Ahoj prosím o kontrolu logu, je to sestry komp, prý má potíže s hlášením o průzkumníkovi a občas padne modrá smrt- Přikládám FRST a RSIT
Díky
Logfile of random's system information tool 1.09 (written by random/random)
Run by Markéta at 2014-05-14 19:02:13
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 133 GB (46%) free of 286 GB
Total RAM: 6055 MB (62% free)
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:02:16, on 14.5.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17041)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Windows\AsScrPro.exe
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
C:\Program Files (x86)\ICQ7M\ICQ.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Markéta.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Trend Micro NSC BHO - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll
O2 - BHO: IESpeakDoc - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: TmBpIeBHO - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll
O4 - HKLM\..\Run: [Nuance PDF Reader-reminder] "C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe" -r "C:\ProgramData\Nuance\PDF Reader\Ereg\Ereg.ini"
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [SonicMasterTray] C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
O4 - HKLM\..\Run: [ATKOSD2] C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
O4 - HKLM\..\Run: [HControlUser] C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
O4 - HKLM\..\Run: [Wireless Console 3] C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
O4 - HKLM\..\Run: [UpdateLBPShortCut] "C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\LabelPrint" UpdateWithCreateOnce "Software\CyberLink\LabelPrint\2.5"
O4 - HKLM\..\Run: [UpdateP2GoShortCut] "C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe" "C:\Program Files (x86)\CyberLink\Power2Go" UpdateWithCreateOnce "SOFTWARE\CyberLink\Power2Go\6.0"
O4 - HKLM\..\Run: [NBAgent] "C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Guard.Mail.ru.gui] "C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
O4 - HKLM\..\Run: [seznam-listicka-distribuce] "C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Google Update] "C:\Users\Markéta\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [ICQ] "C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2433656295-3828255777-3043481375-1000\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2433656295-3828255777-3043481375-1000\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O4 - Global Startup: AsusVibeLauncher.lnk = C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
O4 - Global Startup: FancyStart daemon.lnk = ?
O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: (no name) - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra 'Tools' menuitem: Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll
O9 - Extra button: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ7M - {781B39EC-2E18-41FC-9B00-B84E4FFCA85F} - C:\Program Files (x86)\ICQ7M\ICQ.exe
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll
O18 - Protocol: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Users\MARKTA~1\AppData\Local\DProtect\eBP.dll,C:\Users\MARKTA~1\AppData\Local\DProtect\eBPSD.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: AFBAgent - Unknown owner - C:\Windows\system32\FBAgent.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: Trend Micro Solution Platform (Amsp) - Trend Micro Inc. - C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
O23 - Service: ASLDR Service (ASLDRService) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: Atheros Bt&Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
O23 - Service: AtherosSvc - Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Guard.Mail.ru - Unknown owner - C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
--
End of file - 13455 bytes
======Listing Processes======
\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
"C:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Windows\system32\FBAgent.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe"
"C:\Program Files (x86)\Bluetooth Suite\adminservice.exe"
"C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe" /service
"C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe" /service
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe"
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe"
"C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
WLIDSvcM.exe 2664
"C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe"
"C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"
"C:\Program Files\Microsoft Security Client\NisSrv.exe"
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
"C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
"taskhost.exe"
"C:\Windows\system32\Dwm.exe"
taskeng.exe {4A20B4D3-7757-4EC4-A8FA-5FAD9D61953A}
taskeng.exe {C3CC19F8-812C-4A76-945C-EB5B0CF62268}
"C:\Program Files\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Windows\SysWOW64\ACEngSvr.exe" -Embedding
"C:\Windows\AsScrPro.exe"
"C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Windows\System32\igfxtray.exe"
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe" /SF3
"C:\Program Files\Elantech\ETDCtrl.exe"
"C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
"C:\Program Files\Windows Sidebar\sidebar.exe" /autoRun
"C:\Program Files (x86)\ICQ7M\ICQ.exe" silent loginmode=4
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files\Elantech\ETDCtrlHelper.exe"
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
szndesktop.exe default start
"C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe"
\??\C:\Windows\system32\conhost.exe "983646496-256619154-2021895354-17790644895940659141097979598-1775710426-691159155
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
"C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe"
"C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe"
"C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe" /WinStart
"C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe" /gui
"C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
C:\Windows\system32\DllHost.exe /Processid:{30D49246-D217-465F-B00B-AC9DDD652EB7}
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe"
C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
"C:\Windows\explorer.exe"
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe"
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="6348.0.190364810\1294231811" --disable-d3d11 --supports-dual-gpus=false --gpu-driver-bug-workarounds=0,1,5,14,28 --disable-accelerated-video-decode --gpu-vendor-id=0x8086 --gpu-device-id=0x0116 --gpu-driver-vendor="Intel Corporation" --gpu-driver-version=8.15.10.2291 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_37/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="6348.2.1369581274\1611695911" /prefetch:673131151
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_37/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/ --extension-process --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="6348.3.1414851042\703793204" /prefetch:673131151
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_37/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="6348.13.920218625\1031429605" /prefetch:673131151
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\Windows\system32\wuauclt.exe"
"C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --lang=cs --force-fieldtrials=BrowserPreReadExperiment/100-pct-default/Prerender/PrerenderEnabled/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group6/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_18/UMA-Uniformity-Trial-1-Percent/group_37/UMA-Uniformity-Trial-10-Percent/group_01/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_03/UMA-Uniformity-Trial-50-Percent/group_01/ --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --enable-deadline-scheduling --disable-accelerated-video-decode --enable-software-compositing --channel="6348.18.2015496681\70505409" /prefetch:673131151
"C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000
uiWatchDog.exe 1176
\??\C:\Windows\system32\conhost.exe "2863688953805614-510971951-1243978076344477760-20656827291899115348-859497621
coreFrameworkHost.exe 1176 1
\??\C:\Windows\system32\conhost.exe "-83719912414115190440789966-1270950789539045097871453718-426256554-397562672
"C:\Program Files\Trend Micro\UniClient\UiFrmWrk\uiSeAgnt.exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 524 528 536 65536 532
taskhost.exe $(Arg0)
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Markéta\Desktop\RSITx64.exe"
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}
======Scheduled tasks folder======
C:\Windows\tasks\Adobe Flash Player Updater.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001Core.job
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001UA.job
=========Mozilla firefox=========
ProfilePath - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default
prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 10
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3555.0308]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\ZEON/PDF,version=2.0]
"Description"=
"Path"=C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled
[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll
C:\Program Files (x86)\Mozilla Firefox\extensions\
{972ce4c6-7e08-4474-a285-3208198ce6fd}
C:\Program Files (x86)\Mozilla Firefox\components\
binary.manifest
browsercomps.dll
C:\Program Files (x86)\Mozilla Firefox\searchplugins\
google.xml
heureka-cz.xml
jyxo-cz.xml
seznam-cz.xml
slunecnice-cz.xml
wikipedia-cz.xml
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\extensions\
staged
{ea614400-e918-4741-9a97-7a972ff7c30b}
C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\
firmycz.xml
mapycz.xml
zbocz.xml
======Registry dump======
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg.dll [2010-07-20 235344]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-04-26 581824]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 529280]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype add-on for Internet Explorer - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-03-21 6270336]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe64.dll [2011-03-25 265744]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1CA1377B-DC1D-4A52-9585-6E06050FAC53}]
TmIEPlugInBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll [2010-07-20 185680]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126}]
CIESpeechBHO Class - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-13 60576]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-04-26 436600]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení ke službě Windows Live ID - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28 441216]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-03-21 4502400]
[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC}]
TmBpIeBHO Class - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll [2011-03-25 235024]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Trend Micro Titanium"=C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [2011-10-08 1111568]
"IgfxTray"=C:\Windows\system32\igfxtray.exe [2011-02-10 167960]
"HotKeysCmds"=C:\Windows\system32\hkcmd.exe [2011-02-10 391704]
"Persistence"=C:\Windows\system32\igfxpers.exe [2011-02-10 418328]
"RtHDVBg"=C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2011-05-17 2226280]
"ETDCtrl"=C:\Program Files\Elantech\ETDCtrl.exe [2011-04-12 2589992]
"AtherosBtStack"=C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [2011-03-13 617120]
