VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by uzivatel at 2014-03-21 16:16:29
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 206 GB (43%) free of 477 GB
Total RAM: 4044 MB (63% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:16:34, on 21.3.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v10.0 (10.00.9200.16798)
Boot mode: Normal

Running processes:
C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
C:\Program Files\trend micro\uzivatel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: CrossriderApp0051108 - {11111111-1111-1111-1111-110511111108} - C:\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bho.dll
O2 - BHO: WsSVRIEHelper - {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
O4 - HKLM\..\Run: [BrowserPlugInHelper] C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\Windows\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Freemake Improver - Freemake - C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7520 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
winlogon.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
atieclxx
"C:\Windows\system32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-24d0e969-ba85-4975-9239-02a80a487523 -SystemEventPortName:HostProcess-ab86a95a-3c19-4f47-8c84-97343dabb71c -IoCancelEventPortName:HostProcess-8f2875b5-baac-4968-a6e3-e39bb3759244 -NonStateChangingEventPortName:HostProcess-ac2a319c-db38-4f5f-855c-8389de6ac201 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:eae3832e-409a-4e2f-9d54-f91df16b436a
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"taskhost.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe"
"C:\Program Files\Synaptics\SynTP\SynTPEnh.exe"
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE"
szndesktop.exe default start
"C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "115610562316949968918485370151972618003-1488340569-2102401475-917610964-1049883335
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe"
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\Windows\system32\svchost.exe -k bthsvcs
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3988.132d6900.1386515818 "C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3988 "\\.\pipe\gecko-crash-server-pipe.3988" plugin
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --proxy-stub-channel=Flash2020.6513C768.10048 --host-broker-channel=Flash2020.6513C768.17084 --host-pid=2020 --host-npapi-version=27 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll"
"C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe" --channel=2684.003CF4A8.1822252249 --proxy-stub-channel=Flash2020.6513C768.10048 --plugin-path="C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll" --host-npapi-version=27 --type=renderer
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe2_ Global\UsGthrCtrlFltPipeMssGthrPipe2 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\SearchFilterHost.exe" 0 520 524 532 65536 528
"C:\Users\uzivatel\Desktop\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\Plus-HD-8.1-codedownloader.job
C:\Windows\tasks\Plus-HD-8.1-enabler.job
C:\Windows\tasks\Plus-HD-8.1-firefoxinstaller.job
C:\Windows\tasks\Plus-HD-8.1-updater.job
C:\Windows\tasks\WinThruster_DEFAULT.job
C:\Windows\tasks\WinThruster_UPDATES.job

=========Mozilla firefox=========

ProfilePath - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default

prefs.js - "browser.search.useDBForOrder" - "false"
prefs.js - "browser.startup.homepage" - "www.seznam.cz"
prefs.js - "keyword.URL" - "http://search.seznam.cz/?sourceid=Quicksearch_12454&q="

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.51.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll


[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 12.0.0.77 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll


C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\extensions\
8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com
{ea614400-e918-4741-9a97-7a972ff7c30b}

C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\searchplugins\
firmycz.xml
mapycz.xml
zbocz.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108}]
Plus-HD-8.1 - C:\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bho64.dll [2014-03-01 673792]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-13 1390368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108}]
Plus-HD-8.1 - C:\Program Files (x86)\Plus-HD-8.1\Plus-HD-8.1-bho.dll [2014-03-01 501760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF}]
Wondershare Video Converter Ultimate - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRIEPlugin.dll [2014-02-12 282000]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-03-11 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-02-13 1143168]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-03-11 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-02-13 1390368]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-02-13 1143168]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"SynTPEnh"=C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2011-10-14 2837288]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-08-09 167704]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-08-09 392472]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-08-09 416024]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"cz.seznam.software.autoupdate"=C:\Users\uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-02-13 3767096]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]
"Wondershare Helper Compact.exe"=C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2013-12-18 1980416]
"BrowserPlugInHelper"=C:\Program Files (x86)\Wondershare\Video Converter Ultimate\BrowserPlugInHelper.exe [2014-02-12 1962896]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-08-09 390144]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2014-03-21 16:16:29 ----D---- C:\rsit
2014-03-21 16:16:29 ----D---- C:\Program Files\trend micro
2014-03-20 11:23:26 ----D---- C:\1
2014-03-11 19:27:43 ----D---- C:\Program Files (x86)\Shedworx
2014-03-11 19:17:23 ----D---- C:\Users\uzivatel\AppData\Roaming\Wondershare Video Converter Ultimate
2014-03-11 19:17:22 ----D---- C:\Users\uzivatel\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-03-11 19:17:02 ----A---- C:\Windows\SYSWOW64\WSCM64.dll
2014-03-11 19:17:02 ----A---- C:\Windows\SYSWOW64\WSCM32.dll
2014-03-11 19:16:49 ----D---- C:\ProgramData\Wondershare Video Converter Ultimate
2014-03-11 19:16:45 ----D---- C:\Program Files (x86)\Wondershare
2014-03-11 19:06:51 ----D---- C:\Program Files (x86)\MC-TVConverter
2014-03-11 18:58:55 ----D---- C:\Users\uzivatel\AppData\Roaming\IsolatedStorage
2014-03-11 18:58:55 ----D---- C:\ProgramData\IsolatedStorage
2014-03-11 18:58:16 ----D---- C:\Program Files\FileViewPro
2014-03-11 18:58:09 ----D---- C:\Users\uzivatel\AppData\Roaming\Solvusoft
2014-03-11 18:58:07 ----A---- C:\Windows\system32\roboot64.exe
2014-03-11 18:58:05 ----D---- C:\Program Files (x86)\WinThruster
2014-03-11 18:57:19 ----D---- C:\Spacekace
2014-03-11 11:15:27 ----D---- C:\ProgramData\Oracle
2014-03-11 11:14:53 ----A---- C:\Windows\SYSWOW64\javaws.exe
2014-03-11 11:14:44 ----A---- C:\Windows\SYSWOW64\WindowsAccessBridge-32.dll
2014-03-10 17:45:21 ----A---- C:\Windows\system32\vbscript.dll
2014-03-10 17:45:20 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-03-10 17:44:41 ----A---- C:\Windows\SYSWOW64\d3d10warp.dll
2014-03-10 17:44:41 ----A---- C:\Windows\system32\d3d10warp.dll
2014-03-10 17:44:40 ----A---- C:\Windows\SYSWOW64\d2d1.dll
2014-03-10 17:44:40 ----A---- C:\Windows\system32\d2d1.dll
2014-03-10 17:43:03 ----A---- C:\Windows\system32\drivers\bthport.sys
2014-03-10 17:43:02 ----A---- C:\Windows\system32\drivers\BTHUSB.SYS
2014-03-10 11:23:09 ----D---- C:\Users\uzivatel\AppData\Roaming\OpenOffice
2014-03-10 11:16:33 ----D---- C:\Program Files (x86)\OpenOffice 4
2014-03-06 15:36:29 ----D---- C:\foto přebrat
2014-03-03 18:41:02 ----A---- C:\Windows\SYSWOW64\RegisterIEPKEYs.exe
2014-03-03 18:41:02 ----A---- C:\Windows\SYSWOW64\elshyph.dll
2014-03-03 18:41:02 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-03 18:41:02 ----A---- C:\Windows\system32\elshyph.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\wextract.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\webcheck.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\url.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\SetIEInstalledDate.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\pngfilt.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\occache.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\msls31.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\mshtmler.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\mshta.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\msfeedssync.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\msfeedsbs.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\licmgr10.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\jscript.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\inseng.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\imgutil.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iexpress.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iesysprep.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iepeers.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\ieapfltr.dat
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\IEAdvpack.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\icardie.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-03-03 18:41:01 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\wininet.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\wextract.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\webcheck.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\urlmon.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\url.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\SetIEInstalledDate.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\pngfilt.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\occache.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\msrating.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\msls31.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\mshtmlmedia.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\mshtmler.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\mshtmled.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\mshtml.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\mshta.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\msfeedssync.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\msfeedsbs.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\msfeeds.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\licmgr10.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\jsproxy.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\jscript9.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\jscript.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\inseng.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\imgutil.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iexpress.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ieui.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iesysprep.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iesetup.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iertutil.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iernonce.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iepeers.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ieframe.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\iedkcs32.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ieapfltr.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ieapfltr.dat
2014-03-03 18:41:01 ----A---- C:\Windows\system32\IEAdvpack.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\ie4uinit.exe
2014-03-03 18:41:01 ----A---- C:\Windows\system32\icardie.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\dxtrans.dll
2014-03-03 18:41:01 ----A---- C:\Windows\system32\dxtmsft.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\SYSWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33:22 ----AH---- C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\XpsPrint.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\XpsGdiConverter.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\WindowsCodecsExt.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\UIAnimation.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\msmpeg2vdec.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\dxgi.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\DWrite.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\d3d10level9.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\d3d10core.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\d3d10_1core.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\d3d10_1.dll
2014-03-03 18:33:22 ----A---- C:\Windows\SYSWOW64\d3d10.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\XpsPrint.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\XpsGdiConverter.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\WMPhoto.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\WindowsCodecsExt.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\WindowsCodecs.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\UIAnimation.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\msmpeg2vdec.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\FntCache.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\dxgi.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\DWrite.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\d3d10level9.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\d3d10core.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\d3d10_1core.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\d3d10_1.dll
2014-03-03 18:33:22 ----A---- C:\Windows\system32\d3d10.dll
2014-03-03 18:30:20 ----A---- C:\Windows\SYSWOW64\d3d11.dll
2014-03-03 18:30:20 ----A---- C:\Windows\system32\d3d11.dll
2014-03-03 18:15:16 ----A---- C:\Windows\system32\browserchoice.exe
2014-03-03 17:41:02 ----A---- C:\Windows\system32\drivers\fs_rec.sys
2014-03-03 17:41:01 ----A---- C:\Windows\SYSWOW64\wmi.dll
2014-03-03 17:41:01 ----A---- C:\Windows\system32\wmi.dll
2014-03-03 17:37:12 ----A---- C:\Windows\system32\msxml3.dll
2014-03-03 17:37:11 ----A---- C:\Windows\SYSWOW64\msxml3r.dll
2014-03-03 17:37:11 ----A---- C:\Windows\SYSWOW64\msxml3.dll
2014-03-03 17:37:10 ----A---- C:\Windows\system32\msxml3r.dll
2014-03-01 18:01:23 ----D---- C:\Program Files (x86)\Plus-HD-8.1
2014-02-26 04:04:22 ----D---- C:\ProgramData\Freemake
2014-02-26 04:04:06 ----D---- C:\Program Files (x86)\Freemake
2014-02-22 11:42:43 ----D---- C:\samsung

