dobrý den mám hodně pomaly pc
Napsal: 23 srp 2014 14:34
po spuštění winxp je vytížení CPU kolem 100% a to tam není nic spuštěného , můžete mi pomoci ??
přidávám log z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-08-2014
Ran by Pc22 (administrator) on PC2-4EB8CD18A33 on 23-08-2014 15:22:41
Running from C:\Documents and Settings\Pc22\Dokumenty
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() C:\Program Files\Apache Group\Apache\Apache.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\portcommunicationservice\PCSVC.exe
() C:\Program Files\Apache Group\Apache\Apache.exe
(HP) C:\WINDOWS\system32\HPSIsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(SEIKO EPSON Corp.) C:\WINDOWS\system32\ESDUSBMon.exe
(alch) C:\Program Files\ClamWin\bin\ClamTray.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\tv_w32.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
() C:\Program Files\Opera\23.0.1522.77\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [EpsonAPD4SV] => C:\Program Files\EPSON\EPSON Advanced Printer Driver 4\Tools\EAPSV\EAPSV.EXE [210368 2011-06-07] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [ESDUSBMon.exe] => C:\WINDOWS\system32\ESDUSBMon.exe [188416 2005-05-26] (SEIKO EPSON Corp.)
HKLM\...\Run: [ClamWin] => C:\Program Files\ClamWin\bin\ClamTray.exe [86016 2014-01-26] (alch)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1229272821-1993962763-682003330-1004\...\Policies\Explorer: [TaskbarNoNotification] 0
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0b6fd1cf-1036-44fd-ab99-1fae182223e0} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... rceid=IE_5
SearchScopes: HKCU - {33ba8f9c-9524-4b6c-9c20-8bb7666af523} URL = http://search.seznam.cz/?q={searchTerms}&sourceid=IE_5
SearchScopes: HKCU - {a082286d-3a04-421c-897a-2b622d06b88f} URL = http://www.firmy.cz/?q={searchTerms}&sourceid=IE_5
SearchScopes: HKCU - {bd991d5c-13c5-42e1-a78d-2d1ec56f990a} URL = http://www.mapy.cz/?query={searchTerms}&sourceid=IE_5
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {1663ed6a-23eb-11d2-b92f-008048fdd814} http://localhost/ffs/pagesetup/smsx.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Tcpip\..\Interfaces\{0957387A-11B7-46DA-A46F-D89B68D8B5EF}: [NameServer] 8.8.8.8
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @IObit.com/np_Asc_Plugin -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-08-31]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-06-17]
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [861184 2014-08-19] (Adobe Systems Incorporated) [File not signed]
S4 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 Apache; C:\Program Files\Apache Group\Apache\Apache.exe [20480 2001-02-28] () [File not signed]
S3 aspnet_state; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [629248 2014-08-19] (Microsoft Corporation) [File not signed]
S3 CiSvc; C:\WINDOWS\system32\cisvc.exe [610816 2014-08-19] (Microsoft Corporation) [File not signed]
S3 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [636928 2014-08-19] (Microsoft Corporation) [File not signed]
S3 clr_optimization_v2.0.50727_32; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [664576 2014-08-19] (Microsoft Corporation) [File not signed]
S3 COMSysApp; C:\WINDOWS\system32\dllhost.exe [610304 2014-08-19] (Microsoft Corporation) [File not signed]
S2 dmadmin; C:\WINDOWS\System32\dmadmin.exe [827392 2014-08-23] (Microsoft Corp., Veritas Software) [File not signed]
S2 EPSON ESCPOS Status Service; C:\WINDOWS\system32\EpStsSrv.exe [679936 2014-08-23] (SEIKO EPSON Corp.) [File not signed]
S2 EPSON_Device_Control_Log_Service; C:\Program Files\epson\portcommunicationservice\DeviceControlLog.exe [937984 2014-08-23] (SEIKO EPSON CORPORATION) [File not signed]
R2 EPSON_Port_Communication_Service; C:\Program Files\epson\portcommunicationservice\PCSVC.exe [1033728 2014-08-23] (SEIKO EPSON CORPORATION) [File not signed]
S2 gusvc; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [733184 2014-08-19] (Google) [File not signed]
S2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [247352 2010-05-11] (HP)
R2 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [1474560 2014-08-19] (Microsoft Corporation) [File not signed]
S2 ImapiService; C:\WINDOWS\system32\imapi.exe [755712 2014-08-19] (Microsoft Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [779264 2014-08-23] (Oracle Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [1014272 2014-08-23] (Malwarebytes Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [1297408 2014-08-23] (Malwarebytes Corporation) [File not signed]
S4 mnmsrvc; C:\WINDOWS\system32\mnmsrvc.exe [634880 2014-08-19] (Microsoft Corporation) [File not signed]
S3 MSDTC; C:\WINDOWS\system32\msdtc.exe [609792 2014-08-19] (Microsoft Corporation) [File not signed]
S2 MSIServer; C:\WINDOWS\System32\msiexec.exe [681984 2014-08-19] (Microsoft Corporation) [File not signed]
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [642048 2014-08-19] (Microsoft Corporation) [File not signed]
S4 NetDDE; C:\WINDOWS\system32\netdde.exe [716800 2014-08-19] (Microsoft Corporation) [File not signed]
S4 NetDDEdsdm; C:\WINDOWS\system32\netdde.exe [716800 2014-08-19] (Microsoft Corporation) [File not signed]
R2 NVSvc; C:\WINDOWS\system32\nvsvc32.exe [757760 2014-08-23] (NVIDIA Corporation) [File not signed]
S4 RDSessMgr; C:\WINDOWS\system32\sessmgr.exe [747520 2014-08-19] (Microsoft Corporation) [File not signed]
S3 RpcLocator; C:\WINDOWS\system32\locator.exe [680448 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SCardSvr; C:\WINDOWS\System32\SCardSvr.exe [703488 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe [610304 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SysmonLog; C:\WINDOWS\system32\smlogsvc.exe [693760 2014-08-19] (Microsoft Corporation) [File not signed]
S3 UPS; C:\WINDOWS\System32\ups.exe [623616 2014-08-19] (Microsoft Corporation) [File not signed]
S3 VSS; C:\WINDOWS\System32\vssvc.exe [895488 2014-08-19] () [File not signed]
R2 WmiApSrv; C:\WINDOWS\system32\wbem\wmiapsrv.exe [731136 2014-08-19] (Microsoft Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [244040 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [295944 2013-03-15] (SafeNet Inc.)
R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R2 EPSON_PCS_Parallel_Port_Driver; C:\WINDOWS\system32\DRIVERS\pcslpt.sys [19592 2011-08-10] (SEIKO EPSON CORPORATION)
R2 Esdpdx01; C:\WINDOWS\system32\Drivers\ESDPDX01.SYS [95485 2006-05-11] (MK Systems CO., LTD.) [File not signed]
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [608136 2013-03-15] (SafeNet Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1171464 2006-07-27] (SigmaTel, Inc.)
R3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esihdrv; \??\C:\DOCUME~1\Pc22\LOCALS~1\Temp\esihdrv.sys [X]
S4 IntelIde; No ImagePath
U3 TlntSvr;
U5 TMUSB; C:\WINDOWS\System32\DRIVERS\TMUSBXP.SYS [48256 2006-05-11] (SEIKO EPSON Corp.)