"AthBtTray"=C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [2011-03-13 379552]
"Trend Micro Client Framework"=C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [2011-02-10 197152]
"MSC"=C:\Program Files\Microsoft Security Client\msseces.exe [2014-03-11 1271072]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"=C:\Program Files\Windows Sidebar\sidebar.exe [2010-11-20 1475584]
"Google Update"=C:\Users\Markéta\AppData\Local\Google\Update\GoogleUpdate.exe [2012-07-06 116648]
"ICQ"=C:\Program Files (x86)\ICQ7M\ICQ.exe [2012-10-02 127040]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-14 20584608]
"cz.seznam.software.autoupdate"=C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe [2013-05-16 1062472]
"cz.seznam.software.szndesktop"=C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-04-12 92664]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ASUS Screen Saver Protector]
C:\Windows\AsScrPro.exe [2011-10-28 3058304]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CLMLServer]
C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe [2009-11-02 103720]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RtHDVCpl]
C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2011-05-17 11855976]
[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Nuance PDF Reader-reminder"=C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [2008-11-03 328992]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2011-04-01 2018032]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [2011-02-23 731472]
"SonicMasterTray"=C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [2010-07-10 984400]
"ATKOSD2"=C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2010-08-17 5732992]
"ATKMEDIA"=C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [2010-10-07 170624]
"HControlUser"=C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [2009-06-19 105016]
"Wireless Console 3"=C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [2010-09-24 1601536]
"UpdateLBPShortCut"=C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"UpdateP2GoShortCut"=C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [2009-05-20 222504]
"NBAgent"=C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [2010-03-14 1086760]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"Guard.Mail.ru.gui"=C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-10-02 1564368]
"seznam-listicka-distribuce"=C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [2013-05-16 1062472]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-04-26 3873704]
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
AsusVibeLauncher.lnk - C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe
FancyStart daemon.lnk - C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\Windows\system32\igfxdev.dll [2011-01-27 385024]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"DisableTaskMgr"=0
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"MSVideo8"=VfWWDM32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave2"=wdmaud.drv
"mixer2"=wdmaud.drv
"midi2"=wdmaud.drv
======File associations======
.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
======List of files/folders created in the last 1 month======
2014-05-14 18:52:35 ----D---- C:\FRST
2014-05-14 18:36:47 ----SD---- C:\Windows\system32\CompatTel
2014-05-14 18:31:21 ----A---- C:\Windows\system32\ieui.dll
2014-05-14 18:31:20 ----A---- C:\Windows\SYSWOW64\ieui.dll
2014-05-14 18:31:15 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2014-05-14 18:31:15 ----A---- C:\Windows\system32\vbscript.dll
2014-05-14 18:31:05 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-14 18:31:05 ----A---- C:\Windows\system32\iernonce.dll
2014-05-14 18:31:05 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2014-05-14 18:31:05 ----A---- C:\Windows\system32\ie4uinit.exe
2014-05-14 18:31:03 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2014-05-14 18:31:03 ----A---- C:\Windows\system32\jscript9diag.dll
2014-05-14 18:31:03 ----A---- C:\Windows\system32\dxtrans.dll
2014-05-14 18:31:03 ----A---- C:\Windows\system32\dxtmsft.dll
2014-05-14 18:31:02 ----A---- C:\Windows\SYSWOW64\msrating.dll
2014-05-14 18:31:02 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2014-05-14 18:31:02 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2014-05-14 18:31:02 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2014-05-14 18:31:02 ----A---- C:\Windows\system32\msrating.dll
2014-05-14 18:31:02 ----A---- C:\Windows\system32\msfeeds.dll
2014-05-14 18:31:02 ----A---- C:\Windows\system32\jsproxy.dll
2014-05-14 18:31:01 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2014-05-14 18:31:01 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2014-05-14 18:31:01 ----A---- C:\Windows\system32\ieUnatt.exe
2014-05-14 18:31:00 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2014-05-14 18:31:00 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2014-05-14 18:31:00 ----A---- C:\Windows\system32\iesetup.dll
2014-05-14 18:30:59 ----A---- C:\Windows\system32\mshtml.dll
2014-05-14 18:30:57 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2014-05-14 18:30:57 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2014-05-14 18:30:57 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2014-05-14 18:30:56 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-14 18:30:56 ----A---- C:\Windows\system32\ieetwproxystub.dll
2014-05-14 18:30:56 ----A---- C:\Windows\system32\ieetwcollector.exe
2014-05-14 18:30:56 ----A---- C:\Windows\system32\ieapfltr.dll
2014-05-14 18:30:54 ----A---- C:\Windows\SYSWOW64\wininet.dll
2014-05-14 18:30:54 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2014-05-14 18:30:54 ----A---- C:\Windows\system32\wininet.dll
2014-05-14 18:30:54 ----A---- C:\Windows\system32\iertutil.dll
2014-05-14 18:30:53 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2014-05-14 18:30:53 ----A---- C:\Windows\system32\urlmon.dll
2014-05-14 18:30:52 ----A---- C:\Windows\system32\ieframe.dll
2014-05-14 18:30:51 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2014-05-14 18:30:50 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2014-05-14 18:30:50 ----A---- C:\Windows\system32\jscript9.dll
2014-05-14 18:30:49 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2014-05-13 22:21:21 ----A---- C:\Windows\system32\shell32.dll
2014-05-13 22:21:19 ----A---- C:\Windows\SYSWOW64\shell32.dll
2014-05-13 22:21:17 ----A---- C:\Windows\system32\aepdu.dll
2014-05-13 22:21:16 ----A---- C:\Windows\system32\aeinv.dll
2014-05-13 22:20:51 ----A---- C:\Windows\system32\lsasrv.dll
2014-05-13 22:20:49 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2014-05-13 22:20:49 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2014-05-13 22:20:49 ----A---- C:\Windows\system32\kerberos.dll
2014-05-13 22:20:48 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2014-05-13 22:20:48 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2014-05-13 22:20:48 ----A---- C:\Windows\system32\winlogon.exe
2014-05-13 22:20:48 ----A---- C:\Windows\system32\objsel.dll
2014-05-13 22:20:48 ----A---- C:\Windows\system32\msv1_0.dll
2014-05-13 22:20:47 ----A---- C:\Windows\system32\ntoskrnl.exe
2014-05-13 22:20:46 ----A---- C:\Windows\SYSWOW64\objsel.dll
2014-05-13 22:20:46 ----A---- C:\Windows\system32\TSpkg.dll
2014-05-13 22:20:45 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2014-05-13 22:20:45 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2014-05-13 22:20:45 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2014-05-13 22:20:45 ----A---- C:\Windows\system32\wdigest.dll
2014-05-13 22:20:45 ----A---- C:\Windows\system32\KernelBase.dll
2014-05-13 22:20:45 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2014-05-13 22:20:44 ----A---- C:\Windows\SYSWOW64\schannel.dll
2014-05-13 22:20:44 ----A---- C:\Windows\SYSWOW64\dimsroam.dll
2014-05-13 22:20:44 ----A---- C:\Windows\SYSWOW64\cngprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\SYSWOW64\capiprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\SYSWOW64\adprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\schannel.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\dpapiprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\dimsroam.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\cngprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\capiprovider.dll
2014-05-13 22:20:44 ----A---- C:\Windows\system32\adprovider.dll
2014-05-13 22:20:43 ----A---- C:\Windows\SYSWOW64\dpapiprovider.dll
2014-05-13 22:20:43 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2014-05-13 22:20:42 ----A---- C:\Windows\SYSWOW64\wincredprovider.dll
2014-05-13 22:20:42 ----A---- C:\Windows\SYSWOW64\credssp.dll
2014-05-13 22:20:42 ----A---- C:\Windows\system32\wincredprovider.dll
2014-05-13 22:20:42 ----A---- C:\Windows\system32\sspisrv.dll
2014-05-13 22:20:42 ----A---- C:\Windows\system32\sspicli.dll
2014-05-13 22:20:42 ----A---- C:\Windows\system32\lsass.exe
2014-05-13 22:20:42 ----A---- C:\Windows\system32\credssp.dll
2014-05-13 22:20:41 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2014-05-13 22:20:41 ----A---- C:\Windows\SYSWOW64\secur32.dll
2014-05-13 22:20:41 ----A---- C:\Windows\system32\secur32.dll
2014-04-26 21:55:07 ----D---- C:\Users\Markéta\AppData\Roaming\AVAST Software
2014-04-26 21:54:19 ----A---- C:\Windows\system32\drivers\aswVmm.sys
2014-04-26 21:54:19 ----A---- C:\Windows\system32\drivers\aswStm.sys
2014-04-26 21:54:19 ----A---- C:\Windows\system32\drivers\aswSP.sys
2014-04-26 21:54:19 ----A---- C:\Windows\system32\drivers\aswSnx.sys
2014-04-26 21:54:18 ----A---- C:\Windows\system32\drivers\aswRvrt.sys
2014-04-26 21:54:18 ----A---- C:\Windows\system32\drivers\aswRdr2.sys
2014-04-26 21:54:18 ----A---- C:\Windows\system32\drivers\aswMonFlt.sys
2014-04-26 21:54:18 ----A---- C:\Windows\system32\drivers\aswHwid.sys
2014-04-26 21:54:17 ----A---- C:\Windows\system32\aswBoot.exe
2014-04-26 21:54:08 ----A---- C:\Windows\avastSS.scr
2014-04-26 21:53:20 ----D---- C:\Program Files\AVAST Software
2014-04-26 21:52:28 ----D---- C:\ProgramData\AVAST Software
======List of files/folders modified in the last 1 month======
2014-05-14 19:02:15 ----D---- C:\Program Files\Trend Micro
2014-05-14 19:01:08 ----D---- C:\Windows\Temp
2014-05-14 18:56:10 ----D---- C:\Windows\system32\config
2014-05-14 18:55:53 ----D---- C:\Windows
2014-05-14 18:45:33 ----D---- C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-05-14 18:44:27 ----D---- C:\Windows\Microsoft.NET
2014-05-14 18:44:26 ----RSD---- C:\Windows\assembly
2014-05-14 18:40:17 ----D---- C:\Windows\system32\Tasks
2014-05-14 18:39:55 ----A---- C:\Windows\system32\acovcnt.exe
2014-05-14 18:39:43 ----D---- C:\Windows\winsxs
2014-05-14 18:39:05 ----D---- C:\ProgramData\NVIDIA
2014-05-14 18:36:48 ----D---- C:\Windows\SysWOW64
2014-05-14 18:36:48 ----D---- C:\Windows\System32
2014-05-14 18:36:45 ----D---- C:\Program Files\Internet Explorer
2014-05-14 18:36:44 ----D---- C:\Windows\SYSWOW64\en-US
2014-05-14 18:36:44 ----D---- C:\Windows\SYSWOW64\cs-CZ
2014-05-14 18:36:43 ----D---- C:\Windows\system32\cs-CZ
2014-05-14 18:36:43 ----D---- C:\Windows\PolicyDefinitions
2014-05-14 18:36:42 ----D---- C:\Windows\system32\en-US
2014-05-14 18:36:37 ----D---- C:\Program Files (x86)\Internet Explorer
2014-05-14 18:36:28 ----D---- C:\Windows\system32\drivers
2014-05-14 18:34:07 ----SHD---- C:\Windows\Installer
2014-05-14 18:31:52 ----D---- C:\Windows\system32\catroot2
2014-05-14 18:31:52 ----D---- C:\Windows\system32\catroot
2014-05-14 18:30:43 ----D---- C:\Program Files (x86)\Common Files
2014-05-14 18:30:00 ----D---- C:\Windows\system32\MRT
2014-05-14 18:28:19 ----D---- C:\Windows\debug
