Zpomalení internetu, prosím pomoc.
Napsal: 01 črc 2014 11:34
Dobrý den, před 2 dny se mi stala nemilá věc, internet zpomalil tak, že většina stránek se ani nenačte. Bohužel se jedná jen o mé PC na ostatních to běží normálně. Zde je log, děkuji.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-06-2014 02
Ran by Pepa (administrator) on ADMIN-HP on 01-07-2014 12:29:11
Running from C:\Users\Pepa\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(MyWebSearch.com) C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-03] (ActivIdentity)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-03] (ActivIdentity)
HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2009-11-04] ()
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [563736 2009-06-18] (PDF Complete Inc)
HKLM-x32\...\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [11266048 2010-01-19] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [124512 2007-05-21] (CANON INC.)
HKLM-x32\...\Run: [YouCam Service] => "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirror Tray icon] => C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912 2009-06-11] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-06] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-06-27] (Hewlett-Packard)
HKLM-x32\...\runonceex: [ContentMerger] - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-13] (Sonic Solutions)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [MyWebSearch Email Plugin] => C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE [38408 2012-06-22] (MyWebSearch.com)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Google Update] => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-16] (Google Inc.)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Facebook Update] => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-28] (Facebook Inc.)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Nástroj pro stahování na pozadí.lnk
ShortcutTarget: SolidWorks Nástroj pro stahování na pozadí.lnk -> C:\Program Files (x86)\Common Files\Manažer instalací SolidWorks\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
URLSearchHook: HKCU - (No Name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
URLSearchHook: HKCU - (No Name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://search.mywebsearch.com/mywebsear ... earchTerms}
SearchScopes: HKCU - DefaultScope {B02A426E-A6F9-491A-B22E-0DA35E1F5046} URL =
SearchScopes: HKCU - {2C33E84D-FA5F-492A-9DE8-55FBD80FB52F} URL = http://websearch.ask.com/redirect?clien ... 4AF3CE7E5C
SearchScopes: HKCU - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://search.mywebsearch.com/mywebsear ... earchTerms}
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {00A6FAF1-072E-44cf-8957-5838F569A31D} - No File
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/v ... .2.5.7.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.88.1
FireFox:
========
FF ProfilePath: C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\p9nl52cj.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @mywebsearch.com/Plugin - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll (MyWebSearch.com)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-15]
FF HKLM-x32\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files (x86)\MyWebSearch\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\MyWebSearch\bar\1.bin [2012-06-22]
==================== Services (Whitelisted) =================
R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-06] (AVAST Software)
R3 DEBridge; C:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe [704512 2010-02-01] (McAfee, Inc.) [File not signed]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [462088 2010-03-12] (DigitalPersona, Inc.)
S3 FLCDLOCK; C:\Windows\SysWOW64\flcdlock.exe [362040 2009-12-07] (Hewlett-Packard Ltd)
R2 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2010-01-12] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [281192 2010-02-01] (McAfee, Inc.)
R2 HPFSService; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [297984 2010-01-19] (Hewlett-Packard) [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-06-10] ()
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-17] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-06] ()
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [40760 2009-10-21] (Hewlett-Packard Development Company L.P.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-01-16] (DT Soft Ltd)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [58184 2010-02-01] (McAfee, Inc.)
R1 RsvLock; C:\Windows\SysWow64\Drivers\RsvLock.sys [40088 2010-02-01] (McAfee, Inc.)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [56648 2010-02-01] () [File not signed]
R0 SafeBoot; C:\Windows\SysWow64\Drivers\SafeBoot.sys [110520 2010-02-01] (McAfee, Inc.)
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [60160 2009-06-04] (McAfee, Inc.)
R0 SbAlg; C:\Windows\SysWow64\Drivers\SbAlg.sys [51800 2010-02-01] (McAfee, Inc.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [15688 2010-02-01] (McAfee, Inc.)
R0 SbFsLock; C:\Windows\SysWow64\Drivers\SbFsLock.sys [13256 2010-02-01] (McAfee, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2012-01-15] () [File not signed]
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
U3 awg1urit; C:\Windows\System32\Drivers\awg1urit.sys [0 ] (Intel Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-01 12:29 - 2014-07-01 12:29 - 00017206 _____ () C:\Users\Pepa\Desktop\FRST.txt
2014-07-01 12:28 - 2014-07-01 12:29 - 00000000 ____D () C:\FRST
2014-07-01 12:27 - 2014-07-01 12:27 - 00112640 _____ (forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
2014-06-30 20:47 - 2014-06-30 20:52 - 02083328 _____ (Farbar) C:\Users\Pepa\Desktop\FRST64.exe
2014-06-30 20:26 - 2014-06-30 20:26 - 00000000 ____D () C:\Users\Pepa\Documents\Electronic Arts
2014-06-30 16:50 - 2014-06-30 16:50 - 00000127 _____ () C:\Users\Pepa\Documents\Vtip-fotbal.txt
2014-06-30 13:01 - 2014-07-01 11:12 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForPepa.job
2014-06-30 13:01 - 2014-06-30 13:01 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForPepa
2014-06-29 14:34 - 2014-06-30 12:19 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieUserList
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieSiteList
2014-06-23 17:56 - 2014-06-23 18:01 - 63433476 _____ () C:\Users\Pepa\Downloads\[S] Komplet.zip
2014-06-23 16:12 - 2014-06-23 16:19 - 63433476 _____ () C:\Users\Pepa\Downloads\OSUQLKeYKRoouja.htm
2014-06-12 20:53 - 2014-06-12 20:53 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku (1).odt
2014-06-12 20:52 - 2014-06-12 20:52 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku.odt
2014-06-12 07:08 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 07:08 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 07:08 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 07:08 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 07:08 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 07:08 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 07:08 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 07:08 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 07:08 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 07:08 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 07:08 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 07:08 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 07:08 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 07:08 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 07:08 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 07:08 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 07:08 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 07:08 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 07:08 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 07:08 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 07:08 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 07:08 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 07:08 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 07:08 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 07:08 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 07:08 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 07:08 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 07:08 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 07:08 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 07:08 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 07:08 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 07:08 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 07:08 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 07:08 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 07:08 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 07:08 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 07:08 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 07:08 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 07:08 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 07:08 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 07:08 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 07:08 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 07:08 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 07:08 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 07:08 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 07:08 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 07:08 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 07:08 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 07:08 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 07:08 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 07:08 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 07:08 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 07:08 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 07:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 07:08 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 07:08 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 07:08 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 07:08 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 07:08 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 07:08 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 07:08 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 07:08 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 07:08 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 07:08 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 07:04 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 07:04 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-10 19:39 - 2014-06-22 19:42 - 00000000 ____D () C:\Users\Verunka\Desktop\MIlášek - Saňďulka
2014-06-08 19:33 - 2014-06-22 11:47 - 00000000 ____D () C:\Users\Verunka\Desktop\BFF!