U3 TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys [X]
U3 mbr; \??\C:\DOCUME~1\Pc22\LOCALS~1\Temp\mbr.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-23 15:22 - 2014-08-23 15:23 - 00013247 _____ () C:\Documents and Settings\Pc22\Dokumenty\FRST.txt
2014-08-23 15:22 - 2014-08-23 15:22 - 00000000 ____D () C:\FRST
2014-08-23 15:21 - 2014-08-23 15:22 - 01094656 _____ (Farbar) C:\Documents and Settings\Pc22\Dokumenty\FRST.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Pc22\Dokumenty\FRSTLauncher.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00029696 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\MSGBOX.EXE
2014-08-23 15:21 - 2014-08-23 15:21 - 00015327 _____ () C:\Documents and Settings\Pc22\Plocha\LM.bat
2014-08-23 15:15 - 2014-08-23 15:15 - 00014715 _____ () C:\ComboFix.txt
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp
2014-08-23 15:07 - 2014-08-23 15:07 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-08-23 15:01 - 2014-08-23 15:19 - 00000000 ____D () C:\Qoobox
2014-08-23 15:01 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2014-08-23 15:01 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2014-08-23 15:01 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2014-08-23 14:59 - 2014-08-23 15:00 - 05572006 ____R (Swearware) C:\Documents and Settings\Pc22\Dokumenty\ComboFix.exe
2014-08-23 14:54 - 2014-08-23 14:54 - 00000642 _____ () C:\WINDOWS\setupapi.log
2014-08-23 14:45 - 2014-08-23 15:11 - 00001366 _____ () C:\WINDOWS\EpsStmMon3.log
2014-08-23 14:45 - 2014-08-23 15:11 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-23 14:44 - 2014-08-23 15:11 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-08-23 14:44 - 2014-08-23 14:44 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-08-23 14:43 - 2014-08-23 15:01 - 00000456 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-23 14:42 - 2014-08-23 15:12 - 00020770 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-23 14:41 - 2014-08-23 15:14 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-08-23 14:36 - 2014-08-23 14:44 - 00827392 ____T (Microsoft Corp., Veritas Software) C:\WINDOWS\system32\dmadmin.exe
2014-08-23 13:49 - 2014-08-23 13:52 - 71098368 _____ () C:\Documents and Settings\Pc22\Dokumenty\eav_nt32_enu.msi
2014-08-23 13:49 - 2014-08-23 13:49 - 101262137 _____ (alch ) C:\Documents and Settings\Pc22\Plocha\clamwin-0.98.4.1-setup.exe
2014-08-23 13:49 - 2014-08-23 13:49 - 02937264 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\SysInspector.exe
2014-08-23 13:47 - 2014-08-23 13:47 - 01695680 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\eset_nod32_antivirus_live_installer_.exe
2014-08-21 18:50 - 2014-08-23 13:46 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000827 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-08-20 09:49 - 2014-08-22 18:19 - 00000003 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\faahdeca35.nls
2014-08-20 09:38 - 2014-08-20 09:38 - 30449664 _____ () C:\WINDOWS\system32\config\software.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 04943872 _____ () C:\WINDOWS\system32\config\default.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iodefrag.bak
2014-08-20 09:32 - 2014-08-20 09:32 - 30449664 _____ () C:\WINDOWS\system32\config\software.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 04943872 _____ () C:\WINDOWS\system32\config\default.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iobit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Program Files\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Advanced SystemCare 7
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ProductData
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-20 09:26 - 2014-08-20 09:26 - 41736680 _____ (IObit ) C:\Documents and Settings\Pc22\Dokumenty\advanced-systemcare-setup.exe
2014-08-19 08:57 - 2014-08-19 08:57 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-08-19 08:22 - 2014-08-23 14:58 - 00000003 _____ () C:\Documents and Settings\All Users\Data aplikací\faahdeca35.nls
2014-08-19 08:22 - 2014-08-21 22:58 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Vueqa
2014-08-19 08:22 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Qysiaq
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-23 15:23 - 2014-08-23 15:22 - 00013247 _____ () C:\Documents and Settings\Pc22\Dokumenty\FRST.txt
2014-08-23 15:23 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22\Local Settings\Temp
2014-08-23 15:22 - 2014-08-23 15:22 - 00000000 ____D () C:\FRST
2014-08-23 15:22 - 2014-08-23 15:21 - 01094656 _____ (Farbar) C:\Documents and Settings\Pc22\Dokumenty\FRST.exe
2014-08-23 15:22 - 2011-08-31 16:18 - 00000000 ___RD () C:\Documents and Settings\Pc22\Dokumenty
2014-08-23 15:21 - 2014-08-23 15:21 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Pc22\Dokumenty\FRSTLauncher.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00029696 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\MSGBOX.EXE
2014-08-23 15:21 - 2014-08-23 15:21 - 00015327 _____ () C:\Documents and Settings\Pc22\Plocha\LM.bat
2014-08-23 15:21 - 2011-08-31 16:18 - 00000000 ___HD () C:\Documents and Settings\Pc22\Local Settings\Data aplikací
2014-08-23 15:21 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha
2014-08-23 15:19 - 2014-08-23 15:01 - 00000000 ____D () C:\Qoobox
2014-08-23 15:15 - 2014-08-23 15:15 - 00014715 _____ () C:\ComboFix.txt
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp
2014-08-23 15:15 - 2011-08-31 16:14 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-08-23 15:15 - 2011-08-31 16:12 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-08-23 15:14 - 2014-08-23 14:41 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-08-23 15:12 - 2014-08-23 14:42 - 00020770 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-23 15:11 - 2014-08-23 14:45 - 00001366 _____ () C:\WINDOWS\EpsStmMon3.log
2014-08-23 15:11 - 2014-08-23 14:45 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-23 15:11 - 2014-08-23 14:44 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-08-23 15:11 - 2011-08-31 17:15 - 00081409 _____ () C:\WINDOWS\system32\nvapps.xml
2014-08-23 15:09 - 2011-08-31 16:12 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\Temp
2014-08-23 15:09 - 2008-04-14 14:00 - 00000227 _____ () C:\WINDOWS\system.ini
2014-08-23 15:08 - 2011-08-31 16:14 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-23 15:07 - 2014-08-23 15:07 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-08-23 15:07 - 2011-08-31 16:18 - 00000178 ___SH () C:\Documents and Settings\Pc22\ntuser.ini