2014-05-14 18:28:16 ----A---- C:\Windows\system32\MRT.exe
2014-05-14 18:27:02 ----SHD---- C:\System Volume Information
2014-05-14 15:15:24 ----D---- C:\Windows\Minidump
2014-05-14 04:38:17 ----D---- C:\Users\Markéta\AppData\Roaming\Skype
2014-05-04 22:09:51 ----D---- C:\Windows\Prefetch
2014-05-04 21:20:24 ----D---- C:\Windows\inf
2014-05-04 21:20:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2014-04-26 22:00:25 ----A---- C:\Windows\system32\AutoRunFilter.ini
2014-04-26 21:59:50 ----A---- C:\Windows\system32\ServiceFilter.ini
2014-04-26 21:53:20 ----RD---- C:\Program Files
2014-04-26 21:52:28 ----HD---- C:\ProgramData
2014-04-26 21:44:35 ----D---- C:\ProgramData\Trend Micro
2014-04-26 21:40:54 ----D---- C:\Program Files\GridinSoft Trojan Killer
2014-04-26 21:32:26 ----A---- C:\sc-cleaner.txt
2014-04-26 21:22:44 ----D---- C:\Program Files (x86)\ASUS
2014-04-26 21:21:35 ----SD---- C:\ProgramData\Microsoft
2014-04-26 21:21:35 ----D---- C:\Program Files (x86)\Microsoft
2014-04-26 21:16:22 ----D---- C:\Program Files (x86)\OpenOffice.org 3
2014-04-26 21:12:48 ----RD---- C:\Program Files (x86)
2014-04-26 20:56:09 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-04-26 20:56:07 ----RD---- C:\Program Files (x86)\Skype
2014-04-15 23:14:13 ----D---- C:\Users\Markéta\AppData\Roaming\SoftGrid Client
======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R0 aswRvrt;avast! Revert; C:\Windows\system32\drivers\aswRvrt.sys [2014-04-26 65776]
R0 aswVmm;avast! VM Monitor; C:\Windows\system32\drivers\aswVmm.sys [2014-04-26 208416]
R0 iaStor;Intel AHCI Controller; C:\Windows\system32\DRIVERS\iaStor.sys [2010-09-13 437272]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2014-01-25 268512]
R0 nvpciflt;nvpciflt; C:\Windows\system32\DRIVERS\nvpciflt.sys [2011-05-10 25960]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 aswRdr;aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [2014-04-26 93568]
R1 aswSnx;aswSnx; C:\Windows\system32\drivers\aswSnx.sys [2014-04-26 1039096]
R1 aswSP;aswSP; C:\Windows\system32\drivers\aswSP.sys [2014-04-26 423240]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-05-26 17536]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-03 15416]
R2 aswHwid;avast! HardwareID; C:\Windows\system32\drivers\aswHwid.sys [2014-04-26 29208]
R2 aswMonFlt;aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [2014-04-26 79184]
R2 aswStm;aswStm; C:\Windows\system32\drivers\aswStm.sys [2014-04-26 85328]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2014-03-11 133928]
R3 asmthub3;ASMedia USB3 Hub Service; C:\Windows\system32\DRIVERS\asmthub3.sys [2011-06-02 128488]
R3 asmtxhci;ASMEDIA XHCI Service; C:\Windows\system32\DRIVERS\asmtxhci.sys [2011-06-02 401896]
R3 AthBTPort;Atheros Virtual Bluetooth Class; C:\Windows\system32\DRIVERS\btath_flt.sys [2011-03-13 36000]
R3 athr;Atheros Extensible Wireless LAN device driver; C:\Windows\system32\DRIVERS\athrx.sys [2011-10-07 2770944]
R3 BTATH_A2DP;Bluetooth A2DP Audio Driver; C:\Windows\system32\drivers\btath_a2dp.sys [2011-03-13 298656]
R3 BTATH_BUS;Atheros Bluetooth Bus; C:\Windows\system32\DRIVERS\btath_bus.sys [2011-03-13 28832]
R3 BTATH_HCRP;Bluetooth HCRP Server driver; C:\Windows\system32\DRIVERS\btath_hcrp.sys [2011-03-13 201376]
R3 BTATH_LWFLT;Bluetooth LWFLT Device; C:\Windows\system32\DRIVERS\btath_lwflt.sys [2011-03-13 55456]
R3 BTATH_RCP;Bluetooth AVRCP Device; C:\Windows\system32\DRIVERS\btath_rcp.sys [2011-03-13 154272]
R3 BtFilter;BtFilter; C:\Windows\system32\DRIVERS\btfilter.sys [2011-03-13 280224]
R3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\drivers\BthEnum.sys [2009-07-14 41984]
R3 BthPan;Bluetooth Device (Personal Area Network); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
R3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
R3 ETD;ELAN PS/2 Port Input Device; C:\Windows\system32\DRIVERS\ETD.sys [2011-04-12 142632]
R3 igfx;igfx; C:\Windows\system32\DRIVERS\igdkmd64.sys [2011-01-27 12273408]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2011-05-17 2872680]
R3 IntcDAud;Intel(R) Display Audio; C:\Windows\system32\DRIVERS\IntcDAud.sys [2010-10-14 317440]
R3 kbfiltr;Keyboard Filter; C:\Windows\system32\DRIVERS\kbfiltr.sys [2009-07-20 15416]
R3 MEIx64;Intel(R) Management Engine Interface; C:\Windows\system32\DRIVERS\HECIx64.sys [2010-09-22 56344]
R3 RFCOMM;Bluetooth Device (RFCOMM Protocol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2011-01-13 413800]
R3 Sftfs;Sftfs; C:\Windows\system32\DRIVERS\Sftfslh.sys [2013-06-26 767144]
R3 Sftplay;Sftplay; C:\Windows\system32\DRIVERS\Sftplaylh.sys [2013-06-26 273576]
R3 Sftredir;Sftredir; C:\Windows\system32\DRIVERS\Sftredirlh.sys [2013-06-26 28840]
R3 Sftvol;Sftvol; C:\Windows\system32\DRIVERS\Sftvollh.sys [2013-06-26 23208]
S1 acmdylgo;acmdylgo; \??\C:\Windows\system32\drivers\acmdylgo.sys []
S1 aeyxjhtg;aeyxjhtg; \??\C:\Windows\system32\drivers\aeyxjhtg.sys []
S1 avsamieg;avsamieg; \??\C:\Windows\system32\drivers\avsamieg.sys []
S1 avzbqwhy;avzbqwhy; \??\C:\Windows\system32\drivers\avzbqwhy.sys []
S1 bfdskgwk;bfdskgwk; \??\C:\Windows\system32\drivers\bfdskgwk.sys []
S1 bfgqxiyy;bfgqxiyy; \??\C:\Windows\system32\drivers\bfgqxiyy.sys []
S1 cqujjfee;cqujjfee; \??\C:\Windows\system32\drivers\cqujjfee.sys []
S1 csisulnu;csisulnu; \??\C:\Windows\system32\drivers\csisulnu.sys []
S1 csxyacra;csxyacra; \??\C:\Windows\system32\drivers\csxyacra.sys []
S1 cydwjspr;cydwjspr; \??\C:\Windows\system32\drivers\cydwjspr.sys []
S1 dabwldhm;dabwldhm; \??\C:\Windows\system32\drivers\dabwldhm.sys []
S1 ddajttop;ddajttop; \??\C:\Windows\system32\drivers\ddajttop.sys []
S1 ddupyfwv;ddupyfwv; \??\C:\Windows\system32\drivers\ddupyfwv.sys []
S1 dluncnwn;dluncnwn; \??\C:\Windows\system32\drivers\dluncnwn.sys []
S1 dqfrttdy;dqfrttdy; \??\C:\Windows\system32\drivers\dqfrttdy.sys []
S1 dvqdrgkq;dvqdrgkq; \??\C:\Windows\system32\drivers\dvqdrgkq.sys []
S1 dwsgmadd;dwsgmadd; \??\C:\Windows\system32\drivers\dwsgmadd.sys []
S1 eamrruhz;eamrruhz; \??\C:\Windows\system32\drivers\eamrruhz.sys []
S1 edutkrlb;edutkrlb; \??\C:\Windows\system32\drivers\edutkrlb.sys []
S1 egkphurb;egkphurb; \??\C:\Windows\system32\drivers\egkphurb.sys []
S1 ezjusnnt;ezjusnnt; \??\C:\Windows\system32\drivers\ezjusnnt.sys []
S1 fdvfoimd;fdvfoimd; \??\C:\Windows\system32\drivers\fdvfoimd.sys []
S1 flekfwxv;flekfwxv; \??\C:\Windows\system32\drivers\flekfwxv.sys []
S1 fmxcyhcc;fmxcyhcc; \??\C:\Windows\system32\drivers\fmxcyhcc.sys []
S1 ftzodlmr;ftzodlmr; \??\C:\Windows\system32\drivers\ftzodlmr.sys []
S1 gbzrxafh;gbzrxafh; \??\C:\Windows\system32\drivers\gbzrxafh.sys []
S1 gdhzpdqj;gdhzpdqj; \??\C:\Windows\system32\drivers\gdhzpdqj.sys []
S1 geczhtye;geczhtye; \??\C:\Windows\system32\drivers\geczhtye.sys []
S1 gkrbaxec;gkrbaxec; \??\C:\Windows\system32\drivers\gkrbaxec.sys []
S1 grbbkggy;grbbkggy; \??\C:\Windows\system32\drivers\grbbkggy.sys []
S1 gssbsdup;gssbsdup; \??\C:\Windows\system32\drivers\gssbsdup.sys []
S1 gyglnrpt;gyglnrpt; \??\C:\Windows\system32\drivers\gyglnrpt.sys []
S1 hcgzbouo;hcgzbouo; \??\C:\Windows\system32\drivers\hcgzbouo.sys []
S1 hjgoeroa;hjgoeroa; \??\C:\Windows\system32\drivers\hjgoeroa.sys []
S1 hreapeyy;hreapeyy; \??\C:\Windows\system32\drivers\hreapeyy.sys []
S1 hvjqvcnq;hvjqvcnq; \??\C:\Windows\system32\drivers\hvjqvcnq.sys []
S1 imzgiqus;imzgiqus; \??\C:\Windows\system32\drivers\imzgiqus.sys []
S1 iqnrlabo;iqnrlabo; \??\C:\Windows\system32\drivers\iqnrlabo.sys []
S1 irasxvcm;irasxvcm; \??\C:\Windows\system32\drivers\irasxvcm.sys []
S1 irhrazzn;irhrazzn; \??\C:\Windows\system32\drivers\irhrazzn.sys []
S1 isjfodzz;isjfodzz; \??\C:\Windows\system32\drivers\isjfodzz.sys []
S1 iyhaubci;iyhaubci; \??\C:\Windows\system32\drivers\iyhaubci.sys []
S1 jhjhxzbh;jhjhxzbh; \??\C:\Windows\system32\drivers\jhjhxzbh.sys []
S1 jjpqrmhk;jjpqrmhk; \??\C:\Windows\system32\drivers\jjpqrmhk.sys []
S1 joqempji;joqempji; \??\C:\Windows\system32\drivers\joqempji.sys []
S1 jrvtmwcp;jrvtmwcp; \??\C:\Windows\system32\drivers\jrvtmwcp.sys []
S1 jsppqmqa;jsppqmqa; \??\C:\Windows\system32\drivers\jsppqmqa.sys []
S1 jtichbtc;jtichbtc; \??\C:\Windows\system32\drivers\jtichbtc.sys []
S1 jxeuxhie;jxeuxhie; \??\C:\Windows\system32\drivers\jxeuxhie.sys []
S1 kipgrzvf;kipgrzvf; \??\C:\Windows\system32\drivers\kipgrzvf.sys []
S1 ksgvcjkv;ksgvcjkv; \??\C:\Windows\system32\drivers\ksgvcjkv.sys []
S1 lbvuduqm;lbvuduqm; \??\C:\Windows\system32\drivers\lbvuduqm.sys []
S1 mdpokfzv;mdpokfzv; \??\C:\Windows\system32\drivers\mdpokfzv.sys []
S1 mnnafsnd;mnnafsnd; \??\C:\Windows\system32\drivers\mnnafsnd.sys []
S1 mvwefqvp;mvwefqvp; \??\C:\Windows\system32\drivers\mvwefqvp.sys []
S1 nexkmdqz;nexkmdqz; \??\C:\Windows\system32\drivers\nexkmdqz.sys []
S1 nhluossm;nhluossm; \??\C:\Windows\system32\drivers\nhluossm.sys []
S1 nizpreuw;nizpreuw; \??\C:\Windows\system32\drivers\nizpreuw.sys []
S1 nvtyopqy;nvtyopqy; \??\C:\Windows\system32\drivers\nvtyopqy.sys []
S1 nvucocgi;nvucocgi; \??\C:\Windows\system32\drivers\nvucocgi.sys []
S1 ocycnmfz;ocycnmfz; \??\C:\Windows\system32\drivers\ocycnmfz.sys []
S1 oircfmes;oircfmes; \??\C:\Windows\system32\drivers\oircfmes.sys []
S1 ojiepxee;ojiepxee; \??\C:\Windows\system32\drivers\ojiepxee.sys []
S1 omlznkwz;omlznkwz; \??\C:\Windows\system32\drivers\omlznkwz.sys []
S1 orisuaaq;orisuaaq; \??\C:\Windows\system32\drivers\orisuaaq.sys []
S1 peimsmup;peimsmup; \??\C:\Windows\system32\drivers\peimsmup.sys []
S1 pfubjuss;pfubjuss; \??\C:\Windows\system32\drivers\pfubjuss.sys []
S1 pghoziaa;pghoziaa; \??\C:\Windows\system32\drivers\pghoziaa.sys []
S1 pjvglwsd;pjvglwsd; \??\C:\Windows\system32\drivers\pjvglwsd.sys []
S1 pljhnxcj;pljhnxcj; \??\C:\Windows\system32\drivers\pljhnxcj.sys []
S1 pqjqanaa;pqjqanaa; \??\C:\Windows\system32\drivers\pqjqanaa.sys []
S1 psexixhx;psexixhx; \??\C:\Windows\system32\drivers\psexixhx.sys []
S1 qlrtopus;qlrtopus; \??\C:\Windows\system32\drivers\qlrtopus.sys []
S1 qmdxejnk;qmdxejnk; \??\C:\Windows\system32\drivers\qmdxejnk.sys []
S1 qnelzqbr;qnelzqbr; \??\C:\Windows\system32\drivers\qnelzqbr.sys []
S1 qptidgqw;qptidgqw; \??\C:\Windows\system32\drivers\qptidgqw.sys []
S1 qrivrflb;qrivrflb; \??\C:\Windows\system32\drivers\qrivrflb.sys []
S1 qrrbnxve;qrrbnxve; \??\C:\Windows\system32\drivers\qrrbnxve.sys []
S1 qukhtqfi;qukhtqfi; \??\C:\Windows\system32\drivers\qukhtqfi.sys []
S1 rbyuprlm;rbyuprlm; \??\C:\Windows\system32\drivers\rbyuprlm.sys []
S1 rfylttov;rfylttov; \??\C:\Windows\system32\drivers\rfylttov.sys []
S1 rkqatcpo;rkqatcpo; \??\C:\Windows\system32\drivers\rkqatcpo.sys []
S1 rqxgtbwk;rqxgtbwk; \??\C:\Windows\system32\drivers\rqxgtbwk.sys []
S1 rucjlbgs;rucjlbgs; \??\C:\Windows\system32\drivers\rucjlbgs.sys []
S1 ruedntro;ruedntro; \??\C:\Windows\system32\drivers\ruedntro.sys []
S1 sbynbmnb;sbynbmnb; \??\C:\Windows\system32\drivers\sbynbmnb.sys []
S1 sfacswqa;sfacswqa; \??\C:\Windows\system32\drivers\sfacswqa.sys []
S1 sljpdusu;sljpdusu; \??\C:\Windows\system32\drivers\sljpdusu.sys []
S1 szpcjrhz;szpcjrhz; \??\C:\Windows\system32\drivers\szpcjrhz.sys []
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 fssfltr;FssFltr; C:\Windows\system32\DRIVERS\fssfltr.sys [2012-03-08 48488]
S3 L1C;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller (NDIS 6.20); C:\Windows\system32\DRIVERS\L1C62x64.sys [2009-06-10 57344]
S3 RSUSBVSTOR;RtsUVStor.Sys Realtek USB Card Reader; C:\Windows\System32\Drivers\RtsUVStor.sys [2010-08-03 290920]
S3 SiSGbeLH;SiS191/SiS190 Ethernet Device NDIS 6.0 Driver; C:\Windows\system32\DRIVERS\SiSG664.sys [2009-06-10 56832]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 AFBAgent;AFBAgent; C:\Windows\system32\FBAgent.exe [2011-03-04 379520]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2009-06-16 84536]