2014-06-08 12:51 - 2014-06-08 12:51 - 00071288 _____ () C:\Users\Verunka\Desktop\Saly.pptx
2014-06-02 19:57 - 2014-06-02 19:57 - 04989659 _____ () C:\Users\Verunka\Downloads\Lina's video_WMV V9.wmv
2014-06-02 18:11 - 2014-06-02 18:12 - 11823715 _____ () C:\Users\Verunka\Downloads\164_savany.ppsx
2014-06-02 14:02 - 2014-06-30 20:02 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForVerunka.job
2014-06-02 14:02 - 2014-06-20 14:02 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForVerunka
2014-06-01 20:37 - 2014-06-01 20:37 - 02936943 _____ () C:\Users\Verunka\Downloads\stolen dance.wma
2014-06-01 12:44 - 2014-06-01 12:44 - 02936943 _____ () C:\Users\Verunka\Desktop\stolen dance.wma
2014-06-01 12:39 - 2014-06-01 12:39 - 03583503 _____ () C:\Users\Verunka\Downloads\Bez názvu.wma
==================== One Month Modified Files and Folders =======
2014-07-01 12:29 - 2014-07-01 12:29 - 00017206 _____ () C:\Users\Pepa\Desktop\FRST.txt
2014-07-01 12:29 - 2014-07-01 12:28 - 00000000 ____D () C:\FRST
2014-07-01 12:27 - 2014-07-01 12:27 - 00112640 _____ (forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
2014-07-01 12:23 - 2012-10-21 11:21 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job
2014-07-01 12:23 - 2012-10-21 11:21 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job
2014-07-01 12:10 - 2012-01-15 21:51 - 00672136 _____ () C:\Windows\system32\perfh005.dat
2014-07-01 12:10 - 2012-01-15 21:51 - 00142732 _____ () C:\Windows\system32\perfc005.dat
2014-07-01 12:10 - 2009-07-14 07:13 - 01593150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-01 12:06 - 2012-04-02 20:18 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-01 11:59 - 2012-03-14 15:02 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job
2014-07-01 11:59 - 2012-01-15 13:04 - 01680307 _____ () C:\Windows\WindowsUpdate.log
2014-07-01 11:22 - 2012-03-27 20:17 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job
2014-07-01 11:20 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-01 11:20 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-01 11:16 - 2012-01-15 17:59 - 00000000 ____D () C:\Users\Pepa\AppData\Roaming\Skype
2014-07-01 11:13 - 2012-01-15 13:07 - 00000000 ____D () C:\ProgramData\HPQLOG
2014-07-01 11:12 - 2014-06-30 13:01 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForPepa.job
2014-07-01 11:12 - 2012-01-15 13:37 - 00417176 _____ () C:\Windows\PFRO.log
2014-07-01 11:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 11:12 - 2009-07-14 06:51 - 00133037 _____ () C:\Windows\setupact.log
2014-06-30 21:49 - 2012-10-28 13:44 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job
2014-06-30 20:52 - 2014-06-30 20:47 - 02083328 _____ (Farbar) C:\Users\Pepa\Desktop\FRST64.exe
2014-06-30 20:34 - 2012-01-18 20:38 - 01637376 ___SH () C:\Users\Pepa\Thumbs.db
2014-06-30 20:34 - 2012-01-15 14:45 - 00000000 ____D () C:\Users\Pepa
2014-06-30 20:32 - 2012-11-01 18:00 - 00000000 ____D () C:\Users\Pepa\Documents\KOM
2014-06-30 20:29 - 2012-01-15 17:59 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-30 20:28 - 2012-01-15 13:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-30 20:28 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-30 20:26 - 2014-06-30 20:26 - 00000000 ____D () C:\Users\Pepa\Documents\Electronic Arts
2014-06-30 20:24 - 2012-04-12 19:47 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-30 20:23 - 2012-07-27 10:31 - 00000000 ____D () C:\Users\Pepa\AppData\Local\Google
2014-06-30 20:23 - 2012-01-15 17:47 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-06-30 20:22 - 2012-03-27 20:17 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job
2014-06-30 20:02 - 2014-06-02 14:02 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForVerunka.job
2014-06-30 19:59 - 2012-03-14 15:02 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job
2014-06-30 16:50 - 2014-06-30 16:50 - 00000127 _____ () C:\Users\Pepa\Documents\Vtip-fotbal.txt
2014-06-30 13:01 - 2014-06-30 13:01 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForPepa
2014-06-30 13:01 - 2012-03-04 18:35 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-06-30 13:00 - 2013-02-25 18:47 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-30 12:49 - 2012-10-28 13:44 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job
2014-06-30 12:19 - 2014-06-29 14:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-25 10:46 - 2012-01-15 13:07 - 00000000 ____D () C:\ProgramData\PDFC
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieUserList
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieSiteList
2014-06-24 11:20 - 2012-04-26 14:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-23 18:01 - 2014-06-23 17:56 - 63433476 _____ () C:\Users\Pepa\Downloads\[S] Komplet.zip
2014-06-23 16:19 - 2014-06-23 16:12 - 63433476 _____ () C:\Users\Pepa\Downloads\OSUQLKeYKRoouja.htm
2014-06-23 10:54 - 2014-05-11 17:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-22 20:40 - 2012-04-13 20:07 - 00000000 ____D () C:\Users\Verunka\AppData\Roaming\Skype
2014-06-22 19:42 - 2014-06-10 19:39 - 00000000 ____D () C:\Users\Verunka\Desktop\MIlášek - Saňďulka
2014-06-22 11:47 - 2014-06-08 19:33 - 00000000 ____D () C:\Users\Verunka\Desktop\BFF!