2014-08-23 15:07 - 2011-08-31 10:53 - 30449664 _____ () C:\WINDOWS\system32\config\software.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 05767168 _____ () C:\WINDOWS\system32\config\system.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 04980736 _____ () C:\WINDOWS\system32\config\default.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-08-23 15:02 - 2011-08-31 16:18 - 00000000 __RHD () C:\Documents and Settings\Pc22\Data aplikací
2014-08-23 15:01 - 2014-08-23 14:43 - 00000456 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-23 15:00 - 2014-08-23 14:59 - 05572006 ____R (Swearware) C:\Documents and Settings\Pc22\Dokumenty\ComboFix.exe
2014-08-23 14:58 - 2014-08-19 08:22 - 00000003 _____ () C:\Documents and Settings\All Users\Data aplikací\faahdeca35.nls
2014-08-23 14:56 - 2013-02-06 23:20 - 00000000 ____D () C:\WINDOWS\pss
2014-08-23 14:56 - 2011-08-31 10:53 - 00000239 ___SH () C:\boot.ini
2014-08-23 14:56 - 2008-04-14 14:00 - 00000477 _____ () C:\WINDOWS\win.ini
2014-08-23 14:54 - 2014-08-23 14:54 - 00000642 _____ () C:\WINDOWS\setupapi.log
2014-08-23 14:44 - 2014-08-23 14:44 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-08-23 14:44 - 2014-08-23 14:36 - 00827392 ____T (Microsoft Corp., Veritas Software) C:\WINDOWS\system32\dmadmin.exe
2014-08-23 14:43 - 2011-08-31 16:08 - 00000000 ____D () C:\WINDOWS\Registration
2014-08-23 14:41 - 2013-08-14 16:14 - 00000000 ____D () C:\Temp
2014-08-23 14:25 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22
2014-08-23 14:18 - 2012-02-02 20:52 - 00679936 ____T (SEIKO EPSON Corp.) C:\WINDOWS\system32\EpStsSrv.exe
2014-08-23 14:13 - 2011-08-31 17:15 - 00757760 ____T (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
2014-08-23 14:12 - 2012-06-16 17:06 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-08-23 14:12 - 2011-08-31 10:54 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-08-23 13:55 - 2011-08-31 17:11 - 00000000 ____D () C:\Soft
2014-08-23 13:52 - 2014-08-23 13:49 - 71098368 _____ () C:\Documents and Settings\Pc22\Dokumenty\eav_nt32_enu.msi
2014-08-23 13:51 - 2011-08-31 16:18 - 00000000 ___HD () C:\Documents and Settings\Pc22\Šablony
2014-08-23 13:51 - 2011-08-31 10:54 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-08-23 13:49 - 2014-08-23 13:49 - 101262137 _____ (alch ) C:\Documents and Settings\Pc22\Plocha\clamwin-0.98.4.1-setup.exe
2014-08-23 13:49 - 2014-08-23 13:49 - 02937264 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\SysInspector.exe
2014-08-23 13:47 - 2014-08-23 13:47 - 01695680 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\eset_nod32_antivirus_live_installer_.exe
2014-08-23 13:46 - 2014-08-21 18:50 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-23 13:36 - 2013-04-14 09:30 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\podklady pro prodej skutru
2014-08-23 13:36 - 2013-03-20 13:37 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\firebird
2014-08-23 10:49 - 2008-04-14 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-08-22 18:19 - 2014-08-20 09:49 - 00000003 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\faahdeca35.nls
2014-08-21 23:49 - 2011-08-31 16:08 - 00000000 ____D () C:\WINDOWS\system32\Restore
2014-08-21 23:00 - 2011-09-04 12:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2115168$
2014-08-21 23:00 - 2011-08-31 17:25 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\WinRAR
2014-08-21 22:58 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Vueqa
2014-08-21 18:50 - 2014-08-21 18:50 - 00000827 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2011-08-31 10:54 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-08-21 15:10 - 2013-04-22 11:57 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\Foto POHORI CESTA DUBEN 2013
2014-08-20 09:38 - 2014-08-20 09:38 - 30449664 _____ () C:\WINDOWS\system32\config\software.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 04943872 _____ () C:\WINDOWS\system32\config\default.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iodefrag.bak
2014-08-20 09:32 - 2014-08-20 09:32 - 30449664 _____ () C:\WINDOWS\system32\config\software.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 04943872 _____ () C:\WINDOWS\system32\config\default.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iobit
2014-08-20 09:29 - 2014-04-22 20:13 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Apple Computer
2014-08-20 09:29 - 2013-04-11 19:46 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Program Files\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Advanced SystemCare 7
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ProductData
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-20 09:28 - 2013-04-11 19:46 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\IObit
2014-08-20 09:26 - 2014-08-20 09:26 - 41736680 _____ (IObit ) C:\Documents and Settings\Pc22\Dokumenty\advanced-systemcare-setup.exe
2014-08-19 21:55 - 2008-04-14 14:00 - 00637440 ____T (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
2014-08-19 21:40 - 2011-08-31 16:08 - 00000000 ____D () C:\Program Files\Outlook Express
2014-08-19 19:10 - 2011-08-31 18:31 - 00000000 ____D () C:\Program Files\Opera
2014-08-19 18:47 - 2011-08-31 16:18 - 00000000 ___RD () C:\Documents and Settings\Pc22\Nabídka Start\Programy
2014-08-19 14:17 - 2014-06-19 14:32 - 00000000 ____D () C:\LJM1005_MFP_Full_Solution
2014-08-19 13:47 - 2012-06-16 16:58 - 00000000 ____D () C:\hp_LJM1005_Full_Solution
2014-08-19 13:01 - 2012-06-19 21:22 - 00000000 ____D () C:\fastx
2014-08-19 10:54 - 2014-05-30 21:07 - 02928640 ____T (ESET) C:\Documents and Settings\Pc22\Dokumenty\esetsmartinstaller_csy.exe
2014-08-19 09:30 - 2011-08-31 16:08 - 00000000 ____D () C:\Program Files\Movie Maker
2014-08-19 09:30 - 2008-04-14 14:00 - 00635904 ____T (Microsoft Corporation) C:\WINDOWS\system32\wupdmgr.exe
2014-08-19 09:28 - 2011-08-31 16:07 - 00741888 ____T (Microsoft Corporation) C:\WINDOWS\system32\sndvol32.exe
2014-08-19 09:28 - 2011-08-31 16:07 - 00733696 ____T (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
2014-08-19 09:26 - 2011-08-31 16:07 - 00787968 ____T (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
2014-08-19 09:26 - 2011-08-31 10:47 - 00000000 ____D () C:\WINDOWS\system32\usmt
2014-08-19 09:26 - 2008-04-14 14:00 - 00666624 ____T (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-08-19 09:25 - 2011-08-31 16:07 - 00685568 ____T (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