R2 Atheros Bt&Wlan Coex Agent;Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [2011-03-13 138400]
R2 AtherosSvc;AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [2011-03-13 74912]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2009-12-15 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-04-26 50344]
R2 c2cautoupdatesvc;Skype Click to Call Updater; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-04-11 1390720]
R2 c2cpnrsvc;Skype Click to Call PNR Service; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-04-11 1764992]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 Guard.Mail.ru;Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [2012-10-02 1564368]
R2 MsMpSvc;Microsoft Antimalware Service; C:\Program Files\Microsoft Security Client\MsMpEng.exe [2014-03-11 23808]
R2 NVSvc;NVIDIA Driver Helper Service; C:\Windows\system32\nvvsvc.exe [2011-05-11 1007208]
R2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-05-10 2009704]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-05-11 378472]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-03-11 347872]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
S2 Amsp;Trend Micro Solution Platform; C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe [2011-02-16 256336]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-03-11 257928]
S3 fsssvc;Windows Live Family Safety Service; C:\Program Files (x86)\Windows Live\Family Safety\fsssvc.exe [2012-03-08 1492840]
S3 gusvc;Google Updater Service; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2011-05-10 136120]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2014-03-06 111616]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2012-06-15 113120]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
-----------------EOF-----------------
==================== End Of Log ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
preventivní kontrola
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Re: preventivní kontrola
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 14-05-2014
Ran by Markéta (administrator) on MARKÉTA-PC on 14-05-2014 19:10:28
Running from C:\Users\Markéta\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Trend Micro Titanium] => C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1111568 2011-10-08] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-17] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [197152 2011-02-10] (Trend Micro Inc.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [1086760 2010-03-14] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] => C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-02] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-26] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [Google Update] => C:\Users\Markéta\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-06] (Google Inc.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2012-10-02] (ICQ, LLC.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\MountPoints2: {b090753d-9cee-11e1-b877-742f68f62d15} - "G:\WD SmartWare.exe" autoplay=true
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-05-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Users\MARKTA~1\AppData\Local\DProtect\eBP.dll => "C:\Users\MARKTA~1\AppData\Local\DProtect\eBP.dll" File Not Found
AppInit_DLLs-x32: ,C:\Users\MARKTA~1\AppData\Local\DProtect\eBPSD.dll => "C:\Users\MARKTA~1\AppData\Local\DProtect\eBPSD.dll" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ASUT
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe64.dll (Trend Micro Inc.)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.20.10.2 10.20.10.4
FireFox:
========
FF ProfilePath: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default
FF SelectedSearchEngine: ICQ Search
FF Homepage: hxxp://www.seznam.cz/
FF NetworkProxy: "type", 0
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Markéta\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Markéta\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\mapycz.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\zbocz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\Extensions\staged [2014-05-14]
FF Extension: Seznam lištička - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2013-09-07]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\firefoxextension\ []
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-26]
Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=16194
CHR StartupUrls: "hxxp://www.google.com"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live\ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\Mark\u00E9ta\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Seznam Lištička - Email) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2013-09-07]
CHR Extension: (YouTube) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-06]
CHR Extension: (Vyhledávání Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-06]
CHR Extension: (cats) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmekamlpkbcegncocdmhnoogddkeekgn [2012-07-06]
CHR Extension: (avast! Online Security) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-14]
CHR Extension: (Peněženka Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-07]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2013-09-07]
CHR Extension: (Gmail) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-26]
==================== Services (Whitelisted) =================
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-26] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-02] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
U2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-04-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-26] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)
S1 acmdylgo; \??\C:\Windows\system32\drivers\acmdylgo.sys [X]
S1 aeyxjhtg; \??\C:\Windows\system32\drivers\aeyxjhtg.sys [X]
S1 avsamieg; \??\C:\Windows\system32\drivers\avsamieg.sys [X]
S1 avzbqwhy; \??\C:\Windows\system32\drivers\avzbqwhy.sys [X]
S1 bfdskgwk; \??\C:\Windows\system32\drivers\bfdskgwk.sys [X]
S1 bfgqxiyy; \??\C:\Windows\system32\drivers\bfgqxiyy.sys [X]
S1 cqujjfee; \??\C:\Windows\system32\drivers\cqujjfee.sys [X]
S1 csisulnu; \??\C:\Windows\system32\drivers\csisulnu.sys [X]
S1 csxyacra; \??\C:\Windows\system32\drivers\csxyacra.sys [X]
S1 cydwjspr; \??\C:\Windows\system32\drivers\cydwjspr.sys [X]
S1 dabwldhm; \??\C:\Windows\system32\drivers\dabwldhm.sys [X]
S1 ddajttop; \??\C:\Windows\system32\drivers\ddajttop.sys [X]
S1 ddupyfwv; \??\C:\Windows\system32\drivers\ddupyfwv.sys [X]
S1 dluncnwn; \??\C:\Windows\system32\drivers\dluncnwn.sys [X]
S1 dqfrttdy; \??\C:\Windows\system32\drivers\dqfrttdy.sys [X]
S1 dvqdrgkq; \??\C:\Windows\system32\drivers\dvqdrgkq.sys [X]
S1 dwsgmadd; \??\C:\Windows\system32\drivers\dwsgmadd.sys [X]
S1 eamrruhz; \??\C:\Windows\system32\drivers\eamrruhz.sys [X]
S1 edutkrlb; \??\C:\Windows\system32\drivers\edutkrlb.sys [X]
S1 egkphurb; \??\C:\Windows\system32\drivers\egkphurb.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S1 ezjusnnt; \??\C:\Windows\system32\drivers\ezjusnnt.sys [X]
S1 fdvfoimd; \??\C:\Windows\system32\drivers\fdvfoimd.sys [X]
S1 flekfwxv; \??\C:\Windows\system32\drivers\flekfwxv.sys [X]
S1 fmxcyhcc; \??\C:\Windows\system32\drivers\fmxcyhcc.sys [X]
S1 ftzodlmr; \??\C:\Windows\system32\drivers\ftzodlmr.sys [X]
S1 gbzrxafh; \??\C:\Windows\system32\drivers\gbzrxafh.sys [X]
S1 gdhzpdqj; \??\C:\Windows\system32\drivers\gdhzpdqj.sys [X]
S1 geczhtye; \??\C:\Windows\system32\drivers\geczhtye.sys [X]
S1 gkrbaxec; \??\C:\Windows\system32\drivers\gkrbaxec.sys [X]
S1 grbbkggy; \??\C:\Windows\system32\drivers\grbbkggy.sys [X]
S1 gssbsdup; \??\C:\Windows\system32\drivers\gssbsdup.sys [X]
S1 gyglnrpt; \??\C:\Windows\system32\drivers\gyglnrpt.sys [X]
S1 hcgzbouo; \??\C:\Windows\system32\drivers\hcgzbouo.sys [X]
S1 hjgoeroa; \??\C:\Windows\system32\drivers\hjgoeroa.sys [X]
S1 hreapeyy; \??\C:\Windows\system32\drivers\hreapeyy.sys [X]
S1 hvjqvcnq; \??\C:\Windows\system32\drivers\hvjqvcnq.sys [X]
S1 imzgiqus; \??\C:\Windows\system32\drivers\imzgiqus.sys [X]
S1 iqnrlabo; \??\C:\Windows\system32\drivers\iqnrlabo.sys [X]
S1 irasxvcm; \??\C:\Windows\system32\drivers\irasxvcm.sys [X]
S1 irhrazzn; \??\C:\Windows\system32\drivers\irhrazzn.sys [X]
S1 isjfodzz; \??\C:\Windows\system32\drivers\isjfodzz.sys [X]
S1 iyhaubci; \??\C:\Windows\system32\drivers\iyhaubci.sys [X]
S1 jhjhxzbh; \??\C:\Windows\system32\drivers\jhjhxzbh.sys [X]
S1 jjpqrmhk; \??\C:\Windows\system32\drivers\jjpqrmhk.sys [X]
S1 joqempji; \??\C:\Windows\system32\drivers\joqempji.sys [X]
S1 jrvtmwcp; \??\C:\Windows\system32\drivers\jrvtmwcp.sys [X]
S1 jsppqmqa; \??\C:\Windows\system32\drivers\jsppqmqa.sys [X]
S1 jtichbtc; \??\C:\Windows\system32\drivers\jtichbtc.sys [X]
S1 jxeuxhie; \??\C:\Windows\system32\drivers\jxeuxhie.sys [X]
S1 kipgrzvf; \??\C:\Windows\system32\drivers\kipgrzvf.sys [X]
S1 ksgvcjkv; \??\C:\Windows\system32\drivers\ksgvcjkv.sys [X]
S1 lbvuduqm; \??\C:\Windows\system32\drivers\lbvuduqm.sys [X]
S1 mdpokfzv; \??\C:\Windows\system32\drivers\mdpokfzv.sys [X]
S1 mnnafsnd; \??\C:\Windows\system32\drivers\mnnafsnd.sys [X]
S1 mvwefqvp; \??\C:\Windows\system32\drivers\mvwefqvp.sys [X]
S1 nexkmdqz; \??\C:\Windows\system32\drivers\nexkmdqz.sys [X]
S1 nhluossm; \??\C:\Windows\system32\drivers\nhluossm.sys [X]
S1 nizpreuw; \??\C:\Windows\system32\drivers\nizpreuw.sys [X]
S1 nvtyopqy; \??\C:\Windows\system32\drivers\nvtyopqy.sys [X]
S1 nvucocgi; \??\C:\Windows\system32\drivers\nvucocgi.sys [X]
S1 ocycnmfz; \??\C:\Windows\system32\drivers\ocycnmfz.sys [X]
S1 oircfmes; \??\C:\Windows\system32\drivers\oircfmes.sys [X]
S1 ojiepxee; \??\C:\Windows\system32\drivers\ojiepxee.sys [X]
S1 omlznkwz; \??\C:\Windows\system32\drivers\omlznkwz.sys [X]
S1 orisuaaq; \??\C:\Windows\system32\drivers\orisuaaq.sys [X]
S1 peimsmup; \??\C:\Windows\system32\drivers\peimsmup.sys [X]
S1 pfubjuss; \??\C:\Windows\system32\drivers\pfubjuss.sys [X]
S1 pghoziaa; \??\C:\Windows\system32\drivers\pghoziaa.sys [X]
S1 pjvglwsd; \??\C:\Windows\system32\drivers\pjvglwsd.sys [X]
S1 pljhnxcj; \??\C:\Windows\system32\drivers\pljhnxcj.sys [X]
S1 pqjqanaa; \??\C:\Windows\system32\drivers\pqjqanaa.sys [X]
S1 psexixhx; \??\C:\Windows\system32\drivers\psexixhx.sys [X]
S1 qlrtopus; \??\C:\Windows\system32\drivers\qlrtopus.sys [X]
S1 qmdxejnk; \??\C:\Windows\system32\drivers\qmdxejnk.sys [X]
S1 qnelzqbr; \??\C:\Windows\system32\drivers\qnelzqbr.sys [X]
S1 qptidgqw; \??\C:\Windows\system32\drivers\qptidgqw.sys [X]
S1 qrivrflb; \??\C:\Windows\system32\drivers\qrivrflb.sys [X]
S1 qrrbnxve; \??\C:\Windows\system32\drivers\qrrbnxve.sys [X]
S1 qukhtqfi; \??\C:\Windows\system32\drivers\qukhtqfi.sys [X]
S1 rbyuprlm; \??\C:\Windows\system32\drivers\rbyuprlm.sys [X]
S1 rfylttov; \??\C:\Windows\system32\drivers\rfylttov.sys [X]
S1 rkqatcpo; \??\C:\Windows\system32\drivers\rkqatcpo.sys [X]
S1 rqxgtbwk; \??\C:\Windows\system32\drivers\rqxgtbwk.sys [X]
S1 rucjlbgs; \??\C:\Windows\system32\drivers\rucjlbgs.sys [X]
S1 ruedntro; \??\C:\Windows\system32\drivers\ruedntro.sys [X]
S1 sbynbmnb; \??\C:\Windows\system32\drivers\sbynbmnb.sys [X]
S1 sfacswqa; \??\C:\Windows\system32\drivers\sfacswqa.sys [X]
S1 sljpdusu; \??\C:\Windows\system32\drivers\sljpdusu.sys [X]
S1 szpcjrhz; \??\C:\Windows\system32\drivers\szpcjrhz.sys [X]
S1 tivhzvln; \??\C:\Windows\system32\drivers\tivhzvln.sys [X]
S1 tiwawwdm; \??\C:\Windows\system32\drivers\tiwawwdm.sys [X]
S1 tjgmqdoa; \??\C:\Windows\system32\drivers\tjgmqdoa.sys [X]