2014-06-20 14:02 - 2014-06-02 14:02 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForVerunka
2014-06-20 12:18 - 2012-10-21 11:21 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA
2014-06-20 12:18 - 2012-10-21 11:21 - 00003552 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core
2014-06-17 07:04 - 1601-01-01 08:16 - 00000000 ____D () C:\Users\Verunka\AppData\Local\CrashDumps
2014-06-13 08:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-13 07:08 - 2014-05-06 15:52 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 21:54 - 2013-08-19 21:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 21:52 - 2012-01-15 14:13 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 21:52 - 2012-01-15 13:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 20:53 - 2014-06-12 20:53 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku (1).odt
2014-06-12 20:52 - 2014-06-12 20:52 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku.odt
2014-06-08 16:18 - 2012-04-13 20:00 - 00000000 ____D () C:\Users\Verunka\AppData\Roaming\Mozilla
2014-06-08 12:51 - 2014-06-08 12:51 - 00071288 _____ () C:\Users\Verunka\Desktop\Saly.pptx
2014-06-08 11:13 - 2014-06-12 07:04 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 07:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-02 19:57 - 2014-06-02 19:57 - 04989659 _____ () C:\Users\Verunka\Downloads\Lina's video_WMV V9.wmv
2014-06-02 18:12 - 2014-06-02 18:11 - 11823715 _____ () C:\Users\Verunka\Downloads\164_savany.ppsx
2014-06-02 13:49 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-01 20:37 - 2014-06-01 20:37 - 02936943 _____ () C:\Users\Verunka\Downloads\stolen dance.wma
2014-06-01 12:45 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-06-01 12:44 - 2014-06-01 12:44 - 02936943 _____ () C:\Users\Verunka\Desktop\stolen dance.wma
2014-06-01 12:39 - 2014-06-01 12:39 - 03583503 _____ () C:\Users\Verunka\Downloads\Bez názvu.wma
Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\HPQSi.exe
C:\Users\Pepa\AppData\Local\Temp\APNStub.exe
C:\Users\Pepa\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Pepa\AppData\Local\Temp\htmlayout.dll
C:\Users\Pepa\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\Resource.exe
C:\Users\Pepa\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Pepa\AppData\Local\Temp\sp55118.exe
C:\Users\Pepa\AppData\Local\Temp\sp58915.exe
C:\Users\Pepa\AppData\Local\Temp\sp64126.exe
C:\Users\Pepa\AppData\Local\Temp\tbedrs.dll
C:\Users\Pepa\AppData\Local\Temp\tbuTor.dll
C:\Users\Pepa\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Pepa\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Pepa\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Pepa\AppData\Local\Temp\utt94E3.tmp.exe
C:\Users\Pepa\AppData\Local\Temp\~5479.exe
C:\Users\Pepa\AppData\Local\Temp\~F7DA.exe
C:\Users\Verunka\AppData\Local\Temp\CAMERA.EXE
C:\Users\Verunka\AppData\Local\Temp\DaleSearchTB.exe
C:\Users\Verunka\AppData\Local\Temp\EAD27CA.exe
C:\Users\Verunka\AppData\Local\Temp\EAD2FCB.exe
C:\Users\Verunka\AppData\Local\Temp\EAD3B4A.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4807.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4A67.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4AF4.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4E5D.exe
C:\Users\Verunka\AppData\Local\Temp\EAD51C7.exe
C:\Users\Verunka\AppData\Local\Temp\EAD52FF.exe
C:\Users\Verunka\AppData\Local\Temp\EAD538B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5821.exe
C:\Users\Verunka\AppData\Local\Temp\EAD58D8.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5F5E.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5F83.exe
C:\Users\Verunka\AppData\Local\Temp\EAD61DD.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6518.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6528.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6952.exe
C:\Users\Verunka\AppData\Local\Temp\EAD7177.exe
C:\Users\Verunka\AppData\Local\Temp\EAD733B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD7A5D.exe
C:\Users\Verunka\AppData\Local\Temp\EAD858B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD8BE9.exe
C:\Users\Verunka\AppData\Local\Temp\EAD8DBF.exe
C:\Users\Verunka\AppData\Local\Temp\EAD9349.exe
C:\Users\Verunka\AppData\Local\Temp\EAD9772.exe
C:\Users\Verunka\AppData\Local\Temp\EADA1E9.exe
C:\Users\Verunka\AppData\Local\Temp\EADA2F2.exe
C:\Users\Verunka\AppData\Local\Temp\EADAA8D.exe
C:\Users\Verunka\AppData\Local\Temp\EADAD70.exe
C:\Users\Verunka\AppData\Local\Temp\EADADBB.exe
C:\Users\Verunka\AppData\Local\Temp\EADB395.exe
C:\Users\Verunka\AppData\Local\Temp\EADB82C.exe
C:\Users\Verunka\AppData\Local\Temp\EADB8E2.exe
C:\Users\Verunka\AppData\Local\Temp\EADB8E3.exe
C:\Users\Verunka\AppData\Local\Temp\EADC4E3.exe
C:\Users\Verunka\AppData\Local\Temp\EADC69E.exe
C:\Users\Verunka\AppData\Local\Temp\EADCE1B.exe
C:\Users\Verunka\AppData\Local\Temp\EADCF80.exe
C:\Users\Verunka\AppData\Local\Temp\EADDB75.exe
C:\Users\Verunka\AppData\Local\Temp\EADDF65.exe
C:\Users\Verunka\AppData\Local\Temp\EADE467.exe
C:\Users\Verunka\AppData\Local\Temp\EADE9EA.exe
C:\Users\Verunka\AppData\Local\Temp\EADEFBF.exe
C:\Users\Verunka\AppData\Local\Temp\EADF0B4.exe
C:\Users\Verunka\AppData\Local\Temp\EADFF86.exe
C:\Users\Verunka\AppData\Local\Temp\Extract.exe
C:\Users\Verunka\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Verunka\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Verunka\AppData\Local\Temp\Second Life Setup.exe
C:\Users\Verunka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Verunka\AppData\Local\Temp\SP54099.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 18:08
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:458.48 GB) (Free:363.93 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:5.27 GB) (Free:0.66 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Available physical RAM: 2280.16 MB
Total physical RAM: 3959.29 MB
Percentage of memory in use: 42%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 40095B4C)
Partition 1: (Active) - (Size=2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=458 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPepa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForVerunka.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Pepa\Desktop" je 2 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-06-2014 02
