10 19:47 - 2011-04-12 09:34 - 00737334 _____ () C:\Windows\system32\perfh005.dat
2014-03-10 19:47 - 2011-04-12 09:34 - 00166428 _____ () C:\Windows\system32\perfc005.dat
2014-03-10 19:47 - 2009-07-14 06:13 - 01773764 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-10 11:03 - 2014-03-07 19:50 - 00000000 ____D () C:\Users\Start\Downloads\Download
2014-03-10 09:49 - 2013-12-13 15:34 - 00000000 ____D () C:\Program Files\totalcmd
2014-03-08 11:33 - 2014-03-06 17:44 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-08 11:33 - 2013-12-16 14:25 - 00000000 ____D () C:\Program Files (x86)\Companion Suite Pro LL2
2014-03-08 10:02 - 2014-03-08 10:00 - 24361384 _____ () C:\Users\Start\Downloads\SpyHunter-4.6.1.3664+patch.rar
2014-03-08 09:47 - 2014-03-08 09:47 - 00000000 _____ () C:\autoexec.bat
2014-03-08 09:46 - 2014-03-08 09:46 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-03-08 09:43 - 2014-03-08 09:43 - 00722816 _____ (Enigma Software Group USA, LLC.) C:\Users\Start\Downloads\SpyHunter-Installer-k.exe
2014-03-08 06:15 - 2013-12-16 16:37 - 00000000 ____D () C:\Users\Start\AppData\Roaming\IObit
2014-03-08 06:15 - 2013-12-13 14:30 - 00000000 ____D () C:\Program Files\TNod User & Password Finder
2014-03-08 05:35 - 2013-12-16 17:38 - 44064768 _____ () C:\Windows\system32\config\COMPONENTS.iodefrag.bak
2014-03-07 22:29 - 2013-12-16 16:41 - 00000000 ____D () C:\ProgramData\IObit
2014-03-07 20:54 - 2014-02-18 15:36 - 00000000 ____D () C:\Program Files (x86)\CNC Editor 2002v1.5
2014-03-07 20:51 - 2014-03-07 20:51 - 00000000 ____D () C:\ProgramData\Razer
2014-03-07 19:54 - 2014-03-07 19:54 - 00003168 _____ () C:\Windows\System32\Tasks\WindowsCleanerLoginCheckUpdate
2014-03-07 19:54 - 2014-03-07 19:54 - 00003098 _____ () C:\Windows\System32\Tasks\WindowsCleanerAutoRun
2014-03-07 19:53 - 2014-03-07 19:53 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Vtools
2014-03-07 11:13 - 2014-03-07 11:13 - 00072256 _____ () C:\Users\Start\Documents\cc_20140307_111344.reg
2014-03-07 10:59 - 2014-03-07 10:57 - 04765152 _____ (Piriform Ltd) C:\Users\Start\Downloads\ccsetup411.exe
2014-03-06 19:29 - 2014-03-06 15:28 - 00000000 ____D () C:\Users\Start\AppData\Roaming\PDF Architect
2014-03-06 18:54 - 2013-12-16 16:42 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Apple Computer
2014-03-06 17:44 - 2014-03-06 17:44 - 00000000 ____D () C:\Users\Start\AppData\Local\WinRST
2014-03-06 17:41 - 2014-03-06 17:41 - 02513790 _____ () C:\Users\Start\Downloads\Free-JPG-To-PDF-Converter-Setup.rar
2014-03-06 17:38 - 2014-03-06 17:38 - 01119224 _____ (www.JPGPDF.net ) C:\Users\Start\Downloads\jpgtopdf.exe
2014-03-06 15:43 - 2014-03-06 15:43 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Softplicity
2014-03-06 15:41 - 2011-04-12 09:34 - 00000000 ____D () C:\Windows\SysWOW64\Printing_Admin_Scripts
2014-03-06 15:12 - 2014-03-06 15:12 - 18277248 _____ (pdfforge ) C:\Users\Start\Downloads\PDFCreator-1_7_2_setup.exe
2014-03-06 15:10 - 2014-03-06 15:10 - 03921526 _____ () C:\Users\Start\Documents\scan.zip
2014-03-05 18:42 - 2014-03-05 18:22 - 00000000 ____D () C:\Windows\rescache
2014-03-05 10:07 - 2014-03-05 09:56 - 00050688 _____ () C:\Users\Start\Documents\Kopie - optimalizace 11 2 2014.xls
2014-03-05 10:02 - 2014-03-05 09:21 - 626820112 _____ () C:\Users\Start\Downloads\SinuTrainTrialV0705ED2.zip
2014-03-04 12:58 - 2014-03-03 08:21 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-03-04 10:51 - 2013-12-13 07:29 - 00000000 ____D () C:\Windows\Panther
2014-03-04 10:37 - 2014-03-04 10:36 - 381034498 _____ () C:\Users\Start\Documents\backup.reg
2014-03-04 08:10 - 2014-03-04 08:10 - 00000000 ____D () C:\Program Files (x86)\BEST(bb5 easy service tool) re upload by dony
2014-03-03 12:17 - 2014-03-03 12:17 - 00003274 _____ () C:\Windows\System32\Tasks\{6BEC8282-6298-4687-8ACA-597D87B0AC87}
2014-03-03 10:10 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-03 08:22 - 2014-03-03 08:20 - 00000000 ____D () C:\Users\Start\AppData\Local\Google
2014-03-03 08:21 - 2014-03-03 08:20 - 00000000 ____D () C:\Program Files (x86)\Google
2014-03-03 08:20 - 2014-03-03 08:20 - 00003946 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-03-03 08:20 - 2014-03-03 08:20 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-03-03 08:20 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Deployment
2014-03-03 08:19 - 2014-03-03 08:19 - 00000000 ____D () C:\Users\Start\AppData\Local\Apps\2.0