S1 tqumiuwx; \??\C:\Windows\system32\drivers\tqumiuwx.sys [X]
S1 twqptgtr; \??\C:\Windows\system32\drivers\twqptgtr.sys [X]
S1 ujruaynu; \??\C:\Windows\system32\drivers\ujruaynu.sys [X]
S1 utpurpzy; \??\C:\Windows\system32\drivers\utpurpzy.sys [X]
S1 uxgwvhyr; \??\C:\Windows\system32\drivers\uxgwvhyr.sys [X]
S1 vdmidpxr; \??\C:\Windows\system32\drivers\vdmidpxr.sys [X]
S1 visiqwhj; \??\C:\Windows\system32\drivers\visiqwhj.sys [X]
S1 vlnqcisc; \??\C:\Windows\system32\drivers\vlnqcisc.sys [X]
S1 vpyodnxg; \??\C:\Windows\system32\drivers\vpyodnxg.sys [X]
S1 vtofgbql; \??\C:\Windows\system32\drivers\vtofgbql.sys [X]
S1 vziptlpo; \??\C:\Windows\system32\drivers\vziptlpo.sys [X]
S1 wejlxzpt; \??\C:\Windows\system32\drivers\wejlxzpt.sys [X]
S1 wnbrnoct; \??\C:\Windows\system32\drivers\wnbrnoct.sys [X]
S1 wnryxycm; \??\C:\Windows\system32\drivers\wnryxycm.sys [X]
S1 xbchvinm; \??\C:\Windows\system32\drivers\xbchvinm.sys [X]
S1 xdtwsrut; \??\C:\Windows\system32\drivers\xdtwsrut.sys [X]
S1 xhsvmpns; \??\C:\Windows\system32\drivers\xhsvmpns.sys [X]
S1 xtcooykb; \??\C:\Windows\system32\drivers\xtcooykb.sys [X]
S1 xwfymbta; \??\C:\Windows\system32\drivers\xwfymbta.sys [X]
S1 xwntwzjt; \??\C:\Windows\system32\drivers\xwntwzjt.sys [X]
S1 yfcvfond; \??\C:\Windows\system32\drivers\yfcvfond.sys [X]
S1 yoamenaq; \??\C:\Windows\system32\drivers\yoamenaq.sys [X]
S1 ytvkntrx; \??\C:\Windows\system32\drivers\ytvkntrx.sys [X]
S1 yxvothff; \??\C:\Windows\system32\drivers\yxvothff.sys [X]
S1 zhwiehyv; \??\C:\Windows\system32\drivers\zhwiehyv.sys [X]
S1 znelfhpd; \??\C:\Windows\system32\drivers\znelfhpd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-14 19:01 - 2014-05-14 19:01 - 00935175 _____ () C:\Users\Markéta\Desktop\RSITx64.exe
2014-05-14 18:55 - 2014-05-14 18:56 - 00035099 _____ () C:\Users\Markéta\Desktop\Addition.txt
2014-05-14 18:54 - 2014-05-14 19:10 - 00031254 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-05-14 18:52 - 2014-05-14 19:10 - 00000000 ____D () C:\FRST
2014-05-14 18:52 - 2014-05-14 18:52 - 02066944 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-05-14 18:51 - 2014-05-14 18:51 - 01056256 _____ (Farbar) C:\Users\Markéta\Downloads\FRST.exe
2014-05-14 18:40 - 2014-05-14 18:40 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-14 18:36 - 2014-05-14 18:36 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 18:31 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 18:31 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-14 18:31 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-14 18:31 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-14 18:31 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-14 18:31 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-14 18:31 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 18:31 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-14 18:31 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-14 18:31 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-14 18:31 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-14 18:31 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-14 18:31 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-14 18:31 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-14 18:31 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-14 18:31 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-14 18:31 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-14 18:31 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-14 18:31 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-14 18:31 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-14 18:31 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-14 18:31 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-14 18:31 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-14 18:31 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-14 18:31 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-14 18:31 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-14 18:31 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-14 18:30 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 18:30 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 18:30 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-14 18:30 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-14 18:30 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-14 18:30 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-14 18:30 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-14 18:30 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-14 18:30 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-14 18:30 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-14 18:30 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-14 18:30 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-14 18:30 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-14 18:30 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-14 18:30 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-14 18:30 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-14 18:30 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-14 18:30 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-14 18:30 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-14 18:30 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-14 18:30 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-14 15:15 - 2014-05-14 15:15 - 00266288 _____ () C:\Windows\Minidump\051414-22916-01.dmp
2014-05-13 22:21 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 22:21 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 22:21 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 22:21 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 22:20 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 22:20 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 22:20 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 22:20 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 22:20 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 22:20 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 22:20 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 22:20 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 22:20 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 22:20 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 22:20 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 22:20 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 22:20 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-05 19:45 - 2014-05-05 19:45 - 00262144 _____ () C:\Windows\Minidump\050514-21621-01.dmp
2014-05-04 22:07 - 2014-05-04 22:07 - 00262144 _____ () C:\Windows\Minidump\050414-19905-01.dmp
2014-04-28 21:54 - 2014-04-28 21:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Řím
2014-04-28 16:04 - 2014-05-14 15:15 - 652134743 _____ () C:\Windows\MEMORY.DMP
2014-04-26 21:59 - 2014-05-14 18:38 - 00000784 _____ () C:\Windows\setupact.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00005614 _____ () C:\Windows\PFRO.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-26 21:55 - 2014-04-26 21:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\AVAST Software
2014-04-26 21:54 - 2014-05-14 15:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-26 21:54 - 2014-04-26 21:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-26 21:54 - 2014-04-26 21:54 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-26 21:54 - 2014-04-26 21:54 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-26 21:54 - 2014-04-26 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-26 21:53 - 2014-04-26 21:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-26 21:52 - 2014-04-26 21:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-16 21:17 - 2014-04-16 21:17 - 00000000 ____D () C:\Users\Markéta\Desktop\MAREDA
==================== One Month Modified Files and Folders =======
2014-05-14 19:10 - 2014-05-14 18:54 - 00031254 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-05-14 19:10 - 2014-05-14 18:52 - 00000000 ____D () C:\FRST
2014-05-14 19:02 - 2011-04-01 11:22 - 00000000 ____D () C:\Program Files\Trend Micro
2014-05-14 19:01 - 2014-05-14 19:01 - 00935175 _____ () C:\Users\Markéta\Desktop\RSITx64.exe
2014-05-14 18:56 - 2014-05-14 18:55 - 00035099 _____ () C:\Users\Markéta\Desktop\Addition.txt
2014-05-14 18:52 - 2014-05-14 18:52 - 02066944 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-05-14 18:51 - 2014-05-14 18:51 - 01056256 _____ (Farbar) C:\Users\Markéta\Downloads\FRST.exe
2014-05-14 18:47 - 2011-10-28 00:09 - 01373648 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 18:45 - 2013-09-07 19:40 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-05-14 18:45 - 2012-05-06 12:01 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-14 18:44 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-14 18:44 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-14 18:43 - 2012-07-06 10:23 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001UA.job
2014-05-14 18:40 - 2014-05-14 18:40 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-14 18:40 - 2012-05-06 16:58 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 18:40 - 2012-05-06 16:58 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:39 - 2011-10-28 00:32 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-05-14 18:39 - 2011-10-28 00:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-14 18:38 - 2014-04-26 21:59 - 00000784 _____ () C:\Windows\setupact.log
2014-05-14 18:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-14 18:36 - 2014-05-14 18:36 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 18:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 18:30 - 2013-08-19 13:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 18:28 - 2012-05-13 10:55 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 15:19 - 2014-04-26 21:54 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-14 15:15 - 2014-05-14 15:15 - 00266288 _____ () C:\Windows\Minidump\051414-22916-01.dmp
2014-05-14 15:15 - 2014-04-28 16:04 - 652134743 _____ () C:\Windows\MEMORY.DMP
2014-05-14 15:15 - 2013-10-24 20:57 - 00000000 ____D () C:\Windows\Minidump
2014-05-14 15:05 - 2012-07-06 10:23 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001Core.job
2014-05-14 10:24 - 2012-05-06 16:59 - 00000000 ____D () C:\Users\Markéta\Documents\Bluetooth Folder
2014-05-14 04:38 - 2012-05-13 15:22 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Skype
2014-05-13 22:50 - 2012-05-12 22:19 - 00000000 ____D () C:\Users\Markéta\AppData\Local\CrashDumps
2014-05-09 08:14 - 2014-05-13 22:21 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 22:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-05 19:45 - 2014-05-05 19:45 - 00262144 _____ () C:\Windows\Minidump\050514-21621-01.dmp
2014-05-04 22:07 - 2014-05-04 22:07 - 00262144 _____ () C:\Windows\Minidump\050414-19905-01.dmp
2014-05-04 21:20 - 2011-02-19 07:36 - 00680996 _____ () C:\Windows\system32\perfh005.dat
2014-05-04 21:20 - 2011-02-19 07:36 - 00145706 _____ () C:\Windows\system32\perfc005.dat
2014-05-04 21:20 - 2009-07-14 07:13 - 01617142 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-28 21:54 - 2014-04-28 21:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Řím
2014-04-28 21:42 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-04-26 22:00 - 2011-10-28 00:33 - 00002364 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-04-26 21:59 - 2014-04-26 21:59 - 00005614 _____ () C:\Windows\PFRO.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-26 21:59 - 2012-05-06 16:58 - 00001399 _____ () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-26 21:59 - 2011-10-28 00:33 - 00001440 _____ () C:\Windows\system32\ServiceFilter.ini