Ran by Pepa (administrator) on ADMIN-HP on 01-07-2014 12:29:11
Running from C:\Users\Pepa\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ActivIdentity) C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe
(Hewlett-Packard Development Company, L.P) C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\Shared\hpqwmiex.exe
(McAfee, Inc.) C:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\acevents.exe
(ActivIdentity) C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(MyWebSearch.com) C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\coreshredder.exe
(CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(DigitalPersona, Inc.) C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpAgent.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSA_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11855976 2013-08-29] (Realtek Semiconductor)
HKLM\...\Run: [acevents] => C:\Program Files\ActivIdentity\ActivClient\acevents.exe [196648 2009-06-03] (ActivIdentity)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [accrdsub] => C:\Program Files\ActivIdentity\ActivClient\accrdsub.exe [483880 2009-06-03] (ActivIdentity)
HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [111640 2009-11-04] ()
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [563736 2009-06-18] (PDF Complete Inc)
HKLM-x32\...\Run: [File Sanitizer] => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe [11266048 2010-01-19] (Hewlett-Packard)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-25] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.EXE [124512 2007-05-21] (CANON INC.)
HKLM-x32\...\Run: [YouCam Service] => "C:\Program Files (x86)\CyberLink\YouCam\YouCamService.exe" /s
HKLM-x32\...\Run: [UCam_Menu] => C:\Program Files (x86)\CyberLink\YouCam\MUITransfer\MUIStartMenu.exe [222504 2009-05-19] (CyberLink Corp.)
HKLM-x32\...\Run: [YouCam Mirror Tray icon] => C:\Program Files (x86)\CyberLink\YouCam\YouCamTray.exe [162912 2009-06-11] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3890208 2014-06-06] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\RunOnce: [NCPluginUpdater] - "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update [21720 2014-06-27] (Hewlett-Packard)
HKLM-x32\...\runonceex: [ContentMerger] - C:\Program Files (x86)\Common Files\Roxio Shared\10.0\SharedCOM\ContentMerger10.exe [19952 2009-06-13] (Sonic Solutions)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\DeviceNP-x32: DeviceNP.dll [X]
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [MyWebSearch Email Plugin] => C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSOEMON.EXE [38408 2012-06-22] (MyWebSearch.com)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [EA Core] => "C:\Program Files (x86)\Electronic Arts\EADM\Core.exe" -silent
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Google Update] => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2012-09-16] (Google Inc.)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Facebook Update] => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2012-10-28] (Facebook Inc.)
HKU\S-1-5-21-2930985485-2842992419-4121695988-1004\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SolidWorks Nástroj pro stahování na pozadí.lnk
ShortcutTarget: SolidWorks Nástroj pro stahování na pozadí.lnk -> C:\Program Files (x86)\Common Files\Manažer instalací SolidWorks\BackgroundDownloading\sldBgDwld.exe (Dassault Systèmes SolidWorks Corp.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
URLSearchHook: HKCU - (No Name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files (x86)\MyWebSearch\bar\1.bin\MWSSRCAS.DLL (MyWebSearch.com)
URLSearchHook: HKCU - (No Name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - No File
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://search.mywebsearch.com/mywebsear ... earchTerms}
SearchScopes: HKCU - DefaultScope {B02A426E-A6F9-491A-B22E-0DA35E1F5046} URL =
SearchScopes: HKCU - {2C33E84D-FA5F-492A-9DE8-55FBD80FB52F} URL = http://websearch.ask.com/redirect?clien ... 4AF3CE7E5C
SearchScopes: HKCU - {56256A51-B582-467e-B8D4-7786EDA79AE0} URL = http://search.mywebsearch.com/mywebsear ... earchTerms}
BHO: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll (Hewlett-Packard)
BHO-x32: No Name - {00A6FAF1-072E-44cf-8957-5838F569A31D} - No File
BHO-x32: File Sanitizer for HP ProtectTools - {3134413B-49B4-425C-98A5-893C1F195601} - C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\IEBHO.dll (Hewlett-Packard)
BHO-x32: HP ProtectTools Security Manager Extension - {395610AE-C624-4f58-B89E-23733EA00F9A} - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpOtsPluginIe8.dll (DigitalPersona, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - avast! WebRep - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
DPF: HKLM-x32 {4871A87A-BFDD-4106-8153-FFDE2BAC2967} http://dlm.tools.akamai.com/dlmanager/v ... .2.5.7.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.88.1
FireFox:
========
FF ProfilePath: C:\Users\Pepa\AppData\Roaming\Mozilla\Firefox\Profiles\p9nl52cj.default
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: Google
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @mywebsearch.com/Plugin - C:\Program Files (x86)\MyWebSearch\bar\1.bin\NPMyWebS.dll (MyWebSearch.com)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\FirefoxExt
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-15]
FF HKLM-x32\...\Firefox\Extensions: [m3ffxtbr@mywebsearch.com] - C:\Program Files (x86)\MyWebSearch\bar\1.bin
FF Extension: No Name - C:\Program Files (x86)\MyWebSearch\bar\1.bin [2012-06-22]
==================== Services (Whitelisted) =================
R2 ac.sharedstore; C:\Program Files\Common Files\ActivIdentity\ac.sharedstore.exe [277032 2009-06-03] (ActivIdentity)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-05-06] (AVAST Software)
R3 DEBridge; C:\Program Files\Hewlett-Packard\Drive Encryption\SbHpAuthenticatorService.exe [704512 2010-02-01] (McAfee, Inc.) [File not signed]
R2 DpHost; C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DpHostW.exe [462088 2010-03-12] (DigitalPersona, Inc.)