======List of files/folders modified in the last 1 month======

2014-03-21 16:16:34 ----D---- C:\Windows\Prefetch
2014-03-21 16:16:32 ----D---- C:\Windows\Temp
2014-03-21 16:16:29 ----RD---- C:\Program Files
2014-03-21 15:58:30 ----D---- C:\Windows\system32\config
2014-03-21 15:53:08 ----D---- C:\Users\uzivatel\AppData\Roaming\Seznam.cz
2014-03-21 15:52:34 ----D---- C:\Windows\System32
2014-03-21 15:52:34 ----D---- C:\Windows\inf
2014-03-21 15:52:34 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-03-21 15:50:29 ----D---- C:\Windows\system32\Tasks
2014-03-20 09:12:03 ----SHD---- C:\System Volume Information
2014-03-14 10:04:12 ----D---- C:\Windows\SysWOW64
2014-03-14 10:04:09 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2014-03-11 19:27:45 ----SHD---- C:\Windows\Installer
2014-03-11 19:27:43 ----RD---- C:\Program Files (x86)
2014-03-11 19:17:13 ----D---- C:\Program Files (x86)\Common Files
2014-03-11 19:16:49 ----HD---- C:\ProgramData
2014-03-11 18:58:18 ----D---- C:\Windows\Tasks
2014-03-11 11:14:33 ----A---- C:\Windows\SYSWOW64\javaw.exe
2014-03-11 11:14:33 ----A---- C:\Windows\SYSWOW64\java.exe
2014-03-11 11:14:30 ----D---- C:\Program Files (x86)\Java
2014-03-10 18:48:29 ----D---- C:\Windows\rescache
2014-03-10 18:16:22 ----D---- C:\Windows\system32\catroot2
2014-03-10 18:16:22 ----D---- C:\Windows\system32\catroot
2014-03-10 18:03:27 ----D---- C:\Windows\winsxs
2014-03-10 17:48:58 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-03-10 17:48:58 ----D---- C:\Windows\system32\cs-CZ
2014-03-10 17:48:57 ----D---- C:\Windows\system32\DriverStore
2014-03-10 17:48:56 ----D---- C:\Windows\system32\drivers
2014-03-10 11:17:21 ----RSD---- C:\Windows\assembly
2014-03-10 11:16:45 ----RSD---- C:\Windows\Fonts
2014-03-10 11:13:34 ----D---- C:\Program Files\Common Files\Microsoft Shared
2014-03-06 15:27:04 ----D---- C:\Windows\system32\drivers\UMDF
2014-03-03 20:30:42 ----D---- C:\Windows\Microsoft.NET
2014-03-03 20:15:07 ----D---- C:\Windows
2014-03-03 20:06:18 ----D---- C:\Program Files\Common Files\System
2014-03-03 20:06:17 ----D---- C:\Windows\ehome
2014-03-03 20:06:14 ----D---- C:\Program Files\Windows Defender
2014-03-03 20:06:14 ----D---- C:\Program Files\Internet Explorer
2014-03-03 20:06:14 ----D---- C:\Program Files (x86)\Windows Defender
2014-03-03 20:06:14 ----D---- C:\Program Files (x86)\Internet Explorer
2014-03-03 20:06:13 ----D---- C:\Windows\SYSWOW64\migration
2014-03-03 20:06:13 ----D---- C:\Windows\SYSWOW64\en-US
2014-03-03 20:06:12 ----D---- C:\Windows\system32\migration
2014-03-03 20:06:12 ----D---- C:\Windows\system32\en-US
2014-03-03 20:06:12 ----D---- C:\Windows\PolicyDefinitions
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\zh-TW
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\zh-HK
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\zh-CN
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\tr-TR
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\sv-SE
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\pt-PT
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\pt-BR
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\pl-PL
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\nl-NL
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\ko-KR
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\it-IT
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\hu-HU
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\fr-FR
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\fi-FI
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\es-ES
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\el-GR
2014-03-03 20:06:09 ----D---- C:\Windows\SYSWOW64\de-DE
2014-03-03 20:06:08 ----D---- C:\Windows\SYSWOW64\ru-RU
2014-03-03 20:06:08 ----D---- C:\Windows\SYSWOW64\nb-NO
2014-03-03 20:06:08 ----D---- C:\Windows\SYSWOW64\ja-JP
2014-03-03 20:06:08 ----D---- C:\Windows\SYSWOW64\da-DK
2014-03-03 20:06:08 ----D---- C:\Windows\system32\zh-HK
2014-03-03 20:06:08 ----D---- C:\Windows\system32\tr-TR
2014-03-03 20:06:08 ----D---- C:\Windows\system32\pt-PT
2014-03-03 20:06:08 ----D---- C:\Windows\system32\pt-BR
2014-03-03 20:06:08 ----D---- C:\Windows\system32\pl-PL
2014-03-03 20:06:08 ----D---- C:\Windows\system32\nl-NL
2014-03-03 20:06:08 ----D---- C:\Windows\system32\ko-KR
2014-03-03 20:06:08 ----D---- C:\Windows\system32\it-IT
2014-03-03 20:06:08 ----D---- C:\Windows\system32\hu-HU
2014-03-03 20:06:08 ----D---- C:\Windows\system32\fr-FR
2014-03-03 20:06:08 ----D---- C:\Windows\system32\fi-FI
2014-03-03 20:06:08 ----D---- C:\Windows\system32\el-GR
2014-03-03 20:06:07 ----D---- C:\Windows\system32\zh-TW
2014-03-03 20:06:07 ----D---- C:\Windows\system32\zh-CN
2014-03-03 20:06:07 ----D---- C:\Windows\system32\sv-SE
2014-03-03 20:06:07 ----D---- C:\Windows\system32\ru-RU
2014-03-03 20:06:07 ----D---- C:\Windows\system32\nb-NO
2014-03-03 20:06:07 ----D---- C:\Windows\system32\ja-JP
2014-03-03 20:06:07 ----D---- C:\Windows\system32\es-ES
2014-03-03 20:06:07 ----D---- C:\Windows\system32\de-DE
2014-03-03 20:06:07 ----D---- C:\Windows\system32\da-DK
2014-03-03 20:05:59 ----D---- C:\Windows\AppPatch
2014-03-03 20:05:57 ----D---- C:\Windows\system32\wbem
2014-03-03 20:05:40 ----D---- C:\Windows\system32\Boot
2014-03-03 20:05:39 ----D---- C:\Program Files\Windows Journal
2014-03-03 19:42:25 ----A---- C:\Windows\SYSWOW64\PerfStringBackup.INI
2014-03-03 19:35:20 ----D---- C:\Windows\system32\MRT
2014-03-03 19:33:37 ----A---- C:\Windows\system32\MRT.exe
2014-03-03 18:50:01 ----D---- C:\Windows\Logs
2014-03-01 17:36:20 ----SD---- C:\ProgramData\Microsoft

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-02-13 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-02-13 207904]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-21 213888]
R1 aswRdr;aswRdr; \??\C:\Windows\system32\drivers\aswRdr2.sys [2014-02-13 92544]
R1 aswSnx;aswSnx; \??\C:\Windows\system32\drivers\aswSnx.sys [2014-02-13 1038072]
R1 aswSP;aswSP; \??\C:\Windows\system32\drivers\aswSP.sys [2014-02-13 421704]
R1 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-21 514560]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2009-07-14 59904]
R2 aswMonFlt;aswMonFlt; \??\C:\Windows\system32\drivers\aswMonFlt.sys [2014-02-13 78648]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2011-08-18 9981952]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2011-08-17 310272]
R3 aswStm;aswStm; \??\C:\Windows\system32\drivers\aswStm.sys [2014-02-13 80184]
R3 bcbtums;Bluetooth RAM Firmware Download USB Filter; C:\Windows\system32\drivers\bcbtums.sys [2012-02-01 134696]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 intelkmd;intelkmd; C:\Windows\system32\DRIVERS\igdpmd64.sys [2011-08-09 12289472]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-10-19 56344]
R3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-06-10 539240]
R3 SmbDrvI;SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [2012-09-14 43832]
R3 SynTP;Synaptics TouchPad Driver; C:\Windows\system32\DRIVERS\SynTP.sys [2011-10-14 396848]
R3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-21 41984]
S3 AVerFx2hbtv64;AVerMedia USB SW Hybrid Tuner; C:\Windows\system32\drivers\AVerFx2hbtv64.sys [2009-06-10 292224]
S3 BCM43XX;Broadcom 802.11 Network Adapter Driver; C:\Windows\system32\DRIVERS\bcmwl664.sys [2011-07-01 4745280]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2011-04-28 552960]
S3 dmvsc;dmvsc; C:\Windows\system32\drivers\dmvsc.sys [2010-11-21 71168]
S3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-08-09 12289472]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-21 165888]
S3 RSPCIESTOR;Realtek PCIE CardReader Driver; C:\Windows\system32\DRIVERS\RtsPStor.sys [2011-09-02 339048]
S3 s3cap;s3cap; C:\Windows\system32\drivers\vms3cap.sys [2010-11-21 6656]
S3 sdbus;sdbus; C:\Windows\system32\DRIVERS\sdbus.sys [2010-11-21 109056]
S3 storvsc;storvsc; C:\Windows\system32\drivers\storvsc.sys [2010-11-21 34688]
S3 TsUsbFlt;TsUsbFlt; C:\Windows\system32\drivers\tsusbflt.sys [2010-11-21 59392]
S3 TsUsbGD;%TsUsbGD.DeviceDesc.Generic%; C:\Windows\system32\drivers\TsUsbGD.sys [2010-11-21 31232]
S3 vmbus;vmbus; C:\Windows\system32\drivers\vmbus.sys [2010-11-21 199552]
S3 VMBusHID;VMBusHID; C:\Windows\system32\drivers\VMBusHID.sys [2010-11-21 21760]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2009-07-14 17920]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2011-08-17 204288]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-02-13 50344]
R2 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Freemake Improver;Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [2014-02-25 108032]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14 257928]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;ASP.NET State Service; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 cphs;Intel(R) Content Protection HECI Service; C:\Windows\SysWow64\IntelCpHeciSvc.exe [2014-01-29 279000]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-02-13 118896]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]