2014-04-26 21:55 - 2014-04-26 21:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\AVAST Software
2014-04-26 21:54 - 2014-04-26 21:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-26 21:54 - 2014-04-26 21:54 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-26 21:54 - 2014-04-26 21:54 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-26 21:54 - 2014-04-26 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-26 21:54 - 2012-06-24 22:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-04-26 21:53 - 2014-04-26 21:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-26 21:52 - 2014-04-26 21:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-26 21:44 - 2011-04-01 11:24 - 00000000 ____D () C:\ProgramData\Trend Micro
2014-04-26 21:40 - 2013-12-04 21:37 - 00000000 ____D () C:\Program Files\GridinSoft Trojan Killer
2014-04-26 21:32 - 2013-12-04 22:10 - 00001808 _____ () C:\sc-cleaner.txt
2014-04-26 21:22 - 2011-04-01 11:19 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-04-26 21:16 - 2012-05-07 11:55 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2014-04-26 20:56 - 2012-07-06 10:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 20:56 - 2012-05-13 15:22 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-16 21:17 - 2014-04-16 21:17 - 00000000 ____D () C:\Users\Markéta\Desktop\MAREDA
2014-04-15 23:14 - 2012-05-07 22:21 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\SoftGrid Client
Some content of TEMP:
====================
C:\Users\Markéta\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-13 22:20] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-04 21:53
==================== End Of Log ============================
Ran by Markéta (administrator) on MARKÉTA-PC on 14-05-2014 19:10:28
Running from C:\Users\Markéta\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ASUSTeK Computer Inc.) C:\Windows\System32\FBAgent.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Atheros) C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ASUS) C:\Program Files\P4G\BatteryLife.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTeK) C:\Windows\SysWOW64\ACEngSvr.exe
(ASUS) C:\Windows\AsScrPro.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(ICQ, LLC.) C:\Program Files (x86)\ICQ7M\ICQ.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Virage Logic Corporation / Sonic Focus) C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe
() C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe
(Nero AG) C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe
() C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Markéta\AppData\Local\Google\Chrome\Application\chrome.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiWatchDog.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\AMSP\coreFrameworkHost.exe
(Trend Micro Inc.) C:\Program Files\Trend Micro\UniClient\UiFrmwrk\uiSeAgnt.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Trend Micro Titanium] => C:\Program Files\Trend Micro\Titanium\UIFramework\uiWinMgr.exe [1111568 2011-10-08] (Trend Micro Inc.)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2226280 2011-05-17] (Realtek Semiconductor)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2589992 2011-04-12] (ELAN Microelectronics Corp.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [197152 2011-02-10] (Trend Micro Inc.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [Nuance PDF Reader-reminder] => C:\Program Files (x86)\Nuance\PDF Reader\Ereg\Ereg.exe [328992 2008-11-03] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2018032 2011-04-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.84.161\AsusWSPanel.exe [731472 2011-02-23] (ecareme)
HKLM-x32\...\Run: [SonicMasterTray] => C:\Program Files (x86)\ASUS\Sonic Focus\SonicFocusTray.exe [984400 2010-07-10] (Virage Logic Corporation / Sonic Focus)
HKLM-x32\...\Run: [ATKOSD2] => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [5732992 2010-08-17] (ASUS)
HKLM-x32\...\Run: [ATKMEDIA] => C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe [170624 2010-10-07] (ASUS)
HKLM-x32\...\Run: [HControlUser] => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControlUser.exe [105016 2009-06-19] (ASUS)
HKLM-x32\...\Run: [Wireless Console 3] => C:\Program Files (x86)\ASUS\Wireless Console 3\wcourier.exe [1601536 2010-09-24] ()
HKLM-x32\...\Run: [UpdateLBPShortCut] => C:\Program Files (x86)\CyberLink\LabelPrint\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [UpdateP2GoShortCut] => C:\Program Files (x86)\CyberLink\Power2Go\MUITransfer\MUIStartMenu.exe [222504 2009-05-20] (CyberLink Corp.)
HKLM-x32\...\Run: [NBAgent] => C:\Program Files (x86)\Nero\Nero BackItUp & Burn\Nero BackItUp\NBAgent.exe [1086760 2010-03-14] (Nero AG)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Guard.Mail.ru.gui] => C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-02] ()
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-26] (AVAST Software)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1000\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [222496 2009-05-06] (Acresso Corporation)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [Google Update] => C:\Users\Markéta\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-07-06] (Google Inc.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [ICQ] => C:\Program Files (x86)\ICQ7M\ICQ.exe [127040 2012-10-02] (ICQ, LLC.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Markéta\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Markéta\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-2433656295-3828255777-3043481375-1001\...\MountPoints2: {b090753d-9cee-11e1-b877-742f68f62d15} - "G:\WD SmartWare.exe" autoplay=true
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [226920 2011-05-10] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Users\MARKTA~1\AppData\Local\DProtect\eBP.dll => "C:\Users\MARKTA~1\AppData\Local\DProtect\eBP.dll" File Not Found
AppInit_DLLs-x32: ,C:\Users\MARKTA~1\AppData\Local\DProtect\eBPSD.dll => "C:\Users\MARKTA~1\AppData\Local\DProtect\eBPSD.dll" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AsusVibeLauncher.lnk
ShortcutTarget: AsusVibeLauncher.lnk -> C:\Program Files (x86)\ASUS\AsusVibe\AsusVibeLauncher.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FancyStart daemon.lnk
ShortcutTarget: FancyStart daemon.lnk -> C:\Windows\Installer\{2B81872B-A054-48DA-BE3B-FA5C164C303A}\_C4A2FC3E3722966204FDD8.exe ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKLM-x32 - {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL = http://www.google.com/search?sourceid=i ... lz=1I7ASUT
SearchScopes: HKCU - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL =
BHO: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe64.dll (Trend Micro Inc.)
BHO-x32: TmIEPlugInBHO Class - {1CA1377B-DC1D-4A52-9585-6E06050FAC53} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll (Trend Micro Inc.)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: TmBpIeBHO Class - {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe64.dll (Trend Micro Inc.)
Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg.dll (Trend Micro Inc.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.6.1010\6.6.1010\TmBpIe32.dll (Trend Micro Inc.)
Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\TmIEPlg32.dll (Trend Micro Inc.)
Tcpip\Parameters: [DhcpNameServer] 10.20.10.2 10.20.10.4
FireFox:
========
FF ProfilePath: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default
FF SelectedSearchEngine: ICQ Search
FF Homepage: hxxp://www.seznam.cz/
FF NetworkProxy: "type", 0
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: ZEON/PDF,version=2.0 - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Markéta\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Markéta\AppData\Local\Google\Update\1.3.23.9\npGoogleUpdate3.dll (Google Inc.)
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\firmycz.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\mapycz.xml
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\searchplugins\zbocz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\searchplugins\slunecnice-cz.xml
FF Extension: No Name - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\Extensions\staged [2014-05-14]
FF Extension: Seznam lištička - C:\Users\Markéta\AppData\Roaming\Mozilla\Firefox\Profiles\0mm1feti.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2013-09-07]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-04-11]
FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\firefoxextension\
FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1505\6.6.1088\firefoxextension\ []
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-04-26]
Chrome:
=======
CHR HomePage: hxxp://www.seznam.cz/?clid=16194
CHR StartupUrls: "hxxp://www.google.com"
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Markéta\AppData\Local\Google\Chrome\Application\34.0.1847.116\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Microsoft Office 2010) - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Silverlight Plug-In) - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll No File
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Zeon Plus) - C:\Program Files (x86)\Nuance\PDF Reader\bin\nppdf.dll (Zeon Corporation)
CHR Plugin: (Windows Live\ Photo Gallery) - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
CHR Plugin: (Google Update) - C:\Users\Mark\u00E9ta\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (Seznam Lištička - Email) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2013-09-07]
CHR Extension: (YouTube) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2012-07-06]
CHR Extension: (Vyhledávání Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2012-07-06]
CHR Extension: (cats) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmekamlpkbcegncocdmhnoogddkeekgn [2012-07-06]
CHR Extension: (avast! Online Security) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-05-14]
CHR Extension: (Peněženka Google) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-09-07]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2013-09-07]
CHR Extension: (Gmail) - C:\Users\Markéta\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2012-07-06]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-04-26]
==================== Services (Whitelisted) =================
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe [138400 2011-03-13] (Atheros)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-26] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R2 Guard.Mail.ru; C:\Program Files (x86)\Guard-ICQ\GuardICQ.exe [1564368 2012-10-02] ()
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
U2 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X]
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-04-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-04-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-04-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-04-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-04-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-04-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-04-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-04-26] ()
R3 kbfiltr; C:\Windows\System32\DRIVERS\kbfiltr.sys [15416 2009-07-20] ( )
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.)
R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.)
R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.)
R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.)