S3 FLCDLOCK; C:\Windows\SysWOW64\flcdlock.exe [362040 2009-12-07] (Hewlett-Packard Ltd)
R2 HP ProtectTools Service; C:\Program Files (x86)\Hewlett-Packard\2009 Password Filter for HP ProtectTools\PTChangeFilterService.exe [36864 2010-01-12] (Hewlett-Packard Development Company, L.P) [File not signed]
R2 HP Support Assistant Service; C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [92160 2013-11-04] (Hewlett-Packard Company) [File not signed]
R2 HpFkCryptService; C:\Program Files\Hewlett-Packard\Drive Encryption\HpFkCrypt.exe [281192 2010-02-01] (McAfee, Inc.)
R2 HPFSService; C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\HPFSService.exe [297984 2010-01-19] (Hewlett-Packard) [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [635416 2009-06-18] (PDF Complete Inc)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2012-06-10] ()
==================== Drivers (Whitelisted) ====================
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-05-06] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-05-06] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-05-06] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-05-06] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1039096 2014-05-17] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [423240 2014-05-17] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [85328 2014-05-17] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [208416 2014-05-06] ()
S3 DAMDrv; C:\Windows\System32\DRIVERS\DAMDrv64.sys [40760 2009-10-21] (Hewlett-Packard Development Company L.P.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2012-01-16] (DT Soft Ltd)
R1 RsvLock; C:\Windows\System32\Drivers\RsvLock.sys [58184 2010-02-01] (McAfee, Inc.)
R1 RsvLock; C:\Windows\SysWow64\Drivers\RsvLock.sys [40088 2010-02-01] (McAfee, Inc.)
R0 SafeBoot; C:\Windows\System32\Drivers\SafeBoot.sys [56648 2010-02-01] () [File not signed]
R0 SafeBoot; C:\Windows\SysWow64\Drivers\SafeBoot.sys [110520 2010-02-01] (McAfee, Inc.)
R0 SbAlg; C:\Windows\System32\Drivers\SbAlg.sys [60160 2009-06-04] (McAfee, Inc.)
R0 SbAlg; C:\Windows\SysWow64\Drivers\SbAlg.sys [51800 2010-02-01] (McAfee, Inc.)
R0 SbFsLock; C:\Windows\System32\Drivers\SbFsLock.sys [15688 2010-02-01] (McAfee, Inc.)
R0 SbFsLock; C:\Windows\SysWow64\Drivers\SbFsLock.sys [13256 2010-02-01] (McAfee, Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2012-01-15] () [File not signed]
S2 WCMVCAM; C:\Windows\System32\DRIVERS\wcmvcam64.sys [1071032 2012-04-15] (Windows (R) Win 7 DDK provider)
U3 awg1urit; C:\Windows\System32\Drivers\awg1urit.sys [0 ] (Intel Corporation)
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 lmimirr; system32\DRIVERS\lmimirr.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-07-01 12:29 - 2014-07-01 12:29 - 00017206 _____ () C:\Users\Pepa\Desktop\FRST.txt
2014-07-01 12:28 - 2014-07-01 12:29 - 00000000 ____D () C:\FRST
2014-07-01 12:27 - 2014-07-01 12:27 - 00112640 _____ (forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
2014-06-30 20:47 - 2014-06-30 20:52 - 02083328 _____ (Farbar) C:\Users\Pepa\Desktop\FRST64.exe
2014-06-30 20:26 - 2014-06-30 20:26 - 00000000 ____D () C:\Users\Pepa\Documents\Electronic Arts
2014-06-30 16:50 - 2014-06-30 16:50 - 00000127 _____ () C:\Users\Pepa\Documents\Vtip-fotbal.txt
2014-06-30 13:01 - 2014-07-01 11:12 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForPepa.job
2014-06-30 13:01 - 2014-06-30 13:01 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForPepa
2014-06-29 14:34 - 2014-06-30 12:19 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieUserList
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieSiteList
2014-06-23 17:56 - 2014-06-23 18:01 - 63433476 _____ () C:\Users\Pepa\Downloads\[S] Komplet.zip
2014-06-23 16:12 - 2014-06-23 16:19 - 63433476 _____ () C:\Users\Pepa\Downloads\OSUQLKeYKRoouja.htm
2014-06-12 20:53 - 2014-06-12 20:53 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku (1).odt
2014-06-12 20:52 - 2014-06-12 20:52 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku.odt
2014-06-12 07:08 - 2014-05-30 12:21 - 23414784 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-12 07:08 - 2014-05-30 12:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-12 07:08 - 2014-05-30 12:02 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-06-12 07:08 - 2014-05-30 11:45 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-12 07:08 - 2014-05-30 11:39 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-06-12 07:08 - 2014-05-30 11:39 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-12 07:08 - 2014-05-30 11:38 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-06-12 07:08 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-12 07:08 - 2014-05-30 11:27 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-12 07:08 - 2014-05-30 11:24 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-12 07:08 - 2014-05-30 11:21 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-06-12 07:08 - 2014-05-30 11:21 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-06-12 07:08 - 2014-05-30 11:20 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-06-12 07:08 - 2014-05-30 11:18 - 17271296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-12 07:08 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-12 07:08 - 2014-05-30 11:08 - 05782528 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-12 07:08 - 2014-05-30 11:06 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-12 