-----------------EOF-----------------

info.txt logfile of random's system information tool 1.09 2014-03-21 16:16:36

======Uninstall list======

2.0.0-->"C:\Program Files (x86)\MC-TVConverter\unins000.exe"
Adobe Flash Player 12 ActiveX-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe -maintain activex
Adobe Flash Player 12 Plugin-->C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_12_0_0_77_Plugin.exe -maintain plugin
Adobe Reader X (10.1.9) - Czech-->MsiExec.exe /I{AC76BA86-7AD7-1029-7B44-AA1000000001}
Ashampoo Burning Studio 6 FREE v.6.80-->"C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 6 FREE\unins000.exe"
Ashampoo Burning Studio 6 FREE v.6.84-->"C:\Program Files (x86)\Ashampoo\Ashampoo Burning Studio 6 FREE\unins001.exe"
avast! Free Antivirus-->C:\Program Files\AVAST Software\Avast\Setup\Instup.exe /control_panel /instop:uninstall
FileViewPro-->"C:\Program Files\FileViewPro\unins000.exe"
Freemake Video Converter verze 4.1.3-->"C:\Program Files (x86)\Freemake\Freemake Video Converter\Uninstall\unins000.exe"
GIMP 2.8.6-->"C:\Program Files\GIMP 2\uninst\unins000.exe"
Intel(R) Processor Graphics-->C:\Program Files (x86)\Intel\Intel(R) Processor Graphics\Uninstall\setup.exe -uninstall
Java 7 Update 51-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83217051FF}
Java(TM) 6 Update 31-->MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216031FF}
K-Lite Mega Codec Pack 8.4.0-->"C:\Program Files (x86)\K-Lite Codec Pack\unins000.exe"
Microsoft .NET Framework 4 Client Profile-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\Setup.exe /repair /x86 /x64 /parameterfolder Client
Microsoft .NET Framework 4 Client Profile-->MsiExec.exe /X{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}
Microsoft .NET Framework 4 Extended-->C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\Setup.exe /repair /x86 /x64 /parameterfolder Extended
Microsoft .NET Framework 4 Extended-->MsiExec.exe /X{8E34682C-8118-31F1-BC4C-98CD9675E1C2}
Microsoft Office Excel Viewer-->MsiExec.exe /I{95120000-003F-0405-0000-0000000FF1CE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17-->MsiExec.exe /X{8220EEFE-38CD-377E-8595-13398D740ACE}
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161-->MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161-->MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}
Mozilla Firefox 27.0.1 (x86 cs)-->"C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe"
Mozilla Maintenance Service-->"C:\Program Files (x86)\Mozilla Maintenance Service\uninstall.exe"
OpenOffice 4.0.1-->MsiExec.exe /I{220C463A-2890-4C7F-B97C-C49FE175B849}
Plus-HD-8.1-->C:\Program Files (x86)\Plus-HD-8.1\Uninstall.exe /fromcontrolpanel=1
Security Update for Microsoft .NET Framework 4 Client Profile (KB2604121)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {6AF6C62E-4E3D-33BF-A591-9E4D53BDF22F} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2729449)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4736E989-32D9-3B91-90D7-C68848E118CA} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2736428)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2737019)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {F1696E2F-4803-362F-A756-65B363483FE6} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2742595)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2789642)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8E6848A1-B790-34FE-921A-A5319258E254} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2840628v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9D8496AE-4030-3E92-B44E-4F81051E6C85} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2858302v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2898855v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9F8B7E39-B469-36F4-AF7A-1E6FE5F394E2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Client Profile (KB2901110v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {9625A203-DB41-3055-971E-550DA3E825B2} /parameterfolder Client
Security Update for Microsoft .NET Framework 4 Extended (KB2487367)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {9D621E6E-E010-3C80-A055-135891134750} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2736428)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {BA941BCD-BC45-3D64-AB89-0F737907515C} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2742595)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {C8B8456C-6A12-3725-95A8-1C9FBE1E3141} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2858302v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {43B6E5D3-56A9-36C1-BD8B-9E1D6920FF11} /parameterfolder Extended
Security Update for Microsoft .NET Framework 4 Extended (KB2901110v2)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {9625A203-DB41-3055-971E-550DA3E825B2} /parameterfolder Extended
Smart Converter Pro-->MsiExec.exe /I{073C6D04-4F52-472B-B4ED-7A7E84D4405D}
Synaptics TouchPad Driver-->rundll32.exe "%ProgramFiles%\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
Total Commander 64-bit (Remove or Repair)-->c:\totalcmd\tcunin64.exe
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2600217)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2836939)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {8C286FD4-AB38-37A6-BC8A-6F16AFE9AB1F} /parameterfolder Client
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Client\setup.exe /uninstallpatch {EFD73366-C059-3D04-9848-59072A15DB53} /parameterfolder Client
Update for Microsoft .NET Framework 4 Extended (KB2468871)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {29C7BE97-DE59-37A2-A687-2ADD5321948A} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2533523)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {7D799A81-5661-3159-BF92-754161CED6E6} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2600217)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {4DFA8287-EA36-3469-99FE-F568FEC81653} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2836939)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {8C286FD4-AB38-37A6-BC8A-6F16AFE9AB1F} /parameterfolder Extended
Update for Microsoft .NET Framework 4 Extended (KB2836939v3)-->c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SetupCache\Extended\setup.exe /uninstallpatch {EFD73366-C059-3D04-9848-59072A15DB53} /parameterfolder Extended
WinThruster-->"C:\Program Files (x86)\WinThruster\unins000.exe" /silent
Wondershare Video Converter Ultimate(Build 6.8.0.2)-->"C:\Program Files (x86)\Wondershare\Video Converter Ultimate\unins000.exe"

======System event log======

Computer Name: WIN-35ASCSQ3L47
Event Code: 7040
Message: Režim spuštění služby Windows Search byl změněn z automatické spouštění na Zakázáno.
Record Number: 1595
Source Name: Service Control Manager
Time Written: 20140206101701.594102-000
Event Type: Informace
User: uzivatel-PC\Administrator

Computer Name: WIN-35ASCSQ3L47
Event Code: 7036
Message: Stav služby Funkčnost aplikací byl změněn na: Spuštěno
Record Number: 1594
Source Name: Service Control Manager
Time Written: 20140206101655.588092-000
Event Type: Informace
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 104
Message: Byl vymazán soubor protokolu Setup.
Record Number: 1593
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140206101656.383693-000
Event Type: Informace
User: uzivatel-PC\Administrator

Computer Name: WIN-35ASCSQ3L47
Event Code: 104
Message: Byl vymazán soubor protokolu Application.
Record Number: 1592
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140206101656.243293-000
Event Type: Informace
User: uzivatel-PC\Administrator

Computer Name: WIN-35ASCSQ3L47
Event Code: 104
Message: Byl vymazán soubor protokolu System.
Record Number: 1591
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140206101656.180893-000
Event Type: Informace
User: uzivatel-PC\Administrator

=====Application event log=====

Computer Name: WIN-35ASCSQ3L47
Event Code: 9009
Message: Správce oken plochy byl ukončen s kódem (0xc00002fe).
Record Number: 428
Source Name: Desktop Window Manager
Time Written: 20140206101706.000000-000
Event Type: Informace
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 6001
Message: Odběrateli oznámení přihlašování do systému Windows <GPClient> se nezdařilo provést událost oznámení.
Record Number: 427
Source Name: Microsoft-Windows-Winlogon
Time Written: 20140206101706.000000-000
Event Type: Upozornění
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 1003
Message: Služba Windows Search byla spuštěna.

Record Number: 426
Source Name: Microsoft-Windows-Search
Time Written: 20140206101703.000000-000
Event Type: Informace
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 1013
Message: Služba Windows Search byla řádně zastavena.

Record Number: 425
Source Name: Microsoft-Windows-Search
Time Written: 20140206101702.000000-000
Event Type: Informace
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 103
Message: Windows (1780) Windows: Databázový stroj zastavil instanci (0).
Record Number: 424
Source Name: ESENT
Time Written: 20140206101702.000000-000
Event Type: Informace
User:

=====Security event log=====

Computer Name: WIN-35ASCSQ3L47
Event Code: 1100
Message: Služba protokolování událostí byla ukončena.
Record Number: 226
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140206101706.523711-000
Event Type: Úspěšný audit
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 4672
Message: Novému přihlášení byla přiřazena zvláštní oprávnění.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7

Oprávnění: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 225
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140206101703.107305-000
Event Type: Úspěšný audit
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 4624
Message: Účet byl úspěšně přihlášen.

Předmět:
ID zabezpečení: S-1-5-18
Název účtu: WIN-35ASCSQ3L47$
Doména účtu: WORKGROUP
ID přihlášení: 0x3e7

Typ přihlášení: 5

Nové přihlášení:
ID zabezpečení: S-1-5-18
Název účtu: SYSTEM
Doména účtu: NT AUTHORITY
ID přihlášení: 0x3e7
GUID přihlášení: {00000000-0000-0000-0000-000000000000}

Informace o procesu:
ID procesu: 0x1c4
Název procesu: C:\Windows\System32\services.exe

Informace o síti:
Název pracovní stanice:
Adresa zdrojové sítě -
Zdrojový port: -

Podrobné informace o ověření:
Proces přihlášení: Advapi
Balíček ověření: Negotiate
Přenosové služby: -
Název balíčku (pouze NTLM): -
Délka klíče: 0

Tato událost je generována po vytvoření relace přihlášení. Je generována v počítači, ke kterému byl získán přístup.

Pole s předmětem označují účet v místním systému, který požadoval přihlášení. Jedná se nejčastěji o službu, například službu serveru nebo místní proces, například Winlogon.exe nebo Services.exe.

Pole Typ přihlášení označuje, k jakému typu přihlášení došlo. Nejběžnější typy jsou 2 (interaktivní) a 3 (síť).

Pole Nové přihlášení označují účet, pro který bylo nové přihlášení vytvořeno, tj. účet, který byl přihlášen.

Pole Síť označují původ požadavku na vzdálené přihlášení. Název pracovní stanice není vždy k dispozici a v některých případech může být toto pole prázdné.