S1 acmdylgo; \??\C:\Windows\system32\drivers\acmdylgo.sys [X]
S1 aeyxjhtg; \??\C:\Windows\system32\drivers\aeyxjhtg.sys [X]
S1 avsamieg; \??\C:\Windows\system32\drivers\avsamieg.sys [X]
S1 avzbqwhy; \??\C:\Windows\system32\drivers\avzbqwhy.sys [X]
S1 bfdskgwk; \??\C:\Windows\system32\drivers\bfdskgwk.sys [X]
S1 bfgqxiyy; \??\C:\Windows\system32\drivers\bfgqxiyy.sys [X]
S1 cqujjfee; \??\C:\Windows\system32\drivers\cqujjfee.sys [X]
S1 csisulnu; \??\C:\Windows\system32\drivers\csisulnu.sys [X]
S1 csxyacra; \??\C:\Windows\system32\drivers\csxyacra.sys [X]
S1 cydwjspr; \??\C:\Windows\system32\drivers\cydwjspr.sys [X]
S1 dabwldhm; \??\C:\Windows\system32\drivers\dabwldhm.sys [X]
S1 ddajttop; \??\C:\Windows\system32\drivers\ddajttop.sys [X]
S1 ddupyfwv; \??\C:\Windows\system32\drivers\ddupyfwv.sys [X]
S1 dluncnwn; \??\C:\Windows\system32\drivers\dluncnwn.sys [X]
S1 dqfrttdy; \??\C:\Windows\system32\drivers\dqfrttdy.sys [X]
S1 dvqdrgkq; \??\C:\Windows\system32\drivers\dvqdrgkq.sys [X]
S1 dwsgmadd; \??\C:\Windows\system32\drivers\dwsgmadd.sys [X]
S1 eamrruhz; \??\C:\Windows\system32\drivers\eamrruhz.sys [X]
S1 edutkrlb; \??\C:\Windows\system32\drivers\edutkrlb.sys [X]
S1 egkphurb; \??\C:\Windows\system32\drivers\egkphurb.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S1 ezjusnnt; \??\C:\Windows\system32\drivers\ezjusnnt.sys [X]
S1 fdvfoimd; \??\C:\Windows\system32\drivers\fdvfoimd.sys [X]
S1 flekfwxv; \??\C:\Windows\system32\drivers\flekfwxv.sys [X]
S1 fmxcyhcc; \??\C:\Windows\system32\drivers\fmxcyhcc.sys [X]
S1 ftzodlmr; \??\C:\Windows\system32\drivers\ftzodlmr.sys [X]
S1 gbzrxafh; \??\C:\Windows\system32\drivers\gbzrxafh.sys [X]
S1 gdhzpdqj; \??\C:\Windows\system32\drivers\gdhzpdqj.sys [X]
S1 geczhtye; \??\C:\Windows\system32\drivers\geczhtye.sys [X]
S1 gkrbaxec; \??\C:\Windows\system32\drivers\gkrbaxec.sys [X]
S1 grbbkggy; \??\C:\Windows\system32\drivers\grbbkggy.sys [X]
S1 gssbsdup; \??\C:\Windows\system32\drivers\gssbsdup.sys [X]
S1 gyglnrpt; \??\C:\Windows\system32\drivers\gyglnrpt.sys [X]
S1 hcgzbouo; \??\C:\Windows\system32\drivers\hcgzbouo.sys [X]
S1 hjgoeroa; \??\C:\Windows\system32\drivers\hjgoeroa.sys [X]
S1 hreapeyy; \??\C:\Windows\system32\drivers\hreapeyy.sys [X]
S1 hvjqvcnq; \??\C:\Windows\system32\drivers\hvjqvcnq.sys [X]
S1 imzgiqus; \??\C:\Windows\system32\drivers\imzgiqus.sys [X]
S1 iqnrlabo; \??\C:\Windows\system32\drivers\iqnrlabo.sys [X]
S1 irasxvcm; \??\C:\Windows\system32\drivers\irasxvcm.sys [X]
S1 irhrazzn; \??\C:\Windows\system32\drivers\irhrazzn.sys [X]
S1 isjfodzz; \??\C:\Windows\system32\drivers\isjfodzz.sys [X]
S1 iyhaubci; \??\C:\Windows\system32\drivers\iyhaubci.sys [X]
S1 jhjhxzbh; \??\C:\Windows\system32\drivers\jhjhxzbh.sys [X]
S1 jjpqrmhk; \??\C:\Windows\system32\drivers\jjpqrmhk.sys [X]
S1 joqempji; \??\C:\Windows\system32\drivers\joqempji.sys [X]
S1 jrvtmwcp; \??\C:\Windows\system32\drivers\jrvtmwcp.sys [X]
S1 jsppqmqa; \??\C:\Windows\system32\drivers\jsppqmqa.sys [X]
S1 jtichbtc; \??\C:\Windows\system32\drivers\jtichbtc.sys [X]
S1 jxeuxhie; \??\C:\Windows\system32\drivers\jxeuxhie.sys [X]
S1 kipgrzvf; \??\C:\Windows\system32\drivers\kipgrzvf.sys [X]
S1 ksgvcjkv; \??\C:\Windows\system32\drivers\ksgvcjkv.sys [X]
S1 lbvuduqm; \??\C:\Windows\system32\drivers\lbvuduqm.sys [X]
S1 mdpokfzv; \??\C:\Windows\system32\drivers\mdpokfzv.sys [X]
S1 mnnafsnd; \??\C:\Windows\system32\drivers\mnnafsnd.sys [X]
S1 mvwefqvp; \??\C:\Windows\system32\drivers\mvwefqvp.sys [X]
S1 nexkmdqz; \??\C:\Windows\system32\drivers\nexkmdqz.sys [X]
S1 nhluossm; \??\C:\Windows\system32\drivers\nhluossm.sys [X]
S1 nizpreuw; \??\C:\Windows\system32\drivers\nizpreuw.sys [X]
S1 nvtyopqy; \??\C:\Windows\system32\drivers\nvtyopqy.sys [X]
S1 nvucocgi; \??\C:\Windows\system32\drivers\nvucocgi.sys [X]
S1 ocycnmfz; \??\C:\Windows\system32\drivers\ocycnmfz.sys [X]
S1 oircfmes; \??\C:\Windows\system32\drivers\oircfmes.sys [X]
S1 ojiepxee; \??\C:\Windows\system32\drivers\ojiepxee.sys [X]
S1 omlznkwz; \??\C:\Windows\system32\drivers\omlznkwz.sys [X]
S1 orisuaaq; \??\C:\Windows\system32\drivers\orisuaaq.sys [X]
S1 peimsmup; \??\C:\Windows\system32\drivers\peimsmup.sys [X]
S1 pfubjuss; \??\C:\Windows\system32\drivers\pfubjuss.sys [X]
S1 pghoziaa; \??\C:\Windows\system32\drivers\pghoziaa.sys [X]
S1 pjvglwsd; \??\C:\Windows\system32\drivers\pjvglwsd.sys [X]
S1 pljhnxcj; \??\C:\Windows\system32\drivers\pljhnxcj.sys [X]
S1 pqjqanaa; \??\C:\Windows\system32\drivers\pqjqanaa.sys [X]
S1 psexixhx; \??\C:\Windows\system32\drivers\psexixhx.sys [X]
S1 qlrtopus; \??\C:\Windows\system32\drivers\qlrtopus.sys [X]
S1 qmdxejnk; \??\C:\Windows\system32\drivers\qmdxejnk.sys [X]
S1 qnelzqbr; \??\C:\Windows\system32\drivers\qnelzqbr.sys [X]
S1 qptidgqw; \??\C:\Windows\system32\drivers\qptidgqw.sys [X]
S1 qrivrflb; \??\C:\Windows\system32\drivers\qrivrflb.sys [X]
S1 qrrbnxve; \??\C:\Windows\system32\drivers\qrrbnxve.sys [X]
S1 qukhtqfi; \??\C:\Windows\system32\drivers\qukhtqfi.sys [X]
S1 rbyuprlm; \??\C:\Windows\system32\drivers\rbyuprlm.sys [X]
S1 rfylttov; \??\C:\Windows\system32\drivers\rfylttov.sys [X]
S1 rkqatcpo; \??\C:\Windows\system32\drivers\rkqatcpo.sys [X]
S1 rqxgtbwk; \??\C:\Windows\system32\drivers\rqxgtbwk.sys [X]
S1 rucjlbgs; \??\C:\Windows\system32\drivers\rucjlbgs.sys [X]
S1 ruedntro; \??\C:\Windows\system32\drivers\ruedntro.sys [X]
S1 sbynbmnb; \??\C:\Windows\system32\drivers\sbynbmnb.sys [X]
S1 sfacswqa; \??\C:\Windows\system32\drivers\sfacswqa.sys [X]
S1 sljpdusu; \??\C:\Windows\system32\drivers\sljpdusu.sys [X]
S1 szpcjrhz; \??\C:\Windows\system32\drivers\szpcjrhz.sys [X]
S1 tivhzvln; \??\C:\Windows\system32\drivers\tivhzvln.sys [X]
S1 tiwawwdm; \??\C:\Windows\system32\drivers\tiwawwdm.sys [X]
S1 tjgmqdoa; \??\C:\Windows\system32\drivers\tjgmqdoa.sys [X]
S1 tqumiuwx; \??\C:\Windows\system32\drivers\tqumiuwx.sys [X]
S1 twqptgtr; \??\C:\Windows\system32\drivers\twqptgtr.sys [X]
S1 ujruaynu; \??\C:\Windows\system32\drivers\ujruaynu.sys [X]
S1 utpurpzy; \??\C:\Windows\system32\drivers\utpurpzy.sys [X]
S1 uxgwvhyr; \??\C:\Windows\system32\drivers\uxgwvhyr.sys [X]
S1 vdmidpxr; \??\C:\Windows\system32\drivers\vdmidpxr.sys [X]
S1 visiqwhj; \??\C:\Windows\system32\drivers\visiqwhj.sys [X]
S1 vlnqcisc; \??\C:\Windows\system32\drivers\vlnqcisc.sys [X]
S1 vpyodnxg; \??\C:\Windows\system32\drivers\vpyodnxg.sys [X]
S1 vtofgbql; \??\C:\Windows\system32\drivers\vtofgbql.sys [X]
S1 vziptlpo; \??\C:\Windows\system32\drivers\vziptlpo.sys [X]
S1 wejlxzpt; \??\C:\Windows\system32\drivers\wejlxzpt.sys [X]
S1 wnbrnoct; \??\C:\Windows\system32\drivers\wnbrnoct.sys [X]
S1 wnryxycm; \??\C:\Windows\system32\drivers\wnryxycm.sys [X]
S1 xbchvinm; \??\C:\Windows\system32\drivers\xbchvinm.sys [X]
S1 xdtwsrut; \??\C:\Windows\system32\drivers\xdtwsrut.sys [X]
S1 xhsvmpns; \??\C:\Windows\system32\drivers\xhsvmpns.sys [X]
S1 xtcooykb; \??\C:\Windows\system32\drivers\xtcooykb.sys [X]
S1 xwfymbta; \??\C:\Windows\system32\drivers\xwfymbta.sys [X]
S1 xwntwzjt; \??\C:\Windows\system32\drivers\xwntwzjt.sys [X]
S1 yfcvfond; \??\C:\Windows\system32\drivers\yfcvfond.sys [X]
S1 yoamenaq; \??\C:\Windows\system32\drivers\yoamenaq.sys [X]
S1 ytvkntrx; \??\C:\Windows\system32\drivers\ytvkntrx.sys [X]
S1 yxvothff; \??\C:\Windows\system32\drivers\yxvothff.sys [X]
S1 zhwiehyv; \??\C:\Windows\system32\drivers\zhwiehyv.sys [X]
S1 znelfhpd; \??\C:\Windows\system32\drivers\znelfhpd.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-05-14 19:01 - 2014-05-14 19:01 - 00935175 _____ () C:\Users\Markéta\Desktop\RSITx64.exe
2014-05-14 18:55 - 2014-05-14 18:56 - 00035099 _____ () C:\Users\Markéta\Desktop\Addition.txt
2014-05-14 18:54 - 2014-05-14 19:10 - 00031254 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-05-14 18:52 - 2014-05-14 19:10 - 00000000 ____D () C:\FRST
2014-05-14 18:52 - 2014-05-14 18:52 - 02066944 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-05-14 18:51 - 2014-05-14 18:51 - 01056256 _____ (Farbar) C:\Users\Markéta\Downloads\FRST.exe
2014-05-14 18:40 - 2014-05-14 18:40 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-14 18:36 - 2014-05-14 18:36 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 18:31 - 2014-03-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 18:31 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-05-14 18:31 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-05-14 18:31 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-05-14 18:31 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-05-14 18:31 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-05-14 18:31 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 18:31 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-05-14 18:31 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-05-14 18:31 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-05-14 18:31 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-05-14 18:31 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-05-14 18:31 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-05-14 18:31 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-05-14 18:31 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-05-14 18:31 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-05-14 18:31 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-05-14 18:31 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-05-14 18:31 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-05-14 18:31 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-05-14 18:31 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-05-14 18:31 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-05-14 18:31 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-05-14 18:31 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-05-14 18:31 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-05-14 18:31 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-05-14 18:31 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-05-14 18:30 - 2014-03-06 12:21 - 23549440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 18:30 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 18:30 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-05-14 18:30 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-05-14 18:30 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-05-14 18:30 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-05-14 18:30 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-05-14 18:30 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-05-14 18:30 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-05-14 18:30 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-05-14 18:30 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-05-14 18:30 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-05-14 18:30 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-05-14 18:30 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-05-14 18:30 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-05-14 18:30 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-05-14 18:30 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-05-14 18:30 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-05-14 18:30 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-05-14 18:30 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-05-14 18:30 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-05-14 15:15 - 2014-05-14 15:15 - 00266288 _____ () C:\Windows\Minidump\051414-22916-01.dmp