2014-08-19 09:25 - 2008-04-14 14:00 - 01038336 ____T (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2014-08-19 09:24 - 2011-08-31 16:07 - 01281536 ____T (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-08-19 09:24 - 2011-08-31 16:07 - 00948736 ____T (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2014-08-19 09:23 - 2011-08-31 16:07 - 00718336 ____T (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2014-08-19 09:23 - 2011-08-31 16:07 - 00000000 ____D () C:\Program Files\Windows NT
2014-08-19 09:20 - 2008-04-14 14:00 - 00634880 ____T (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe
2014-08-19 09:19 - 2013-05-23 20:18 - 01323008 ____T (Indigo Rose Corporation) C:\WINDOWS\iun6002.exe
2014-08-19 09:19 - 2008-04-14 14:00 - 02018304 ____T (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2014-08-19 09:17 - 2011-08-31 16:07 - 00731136 ____T (Microsoft Corporation) C:\WINDOWS\system32\mshearts.exe
2014-08-19 09:16 - 2011-08-31 16:07 - 01141248 ____T (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
2014-08-19 09:16 - 2011-08-31 16:07 - 00660480 ____T (Microsoft Corporation) C:\WINDOWS\system32\sol.exe
2014-08-19 09:15 - 2011-08-31 16:07 - 00725504 ____T (Microsoft Corporation) C:\WINDOWS\system32\winmine.exe
2014-08-19 09:15 - 2011-08-31 16:07 - 00657408 ____T (Microsoft Corporation) C:\WINDOWS\system32\freecell.exe
2014-08-19 09:12 - 2013-01-16 00:34 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-19 09:10 - 2013-01-16 00:29 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-19 08:57 - 2014-08-19 08:57 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-08-19 08:22 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Qysiaq
2014-08-19 08:22 - 2011-08-31 16:14 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací
2014-08-19 08:16 - 2008-04-14 14:00 - 00638464 ____T (Microsoft Corporation) C:\WINDOWS\system32\rcimlby.exe
2014-08-19 08:15 - 2008-04-14 14:00 - 00819712 ____T (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-08-19 08:15 - 2008-04-14 14:00 - 00675840 ____T (Microsoft Corporation) C:\WINDOWS\system32\magnify.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00992768 ____T (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00951296 ____T (Microsoft Corporation) C:\WINDOWS\system32\tourstart.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00748544 ____T (Microsoft Corporation) C:\WINDOWS\system32\mobsync.exe
2014-08-19 08:13 - 2008-04-14 14:00 - 00672768 ____T (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2014-08-19 08:11 - 2008-04-14 14:00 - 00895488 ____T (Microsoft Corporation) C:\WINDOWS\system32\vssvc.exe
2014-08-19 08:11 - 2008-04-14 14:00 - 00623616 ____T (Microsoft Corporation) C:\WINDOWS\system32\ups.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00703488 ____T (Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00693760 ____T (Microsoft Corporation) C:\WINDOWS\system32\smlogsvc.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00680448 ____T (Microsoft Corporation) C:\WINDOWS\system32\locator.exe
2014-08-19 08:09 - 2011-08-31 16:08 - 00634880 ____T (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
2014-08-19 08:09 - 2011-08-31 16:07 - 00747520 ____T (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
2014-08-19 08:09 - 2008-04-14 14:00 - 00716800 ____T (Microsoft Corporation) C:\WINDOWS\system32\netdde.exe
2014-08-19 08:08 - 2011-08-31 16:07 - 00609792 ____T (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
2014-08-19 08:08 - 2008-04-14 14:00 - 00755712 ____T (Microsoft Corporation) C:\WINDOWS\system32\imapi.exe
2014-08-19 08:08 - 2008-04-14 14:00 - 00681984 ____T (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2014-08-19 08:07 - 2008-04-14 14:00 - 00610304 ____T (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2014-08-19 08:06 - 2008-04-14 14:00 - 00636928 ____T (Microsoft Corporation) C:\WINDOWS\system32\clipsrv.exe
2014-08-19 08:05 - 2008-04-14 14:00 - 00610816 ____T (Microsoft Corporation) C:\WINDOWS\system32\cisvc.exe
2014-08-08 14:45 - 2012-06-19 21:01 - 00000000 ____D () C:\Documents and Settings\Pc22\Dokumenty\SQL Server Management Studio Express
2014-08-01 13:06 - 2013-03-20 13:55 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\Inventura
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End Of Log ============================
přidávám log z FRST
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-08-2014
Ran by Pc22 (administrator) on PC2-4EB8CD18A33 on 23-08-2014 15:22:41
Running from C:\Documents and Settings\Pc22\Dokumenty
Platform: Microsoft Windows XP Home Edition Service Pack 3 (X86) OS Language: Čeština
Internet Explorer Version 8
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() C:\Program Files\Apache Group\Apache\Apache.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\portcommunicationservice\PCSVC.exe
() C:\Program Files\Apache Group\Apache\Apache.exe
(HP) C:\WINDOWS\system32\HPSIsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
(SEIKO EPSON Corp.) C:\WINDOWS\system32\ESDUSBMon.exe
(alch) C:\Program Files\ClamWin\bin\ClamTray.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
(Malwarebytes Corporation) C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files\TeamViewer\Version7\tv_w32.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
() C:\Program Files\Opera\23.0.1522.77\opera_crashreporter.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
(Microsoft Corporation) C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
(Opera Software) C:\Program Files\Opera\23.0.1522.77\opera.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [nwiz] => nwiz.exe /install
HKLM\...\Run: [NvMediaCenter] => RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
HKLM\...\Run: [EpsonAPD4SV] => C:\Program Files\EPSON\EPSON Advanced Printer Driver 4\Tools\EAPSV\EAPSV.EXE [210368 2011-06-07] (SEIKO EPSON CORPORATION)
HKLM\...\Run: [ESDUSBMon.exe] => C:\WINDOWS\system32\ESDUSBMon.exe [188416 2005-05-26] (SEIKO EPSON Corp.)
HKLM\...\Run: [ClamWin] => C:\Program Files\ClamWin\bin\ClamTray.exe [86016 2014-01-26] (alch)
HKLM\...\Policies\Explorer: [TaskbarNoNotification] 0
HKLM\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-1229272821-1993962763-682003330-1004\...\Policies\Explorer: [TaskbarNoNotification] 0
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {0b6fd1cf-1036-44fd-ab99-1fae182223e0} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... rceid=IE_5