07:08 - 2014-05-30 11:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-12 07:08 - 2014-05-30 10:55 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-06-12 07:08 - 2014-05-30 10:49 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-12 07:08 - 2014-05-30 10:46 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-12 07:08 - 2014-05-30 10:44 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-06-12 07:08 - 2014-05-30 10:44 - 00295424 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-12 07:08 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-12 07:08 - 2014-05-30 10:42 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-06-12 07:08 - 2014-05-30 10:38 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-12 07:08 - 2014-05-30 10:35 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-12 07:08 - 2014-05-30 10:34 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-12 07:08 - 2014-05-30 10:33 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-12 07:08 - 2014-05-30 10:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-12 07:08 - 2014-05-30 10:29 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-12 07:08 - 2014-05-30 10:28 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-06-12 07:08 - 2014-05-30 10:27 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-06-12 07:08 - 2014-05-30 10:24 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-06-12 07:08 - 2014-05-30 10:23 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-12 07:08 - 2014-05-30 10:16 - 00368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-12 07:08 - 2014-05-30 10:10 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-06-12 07:08 - 2014-05-30 10:06 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-12 07:08 - 2014-05-30 10:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-12 07:08 - 2014-05-30 10:02 - 00242688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-12 07:08 - 2014-05-30 09:56 - 04244992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-12 07:08 - 2014-05-30 09:56 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-12 07:08 - 2014-05-30 09:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-12 07:08 - 2014-05-30 09:50 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-06-12 07:08 - 2014-05-30 09:49 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-12 07:08 - 2014-05-30 09:43 - 13522944 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-12 07:08 - 2014-05-30 09:40 - 11725312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-12 07:08 - 2014-05-30 09:30 - 01398272 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-12 07:08 - 2014-05-30 09:21 - 01790976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-12 07:08 - 2014-05-30 09:15 - 01143296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-12 07:08 - 2014-05-30 09:13 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-12 07:08 - 2014-05-30 09:13 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-06-12 07:08 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-12 07:08 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-12 07:08 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-12 07:08 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-12 07:08 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-12 07:08 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-12 07:08 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-12 07:08 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-12 07:08 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-12 07:08 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-12 07:08 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-12 07:08 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-12 07:04 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-12 07:04 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-10 19:39 - 2014-06-22 19:42 - 00000000 ____D () C:\Users\Verunka\Desktop\MIlášek - Saňďulka
2014-06-08 19:33 - 2014-06-22 11:47 - 00000000 ____D () C:\Users\Verunka\Desktop\BFF!
2014-06-08 12:51 - 2014-06-08 12:51 - 00071288 _____ () C:\Users\Verunka\Desktop\Saly.pptx
2014-06-02 19:57 - 2014-06-02 19:57 - 04989659 _____ () C:\Users\Verunka\Downloads\Lina's video_WMV V9.wmv
2014-06-02 18:11 - 2014-06-02 18:12 - 11823715 _____ () C:\Users\Verunka\Downloads\164_savany.ppsx
2014-06-02 14:02 - 2014-06-30 20:02 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForVerunka.job
2014-06-02 14:02 - 2014-06-20 14:02 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForVerunka
2014-06-01 20:37 - 2014-06-01 20:37 - 02936943 _____ () C:\Users\Verunka\Downloads\stolen dance.wma
2014-06-01 12:44 - 2014-06-01 12:44 - 02936943 _____ () C:\Users\Verunka\Desktop\stolen dance.wma
2014-06-01 12:39 - 2014-06-01 12:39 - 03583503 _____ () C:\Users\Verunka\Downloads\Bez názvu.wma
==================== One Month Modified Files and Folders =======
2014-07-01 12:29 - 2014-07-01 12:29 - 00017206 _____ () C:\Users\Pepa\Desktop\FRST.txt
2014-07-01 12:29 - 2014-07-01 12:28 - 00000000 ____D () C:\FRST
2014-07-01 12:27 - 2014-07-01 12:27 - 00112640 _____ (forum.viry.cz) C:\Users\Pepa\Desktop\FRSTLauncher.exe
2014-07-01 12:23 - 2012-10-21 11:21 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job
2014-07-01 12:23 - 2012-10-21 11:21 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job
2014-07-01 12:10 - 2012-01-15 21:51 - 00672136 _____ () C:\Windows\system32\perfh005.dat