Pole s informacemi o ověření poskytují podrobné informace o tomto konkrétním požadavku na přihlášení.
- GUID přihlášení je jednoznačný identifikátor, který je možné použít ke spojení této události s událostí KDC.
- Přenosové služby označují, které pomocné služby se podílely na tomto požadavku na přihlášení.
- Název balíčku označuje, který dílčí protokol z protokolů NTLM byl použit.
- Délka klíče označuje délku generovaného klíče relace. Tato hodnota bude 0, pokud nebyl požadován žádný klíč relace.
Record Number: 224
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140206101703.107305-000
Event Type: Úspěšný audit
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 4738
Message: Byl změněn uživatelský účet.

Předmět:
ID zabezpečení: S-1-5-21-1179131461-2123647519-3716675352-500
Název účtu: Administrator
Doména účtu: WIN-35ASCSQ3L47
ID přihlášení: 0x1d262

Cílový účet:
ID zabezpečení: S-1-5-21-1179131461-2123647519-3716675352-500
Název účtu: Administrator
Doména účtu: WIN-35ASCSQ3L47

Změněné atributy:
Název účtu SAM: -
Zobrazovaný název: -
Zaregistrovaný název uživatele: -
Domovský adresář: -
Domovská jednotka: -
Cesta skriptu: -
Cesta profilu: -
Pracovní stanice uživatele: -
Poslední nastavení hesla: -
Vypršení platnosti účtu: -
ID primární skupiny: -
Povolené delegování: -
Původní hodnota UAC: 0x211
Nová hodnota UAC: 0x211
Řízení účtu uživatele: -
Parametry uživatele: -
Historie identifikátoru zabezpečení: -
Přihlašovací hodiny: -

Další informace:
Oprávnění: -
Record Number: 223
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20140206101700.782901-000
Event Type: Úspěšný audit
User:

Computer Name: WIN-35ASCSQ3L47
Event Code: 1102
Message: Protokol auditu byl vymazán.
Předmět:
ID zabezpečení: S-1-5-21-1179131461-2123647519-3716675352-500
Název účtu: Administrator
Název domény: WIN-35ASCSQ3L47
ID přihlášení: 0x1d262
Record Number: 222
Source Name: Microsoft-Windows-Eventlog
Time Written: 20140206101656.305693-000
Event Type: Úspěšný audit
User:

======Environment variables======

"ComSpec"=%SystemRoot%\system32\cmd.exe
"FP_NO_HOST_CHECK"=NO
"OS"=Windows_NT
"Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
"PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC
"PROCESSOR_ARCHITECTURE"=AMD64
"TEMP"=%SystemRoot%\TEMP
"TMP"=%SystemRoot%\TEMP
"USERNAME"=SYSTEM
"windir"=%SystemRoot%
"PSModulePath"=%SystemRoot%\system32\WindowsPowerShell\v1.0\Modules\
"NUMBER_OF_PROCESSORS"=4
"PROCESSOR_LEVEL"=6
"PROCESSOR_IDENTIFIER"=Intel64 Family 6 Model 42 Stepping 7, GenuineIntel
"PROCESSOR_REVISION"=2a07
"windows_tracing_logfile"=C:\BVTBin\Tests\installpackage\csilogfile.log
"windows_tracing_flags"=3
"configsetroot"=%SystemRoot%\ConfigSetRoot

-----------------EOF-----------------

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

• Ulozte nejlepe na plochu
• Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
• Probehne vytvoreni zalohy a nasledne prohledavani
• Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x64
Ran by uzivatel on p  21.03.2014 at 16:31:07,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\browserpluginhelper



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{02DD8284-A49F-43E5-9D84-CF19DC9AD21D}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1663C10B-0D55-438D-8496-19A3DBAEC0E4}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{27DE7D30-BCCD-44D1-ADCB-A74A4259EBEF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{3A0EFC4E-F167-4D0E-9C24-FC5519237993}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{65DEE40A-3E93-4CAE-9F98-B8E06DCEE2BF}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{6E993643-8FBC-44FE-BC85-D318495C4D96}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A43DE495-3D00-47D4-9D2C-303115707939}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0051108.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0051108.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0051108.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0051108.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110511111108}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220522112208}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550555115508}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660566116608}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440544114408}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110511111108}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220522112208}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550555115508}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660566116608}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544114408}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0051108.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0051108.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0051108.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0051108.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550555115508}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660566116608}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440544114408}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110511111108}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_fat32-format[1]_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Tracing\SoftonicDownloader_for_fat32-format[1]_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{11111111-1111-1111-1111-110511111108}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550555115508}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660566116608}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440544114408}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_fat32-format[1]_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_fat32-format[1]_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{5D9F385F-B2C1-47F8-B933-96659993CF67}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{65DEE40A-3E93-4CAE-9F98-B8E06DCEE2BF}



~~~ Files

Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-8.1-codedownloader.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-8.1-enabler.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-8.1-firefoxinstaller.job
Successfully deleted: [File] C:\Windows\Tasks\Plus-HD-8.1-updater.job
Successfully deleted: [File] "C:\Windows\syswow64\wscm32.dll"
Successfully deleted: [File] "C:\Windows\syswow64\wscm64.dll"