SearchScopes: HKCU - {33ba8f9c-9524-4b6c-9c20-8bb7666af523} URL = http://search.seznam.cz/?q={searchTerms}&sourceid=IE_5
SearchScopes: HKCU - {a082286d-3a04-421c-897a-2b622d06b88f} URL = http://www.firmy.cz/?q={searchTerms}&sourceid=IE_5
SearchScopes: HKCU - {bd991d5c-13c5-42e1-a78d-2d1ec56f990a} URL = http://www.mapy.cz/?query={searchTerms}&sourceid=IE_5
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Advanced SystemCare Browser Protection -> {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files\IObit\IObit Uninstaller\UninstallExplorer32.dll (IObit)
Toolbar: HKCU - &Adresa - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Společnost Microsoft)
Toolbar: HKCU - &Odkazy - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {1663ed6a-23eb-11d2-b92f-008048fdd814} http://localhost/ffs/pagesetup/smsx.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinsta ... s-i586.cab
Tcpip\..\Interfaces\{0957387A-11B7-46DA-A46F-D89B68D8B5EF}: [NameServer] 8.8.8.8
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @IObit.com/np_Asc_Plugin -> C:\Program Files\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin: @java.com/DTPlugin,version=10.21.2 -> C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.21.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0017-0000-0000-ABCDEFFEDCBA} [2011-08-31]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - c:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2012-06-17]
FF HKLM\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension
Chrome:
=======
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S2 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [861184 2014-08-19] (Adobe Systems Incorporated) [File not signed]
S4 AdvancedSystemCareService7; C:\Program Files\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 Apache; C:\Program Files\Apache Group\Apache\Apache.exe [20480 2001-02-28] () [File not signed]
S3 aspnet_state; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [629248 2014-08-19] (Microsoft Corporation) [File not signed]
S3 CiSvc; C:\WINDOWS\system32\cisvc.exe [610816 2014-08-19] (Microsoft Corporation) [File not signed]
S3 ClipSrv; C:\WINDOWS\system32\clipsrv.exe [636928 2014-08-19] (Microsoft Corporation) [File not signed]
S3 clr_optimization_v2.0.50727_32; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [664576 2014-08-19] (Microsoft Corporation) [File not signed]
S3 COMSysApp; C:\WINDOWS\system32\dllhost.exe [610304 2014-08-19] (Microsoft Corporation) [File not signed]
S2 dmadmin; C:\WINDOWS\System32\dmadmin.exe [827392 2014-08-23] (Microsoft Corp., Veritas Software) [File not signed]
S2 EPSON ESCPOS Status Service; C:\WINDOWS\system32\EpStsSrv.exe [679936 2014-08-23] (SEIKO EPSON Corp.) [File not signed]
S2 EPSON_Device_Control_Log_Service; C:\Program Files\epson\portcommunicationservice\DeviceControlLog.exe [937984 2014-08-23] (SEIKO EPSON CORPORATION) [File not signed]
R2 EPSON_Port_Communication_Service; C:\Program Files\epson\portcommunicationservice\PCSVC.exe [1033728 2014-08-23] (SEIKO EPSON CORPORATION) [File not signed]
S2 gusvc; C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe [733184 2014-08-19] (Google) [File not signed]
S2 HPM1210RcvFaxSrvc; C:\Program Files\HP\HP LaserJet M1210 MFP Series\ReceiveFaxUtility.exe [247352 2010-05-11] (HP)
R2 idsvc; C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [1474560 2014-08-19] (Microsoft Corporation) [File not signed]
S2 ImapiService; C:\WINDOWS\system32\imapi.exe [755712 2014-08-19] (Microsoft Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [779264 2014-08-23] (Oracle Corporation) [File not signed]
S2 LiveUpdateSvc; C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MBAMScheduler; C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe [1014272 2014-08-23] (Malwarebytes Corporation) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe [1297408 2014-08-23] (Malwarebytes Corporation) [File not signed]
S4 mnmsrvc; C:\WINDOWS\system32\mnmsrvc.exe [634880 2014-08-19] (Microsoft Corporation) [File not signed]
S3 MSDTC; C:\WINDOWS\system32\msdtc.exe [609792 2014-08-19] (Microsoft Corporation) [File not signed]
S2 MSIServer; C:\WINDOWS\System32\msiexec.exe [681984 2014-08-19] (Microsoft Corporation) [File not signed]
S4 MSSQLServerADHelper; c:\Program Files\Microsoft SQL Server\90\Shared\sqladhlp90.exe [642048 2014-08-19] (Microsoft Corporation) [File not signed]
S4 NetDDE; C:\WINDOWS\system32\netdde.exe [716800 2014-08-19] (Microsoft Corporation) [File not signed]
S4 NetDDEdsdm; C:\WINDOWS\system32\netdde.exe [716800 2014-08-19] (Microsoft Corporation) [File not signed]
R2 NVSvc; C:\WINDOWS\system32\nvsvc32.exe [757760 2014-08-23] (NVIDIA Corporation) [File not signed]
S4 RDSessMgr; C:\WINDOWS\system32\sessmgr.exe [747520 2014-08-19] (Microsoft Corporation) [File not signed]
S3 RpcLocator; C:\WINDOWS\system32\locator.exe [680448 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SCardSvr; C:\WINDOWS\System32\SCardSvr.exe [703488 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SwPrv; C:\WINDOWS\system32\dllhost.exe [610304 2014-08-19] (Microsoft Corporation) [File not signed]
S3 SysmonLog; C:\WINDOWS\system32\smlogsvc.exe [693760 2014-08-19] (Microsoft Corporation) [File not signed]
S3 UPS; C:\WINDOWS\System32\ups.exe [623616 2014-08-19] (Microsoft Corporation) [File not signed]
S3 VSS; C:\WINDOWS\System32\vssvc.exe [895488 2014-08-19] () [File not signed]
R2 WmiApSrv; C:\WINDOWS\system32\wbem\wmiapsrv.exe [731136 2014-08-19] (Microsoft Corporation) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 akshasp; C:\WINDOWS\System32\DRIVERS\akshasp.sys [244040 2013-03-15] (SafeNet Inc.)
S3 aksusb; C:\WINDOWS\System32\DRIVERS\aksusb.sys [295944 2013-03-15] (SafeNet Inc.)
R1 AmdPPM; C:\WINDOWS\System32\DRIVERS\AmdPPM.sys [33792 2007-04-16] (Advanced Micro Devices)
R2 EPSON_PCS_Parallel_Port_Driver; C:\WINDOWS\system32\DRIVERS\pcslpt.sys [19592 2011-08-10] (SEIKO EPSON CORPORATION)
R2 Esdpdx01; C:\WINDOWS\system32\Drivers\ESDPDX01.SYS [95485 2006-05-11] (MK Systems CO., LTD.) [File not signed]
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [608136 2013-03-15] (SafeNet Inc.)
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [22856 2013-04-04] (Malwarebytes Corporation)
R3 STHDA; C:\WINDOWS\System32\drivers\sthda.sys [1171464 2006-07-27] (SigmaTel, Inc.)
R3 catchme; \??\C:\ComboFix\catchme.sys [X]
S3 esihdrv; \??\C:\DOCUME~1\Pc22\LOCALS~1\Temp\esihdrv.sys [X]
S4 IntelIde; No ImagePath
U3 TlntSvr;
U5 TMUSB; C:\WINDOWS\System32\DRIVERS\TMUSBXP.SYS [48256 2006-05-11] (SEIKO EPSON Corp.)