2014-07-01 12:10 - 2012-01-15 21:51 - 00142732 _____ () C:\Windows\system32\perfc005.dat
2014-07-01 12:10 - 2009-07-14 07:13 - 01593150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-01 12:06 - 2012-04-02 20:18 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-01 11:59 - 2012-03-14 15:02 - 00000970 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job
2014-07-01 11:59 - 2012-01-15 13:04 - 01680307 _____ () C:\Windows\WindowsUpdate.log
2014-07-01 11:22 - 2012-03-27 20:17 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job
2014-07-01 11:20 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-01 11:20 - 2009-07-14 06:45 - 00009920 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-01 11:16 - 2012-01-15 17:59 - 00000000 ____D () C:\Users\Pepa\AppData\Roaming\Skype
2014-07-01 11:13 - 2012-01-15 13:07 - 00000000 ____D () C:\ProgramData\HPQLOG
2014-07-01 11:12 - 2014-06-30 13:01 - 00000328 _____ () C:\Windows\Tasks\HPCeeScheduleForPepa.job
2014-07-01 11:12 - 2012-01-15 13:37 - 00417176 _____ () C:\Windows\PFRO.log
2014-07-01 11:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 11:12 - 2009-07-14 06:51 - 00133037 _____ () C:\Windows\setupact.log
2014-06-30 21:49 - 2012-10-28 13:44 - 00000936 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job
2014-06-30 20:52 - 2014-06-30 20:47 - 02083328 _____ (Farbar) C:\Users\Pepa\Desktop\FRST64.exe
2014-06-30 20:34 - 2012-01-18 20:38 - 01637376 ___SH () C:\Users\Pepa\Thumbs.db
2014-06-30 20:34 - 2012-01-15 14:45 - 00000000 ____D () C:\Users\Pepa
2014-06-30 20:32 - 2012-11-01 18:00 - 00000000 ____D () C:\Users\Pepa\Documents\KOM
2014-06-30 20:29 - 2012-01-15 17:59 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-06-30 20:28 - 2012-01-15 13:06 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-30 20:28 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-06-30 20:26 - 2014-06-30 20:26 - 00000000 ____D () C:\Users\Pepa\Documents\Electronic Arts
2014-06-30 20:24 - 2012-04-12 19:47 - 00000000 ____D () C:\Program Files (x86)\Google
2014-06-30 20:23 - 2012-07-27 10:31 - 00000000 ____D () C:\Users\Pepa\AppData\Local\Google
2014-06-30 20:23 - 2012-01-15 17:47 - 00000000 ____D () C:\Program Files (x86)\DsNET Corp
2014-06-30 20:22 - 2012-03-27 20:17 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job
2014-06-30 20:02 - 2014-06-02 14:02 - 00000340 _____ () C:\Windows\Tasks\HPCeeScheduleForVerunka.job
2014-06-30 19:59 - 2012-03-14 15:02 - 00000918 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job
2014-06-30 16:50 - 2014-06-30 16:50 - 00000127 _____ () C:\Users\Pepa\Documents\Vtip-fotbal.txt
2014-06-30 13:01 - 2014-06-30 13:01 - 00003180 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForPepa
2014-06-30 13:01 - 2012-03-04 18:35 - 00000052 _____ () C:\Windows\SysWOW64\DOErrors.log
2014-06-30 13:00 - 2013-02-25 18:47 - 00000000 _____ () C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2014-06-30 12:49 - 2012-10-28 13:44 - 00000914 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job
2014-06-30 12:19 - 2014-06-29 14:34 - 00000000 ____D () C:\Program Files (x86)\VideoLAN
2014-06-25 10:46 - 2012-01-15 13:07 - 00000000 ____D () C:\ProgramData\PDFC
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieUserList
2014-06-24 14:32 - 2014-06-24 14:32 - 00000000 __SHD () C:\Users\Pepa\AppData\Local\EmieSiteList
2014-06-24 11:20 - 2012-04-26 14:31 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-23 18:01 - 2014-06-23 17:56 - 63433476 _____ () C:\Users\Pepa\Downloads\[S] Komplet.zip
2014-06-23 16:19 - 2014-06-23 16:12 - 63433476 _____ () C:\Users\Pepa\Downloads\OSUQLKeYKRoouja.htm
2014-06-23 10:54 - 2014-05-11 17:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-22 20:40 - 2012-04-13 20:07 - 00000000 ____D () C:\Users\Verunka\AppData\Roaming\Skype
2014-06-22 19:42 - 2014-06-10 19:39 - 00000000 ____D () C:\Users\Verunka\Desktop\MIlášek - Saňďulka
2014-06-22 11:47 - 2014-06-08 19:33 - 00000000 ____D () C:\Users\Verunka\Desktop\BFF!
2014-06-20 14:02 - 2014-06-02 14:02 - 00003198 _____ () C:\Windows\System32\Tasks\HPCeeScheduleForVerunka
2014-06-20 12:18 - 2012-10-21 11:21 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA
2014-06-20 12:18 - 2012-10-21 11:21 - 00003552 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core
2014-06-17 07:04 - 1601-01-01 08:16 - 00000000 ____D () C:\Users\Verunka\AppData\Local\CrashDumps
2014-06-13 08:00 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-13 07:08 - 2014-05-06 15:52 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-12 21:54 - 2013-08-19 21:39 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-12 21:52 - 2012-01-15 14:13 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-12 21:52 - 2012-01-15 13:55 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-06-12 20:53 - 2014-06-12 20:53 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku (1).odt
2014-06-12 20:52 - 2014-06-12 20:52 - 00027481 _____ () C:\Users\Verunka\Downloads\Shrnuti_a_opakovani_uciva_6._rocniku.odt
2014-06-08 16:18 - 2012-04-13 20:00 - 00000000 ____D () C:\Users\Verunka\AppData\Roaming\Mozilla
2014-06-08 12:51 - 2014-06-08 12:51 - 00071288 _____ () C:\Users\Verunka\Desktop\Saly.pptx
2014-06-08 11:13 - 2014-06-12 07:04 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-12 07:04 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-02 19:57 - 2014-06-02 19:57 - 04989659 _____ () C:\Users\Verunka\Downloads\Lina's video_WMV V9.wmv