2014-05-13 22:21 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-13 22:21 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-13 22:21 - 2014-03-25 04:43 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-13 22:21 - 2014-03-25 04:09 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-13 22:20 - 2014-04-12 04:22 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-13 22:20 - 2014-04-12 04:22 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-13 22:20 - 2014-04-12 04:19 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-13 22:20 - 2014-04-12 04:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-13 22:20 - 2014-04-12 04:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-13 22:20 - 2014-04-12 04:12 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-13 22:20 - 2014-04-12 04:10 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-13 22:20 - 2014-03-04 11:47 - 05550016 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-13 22:20 - 2014-03-04 11:44 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-13 22:20 - 2014-03-04 11:44 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-13 22:20 - 2014-03-04 11:43 - 00057344 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-13 22:20 - 2014-03-04 11:43 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-13 22:20 - 2014-03-04 11:20 - 03969984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-13 22:20 - 2014-03-04 11:20 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-13 22:20 - 2014-03-04 11:17 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00049664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00048128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-13 22:20 - 2014-03-04 11:17 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-13 22:20 - 2014-03-04 11:16 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2014-05-05 19:45 - 2014-05-05 19:45 - 00262144 _____ () C:\Windows\Minidump\050514-21621-01.dmp
2014-05-04 22:07 - 2014-05-04 22:07 - 00262144 _____ () C:\Windows\Minidump\050414-19905-01.dmp
2014-04-28 21:54 - 2014-04-28 21:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Řím
2014-04-28 16:04 - 2014-05-14 15:15 - 652134743 _____ () C:\Windows\MEMORY.DMP
2014-04-26 21:59 - 2014-05-14 18:38 - 00000784 _____ () C:\Windows\setupact.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00005614 _____ () C:\Windows\PFRO.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-26 21:55 - 2014-04-26 21:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\AVAST Software
2014-04-26 21:54 - 2014-05-14 15:19 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-04-26 21:54 - 2014-04-26 21:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-26 21:54 - 2014-04-26 21:54 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-26 21:54 - 2014-04-26 21:54 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-26 21:54 - 2014-04-26 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-26 21:53 - 2014-04-26 21:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-26 21:52 - 2014-04-26 21:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-16 21:17 - 2014-04-16 21:17 - 00000000 ____D () C:\Users\Markéta\Desktop\MAREDA
==================== One Month Modified Files and Folders =======
2014-05-14 19:10 - 2014-05-14 18:54 - 00031254 _____ () C:\Users\Markéta\Desktop\FRST.txt
2014-05-14 19:10 - 2014-05-14 18:52 - 00000000 ____D () C:\FRST
2014-05-14 19:02 - 2011-04-01 11:22 - 00000000 ____D () C:\Program Files\Trend Micro
2014-05-14 19:01 - 2014-05-14 19:01 - 00935175 _____ () C:\Users\Markéta\Desktop\RSITx64.exe
2014-05-14 18:56 - 2014-05-14 18:55 - 00035099 _____ () C:\Users\Markéta\Desktop\Addition.txt
2014-05-14 18:52 - 2014-05-14 18:52 - 02066944 _____ (Farbar) C:\Users\Markéta\Desktop\FRST64.exe
2014-05-14 18:51 - 2014-05-14 18:51 - 01056256 _____ (Farbar) C:\Users\Markéta\Downloads\FRST.exe
2014-05-14 18:47 - 2011-10-28 00:09 - 01373648 _____ () C:\Windows\WindowsUpdate.log
2014-05-14 18:45 - 2013-09-07 19:40 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Seznam.cz
2014-05-14 18:45 - 2012-05-06 12:01 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-05-14 18:44 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-14 18:44 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-14 18:43 - 2012-07-06 10:23 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001UA.job
2014-05-14 18:40 - 2014-05-14 18:40 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-05-14 18:40 - 2012-05-06 16:58 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 18:40 - 2012-05-06 16:58 - 00000000 ___RD () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 18:39 - 2011-10-28 00:32 - 00045056 _____ () C:\Windows\system32\acovcnt.exe
2014-05-14 18:39 - 2011-10-28 00:19 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-05-14 18:38 - 2014-04-26 21:59 - 00000784 _____ () C:\Windows\setupact.log
2014-05-14 18:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-14 18:36 - 2014-05-14 18:36 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 18:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 18:30 - 2013-08-19 13:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 18:28 - 2012-05-13 10:55 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-14 15:19 - 2014-04-26 21:54 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-05-14 15:15 - 2014-05-14 15:15 - 00266288 _____ () C:\Windows\Minidump\051414-22916-01.dmp
2014-05-14 15:15 - 2014-04-28 16:04 - 652134743 _____ () C:\Windows\MEMORY.DMP
2014-05-14 15:15 - 2013-10-24 20:57 - 00000000 ____D () C:\Windows\Minidump
2014-05-14 15:05 - 2012-07-06 10:23 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2433656295-3828255777-3043481375-1001Core.job
2014-05-14 10:24 - 2012-05-06 16:59 - 00000000 ____D () C:\Users\Markéta\Documents\Bluetooth Folder
2014-05-14 04:38 - 2012-05-13 15:22 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\Skype
2014-05-13 22:50 - 2012-05-12 22:19 - 00000000 ____D () C:\Users\Markéta\AppData\Local\CrashDumps
2014-05-09 08:14 - 2014-05-13 22:21 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-13 22:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-05 19:45 - 2014-05-05 19:45 - 00262144 _____ () C:\Windows\Minidump\050514-21621-01.dmp
2014-05-04 22:07 - 2014-05-04 22:07 - 00262144 _____ () C:\Windows\Minidump\050414-19905-01.dmp
2014-05-04 21:20 - 2011-02-19 07:36 - 00680996 _____ () C:\Windows\system32\perfh005.dat
2014-05-04 21:20 - 2011-02-19 07:36 - 00145706 _____ () C:\Windows\system32\perfc005.dat
2014-05-04 21:20 - 2009-07-14 07:13 - 01617142 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-28 21:54 - 2014-04-28 21:54 - 00000000 ____D () C:\Users\Markéta\Desktop\Řím
2014-04-28 21:42 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-04-26 22:00 - 2011-10-28 00:33 - 00002364 _____ () C:\Windows\system32\AutoRunFilter.ini
2014-04-26 21:59 - 2014-04-26 21:59 - 00005614 _____ () C:\Windows\PFRO.log
2014-04-26 21:59 - 2014-04-26 21:59 - 00000000 _____ () C:\Windows\setuperr.log
2014-04-26 21:59 - 2012-05-06 16:58 - 00001399 _____ () C:\Users\Markéta\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-04-26 21:59 - 2011-10-28 00:33 - 00001440 _____ () C:\Windows\system32\ServiceFilter.ini
2014-04-26 21:55 - 2014-04-26 21:55 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\AVAST Software
2014-04-26 21:54 - 2014-04-26 21:54 - 01039096 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00423240 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00334648 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-26 21:54 - 2014-04-26 21:54 - 00208416 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00085328 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-26 21:54 - 2014-04-26 21:54 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-26 21:54 - 2014-04-26 21:54 - 00001968 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-04-26 21:54 - 2014-04-26 21:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-26 21:54 - 2012-06-24 22:42 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-04-26 21:53 - 2014-04-26 21:53 - 00000000 ____D () C:\Program Files\AVAST Software
2014-04-26 21:52 - 2014-04-26 21:52 - 00000000 ____D () C:\ProgramData\AVAST Software
2014-04-26 21:44 - 2011-04-01 11:24 - 00000000 ____D () C:\ProgramData\Trend Micro
2014-04-26 21:40 - 2013-12-04 21:37 - 00000000 ____D () C:\Program Files\GridinSoft Trojan Killer
2014-04-26 21:32 - 2013-12-04 22:10 - 00001808 _____ () C:\sc-cleaner.txt
2014-04-26 21:22 - 2011-04-01 11:19 - 00000000 ____D () C:\Program Files (x86)\ASUS
2014-04-26 21:16 - 2012-05-07 11:55 - 00000000 ____D () C:\Program Files (x86)\OpenOffice.org 3
2014-04-26 20:56 - 2012-07-06 10:12 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-04-26 20:56 - 2012-05-13 15:22 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-04-16 21:17 - 2014-04-16 21:17 - 00000000 ____D () C:\Users\Markéta\Desktop\MAREDA
2014-04-15 23:14 - 2012-05-07 22:21 - 00000000 ____D () C:\Users\Markéta\AppData\Roaming\SoftGrid Client
Some content of TEMP:
====================
C:\Users\Markéta\AppData\Local\Temp\Quarantine.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe
[2014-05-13 22:20] - [2014-03-04 11:43] - 0455168 ____A (Microsoft Corporation) 88AB9B72B4BF3963A0DE0820B4B0B06C
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-05-04 21:53
==================== End Of Log ============================
Re: preventivní kontrola
Zdravim 
Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
Stahnete RKill http://download.bleepingcomputer.com/grinler/rkill.com
- Pokud ho havet blokuje, pouzijte jeden z nasledujicich - i ty prejmenovane
Rkill EXE:
http://download.bleepingcomputer.com/grinler/rkill.exe
Rkill iExplore.exe:
http://download.bleepingcomputer.com/gr ... xplore.exe
Rkill uSeRiNiT.exe:
http://download.bleepingcomputer.com/gr ... eRiNiT.exe
Rkill WiNlOgOn.exe:
http://download.bleepingcomputer.com/gr ... NlOgOn.exe - Ulozte nejlepena plochu a ukoncete vsechny aplikace (jinak to udela RKill za Vas)
- Spustte tradicne dvojklikem - program probehne do par sekund a ukonci i svou cinnost
- RKill ukonci vsechny ne-systemove procesy - tedy i procesy, pod kterymi bezi havet
- Na plose vznikne log Rkill.txt ten mi sem vlozte
- Ted nerestartujte PC - prisli byste o ucinek RKillu
Stahnete a ulozte na plochu Combofix http://download.bleepingcomputer.com/sUBs/ComboFix.exe
- Vypnete vsechny rezidentni bezpecnostní programy - firewally, antiviry, antispywary apod.
- Pokud mate Win XP spustte pod uctem Spravce\Administratora
- Pokud mate Win Vista ci Win 7, kliknete na Combofix pravym a dejte Run As Administrator ci Spustit jako spravce
- Ihned po startu se zobrazi stranka s licencnim ujednanim, pokracujte kliknutim na Ano
- Pokud Vam CF nabidne instalaci Konzoly pro zotaveni, tak souhlaste
- Dale postupujte dle pokynu, behem scanu nechte PC naprosto v klidu - nespoustejte zadne aplikace a neklikejte do zobrazujiciho se okna
- Scan by mel trvat cca 10 min, ale pokud bude PC hodne zaneseno, muze se cas prodlouzit
- Po dokonceni skenu a pripadnem restartu CF zobrazi log, pripadne jej najdete zde C:\ComboFix.txt, jeho obsah sem vlozte
- Detailni postup vc. obrazku mate zde http://www.bleepingcomputer.com/combofi ... t-combofix
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?