U3 TrueSight; \??\C:\WINDOWS\system32\TrueSight.sys [X]
U3 mbr; \??\C:\DOCUME~1\Pc22\LOCALS~1\Temp\mbr.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-23 15:22 - 2014-08-23 15:23 - 00013247 _____ () C:\Documents and Settings\Pc22\Dokumenty\FRST.txt
2014-08-23 15:22 - 2014-08-23 15:22 - 00000000 ____D () C:\FRST
2014-08-23 15:21 - 2014-08-23 15:22 - 01094656 _____ (Farbar) C:\Documents and Settings\Pc22\Dokumenty\FRST.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Pc22\Dokumenty\FRSTLauncher.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00029696 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\MSGBOX.EXE
2014-08-23 15:21 - 2014-08-23 15:21 - 00015327 _____ () C:\Documents and Settings\Pc22\Plocha\LM.bat
2014-08-23 15:15 - 2014-08-23 15:15 - 00014715 _____ () C:\ComboFix.txt
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp
2014-08-23 15:07 - 2014-08-23 15:07 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-08-23 15:01 - 2014-08-23 15:19 - 00000000 ____D () C:\Qoobox
2014-08-23 15:01 - 2011-06-26 08:45 - 00256000 _____ () C:\WINDOWS\PEV.exe
2014-08-23 15:01 - 2010-11-07 19:20 - 00208896 _____ () C:\WINDOWS\MBR.exe
2014-08-23 15:01 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\WINDOWS\NIRCMD.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\WINDOWS\SWREG.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\WINDOWS\SWSC.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00212480 _____ (SteelWerX) C:\WINDOWS\SWXCACLS.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00098816 _____ () C:\WINDOWS\sed.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00080412 _____ () C:\WINDOWS\grep.exe
2014-08-23 15:01 - 2000-08-31 02:00 - 00068096 _____ () C:\WINDOWS\zip.exe
2014-08-23 14:59 - 2014-08-23 15:00 - 05572006 ____R (Swearware) C:\Documents and Settings\Pc22\Dokumenty\ComboFix.exe
2014-08-23 14:54 - 2014-08-23 14:54 - 00000642 _____ () C:\WINDOWS\setupapi.log
2014-08-23 14:45 - 2014-08-23 15:11 - 00001366 _____ () C:\WINDOWS\EpsStmMon3.log
2014-08-23 14:45 - 2014-08-23 15:11 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-23 14:44 - 2014-08-23 15:11 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-08-23 14:44 - 2014-08-23 14:44 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-08-23 14:43 - 2014-08-23 15:01 - 00000456 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-23 14:42 - 2014-08-23 15:12 - 00020770 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-23 14:41 - 2014-08-23 15:14 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-08-23 14:36 - 2014-08-23 14:44 - 00827392 ____T (Microsoft Corp., Veritas Software) C:\WINDOWS\system32\dmadmin.exe
2014-08-23 13:49 - 2014-08-23 13:52 - 71098368 _____ () C:\Documents and Settings\Pc22\Dokumenty\eav_nt32_enu.msi
2014-08-23 13:49 - 2014-08-23 13:49 - 101262137 _____ (alch ) C:\Documents and Settings\Pc22\Plocha\clamwin-0.98.4.1-setup.exe
2014-08-23 13:49 - 2014-08-23 13:49 - 02937264 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\SysInspector.exe
2014-08-23 13:47 - 2014-08-23 13:47 - 01695680 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\eset_nod32_antivirus_live_installer_.exe
2014-08-21 18:50 - 2014-08-23 13:46 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000827 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2013-04-04 14:50 - 00022856 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2014-08-20 09:49 - 2014-08-22 18:19 - 00000003 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\faahdeca35.nls
2014-08-20 09:38 - 2014-08-20 09:38 - 30449664 _____ () C:\WINDOWS\system32\config\software.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 04943872 _____ () C:\WINDOWS\system32\config\default.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iodefrag.bak
2014-08-20 09:32 - 2014-08-20 09:32 - 30449664 _____ () C:\WINDOWS\system32\config\software.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 04943872 _____ () C:\WINDOWS\system32\config\default.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iobit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Program Files\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Advanced SystemCare 7
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ProductData
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-20 09:26 - 2014-08-20 09:26 - 41736680 _____ (IObit ) C:\Documents and Settings\Pc22\Dokumenty\advanced-systemcare-setup.exe
2014-08-19 08:57 - 2014-08-19 08:57 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-08-19 08:22 - 2014-08-23 14:58 - 00000003 _____ () C:\Documents and Settings\All Users\Data aplikací\faahdeca35.nls
2014-08-19 08:22 - 2014-08-21 22:58 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Vueqa
2014-08-19 08:22 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Qysiaq
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-08-23 15:23 - 2014-08-23 15:22 - 00013247 _____ () C:\Documents and Settings\Pc22\Dokumenty\FRST.txt
2014-08-23 15:23 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22\Local Settings\Temp
2014-08-23 15:22 - 2014-08-23 15:22 - 00000000 ____D () C:\FRST
2014-08-23 15:22 - 2014-08-23 15:21 - 01094656 _____ (Farbar) C:\Documents and Settings\Pc22\Dokumenty\FRST.exe
2014-08-23 15:22 - 2011-08-31 16:18 - 00000000 ___RD () C:\Documents and Settings\Pc22\Dokumenty
2014-08-23 15:21 - 2014-08-23 15:21 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Pc22\Dokumenty\FRSTLauncher.exe
2014-08-23 15:21 - 2014-08-23 15:21 - 00029696 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\MSGBOX.EXE
2014-08-23 15:21 - 2014-08-23 15:21 - 00015327 _____ () C:\Documents and Settings\Pc22\Plocha\LM.bat
2014-08-23 15:21 - 2011-08-31 16:18 - 00000000 ___HD () C:\Documents and Settings\Pc22\Local Settings\Data aplikací
2014-08-23 15:21 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha
2014-08-23 15:19 - 2014-08-23 15:01 - 00000000 ____D () C:\Qoobox
2014-08-23 15:15 - 2014-08-23 15:15 - 00014715 _____ () C:\ComboFix.txt
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\LocalService\Local Settings\temp
2014-08-23 15:15 - 2014-08-23 15:15 - 00000000 ____D () C:\Documents and Settings\Administrator\Local Settings\temp
2014-08-23 15:15 - 2011-08-31 16:14 - 00000000 __SHD () C:\Documents and Settings\LocalService
2014-08-23 15:15 - 2011-08-31 16:12 - 00000000 __SHD () C:\Documents and Settings\NetworkService
2014-08-23 15:14 - 2014-08-23 14:41 - 00000000 ____D () C:\WINDOWS\ERDNT
2014-08-23 15:12 - 2014-08-23 14:42 - 00020770 _____ () C:\WINDOWS\WindowsUpdate.log