2014-06-02 18:12 - 2014-06-02 18:11 - 11823715 _____ () C:\Users\Verunka\Downloads\164_savany.ppsx
2014-06-02 13:49 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2014-06-01 20:37 - 2014-06-01 20:37 - 02936943 _____ () C:\Users\Verunka\Downloads\stolen dance.wma
2014-06-01 12:45 - 2009-07-14 06:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2014-06-01 12:44 - 2014-06-01 12:44 - 02936943 _____ () C:\Users\Verunka\Desktop\stolen dance.wma
2014-06-01 12:39 - 2014-06-01 12:39 - 03583503 _____ () C:\Users\Verunka\Downloads\Bez názvu.wma
Some content of TEMP:
====================
C:\Users\Admin\AppData\Local\Temp\HPQSi.exe
C:\Users\Pepa\AppData\Local\Temp\APNStub.exe
C:\Users\Pepa\AppData\Local\Temp\HPHelpUpdater.exe
C:\Users\Pepa\AppData\Local\Temp\htmlayout.dll
C:\Users\Pepa\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u17-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\jre-7u21-windows-i586-iftw.exe
C:\Users\Pepa\AppData\Local\Temp\Resource.exe
C:\Users\Pepa\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Pepa\AppData\Local\Temp\sp55118.exe
C:\Users\Pepa\AppData\Local\Temp\sp58915.exe
C:\Users\Pepa\AppData\Local\Temp\sp64126.exe
C:\Users\Pepa\AppData\Local\Temp\tbedrs.dll
C:\Users\Pepa\AppData\Local\Temp\tbuTor.dll
C:\Users\Pepa\AppData\Local\Temp\UninstallEADM.dll
C:\Users\Pepa\AppData\Local\Temp\UninstallHPSA.exe
C:\Users\Pepa\AppData\Local\Temp\UninstallHPTCA.exe
C:\Users\Pepa\AppData\Local\Temp\utt94E3.tmp.exe
C:\Users\Pepa\AppData\Local\Temp\~5479.exe
C:\Users\Pepa\AppData\Local\Temp\~F7DA.exe
C:\Users\Verunka\AppData\Local\Temp\CAMERA.EXE
C:\Users\Verunka\AppData\Local\Temp\DaleSearchTB.exe
C:\Users\Verunka\AppData\Local\Temp\EAD27CA.exe
C:\Users\Verunka\AppData\Local\Temp\EAD2FCB.exe
C:\Users\Verunka\AppData\Local\Temp\EAD3B4A.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4807.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4A67.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4AF4.exe
C:\Users\Verunka\AppData\Local\Temp\EAD4E5D.exe
C:\Users\Verunka\AppData\Local\Temp\EAD51C7.exe
C:\Users\Verunka\AppData\Local\Temp\EAD52FF.exe
C:\Users\Verunka\AppData\Local\Temp\EAD538B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5821.exe
C:\Users\Verunka\AppData\Local\Temp\EAD58D8.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5F5E.exe
C:\Users\Verunka\AppData\Local\Temp\EAD5F83.exe
C:\Users\Verunka\AppData\Local\Temp\EAD61DD.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6518.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6528.exe
C:\Users\Verunka\AppData\Local\Temp\EAD6952.exe
C:\Users\Verunka\AppData\Local\Temp\EAD7177.exe
C:\Users\Verunka\AppData\Local\Temp\EAD733B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD7A5D.exe
C:\Users\Verunka\AppData\Local\Temp\EAD858B.exe
C:\Users\Verunka\AppData\Local\Temp\EAD8BE9.exe
C:\Users\Verunka\AppData\Local\Temp\EAD8DBF.exe
C:\Users\Verunka\AppData\Local\Temp\EAD9349.exe
C:\Users\Verunka\AppData\Local\Temp\EAD9772.exe
C:\Users\Verunka\AppData\Local\Temp\EADA1E9.exe
C:\Users\Verunka\AppData\Local\Temp\EADA2F2.exe
C:\Users\Verunka\AppData\Local\Temp\EADAA8D.exe
C:\Users\Verunka\AppData\Local\Temp\EADAD70.exe
C:\Users\Verunka\AppData\Local\Temp\EADADBB.exe
C:\Users\Verunka\AppData\Local\Temp\EADB395.exe
C:\Users\Verunka\AppData\Local\Temp\EADB82C.exe
C:\Users\Verunka\AppData\Local\Temp\EADB8E2.exe
C:\Users\Verunka\AppData\Local\Temp\EADB8E3.exe
C:\Users\Verunka\AppData\Local\Temp\EADC4E3.exe
C:\Users\Verunka\AppData\Local\Temp\EADC69E.exe
C:\Users\Verunka\AppData\Local\Temp\EADCE1B.exe
C:\Users\Verunka\AppData\Local\Temp\EADCF80.exe
C:\Users\Verunka\AppData\Local\Temp\EADDB75.exe
C:\Users\Verunka\AppData\Local\Temp\EADDF65.exe
C:\Users\Verunka\AppData\Local\Temp\EADE467.exe
C:\Users\Verunka\AppData\Local\Temp\EADE9EA.exe
C:\Users\Verunka\AppData\Local\Temp\EADEFBF.exe
C:\Users\Verunka\AppData\Local\Temp\EADF0B4.exe
C:\Users\Verunka\AppData\Local\Temp\EADFF86.exe
C:\Users\Verunka\AppData\Local\Temp\Extract.exe
C:\Users\Verunka\AppData\Local\Temp\firefoxjre_exe.exe
C:\Users\Verunka\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\Verunka\AppData\Local\Temp\Second Life Setup.exe
C:\Users\Verunka\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Verunka\AppData\Local\Temp\SP54099.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-06-28 18:08
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:458.48 GB) (Free:363.93 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:5.27 GB) (Free:0.66 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Available physical RAM: 2280.16 MB
Total physical RAM: 3959.29 MB
Percentage of memory in use: 42%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 40095B4C)
Partition 1: (Active) - (Size=2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=458 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job => C:\Users\Verunka\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005Core.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1005UA.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006Core.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2930985485-2842992419-4121695988-1006UA.job => C:\Users\Verunka\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForPepa.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForVerunka.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\Temp:373E1720
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Pepa\Desktop" je 2 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================