2014-03-01 07:05 - 2014-03-12 06:02 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-12 06:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-12 06:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-12 06:02 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-12 06:02 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-12 06:02 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-12 06:02 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-12 06:02 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-12 06:02 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-12 06:02 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-12 06:02 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-12 06:02 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-12 06:02 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-12 06:02 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-12 06:02 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-12 06:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-12 06:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-12 06:02 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-12 06:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-12 06:02 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-12 06:02 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-12 06:02 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-12 06:02 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-12 06:02 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-12 06:02 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-12 06:02 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-12 06:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-12 06:02 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-12 06:02 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-12 06:02 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-12 06:02 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-12 06:02 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-12 06:02 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-12 06:02 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-12 06:02 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-12 06:02 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-12 06:02 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-12 06:02 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-12 06:02 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-12 06:02 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-27 06:45 - 2013-12-17 15:07 - 00000000 ____D () C:\Users\Start\Documents\zálohy telefonů
2014-02-27 06:35 - 2014-02-27 06:35 - 00000000 ____D () C:\ProgramData\Auslogics
2014-02-26 20:03 - 2013-12-18 14:36 - 00000000 ____D () C:\Users\Start\AppData\Local\Apple Computer
2014-02-26 19:57 - 2013-12-18 14:07 - 00000000 ____D () C:\Program Files\Common Files\Apple
2014-02-26 19:39 - 2014-02-26 19:39 - 00000000 ____D () C:\Users\Start\AppData\Local\NetDragon
2014-02-26 19:37 - 2014-02-26 19:37 - 00000000 ____D () C:\Program Files (x86)\NetDragon
2014-02-26 19:37 - 2013-12-13 12:47 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-26 17:23 - 2014-01-01 14:40 - 00000000 ____D () C:\Program Files (x86)\NsPro
2014-02-26 16:28 - 2014-02-26 16:28 - 00004608 _____ () C:\Users\Start\Documents\Apple iPhone 4S.med
2014-02-26 16:10 - 2014-01-11 17:41 - 00000000 ____D () C:\Users\Start\AppData\Roaming\MOBILedit
2014-02-25 15:47 - 2014-02-25 15:47 - 00376832 _____ (MARX CryptoTech LP ) C:\Windows\SysWOW64\MPIWIN32.DLL
2014-02-25 15:47 - 2014-02-25 15:47 - 00045056 _____ (MARX CryptoTech LP) C:\Windows\SysWOW64\Drivers\CBUSB.SYS
2014-02-25 15:47 - 2014-02-25 15:47 - 00043520 _____ () C:\Windows\SysWOW64\CBNDLL.DLL
2014-02-24 17:08 - 2014-02-24 17:08 - 00000000 ____D () C:\Users\Start\AppData\Roaming\GWizardE
2014-02-24 17:08 - 2013-12-17 16:18 - 00000000 ____D () C:\ProgramData\Adobe
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2014-02-24 17:07 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\Macromedia
2014-02-24 17:07 - 2013-12-17 16:18 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-02-24 17:06 - 2013-12-13 15:19 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Adobe
2014-02-24 09:42 - 2013-12-13 17:36 - 00000000 ____D () C:\Users\Start\AppData\Local\Adobe
2014-02-24 07:37 - 2014-02-24 07:36 - 11140364 _____ () C:\Users\Start\Downloads\cc-setup.exe
2014-02-24 07:23 - 2014-02-09 09:44 - 00000200 _____ () C:\Windows\Tasks\AutoKMS.job
2014-02-24 07:20 - 2013-12-16 06:47 - 00000000 ____D () C:\Program Files (x86)\Microsoft Visual Studio 8
2014-02-24 07:20 - 2013-12-13 17:29 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-24 07:20 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Sidebar
2014-02-24 07:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-02-24 07:20 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-02-24 07:13 - 2014-01-13 06:36 - 00000000 ____D () C:\ProgramData\DriverGenius
2014-02-24 07:13 - 2013-12-17 15:54 - 00000000 ____D () C:\Users\Start\Documents\Soubory aplikace Outlook