2014-08-23 15:11 - 2014-08-23 14:45 - 00001366 _____ () C:\WINDOWS\EpsStmMon3.log
2014-08-23 15:11 - 2014-08-23 14:45 - 00000159 _____ () C:\WINDOWS\wiadebug.log
2014-08-23 15:11 - 2014-08-23 14:44 - 00000049 _____ () C:\WINDOWS\wiaservc.log
2014-08-23 15:11 - 2011-08-31 17:15 - 00081409 _____ () C:\WINDOWS\system32\nvapps.xml
2014-08-23 15:09 - 2011-08-31 16:12 - 00000000 ____D () C:\Documents and Settings\NetworkService\Local Settings\Temp
2014-08-23 15:09 - 2008-04-14 14:00 - 00000227 _____ () C:\WINDOWS\system.ini
2014-08-23 15:08 - 2011-08-31 16:14 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-08-23 15:07 - 2014-08-23 15:07 - 00008192 ____H () C:\WINDOWS\system32\config\SECURITY.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\system.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\software.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\SAM.tmp.LOG
2014-08-23 15:07 - 2014-08-23 15:07 - 00000000 ____H () C:\WINDOWS\system32\config\default.tmp.LOG
2014-08-23 15:07 - 2011-08-31 16:18 - 00000178 ___SH () C:\Documents and Settings\Pc22\ntuser.ini
2014-08-23 15:07 - 2011-08-31 10:53 - 30449664 _____ () C:\WINDOWS\system32\config\software.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 05767168 _____ () C:\WINDOWS\system32\config\system.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 04980736 _____ () C:\WINDOWS\system32\config\default.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.bak
2014-08-23 15:07 - 2011-08-31 10:53 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.bak
2014-08-23 15:02 - 2011-08-31 16:18 - 00000000 __RHD () C:\Documents and Settings\Pc22\Data aplikací
2014-08-23 15:01 - 2014-08-23 14:43 - 00000456 _____ () C:\WINDOWS\SchedLgU.Txt
2014-08-23 15:00 - 2014-08-23 14:59 - 05572006 ____R (Swearware) C:\Documents and Settings\Pc22\Dokumenty\ComboFix.exe
2014-08-23 14:58 - 2014-08-19 08:22 - 00000003 _____ () C:\Documents and Settings\All Users\Data aplikací\faahdeca35.nls
2014-08-23 14:56 - 2013-02-06 23:20 - 00000000 ____D () C:\WINDOWS\pss
2014-08-23 14:56 - 2011-08-31 10:53 - 00000239 ___SH () C:\boot.ini
2014-08-23 14:56 - 2008-04-14 14:00 - 00000477 _____ () C:\WINDOWS\win.ini
2014-08-23 14:54 - 2014-08-23 14:54 - 00000642 _____ () C:\WINDOWS\setupapi.log
2014-08-23 14:44 - 2014-08-23 14:44 - 00000000 _____ () C:\WINDOWS\Sti_Trace.log
2014-08-23 14:44 - 2014-08-23 14:36 - 00827392 ____T (Microsoft Corp., Veritas Software) C:\WINDOWS\system32\dmadmin.exe
2014-08-23 14:43 - 2011-08-31 16:08 - 00000000 ____D () C:\WINDOWS\Registration
2014-08-23 14:41 - 2013-08-14 16:14 - 00000000 ____D () C:\Temp
2014-08-23 14:25 - 2011-08-31 16:18 - 00000000 ____D () C:\Documents and Settings\Pc22
2014-08-23 14:18 - 2012-02-02 20:52 - 00679936 ____T (SEIKO EPSON Corp.) C:\WINDOWS\system32\EpStsSrv.exe
2014-08-23 14:13 - 2011-08-31 17:15 - 00757760 ____T (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
2014-08-23 14:12 - 2012-06-16 17:06 - 00000000 ____D () C:\Program Files\Hewlett-Packard
2014-08-23 14:12 - 2011-08-31 10:54 - 00000000 ___RD () C:\Documents and Settings\All Users\Nabídka Start\Programy
2014-08-23 13:55 - 2011-08-31 17:11 - 00000000 ____D () C:\Soft
2014-08-23 13:52 - 2014-08-23 13:49 - 71098368 _____ () C:\Documents and Settings\Pc22\Dokumenty\eav_nt32_enu.msi
2014-08-23 13:51 - 2011-08-31 16:18 - 00000000 ___HD () C:\Documents and Settings\Pc22\Šablony
2014-08-23 13:51 - 2011-08-31 10:54 - 00000000 ____D () C:\Documents and Settings\All Users\Plocha
2014-08-23 13:49 - 2014-08-23 13:49 - 101262137 _____ (alch ) C:\Documents and Settings\Pc22\Plocha\clamwin-0.98.4.1-setup.exe
2014-08-23 13:49 - 2014-08-23 13:49 - 02937264 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\SysInspector.exe
2014-08-23 13:47 - 2014-08-23 13:47 - 01695680 _____ (ESET) C:\Documents and Settings\Pc22\Dokumenty\eset_nod32_antivirus_live_installer_.exe
2014-08-23 13:46 - 2014-08-21 18:50 - 00000000 ____D () C:\Program Files\Malwarebytes' Anti-Malware
2014-08-23 13:36 - 2013-04-14 09:30 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\podklady pro prodej skutru
2014-08-23 13:36 - 2013-03-20 13:37 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\firebird
2014-08-23 10:49 - 2008-04-14 14:00 - 00013646 _____ () C:\WINDOWS\system32\wpa.dbl
2014-08-22 18:19 - 2014-08-20 09:49 - 00000003 _____ () C:\Documents and Settings\Pc22\Local Settings\Data aplikací\faahdeca35.nls
2014-08-21 23:49 - 2011-08-31 16:08 - 00000000 ____D () C:\WINDOWS\system32\Restore
2014-08-21 23:00 - 2011-09-04 12:23 - 00000000 __HDC () C:\WINDOWS\$NtUninstallKB2115168$
2014-08-21 23:00 - 2011-08-31 17:25 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\WinRAR
2014-08-21 22:58 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Vueqa
2014-08-21 18:50 - 2014-08-21 18:50 - 00000827 _____ () C:\Documents and Settings\All Users\Plocha\Malwarebytes Anti-Malware.lnk
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Malwarebytes' Anti-Malware
2014-08-21 18:50 - 2014-08-21 18:50 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\Malwarebytes
2014-08-21 18:50 - 2011-08-31 10:54 - 00000000 __RHD () C:\Documents and Settings\All Users\Data aplikací
2014-08-21 15:10 - 2013-04-22 11:57 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\Foto POHORI CESTA DUBEN 2013
2014-08-20 09:38 - 2014-08-20 09:38 - 30449664 _____ () C:\WINDOWS\system32\config\software.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 04943872 _____ () C:\WINDOWS\system32\config\default.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iodefrag.bak
2014-08-20 09:38 - 2014-08-20 09:38 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iodefrag.bak
2014-08-20 09:32 - 2014-08-20 09:32 - 30449664 _____ () C:\WINDOWS\system32\config\software.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 04943872 _____ () C:\WINDOWS\system32\config\default.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00053248 _____ () C:\WINDOWS\system32\config\SECURITY.iobit
2014-08-20 09:32 - 2014-08-20 09:32 - 00028672 _____ () C:\WINDOWS\system32\config\SAM.iobit
2014-08-20 09:29 - 2014-04-22 20:13 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\Apple Computer
2014-08-20 09:29 - 2013-04-11 19:46 - 00000000 ____D () C:\Documents and Settings\Pc22\Data aplikací\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Program Files\IObit
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Nabídka Start\Programy\Advanced SystemCare 7