~~~ Folders



~~~ FireFox

Successfully deleted the following from C:\Users\uzivatel\AppData\Roaming\mozilla\firefox\profiles\hdw5gtoa.default\prefs.js

user_pref("extensions.crossrider.bic", "14488a7bc05a95b27f06d412a44a8008");
user_pref("keyword.URL", "hxxp://search.seznam.cz/?sourceid=Quicksearch_12454&q=");
Emptied folder: C:\Users\uzivatel\AppData\Roaming\mozilla\firefox\profiles\hdw5gtoa.default\minidumps [6 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  21.03.2014 at 16:37:58,82
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.022 - Report created 21/03/2014 at 16:41:06
# Updated 13/03/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : uzivatel - UZIVATEL-PC
# Running from : C:\Users\uzivatel\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\Plus-HD-8.1
Folder Deleted : C:\Users\uzivatel\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com
File Deleted : C:\Users\Public\Desktop\WinThruster.lnk
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Windows\System32\Tasks\WinThruster
File Deleted : C:\Windows\Tasks\WinThruster_DEFAULT.job
File Deleted : C:\Windows\System32\Tasks\WinThruster_DEFAULT
File Deleted : C:\Windows\Tasks\WinThruster_UPDATES.job
File Deleted : C:\Windows\System32\Tasks\WinThruster_UPDATES

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99706eb4-315e-42b5-a4cc-f4604178eb0c}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c5470eea-58b9-4fd3-9c0e-176956fa8110}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99706eb4-315e-42b5-a4cc-f4604178eb0c}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c5470eea-58b9-4fd3-9c0e-176956fa8110}
Key Deleted : HKCU\Software\Solvusoft
Key Deleted : HKCU\Software\AppDataLow\Software\Plus-HD-8.1
Key Deleted : HKLM\Software\Solvusoft
Key Deleted : HKLM\Software\Plus-HD-8.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinThruster_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-8.1

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16798


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\prefs.js ]

Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationThankYouPage", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationTime", 1393693278);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet_FF25_FIX", true[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.active", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbar", "NA");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbarenhanced", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.backgroundver", 1);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.certdomaininstaller", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.changeprevious", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.value", "%221393693278%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001147%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.jw_token.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.jw_token.value", "%223087f048-3010-3756-10c5-8c550663cb98%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.description", "Turn YouTube videos to High Definition by default");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.domain", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.enablesearch", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.homepage", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.iframe", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%2249D9272F2DA54D8EB253510FDACAD[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001147%22%2C%22sub_id%22%3A%220%22%2C%[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001147%22%2C%22sub_id%22%3A%220%2[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%2249D9272F2DA54D8EB253[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.value", "43");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.value", "1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.expiration", "Fri Mar 21 2014 22:05:34 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.value", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.value", "%22ff%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%2249D9272F[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.value", "null");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.expiration", "Sat Mar 22 2014 04:30:19 GMT+[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//thisisudax.org/downloa[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastDailyReport", "1395414334310");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastUpdate", "1395414334531");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.manifesturl", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.name", "Plus-HD-8.1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.newtab", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.opensearch", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/51108/plugins/094/ff/plugins.json");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsversion", 40);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.publisher", "Plus HD");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.searchstatus", 0);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.setnewtab", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.thankyou", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.updateinterval", 360);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.ver", 43);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.FilesValidatorDueTime", "1395414392768");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.apps", "51108");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.bic", "14488a7bc05a95b27f06d412a44a8008");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.cid", 51108);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.firstrun", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.hadappinstalled", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.installationdate", 1393862098);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.modetype", "production");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.reportInstall", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.statsDailyCounter", 13);

*************************

AdwCleaner[R0].txt - [17301 octets] - [21/03/2014 16:39:21]
AdwCleaner[S0].txt - [16388 octets] - [21/03/2014 16:41:06]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [16449 octets] ##########

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  emptyclsid;
  iedefaults;
  FFdefaults;
  CHRdefaults;
  emptyalltemp;
  resethosts;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by uzivatel on ne 23.03.2014 at 9:39:31,97.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\uzivatel\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

23.3.2014 9:41:35 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110511111108} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\prefs.js:
user_pref("browser.startup.homepage", "www.seznam.cz");
user_pref("browser.search.defaultenginename", "Seznam");
user_pref("browser.search.selectedEngine", "Seznam");
user_pref("browser.search.useDBForOrder", "false");

Added to C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_23.03.2014_0949_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~2\Mozilla Firefox\defaults\preferences\pref.js deleted
C:\PROGRA~2\WinThruster deleted
C:\PROGRA~2\Wondershare deleted
C:\Users\uzivatel\AppData\Local\Wondershare deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinThruster deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare deleted
"C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll" deleted
"C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll" deleted
"C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact\WSHelper.exe" deleted
"C:\PROGRA~2\COMMON~1\Wondershare" deleted
"C:\PROGRA~2\COMMON~1\Wondershare\Wondershare Helper Compact" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}"="C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt" []
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}"="C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRFirefoxExt" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default
- Seznam litika - %ProfilePath%\extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
chgdeabpmphfhkoemjjglmilajldekbp - C:\Program Files (x86)\Wondershare\Video Converter Ultimate\SVRChromePlugin.crx[]
jbolfgndggfhhpbnkgnpjkfhinclbigj - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Chrome\Freemake.Plugin.Chrome.crx[03.02.2014 12:46]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=12454"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/?clid=12454"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{005DC5FE-526D-4DD5-BBAB-B571C92EF656} Encyklopedie Seznam Url="http://encyklopedie.seznam.cz/search?q= ... arch_12454"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{448244BE-C91D-4674-A643-93F2279C2DE5} Seznam TV Program Url="http://tv.seznam.cz/hledej?w={searchTer ... arch_12454"
{5434CA23-B6EE-4DBB-9436-81629B171C6B} Novinky.cz Url="http://www.novinky.cz/hledej?w={searchT ... arch_12454"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"
{97FF3DDF-1040-4D48-AF92-366729F262D9} Mapy.cz Url="http://www.mapy.cz/?query={searchTerms} ... arch_12454"
{99CC6ED6-0612-4BEE-A0A4-F87E9F1ED2CE} Zbo§ˇ.cz Url="http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454"
{CA61B324-EEDB-4B2B-BB27-31C1760949A1} Slovnˇk EN/CZ Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"
{F49027AC-C844-48E9-9B68-05DE04E92FF2} Firmy.cz Url="http://www.firmy.cz/?q={searchTerms}&so ... arch_12454"
{FCFD227E-89A9-4541-991D-D2FB17483835} Slovnˇk CZ/EN Url="http://slovnik.seznam.cz/?q={searchTerm ... arch_12454"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-1179131461-2123647519-3716675352-1001\Software\Mozilla\Firefox\Extensions\{8D150B8F-EFE8-45a3-A4A3-053020F48FAC} deleted successfully
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\{8D150B8F-EFE8-45a3-A4A3-053020F48FAC} deleted successfully

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Google\Chrome\Extensions\chgdeabpmphfhkoemjjglmilajldekbp deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\uzivatel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\uzivatel\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\uzivatel\AppData\Local\Mozilla\Firefox\Profiles\hdw5gtoa.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=852 folders=70 195991491 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\uzivatel\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\uzivatel\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on ne 23.03.2014 at 10:04:30,91 ======================

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by uzivatel (administrator) on UZIVATEL-PC on 23-03-2014 11:25:36
Running from C:\Users\uzivatel\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Synaptics Incorporated) C:\PROGRAM FILES\SYNAPTICS\SYNTP\SYNTPHELPER.EXE
(Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
() C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2837288 2011-10-14] (Synaptics Incorporated)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [AvastUI.exe] - C:\Program Files\AVAST Software\Avast\AvastUI.exe [3767096 2014-02-13] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.autoupdate] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.szndesktop] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12454
SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {005DC5FE-526D-4DD5-BBAB-B571C92EF656} URL = http://encyklopedie.seznam.cz/search?q= ... arch_12454
SearchScopes: HKCU - {448244BE-C91D-4674-A643-93F2279C2DE5} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_12454
SearchScopes: HKCU - {5434CA23-B6EE-4DBB-9436-81629B171C6B} URL = http://www.novinky.cz/hledej?w={searchT ... arch_12454
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {97FF3DDF-1040-4D48-AF92-366729F262D9} URL = http://www.mapy.cz/?query={searchTerms} ... arch_12454
SearchScopes: HKCU - {99CC6ED6-0612-4BEE-A0A4-F87E9F1ED2CE} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_12454
SearchScopes: HKCU - {CA61B324-EEDB-4B2B-BB27-31C1760949A1} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
SearchScopes: HKCU - {F49027AC-C844-48E9-9B68-05DE04E92FF2} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_12454
SearchScopes: HKCU - {FCFD227E-89A9-4541-991D-D2FB17483835} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_12454
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.2

FireFox:
========
FF ProfilePath: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\searchplugins\mapycz.xml
FF SearchPlugin: C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\searchplugins\zbocz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Users\uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\hdw5gtoa.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-02-20]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-02-13]
FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

==================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-02-13] (AVAST Software)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [108032 2014-02-25] (Freemake)

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2014-02-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2014-02-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-02-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1038072 2014-02-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [421704 2014-02-13] (AVAST Software)
S3 aswStm; C:\Windows\system32\drivers\aswStm.sys [80184 2014-02-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2014-02-13] ()