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\redistpart
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\launcher
2014-02-24 07:13 - 2013-12-13 15:29 - 00000000 ____D () C:\ProgramData\explauncher
2014-02-24 07:13 - 2013-12-13 12:47 - 00000000 ____D () C:\ProgramData\Atheros
2014-02-24 07:13 - 2013-12-13 09:32 - 00000000 ____D () C:\Users\Start\AppData\Local\VirtualStore
2014-02-24 07:13 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Default
2014-02-24 07:11 - 2014-02-09 09:44 - 00002434 _____ () C:\Windows\System32\Tasks\AutoKMS
2014-02-22 06:05 - 2013-12-13 17:45 - 00000000 ____D () C:\Users\Start\AppData\Local\GHISLER
2014-02-22 05:59 - 2014-02-20 19:58 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\InfinityBox
2014-02-20 18:51 - 2014-02-20 18:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_ZuneDriver_01_09_00.Wdf
2014-02-20 18:49 - 2014-02-20 18:49 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2014-02-18 17:09 - 2014-02-18 17:09 - 00087704 _____ () C:\Windows\cadkasdeinst01.exe
2014-02-17 11:49 - 2014-02-17 11:49 - 00000000 ____D () C:\Users\Start\AppData\Local\#Bqb
2014-02-17 11:45 - 2014-02-17 11:45 - 00000000 ____D () C:\Users\Start\AppData\Local\IsolatedStorage
2014-02-17 11:09 - 2014-02-17 11:09 - 00001545 _____ () C:\Users\Public\Desktop\iTNC530 (606424).lnk
2014-02-17 11:06 - 2014-02-17 11:06 - 00000000 ____D () C:\Programme
2014-02-17 10:57 - 2014-02-16 18:07 - 00000000 ____D () C:\Users\Start\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DiskInternals
2014-02-17 10:33 - 2013-12-13 19:53 - 00000000 ____D () C:\Users\Start\AppData\Local\Microsoft Help
2014-02-17 10:22 - 2014-02-17 10:22 - 00000000 ____D () C:\Windows\Tasks\ImCleanDisabled
2014-02-17 09:22 - 2014-02-17 09:17 - 41640395 _____ (diakov.net) C:\Users\Start\Downloads\Advanced-SystemCare-PRO-v7.2.0.431-Final-RePack-by-D!akov---aktivovaný.exe
2014-02-17 09:07 - 2014-02-11 06:34 - 00000000 ____D () C:\Windows\Minidump
2014-02-17 06:20 - 2013-12-13 15:00 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-16 19:58 - 2013-12-13 14:59 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-02-16 19:49 - 2013-12-15 07:16 - 01748742 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 19:29 - 2014-02-13 15:18 - 00000000 ____D () C:\Program Files (x86)\Java
2014-02-16 19:00 - 2014-02-16 19:00 - 00000000 ____D () C:\ProgramData\Real
2014-02-16 12:11 - 2014-02-16 12:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 15:26 - 2014-01-10 11:56 - 00000000 ____D () C:\Program Files\Java
2014-02-13 15:25 - 2014-02-13 15:25 - 00000000 ____D () C:\ProgramData\Sun
2014-02-13 15:24 - 2014-02-13 15:24 - 00000000 ____D () C:\ProgramData\Oracle
2014-02-13 15:23 - 2014-02-13 15:24 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-02-13 15:23 - 2014-02-13 15:24 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AutoKMS.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\AutoKMSDaily.job => C:\Windows\AutoKMS.exe
Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: C:\Windows\Tasks\DriverToolkit Autorun.job => C:\Program Files (x86)\DriverToolkit\DriverToolkit.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Start\Desktop" je 13 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
c:\program files (x86)\common files\apple\apple application support\apsdaemon.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BCSSync
"c:\program files (x86)\microsoft office\office14\bcssync.exe" /delayservices [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Eps_Reg.exe
c:\users\start\appdata\local\temp\eps_reg.exe /l /nsmartcard2000 [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\eRecoveryService
c:\acer\empowering technology\erecovery\monitor.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
c:\program files (x86)\itunes\ituneshelper.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
c:\program files (x86)\samsung\kies\kies.exe /preload [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
c:\program files (x86)\samsung\kies\kiestrayagent.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
c:\program files (x86)\common files\java\java update\jusched.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Mobile Device Center
%windir%\windowsmobile\wmdc.exe [x]


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

svitovec píše:Eset je ofic.

Proc je tedy v logu zcela jasne patrny crack Myslite si ze je nectu nebo jak??

OK. Omlovám se. Odinstaluji.

Omlouvate se za co? Za to ze se tu ze me snazite delat vola?? My jsme tu zdarma a ve svem volnem case a toto je "odmena" pro nas? ze se tu z nas snazite delat hlupaky, nejsme tu prvni den a nejezdime tu na kolobezce ve tricku s napisem nazdar...