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\ProductData
2014-08-20 09:28 - 2014-08-20 09:28 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\{3C5CBD7B-3D1D-411E-96C2-513FFCA84D2D}
2014-08-20 09:28 - 2013-04-11 19:46 - 00000000 ____D () C:\Documents and Settings\All Users\Data aplikací\IObit
2014-08-20 09:26 - 2014-08-20 09:26 - 41736680 _____ (IObit ) C:\Documents and Settings\Pc22\Dokumenty\advanced-systemcare-setup.exe
2014-08-19 21:55 - 2008-04-14 14:00 - 00637440 ____T (Microsoft Corporation) C:\WINDOWS\system32\rundll32.exe
2014-08-19 21:40 - 2011-08-31 16:08 - 00000000 ____D () C:\Program Files\Outlook Express
2014-08-19 19:10 - 2011-08-31 18:31 - 00000000 ____D () C:\Program Files\Opera
2014-08-19 18:47 - 2011-08-31 16:18 - 00000000 ___RD () C:\Documents and Settings\Pc22\Nabídka Start\Programy
2014-08-19 14:17 - 2014-06-19 14:32 - 00000000 ____D () C:\LJM1005_MFP_Full_Solution
2014-08-19 13:47 - 2012-06-16 16:58 - 00000000 ____D () C:\hp_LJM1005_Full_Solution
2014-08-19 13:01 - 2012-06-19 21:22 - 00000000 ____D () C:\fastx
2014-08-19 10:54 - 2014-05-30 21:07 - 02928640 ____T (ESET) C:\Documents and Settings\Pc22\Dokumenty\esetsmartinstaller_csy.exe
2014-08-19 09:30 - 2011-08-31 16:08 - 00000000 ____D () C:\Program Files\Movie Maker
2014-08-19 09:30 - 2008-04-14 14:00 - 00635904 ____T (Microsoft Corporation) C:\WINDOWS\system32\wupdmgr.exe
2014-08-19 09:28 - 2011-08-31 16:07 - 00741888 ____T (Microsoft Corporation) C:\WINDOWS\system32\sndvol32.exe
2014-08-19 09:28 - 2011-08-31 16:07 - 00733696 ____T (Microsoft Corporation) C:\WINDOWS\system32\sndrec32.exe
2014-08-19 09:26 - 2011-08-31 16:07 - 00787968 ____T (Microsoft Corporation) C:\WINDOWS\system32\accwiz.exe
2014-08-19 09:26 - 2011-08-31 10:47 - 00000000 ____D () C:\WINDOWS\system32\usmt
2014-08-19 09:26 - 2008-04-14 14:00 - 00666624 ____T (Microsoft Corporation) C:\WINDOWS\system32\cleanmgr.exe
2014-08-19 09:25 - 2011-08-31 16:07 - 00685568 ____T (Microsoft Corporation) C:\WINDOWS\system32\charmap.exe
2014-08-19 09:25 - 2008-04-14 14:00 - 01038336 ____T (Microsoft Corporation) C:\WINDOWS\system32\wiaacmgr.exe
2014-08-19 09:24 - 2011-08-31 16:07 - 01281536 ____T (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2014-08-19 09:24 - 2011-08-31 16:07 - 00948736 ____T (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2014-08-19 09:23 - 2011-08-31 16:07 - 00718336 ____T (Microsoft Corporation) C:\WINDOWS\system32\calc.exe
2014-08-19 09:23 - 2011-08-31 16:07 - 00000000 ____D () C:\Program Files\Windows NT
2014-08-19 09:20 - 2008-04-14 14:00 - 00634880 ____T (Microsoft Corporation) C:\WINDOWS\system32\odbcad32.exe
2014-08-19 09:19 - 2013-05-23 20:18 - 01323008 ____T (Indigo Rose Corporation) C:\WINDOWS\iun6002.exe
2014-08-19 09:19 - 2008-04-14 14:00 - 02018304 ____T (Microsoft Corporation) C:\WINDOWS\system32\mmc.exe
2014-08-19 09:17 - 2011-08-31 16:07 - 00731136 ____T (Microsoft Corporation) C:\WINDOWS\system32\mshearts.exe
2014-08-19 09:16 - 2011-08-31 16:07 - 01141248 ____T (Microsoft Corporation) C:\WINDOWS\system32\spider.exe
2014-08-19 09:16 - 2011-08-31 16:07 - 00660480 ____T (Microsoft Corporation) C:\WINDOWS\system32\sol.exe
2014-08-19 09:15 - 2011-08-31 16:07 - 00725504 ____T (Microsoft Corporation) C:\WINDOWS\system32\winmine.exe
2014-08-19 09:15 - 2011-08-31 16:07 - 00657408 ____T (Microsoft Corporation) C:\WINDOWS\system32\freecell.exe
2014-08-19 09:12 - 2013-01-16 00:34 - 00000000 ____D () C:\Program Files\Defraggler
2014-08-19 09:10 - 2013-01-16 00:29 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-19 08:57 - 2014-08-19 08:57 - 00000000 ____D () C:\Documents and Settings\LocalService\Plocha
2014-08-19 08:22 - 2014-08-19 08:22 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací\Qysiaq
2014-08-19 08:22 - 2011-08-31 16:14 - 00000000 ____D () C:\Documents and Settings\LocalService\Data aplikací
2014-08-19 08:16 - 2008-04-14 14:00 - 00638464 ____T (Microsoft Corporation) C:\WINDOWS\system32\rcimlby.exe
2014-08-19 08:15 - 2008-04-14 14:00 - 00819712 ____T (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-08-19 08:15 - 2008-04-14 14:00 - 00675840 ____T (Microsoft Corporation) C:\WINDOWS\system32\magnify.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00992768 ____T (Microsoft Corporation) C:\WINDOWS\system32\cmd.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00951296 ____T (Microsoft Corporation) C:\WINDOWS\system32\tourstart.exe
2014-08-19 08:14 - 2008-04-14 14:00 - 00748544 ____T (Microsoft Corporation) C:\WINDOWS\system32\mobsync.exe
2014-08-19 08:13 - 2008-04-14 14:00 - 00672768 ____T (Microsoft Corporation) C:\WINDOWS\system32\notepad.exe
2014-08-19 08:11 - 2008-04-14 14:00 - 00895488 ____T (Microsoft Corporation) C:\WINDOWS\system32\vssvc.exe
2014-08-19 08:11 - 2008-04-14 14:00 - 00623616 ____T (Microsoft Corporation) C:\WINDOWS\system32\ups.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00703488 ____T (Microsoft Corporation) C:\WINDOWS\system32\scardsvr.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00693760 ____T (Microsoft Corporation) C:\WINDOWS\system32\smlogsvc.exe
2014-08-19 08:10 - 2008-04-14 14:00 - 00680448 ____T (Microsoft Corporation) C:\WINDOWS\system32\locator.exe
2014-08-19 08:09 - 2011-08-31 16:08 - 00634880 ____T (Microsoft Corporation) C:\WINDOWS\system32\mnmsrvc.exe
2014-08-19 08:09 - 2011-08-31 16:07 - 00747520 ____T (Microsoft Corporation) C:\WINDOWS\system32\sessmgr.exe
2014-08-19 08:09 - 2008-04-14 14:00 - 00716800 ____T (Microsoft Corporation) C:\WINDOWS\system32\netdde.exe
2014-08-19 08:08 - 2011-08-31 16:07 - 00609792 ____T (Microsoft Corporation) C:\WINDOWS\system32\msdtc.exe
2014-08-19 08:08 - 2008-04-14 14:00 - 00755712 ____T (Microsoft Corporation) C:\WINDOWS\system32\imapi.exe
2014-08-19 08:08 - 2008-04-14 14:00 - 00681984 ____T (Microsoft Corporation) C:\WINDOWS\system32\msiexec.exe
2014-08-19 08:07 - 2008-04-14 14:00 - 00610304 ____T (Microsoft Corporation) C:\WINDOWS\system32\dllhost.exe
2014-08-19 08:06 - 2008-04-14 14:00 - 00636928 ____T (Microsoft Corporation) C:\WINDOWS\system32\clipsrv.exe
2014-08-19 08:05 - 2008-04-14 14:00 - 00610816 ____T (Microsoft Corporation) C:\WINDOWS\system32\cisvc.exe
2014-08-08 14:45 - 2012-06-19 21:01 - 00000000 ____D () C:\Documents and Settings\Pc22\Dokumenty\SQL Server Management Studio Express
2014-08-01 13:06 - 2013-03-20 13:55 - 00000000 ____D () C:\Documents and Settings\Pc22\Plocha\Inventura
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End Of Log ============================