S3 AVerFx2hbtv64; C:\Windows\System32\drivers\AVerFx2hbtv64.sys [292224 2009-06-10] (AVerMedia TECHNOLOGIES, Inc.)
R3 bcbtums; C:\Windows\System32\drivers\bcbtums.sys [134696 2012-02-01] (Broadcom Corporation.)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [43832 2012-09-14] (Synaptics Incorporated)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-23 11:25 - 2014-03-23 11:25 - 00009335 _____ () C:\Users\uzivatel\Desktop\FRST.txt
2014-03-23 11:25 - 2014-03-23 11:25 - 00000000 ____D () C:\FRST
2014-03-23 11:25 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-03-23 11:25 - 2014-03-23 11:23 - 02157056 _____ (Farbar) C:\Users\uzivatel\Desktop\FRST64.exe
2014-03-23 11:24 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Downloads\FRSTLauncher.exe
2014-03-23 11:23 - 2014-03-23 11:23 - 02157056 _____ (Farbar) C:\Users\uzivatel\Downloads\FRST64.exe
2014-03-23 09:52 - 2014-03-23 09:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-23 09:41 - 2014-03-23 10:04 - 00010385 _____ () C:\zoek-results.log
2014-03-23 09:40 - 2014-03-23 09:40 - 04235514 _____ () C:\Users\uzivatel\Downloads\zoek(1).rar
2014-03-23 09:39 - 2014-03-23 09:49 - 00000000 ____D () C:\zoek_backup
2014-03-23 09:39 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Desktop\zoek.exe
2014-03-23 09:38 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Downloads\zoek.exe
2014-03-22 19:32 - 2014-03-22 19:32 - 04231342 _____ () C:\Users\uzivatel\Downloads\zoek.rar
2014-03-22 19:31 - 2014-03-22 19:31 - 04093586 _____ () C:\Users\uzivatel\Downloads\zoek.zip
2014-03-22 19:20 - 2014-03-22 19:23 - 00000000 ____D () C:\2
2014-03-21 16:39 - 2014-03-21 16:41 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:37 - 2014-03-21 16:37 - 00006527 _____ () C:\Users\uzivatel\Desktop\JRT.txt
2014-03-21 16:31 - 2014-03-21 16:31 - 00000000 ____D () C:\Windows\ERUNT
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Downloads\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Desktop\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Downloads\JRT.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Desktop\JRT.exe
2014-03-21 16:16 - 2014-03-21 16:16 - 00000000 ____D () C:\rsit
2014-03-21 16:16 - 2014-03-21 16:16 - 00000000 ____D () C:\Program Files\trend micro
2014-03-21 16:15 - 2014-03-21 16:15 - 00935175 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
2014-03-21 16:15 - 2014-03-21 16:15 - 00935175 _____ () C:\Users\uzivatel\Desktop\RSITx64.exe
2014-03-20 11:23 - 2014-03-21 17:52 - 00000000 ____D () C:\1
2014-03-18 16:30 - 2014-03-18 16:30 - 00054784 _____ () C:\Users\uzivatel\Downloads\směny duben.xls
2014-03-14 09:57 - 2014-03-14 09:57 - 01071000 _____ (Solid State Networks) C:\Users\uzivatel\Downloads\install_flashplayer12x32_mssa_aaa_aih.exe
2014-03-12 17:41 - 2014-03-12 17:41 - 00863372 _____ () C:\Users\uzivatel\Downloads\mp4MetadataMover0.9.zip
2014-03-12 17:41 - 2014-03-12 17:41 - 00000000 ____D () C:\Users\uzivatel\Downloads\mp4MetadataMover0.9
2014-03-11 19:31 - 2014-03-11 19:32 - 27813838 _____ () C:\Users\uzivatel\Downloads\DVRMSToolbox1225.zip
2014-03-11 19:30 - 2014-03-11 19:30 - 00225056 _____ (Fusion Install ) C:\Users\uzivatel\Downloads\Setup.exe
2014-03-11 19:28 - 2014-03-11 19:28 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\Systemic
2014-03-11 19:27 - 2014-03-11 19:27 - 00002787 _____ () C:\Users\Public\Desktop\Smart Converter Pro.lnk
2014-03-11 19:27 - 2014-03-11 19:27 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\ShedWorx
2014-03-11 19:27 - 2014-03-11 19:27 - 00000000 ____D () C:\Program Files (x86)\Shedworx
2014-03-11 19:26 - 2014-03-11 19:26 - 34332528 _____ (Shedworx) C:\Users\uzivatel\Downloads\SmartConverterPro_setup.exe
2014-03-11 19:17 - 2014-03-11 19:17 - 00001471 _____ () C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\Documents\Wondershare Video Converter Ultimate
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Wondershare Video Converter Ultimate
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-03-11 19:16 - 2014-03-13 13:18 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-03-11 19:16 - 2014-03-11 19:16 - 00745248 _____ (Wondershare) C:\Users\uzivatel\Downloads\video-converter-ultimate_setup_full495.exe
2014-03-11 19:16 - 2014-03-11 19:16 - 00000000 ____D () C:\Users\Public\Documents\Wondershare
2014-03-11 19:06 - 2014-03-11 19:08 - 00000000 ____D () C:\Program Files (x86)\MC-TVConverter
2014-03-11 19:06 - 2014-03-11 19:06 - 22013693 _____ (Christian Koban ) C:\Users\uzivatel\Downloads\MC-TVConverter_2.0.0_setup.exe
2014-03-11 18:59 - 2014-03-11 18:59 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\FileViewPro
2014-03-11 18:58 - 2014-03-17 12:31 - 00000899 _____ () C:\Users\Public\Desktop\FileViewPro.lnk
2014-03-11 18:58 - 2014-03-11 19:04 - 00000000 ____D () C:\Program Files\FileViewPro
2014-03-11 18:58 - 2014-03-11 18:58 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\IsolatedStorage
2014-03-11 18:58 - 2014-03-11 18:58 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-03-11 18:57 - 2014-03-11 18:57 - 02388400 _____ () C:\Users\uzivatel\Downloads\FileViewPro_2014.exe
2014-03-11 18:57 - 2014-03-11 18:57 - 00000000 ____D () C:\Spacekace
2014-03-11 11:15 - 2014-03-11 11:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-11 11:14 - 2014-03-11 11:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-11 11:14 - 2014-03-11 11:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-11 11:13 - 2014-03-11 11:13 - 00921000 _____ (Oracle Corporation) C:\Users\uzivatel\Downloads\jxpiinstall.exe
2014-03-10 17:45 - 2013-12-21 10:39 - 00600064 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-03-10 17:45 - 2013-12-21 08:56 - 00523776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-03-10 17:44 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-03-10 17:44 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-03-10 17:44 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-03-10 17:44 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-03-10 17:43 - 2011-04-28 04:55 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys
2014-03-10 17:43 - 2011-04-28 04:54 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\BTHUSB.SYS
2014-03-10 13:47 - 2014-03-11 13:57 - 00077788 _____ () C:\SEZNAM.xml
2014-03-10 11:24 - 2014-03-10 11:24 - 00002266 _____ () C:\Users\uzivatel\Documents\Nová databáze.odb
2014-03-10 11:23 - 2014-03-10 11:23 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\OpenOffice
2014-03-10 11:17 - 2014-03-10 11:17 - 00001100 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-10 11:16 - 2014-03-10 11:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-10 11:12 - 2014-03-10 11:12 - 00000000 ____D () C:\Users\uzivatel\Desktop\OpenOffice 4.0.1 (cs) Installation Files
2014-03-10 11:11 - 2014-03-10 11:12 - 130785256 _____ () C:\Users\uzivatel\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_cs.exe
2014-03-06 15:36 - 2014-03-06 15:36 - 00000000 ____D () C:\foto přebrat
2014-03-06 15:27 - 2014-03-06 15:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-03 18:41 - 2014-03-03 18:41 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-03 18:41 - 2014-03-03 18:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-03 18:41 - 2014-03-03 18:41 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-03 18:41 - 2014-03-03 18:41 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-03 18:41 - 2014-03-03 18:41 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-03 18:41 - 2014-03-03 18:41 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-03 18:41 - 2014-03-03 18:41 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-03 18:41 - 2014-03-03 18:41 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-03 18:41 - 2014-03-03 18:41 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-03 18:41 - 2014-03-03 18:41 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-03 18:41 - 2014-03-03 18:41 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-03 18:33 - 2014-03-03 18:33 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:30 - 2014-03-03 18:30 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-03 18:30 - 2014-03-03 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-03 18:29 - 2014-03-03 18:50 - 00014450 _____ () C:\Windows\IE10_main.log
2014-03-03 18:15 - 2010-02-23 09:16 - 00294912 _____ (Microsoft Corporation) C:\Windows\system32\browserchoice.exe
2014-03-03 18:10 - 2014-03-03 18:13 - 00003987 _____ () C:\Windows\IE9_main.log
2014-03-03 17:41 - 2012-03-01 07:46 - 00023408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fs_rec.sys
2014-03-03 17:41 - 2012-03-01 07:28 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\wmi.dll
2014-03-03 17:41 - 2012-03-01 06:29 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2014-03-03 17:37 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-03-03 17:37 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-03-03 17:37 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-03-03 17:37 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-03-01 18:00 - 2014-03-01 18:00 - 00073728 _____ ( ) C:\Users\uzivatel\Desktop\guiformat.exe
2014-02-26 04:04 - 2014-02-26 04:04 - 00001331 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\Documents\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\FreemakeVideoConverter
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\ProgramData\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Program Files (x86)\Freemake
2014-02-22 11:42 - 2014-03-01 14:04 - 00000000 ____D () C:\samsung

==================== One Month Modified Files and Folders =======

2014-03-23 11:25 - 2014-03-23 11:25 - 00009335 _____ () C:\Users\uzivatel\Desktop\FRST.txt
2014-03-23 11:25 - 2014-03-23 11:25 - 00000000 ____D () C:\FRST
2014-03-23 11:24 - 2014-03-23 11:25 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-03-23 11:24 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Downloads\FRSTLauncher.exe
2014-03-23 11:23 - 2014-03-23 11:25 - 02157056 _____ (Farbar) C:\Users\uzivatel\Desktop\FRST64.exe
2014-03-23 11:23 - 2014-03-23 11:23 - 02157056 _____ (Farbar) C:\Users\uzivatel\Downloads\FRST64.exe
2014-03-23 11:22 - 2009-07-14 05:45 - 00021696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-23 11:22 - 2009-07-14 05:45 - 00021696 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-23 11:19 - 2014-02-10 13:05 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Seznam.cz
2014-03-23 11:19 - 2011-04-12 09:34 - 00666444 _____ () C:\Windows\system32\perfh005.dat
2014-03-23 11:19 - 2011-04-12 09:34 - 00140108 _____ () C:\Windows\system32\perfc005.dat
2014-03-23 11:19 - 2009-07-14 06:13 - 01576554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-23 11:18 - 2014-02-06 09:28 - 02060806 _____ () C:\Windows\WindowsUpdate.log
2014-03-23 11:14 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-23 11:14 - 2009-07-14 05:51 - 00051419 _____ () C:\Windows\setupact.log
2014-03-23 10:04 - 2014-03-23 09:41 - 00010385 _____ () C:\zoek-results.log
2014-03-23 10:04 - 2010-11-21 04:47 - 00006604 _____ () C:\Windows\PFRO.log
2014-03-23 09:49 - 2014-03-23 09:39 - 00000000 ____D () C:\zoek_backup
2014-03-23 09:40 - 2014-03-23 09:40 - 04235514 _____ () C:\Users\uzivatel\Downloads\zoek(1).rar
2014-03-23 09:39 - 2014-03-23 09:52 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-23 09:38 - 2014-03-23 09:39 - 01285120 _____ () C:\Users\uzivatel\Desktop\zoek.exe
2014-03-23 09:38 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Downloads\zoek.exe
2014-03-22 23:04 - 2014-02-18 10:17 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-22 19:37 - 2014-02-13 10:21 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-03-22 19:32 - 2014-03-22 19:32 - 04231342 _____ () C:\Users\uzivatel\Downloads\zoek.rar
2014-03-22 19:31 - 2014-03-22 19:31 - 04093586 _____ () C:\Users\uzivatel\Downloads\zoek.zip
2014-03-22 19:23 - 2014-03-22 19:20 - 00000000 ____D () C:\2
2014-03-21 17:52 - 2014-03-20 11:23 - 00000000 ____D () C:\1
2014-03-21 16:41 - 2014-03-21 16:39 - 00000000 ____D () C:\AdwCleaner
2014-03-21 16:37 - 2014-03-21 16:37 - 00006527 _____ () C:\Users\uzivatel\Desktop\JRT.txt
2014-03-21 16:31 - 2014-03-21 16:31 - 00000000 ____D () C:\Windows\ERUNT
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Downloads\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Desktop\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Downloads\JRT.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Desktop\JRT.exe
2014-03-21 16:16 - 2014-03-21 16:16 - 00000000 ____D () C:\rsit
2014-03-21 16:16 - 2014-03-21 16:16 - 00000000 ____D () C:\Program Files\trend micro
2014-03-21 16:15 - 2014-03-21 16:15 - 00935175 _____ () C:\Users\uzivatel\Downloads\RSITx64.exe
2014-03-21 16:15 - 2014-03-21 16:15 - 00935175 _____ () C:\Users\uzivatel\Desktop\RSITx64.exe
2014-03-18 16:30 - 2014-03-18 16:30 - 00054784 _____ () C:\Users\uzivatel\Downloads\směny duben.xls
2014-03-17 12:31 - 2014-03-11 18:58 - 00000899 _____ () C:\Users\Public\Desktop\FileViewPro.lnk
2014-03-17 12:31 - 2014-02-13 10:22 - 00002017 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-03-14 10:04 - 2014-02-18 10:17 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-14 10:04 - 2014-02-18 10:17 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-14 10:04 - 2012-05-25 15:09 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-14 09:57 - 2014-03-14 09:57 - 01071000 _____ (Solid State Networks) C:\Users\uzivatel\Downloads\install_flashplayer12x32_mssa_aaa_aih.exe
2014-03-13 13:18 - 2014-03-11 19:16 - 00000000 ____D () C:\ProgramData\Wondershare Video Converter Ultimate
2014-03-12 17:41 - 2014-03-12 17:41 - 00863372 _____ () C:\Users\uzivatel\Downloads\mp4MetadataMover0.9.zip
2014-03-12 17:41 - 2014-03-12 17:41 - 00000000 ____D () C:\Users\uzivatel\Downloads\mp4MetadataMover0.9
2014-03-11 19:32 - 2014-03-11 19:31 - 27813838 _____ () C:\Users\uzivatel\Downloads\DVRMSToolbox1225.zip
2014-03-11 19:30 - 2014-03-11 19:30 - 00225056 _____ (Fusion Install ) C:\Users\uzivatel\Downloads\Setup.exe
2014-03-11 19:28 - 2014-03-11 19:28 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\Systemic
2014-03-11 19:27 - 2014-03-11 19:27 - 00002787 _____ () C:\Users\Public\Desktop\Smart Converter Pro.lnk
2014-03-11 19:27 - 2014-03-11 19:27 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\ShedWorx
2014-03-11 19:27 - 2014-03-11 19:27 - 00000000 ____D () C:\Program Files (x86)\Shedworx
2014-03-11 19:26 - 2014-03-11 19:26 - 34332528 _____ (Shedworx) C:\Users\uzivatel\Downloads\SmartConverterPro_setup.exe
2014-03-11 19:17 - 2014-03-11 19:17 - 00001471 _____ () C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\Documents\Wondershare Video Converter Ultimate
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Wondershare Video Converter Ultimate
2014-03-11 19:17 - 2014-03-11 19:17 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\{950EB46C-6AC7-4ACC-AB36-9A6A77C08B6A}
2014-03-11 19:16 - 2014-03-11 19:16 - 00745248 _____ (Wondershare) C:\Users\uzivatel\Downloads\video-converter-ultimate_setup_full495.exe
2014-03-11 19:16 - 2014-03-11 19:16 - 00000000 ____D () C:\Users\Public\Documents\Wondershare
2014-03-11 19:08 - 2014-03-11 19:06 - 00000000 ____D () C:\Program Files (x86)\MC-TVConverter
2014-03-11 19:06 - 2014-03-11 19:06 - 22013693 _____ (Christian Koban ) C:\Users\uzivatel\Downloads\MC-TVConverter_2.0.0_setup.exe
2014-03-11 19:04 - 2014-03-11 18:58 - 00000000 ____D () C:\Program Files\FileViewPro
2014-03-11 18:59 - 2014-03-11 18:59 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\FileViewPro
2014-03-11 18:58 - 2014-03-11 18:58 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\IsolatedStorage
2014-03-11 18:58 - 2014-03-11 18:58 - 00000000 ____D () C:\ProgramData\IsolatedStorage
2014-03-11 18:57 - 2014-03-11 18:57 - 02388400 _____ () C:\Users\uzivatel\Downloads\FileViewPro_2014.exe
2014-03-11 18:57 - 2014-03-11 18:57 - 00000000 ____D () C:\Spacekace
2014-03-11 13:57 - 2014-03-10 13:47 - 00077788 _____ () C:\SEZNAM.xml
2014-03-11 11:15 - 2014-03-11 11:15 - 00000000 ____D () C:\ProgramData\Oracle
2014-03-11 11:14 - 2014-03-11 11:14 - 00264616 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-03-11 11:14 - 2014-03-11 11:14 - 00096168 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-03-11 11:14 - 2012-05-25 15:09 - 00175016 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-03-11 11:14 - 2012-05-25 15:09 - 00174504 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-03-11 11:14 - 2012-05-25 15:09 - 00000000 ____D () C:\Program Files (x86)\Java
2014-03-11 11:13 - 2014-03-11 11:13 - 00921000 _____ (Oracle Corporation) C:\Users\uzivatel\Downloads\jxpiinstall.exe
2014-03-10 18:48 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-03-10 17:54 - 2014-02-06 14:33 - 00063568 _____ () C:\Users\uzivatel\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-10 16:41 - 2009-07-14 05:45 - 00292832 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-10 11:24 - 2014-03-10 11:24 - 00002266 _____ () C:\Users\uzivatel\Documents\Nová databáze.odb
2014-03-10 11:23 - 2014-03-10 11:23 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\OpenOffice
2014-03-10 11:17 - 2014-03-10 11:17 - 00001100 _____ () C:\Users\Public\Desktop\OpenOffice 4.0.1.lnk
2014-03-10 11:16 - 2014-03-10 11:16 - 00000000 ____D () C:\Program Files (x86)\OpenOffice 4
2014-03-10 11:13 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-03-10 11:12 - 2014-03-10 11:12 - 00000000 ____D () C:\Users\uzivatel\Desktop\OpenOffice 4.0.1 (cs) Installation Files
2014-03-10 11:12 - 2014-03-10 11:11 - 130785256 _____ () C:\Users\uzivatel\Downloads\Apache_OpenOffice_4.0.1_Win_x86_install_cs.exe
2014-03-06 15:36 - 2014-03-06 15:36 - 00000000 ____D () C:\foto přebrat
2014-03-06 15:27 - 2014-03-06 15:27 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-03-03 20:15 - 2014-02-06 11:43 - 00001404 _____ () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-03 20:15 - 2014-02-06 11:43 - 00000000 ___RD () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-03 20:15 - 2014-02-06 11:43 - 00000000 ___RD () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-03-03 20:06 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files\Windows Defender
2014-03-03 20:06 - 2009-07-14 06:32 - 00000000 ____D () C:\Program Files (x86)\Windows Defender
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\zh-HK
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\tr-TR
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\zh-HK
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\tr-TR
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-03-03 20:06 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2014-03-03 20:05 - 2011-04-12 09:45 - 00000000 ____D () C:\Program Files\Windows Journal
2014-03-03 19:42 - 2012-05-25 15:14 - 01555776 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-03-03 19:35 - 2014-02-06 11:13 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-03 19:33 - 2014-02-06 11:13 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-03 18:50 - 2014-03-03 18:29 - 00014450 _____ () C:\Windows\IE10_main.log
2014-03-03 18:41 - 2014-03-03 18:41 - 19274240 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 15403520 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 14359040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 13760512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 03960320 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-03 18:41 - 2014-03-03 18:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-03 18:41 - 2014-03-03 18:41 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01509376 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-03 18:41 - 2014-03-03 18:41 - 01441280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-03 18:41 - 2014-03-03 18:41 - 01400416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dat
2014-03-03 18:41 - 2014-03-03 18:41 - 01400416 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2014-03-03 18:41 - 2014-03-03 18:41 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 01054720 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00905728 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00762368 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00719360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00629248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00441856 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2014-03-03 18:41 - 2014-03-03 18:41 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00361984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2014-03-03 18:41 - 2014-03-03 18:41 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00270848 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00247296 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00242200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00235008 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00232960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00226304 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00204800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00185344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\elshyph.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00173568 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00167424 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00158720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msls31.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00150528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iexpress.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00149504 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00138752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wextract.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00137216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00125440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00117248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00110592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IEAdvpack.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2014-03-03 18:41 - 2014-03-03 18:41 - 00073728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SetIEInstalledDate.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardie.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2014-03-03 18:41 - 2014-03-03 18:41 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pngfilt.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00052224 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmler.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00038400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imgutil.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00027648 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2014-03-03 18:41 - 2014-03-03 18:41 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshta.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2014-03-03 18:41 - 2014-03-03 18:41 - 00011776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2014-03-03 18:33 - 2014-03-03 18:33 - 02776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 02284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 01080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:33 - 2014-03-03 18:33 - 00002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2014-03-03 18:30 - 2014-03-03 18:30 - 01887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2014-03-03 18:30 - 2014-03-03 18:30 - 01505280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2014-03-03 18:13 - 2014-03-03 18:10 - 00003987 _____ () C:\Windows\IE9_main.log
2014-03-01 18:00 - 2014-03-01 18:00 - 00073728 _____ ( ) C:\Users\uzivatel\Desktop\guiformat.exe
2014-03-01 14:04 - 2014-02-22 11:42 - 00000000 ____D () C:\samsung
2014-02-26 04:04 - 2014-02-26 04:04 - 00001331 _____ () C:\Users\Public\Desktop\Freemake Video Converter.lnk
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\Documents\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Users\uzivatel\AppData\Local\FreemakeVideoConverter
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\ProgramData\Freemake
2014-02-26 04:04 - 2014-02-26 04:04 - 00000000 ____D () C:\Program Files (x86)\Freemake

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-20 08:53

==================== End Of Log ============================

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 13-03-2014
Ran by uzivatel at 2014-03-23 11:26:11
Running from C:\Users\uzivatel\Desktop
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

2.0.0 (HKLM-x32\...\{4F80F043-B003-4820-B8E3-CB7E6CF5BB03}_is1) (Version: 2.0.0 - Christian Koban)
Adobe Flash Player 12 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Flash Player 12 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Adobe Reader X (10.1.9) - Czech (HKLM-x32\...\{AC76BA86-7AD7-1029-7B44-AA1000000001}) (Version: 10.1.9 - Adobe Systems Incorporated)
Ashampoo Burning Studio 6 FREE v.6.80 (HKLM-x32\...\Ashampoo Burning Studio 6 FREE_is1) (Version: 6.8.0 - ashampoo GmbH & Co. KG)
Ashampoo Burning Studio 6 FREE v.6.84 (HKLM-x32\...\{91B33C97-3ED1-03EA-A67B-244AA4D7B559}_is1) (Version: 6.8.4 - Ashampoo GmbH & Co. KG)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2013 - Avast Software)
FileViewPro (HKLM\...\FileViewPro_is1) (Version: 4.0 - Solvusoft Corporation)
Freemake Video Converter verze 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Java(TM) 6 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216031FF}) (Version: 6.0.310 - Oracle)
K-Lite Mega Codec Pack 8.4.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 8.4.0 - )
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (Version: 4.0.30319 - Microsoft Corporation) Hidden
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0405-0000-0000000FF1CE}) (Version: 12.0.6334.5000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Mozilla Firefox 27.0.1 (x86 cs) (HKLM-x32\...\Mozilla Firefox 27.0.1 (x86 cs)) (Version: 27.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 27.0.1 - Mozilla)
OpenOffice 4.0.1 (HKLM-x32\...\{220C463A-2890-4C7F-B97C-C49FE175B849}) (Version: 4.01.9714 - Apache Software Foundation)
Seznam Software (HKCU\...\SeznamInstall) (Version: - Seznam.cz)
Smart Converter Pro (HKLM-x32\...\{073C6D04-4F52-472B-B4ED-7A7E84D4405D}) (Version: 1.1.0.16 - Shedworx)
Synaptics TouchPad Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.29.0 - Synaptics Incorporated)
Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 8.01 - Ghisler Software GmbH)
Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (HKLM-x32\...\{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2468871) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2468871) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2533523) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2533523) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2600217) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2600217) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939) (Version: 1 - Microsoft Corporation)
Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (HKLM-x32\...\{8E34682C-8118-31F1-BC4C-98CD9675E1C2}.KB2836939v3) (Version: 3 - Microsoft Corporation)
Wondershare Video Converter Ultimate(Build 6.8.0.2) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 6.8.0.2 - Wondershare Software)

==================== Restore Points =========================

20-03-2014 08:00:39 Naplánovaný kontrolní bod
23-03-2014 08:41:10 zoek.exe restore point

==================== Hosts content: ==========================

2009-07-14 03:34 - 2014-03-23 09:41 - 00000840 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 localhost
::1 localhost

==================== Scheduled Tasks (whitelisted) =============

Task: {107E433A-8814-4253-B838-CEC125AFB303} - \WinThruster_UPDATES No Task File
Task: {324376E0-BDED-4E0E-88B4-7AC58ECB66C6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-13] (AVAST Software)
Task: {6CBF24B9-7B30-4B36-BA37-061703540B8E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14] (Adobe Systems Incorporated)
Task: {99DBB720-F904-42B8-8127-25AE93251E57} - \WinThruster_DEFAULT No Task File
Task: {C50FCECF-5A1E-41BC-A76C-7F2E5FFA9DB6} - \WinThruster No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Loaded Modules (whitelisted) =============

2014-02-10 13:05 - 2013-04-15 12:32 - 00060416 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\23537libfoxloader-x64.dll
2014-01-29 23:02 - 2014-01-29 23:02 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-02-10 13:05 - 2013-04-12 09:13 - 00457208 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
2014-02-10 13:05 - 2013-04-29 11:53 - 00045560 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
2014-03-23 11:15 - 2014-03-23 09:37 - 02189312 _____ () C:\Program Files\AVAST Software\Avast\defs\14032300\algo.dll
2014-02-10 13:05 - 2013-03-25 15:39 - 00894968 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\lightspeed.dll
2014-02-10 13:05 - 2014-02-05 15:38 - 00076288 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\libchinst.dll
2014-02-10 13:05 - 2013-03-29 12:37 - 00059384 _____ () C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\23537libfoxloader.dll
2014-02-13 10:21 - 2014-02-13 10:21 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll

==================== Alternate Data Streams (whitelisted) =========


==================== Safe Mode (whitelisted) ===================


==================== Disabled items from MSCONFIG ==============


==================== Faulty Device Manager Devices =============

Name: Broadcom 802.11n Network Adapter
Description: Broadcom 802.11n Network Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Broadcom
Service: BCM43XX
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/23/2014 11:16:25 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2014 10:05:57 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2014 09:38:23 AM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2014 07:35:44 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2014 07:28:55 PM) (Source: Application Error) (User: )
Description: Název chybující aplikace: firefox.exe, verze: 27.0.1.5156, časové razítko: 0x52fc0faa
Název chybujícího modulu: xul.dll, verze: 27.0.1.5156, časové razítko: 0x52fc0f79
Kód výjimky: 0xc0000005
Posun chyby: 0x001560c7
ID chybujícího procesu: 0xd3c
Čas spuštění chybující aplikace: 0xfirefox.exe0
Cesta k chybující aplikaci: firefox.exe1
Cesta k chybujícímu modulu: firefox.exe2
ID zprávy: firefox.exe3

Error: (03/22/2014 07:19:39 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2014 04:43:40 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


System errors:
=============
Error: (03/23/2014 09:49:01 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (03/23/2014 09:49:00 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (03/23/2014 09:49:00 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (03/23/2014 09:48:59 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.

Error: (03/23/2014 09:48:58 AM) (Source: Service Control Manager) (User: )
Description: Služba PEVSystemStart je označena jako interaktivní služba. Avšak systém je nakonfigurován tak, že neumožňuje použití interaktivní služby. Tato služba nebude fungovat správně.


Microsoft Office Sessions:
=========================
Error: (03/23/2014 11:16:25 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2014 10:05:57 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/23/2014 09:38:23 AM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2014 07:35:44 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/22/2014 07:28:55 PM) (Source: Application Error)(User: )
Description: firefox.exe27.0.1.515652fc0faaxul.dll27.0.1.515652fc0f79c0000005001560c7d3c01cf45fbdaa6be44C:\Program Files (x86)\Mozilla Firefox\firefox.exeC:\Program Files (x86)\Mozilla Firefox\xul.dlld2b24568-b1ef-11e3-971a-3859f9ed0a6f

Error: (03/22/2014 07:19:39 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/21/2014 04:43:40 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


==================== Memory info ===========================

Percentage of memory in use: 28%
Total physical RAM: 4043.86 MB
Available physical RAM: 2891.44 MB
Total Pagefile: 8085.9 MB
Available Pagefile: 6863.41 MB
Total Virtual: 8192 MB
Available Virtual: 8191.81 MB

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:465.56 GB) (Free:202.89 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: CB8FDC35)

Partition: GPT Partition Type.

==================== End Of Log ============================

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  Task: {107E433A-8814-4253-B838-CEC125AFB303} - \WinThruster_UPDATES No Task File
  Task: {324376E0-BDED-4E0E-88B4-7AC58ECB66C6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-13] (AVAST Software)
  Task: {6CBF24B9-7B30-4B36-BA37-061703540B8E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14] (Adobe Systems Incorporated)
  Task: {99DBB720-F904-42B8-8127-25AE93251E57} - \WinThruster_DEFAULT No Task File
  Task: {C50FCECF-5A1E-41BC-A76C-7F2E5FFA9DB6} - \WinThruster No Task File
  Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
  
  2014-03-23 11:25 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
  2014-03-23 11:24 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Downloads\FRSTLauncher.exe
  2014-03-23 09:52 - 2014-03-23 09:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2014-03-23 09:41 - 2014-03-23 10:04 - 00010385 _____ () C:\zoek-results.log
  2014-03-23 09:40 - 2014-03-23 09:40 - 04235514 _____ () C:\Users\uzivatel\Downloads\zoek(1).rar
  2014-03-23 09:39 - 2014-03-23 09:49 - 00000000 ____D () C:\zoek_backup
  2014-03-23 09:39 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Desktop\zoek.exe
  2014-03-23 09:38 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Downloads\zoek.exe
  2014-03-22 19:32 - 2014-03-22 19:32 - 04231342 _____ () C:\Users\uzivatel\Downloads\zoek.rar
  2014-03-22 19:31 - 2014-03-22 19:31 - 04093586 _____ () C:\Users\uzivatel\Downloads\zoek.zip
  2014-03-21 16:37 - 2014-03-21 16:37 - 00006527 _____ () C:\Users\uzivatel\Desktop\JRT.txt
  2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Downloads\adwcleaner.exe
  2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Desktop\adwcleaner.exe
  2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Downloads\JRT.exe
  2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Desktop\JRT.exe
  
  FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
  FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []
  
  HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.autoupdate] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
  HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.szndesktop] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
  HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
  HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
  HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
  
  Hosts:
  CMD: shutdown /r /f /t 2
  
  End

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by uzivatel at 2014-03-23 18:07:46 Run:1
Running from C:\Users\uzivatel\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
Task: {107E433A-8814-4253-B838-CEC125AFB303} - \WinThruster_UPDATES No Task File
Task: {324376E0-BDED-4E0E-88B4-7AC58ECB66C6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-02-13] (AVAST Software)
Task: {6CBF24B9-7B30-4B36-BA37-061703540B8E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-14] (Adobe Systems Incorporated)
Task: {99DBB720-F904-42B8-8127-25AE93251E57} - \WinThruster_DEFAULT No Task File
Task: {C50FCECF-5A1E-41BC-A76C-7F2E5FFA9DB6} - \WinThruster No Task File
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2014-03-23 11:25 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Desktop\FRSTLauncher.exe
2014-03-23 11:24 - 2014-03-23 11:24 - 00112640 _____ (forum.viry.cz) C:\Users\uzivatel\Downloads\FRSTLauncher.exe
2014-03-23 09:52 - 2014-03-23 09:39 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-23 09:41 - 2014-03-23 10:04 - 00010385 _____ () C:\zoek-results.log
2014-03-23 09:40 - 2014-03-23 09:40 - 04235514 _____ () C:\Users\uzivatel\Downloads\zoek(1).rar
2014-03-23 09:39 - 2014-03-23 09:49 - 00000000 ____D () C:\zoek_backup
2014-03-23 09:39 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Desktop\zoek.exe
2014-03-23 09:38 - 2014-03-23 09:38 - 01285120 _____ () C:\Users\uzivatel\Downloads\zoek.exe
2014-03-22 19:32 - 2014-03-22 19:32 - 04231342 _____ () C:\Users\uzivatel\Downloads\zoek.rar
2014-03-22 19:31 - 2014-03-22 19:31 - 04093586 _____ () C:\Users\uzivatel\Downloads\zoek.zip
2014-03-21 16:37 - 2014-03-21 16:37 - 00006527 _____ () C:\Users\uzivatel\Desktop\JRT.txt
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Downloads\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01950720 _____ () C:\Users\uzivatel\Desktop\adwcleaner.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Downloads\JRT.exe
2014-03-21 16:30 - 2014-03-21 16:30 - 01037734 _____ (Thisisu) C:\Users\uzivatel\Desktop\JRT.exe

FF HKLM-x32\...\Firefox\Extensions: [fmconverter@gmail.com] - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\
FF Extension: Freemake Video Converter Plugin - C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ []

HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.autoupdate] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\...\Run: [cz.seznam.software.szndesktop] - C:\Users\uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] - C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{107E433A-8814-4253-B838-CEC125AFB303} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{107E433A-8814-4253-B838-CEC125AFB303} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinThruster_UPDATES => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{324376E0-BDED-4E0E-88B4-7AC58ECB66C6} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{324376E0-BDED-4E0E-88B4-7AC58ECB66C6} => Key deleted successfully.
C:\Windows\System32\Tasks\avast! Emergency Update => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\avast! Emergency Update => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6CBF24B9-7B30-4B36-BA37-061703540B8E} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6CBF24B9-7B30-4B36-BA37-061703540B8E} => Key deleted successfully.
C:\Windows\System32\Tasks\Adobe Flash Player Updater => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Adobe Flash Player Updater => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{99DBB720-F904-42B8-8127-25AE93251E57} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99DBB720-F904-42B8-8127-25AE93251E57} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinThruster_DEFAULT => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C50FCECF-5A1E-41BC-A76C-7F2E5FFA9DB6} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C50FCECF-5A1E-41BC-A76C-7F2E5FFA9DB6} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WinThruster => Key deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Users\uzivatel\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\uzivatel\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\Users\uzivatel\Downloads\zoek(1).rar => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\uzivatel\Desktop\zoek.exe => Moved successfully.
C:\Users\uzivatel\Downloads\zoek.exe => Moved successfully.
C:\Users\uzivatel\Downloads\zoek.rar => Moved successfully.
C:\Users\uzivatel\Downloads\zoek.zip => Moved successfully.
C:\Users\uzivatel\Desktop\JRT.txt => Moved successfully.
C:\Users\uzivatel\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\uzivatel\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\uzivatel\Downloads\JRT.exe => Moved successfully.
C:\Users\uzivatel\Desktop\JRT.exe => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\fmconverter@gmail.com => Value deleted successfully.
C:\Program Files (x86)\Freemake\Freemake Video Converter\BrowserPlugin\Firefox\ => Moved successfully.
HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => Value deleted successfully.
HKU\S-1-5-21-1179131461-2123647519-3716675352-1001\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Wondershare Helper Compact.exe => Value deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========


==== End of Fixlog ====

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

• Stahnete a spustte
• Pro potvrzeni volby mackejte A, Enter
• Po pouziti utilitu smazte
• Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

• Stahnete a spustte
• Kliknete na CleanUp a potvrdte YES
• Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

• Stahnete a spustte
• Kliknete na Start a potvrdte OK
• Program uklidi a restartuje pc
• Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

• Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

• dejte Hledej problémy
• nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
• postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

• Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse