Občas zpomalené PC
Napsal: 18 zář 2014 16:08
Zdravím,
od včerejška mám mírné problémy, sice to spíše vypadá na problémy s grafikou, ale pro jistotu jsem to chtěla zkontrolovat.
Před chvílí se mi mírně zpomalil, každé okno co jsem otevřela mělo místo obsahu uvnitř černou plochu. Operovat s okny šlo (zavírat, minimalizovat, přesouvat, ukládat), akorát nebylo vidět když se psalo dovnitř, popř. hlášky na ukožení, takže jsem vše dělala poslepu.
Předem děkuji!
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Dana (administrator) on HOME on 18-09-2014 16:45:23
Running from C:\Users\Dana\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\xampp\mysql\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PSIService.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe
(forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-04-25] (Check Point Software Technologies Ltd.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2171904 2009-06-05] (VIA)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1602808253-430055931-27258192-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
AppInit_DLLs-x32: => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OnTranslator.lnk
ShortcutTarget: OnTranslator.lnk -> C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {06A8AFCA-3834-4726-BC43-1F90B285805F} URL = http://search.zonealarm.com/search?src= ... er=&&r=170
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll (Check Point Software Technologies LTD)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDow ... rtScan.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @spoon.net/Spoon Plugin 3.33 -> C:\Users\Dana\AppData\Local\Spoon\3.33.3.13\npMozillaSpoonPlugin.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dana\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Avira Browser Safety - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\abs@avira.com [2014-09-04]
FF Extension: SEO Workers Analysis Tool - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\seoanalysistool@seoworkers [2014-05-04]
FF Extension: SeoQuake - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2014-09-03]
FF Extension: Dust-Me Selectors - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{3c6e1eed-a07e-4c80-9cf3-66ea0bf40b37} [2013-10-04]
FF Extension: Flashblock - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2013-11-25]
FF Extension: Classic Theme Restorer - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-05-01]
FF Extension: Firebug - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\firebug@software.joehewitt.com.xpi [2011-09-28]
FF Extension: Validaty - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\validaty@gemal.dk.xpi [2014-08-05]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-09-09]
FF Extension: Gmail Manager - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi [2011-09-28]
FF Extension: YouTube High Definition - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-07-10]
FF Extension: Adblock Plus - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-28]
FF Extension: Screenshoter - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{d9babd10-47de-11df-9879-0800200c9a66}.xpi [2011-12-01]
Chrome:
=======
CHR HomePage: Default ->
CHR DefaultSearchKeyword: Default -> BA06E9E5512D89163333A00DBBF567EB788B0EF5C38A485E3AD9DA1EE6780C75
CHR DefaultSearchURL: Default -> 50F07C692FD3B2B8AE0CED8920DA455CDEFF8EB84010AF2D18013911A47F30D3
CHR Profile: C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]
CHR Extension: (MozBar) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2014-07-08]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-07-22]
CHR Extension: (AdBlock) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-10]
CHR Extension: (LiveJournal Extension) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmfgnboikinlhnaomlhalipemjbmfgi [2014-07-22]
CHR Extension: (Google Mail Checker) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-07-22]
CHR Extension: (Google Wallet) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Profile: C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Docs) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-18]
CHR Extension: (Google Drive) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-18]
CHR Extension: (YouTube) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-18]
CHR Extension: (Google Search) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-18]
CHR Extension: (Avira Browser Safety) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-18]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-08-18]
CHR Extension: (Google Wallet) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-18]
CHR Extension: (Gmail) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-18]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-12] (Avira Operations GmbH & Co. KG)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2013-02-23] (Apache Software Foundation) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\37.0.2062.28\remoting_host.exe [51016 2014-07-17] (Google Inc.)
R2 FoxitCloudUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
S4 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [147368 2012-09-24] (LogMeIn, Inc.)
S4 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2011-09-16] (LogMeIn, Inc.)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [8151040 2013-05-16] () [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-07-15] ()
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-04-25] (Check Point Software Technologies Ltd.)
S2 XAMPP; C:\xampp\service.exe [60928 2013-03-30] () [File not signed]
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [92176 2014-04-09] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [15928 2011-09-16] (LogMeIn, Inc.)
S4 LMIRfsClientNP; No ImagePath
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [52736 2012-07-09] (Apple, Inc.) [File not signed]
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [117040 2011-11-04] (Oracle Corporation)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450968 2014-04-24] (Check Point Software Technologies Ltd.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S0 vmci; system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-18 16:45 - 2014-09-18 16:48 - 00022677 _____ () C:\Users\Dana\Desktop\FRST.txt
2014-09-18 16:45 - 2014-09-18 16:47 - 00000000 ____D () C:\FRST
2014-09-18 16:42 - 2014-09-18 16:42 - 00112640 _____ (forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
2014-09-18 16:41 - 2014-09-18 16:41 - 02105856 _____ (Farbar) C:\Users\Dana\Desktop\FRST64.exe
2014-09-18 09:40 - 2014-09-18 09:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{60CE5886-42AA-4E2C-BFF8-FC17339D2100}
2014-09-17 20:53 - 2014-09-17 20:53 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Oracle
2014-09-17 11:21 - 2014-09-17 11:21 - 00000000 ____D () C:\Users\Dana\AppData\Local\{E4B21294-902E-4DFB-87FC-2E86474B0D6F}
2014-09-16 23:20 - 2014-09-16 23:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C2CA9C73-D189-42FA-9736-F466F9B48B36}
2014-09-16 14:29 - 2014-09-16 14:29 - 00005431 _____ () C:\Users\Dana\Downloads\URLS-16.09.2014-danasvedova.txt
2014-09-16 11:19 - 2014-09-16 11:19 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C5774B44-CB5A-402E-8FBC-CB170160A5E7}
2014-09-15 23:18 - 2014-09-15 23:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BDD8C104-B6D9-419F-B6FE-8AE633D34A9A}
2014-09-15 14:11 - 2014-09-15 14:14 - 00000000 ____D () C:\Users\Dana\Documents\signature
2014-09-15 11:17 - 2014-09-15 11:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5234C4AF-210D-48B4-9129-FB591D66E72B}
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-09-13 09:28 - 2014-09-13 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-12 21:29 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 21:29 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 21:29 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 21:29 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 21:29 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 21:29 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 21:29 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 21:29 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 21:29 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 21:29 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 21:29 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 21:29 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 21:29 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 21:29 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 21:29 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 21:29 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 21:29 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 21:29 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 21:29 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 21:29 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 21:29 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 21:29 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 21:29 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 21:29 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 21:29 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 21:29 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 21:29 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 21:29 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 21:29 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 21:29 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 21:29 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 21:29 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 21:29 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 21:29 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 21:29 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 21:29 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 21:29 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 21:29 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 21:29 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 21:29 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 21:29 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 21:29 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 21:29 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 21:29 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 21:29 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 21:29 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 21:29 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 21:29 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 21:29 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 21:29 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-12 21:09 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-12 21:09 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-12 13:50 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-12 13:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-12 13:49 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-12 13:49 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-12 13:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-12 13:49 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-12 13:49 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-12 13:49 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-12 13:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-12 13:33 - 2014-09-12 13:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{B2B462FD-EBA7-4A20-8BC8-66B805ED6231}
2014-09-10 08:41 - 2014-09-10 08:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{3B24C1D0-7E43-4C85-AF89-8A738F333794}
2014-09-09 15:41 - 2014-09-09 15:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{78A943F5-7CE9-44C2-844B-5644055D1E68}
2014-09-08 10:16 - 2014-09-08 10:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{732518D4-70E6-4143-9AB0-02D836AEF144}
2014-09-07 13:24 - 2014-09-07 13:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{39CE8EDA-F342-4888-AC52-6CDF3977BED1}
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-05 09:14 - 2014-09-05 09:14 - 00000000 ____D () C:\Users\Dana\AppData\Local\{F2A98C95-C7C1-4150-AF5B-8BD916A17040}
2014-09-04 15:01 - 2014-09-04 15:01 - 00003537 _____ () C:\Users\Dana\AppData\Local\recently-used.xbel
2014-09-04 14:40 - 2014-09-04 14:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{4C6FEB01-FC44-4AA4-85B7-20D969168EEB}
2014-09-03 11:05 - 2014-09-03 11:05 - 00000000 ____D () C:\Users\Dana\AppData\Local\{451D47E4-5232-4558-9D8B-548E607D516F}
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\Fraps19d
2014-09-02 09:36 - 2014-09-02 09:36 - 00000000 ____D () C:\Users\Dana\AppData\Local\{CA46257A-B5CE-40E4-A619-6097377E4D1B}
2014-09-01 21:17 - 2014-09-01 21:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{435A5D52-99F6-42F3-A877-3F216FC78FEB}
2014-09-01 09:16 - 2014-09-01 09:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5DFE2B05-40E5-4C62-BD3A-B1787732006E}
2014-08-29 10:33 - 2014-08-29 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{71990CD5-D192-4742-8D6E-4862F18A495D}
2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BBCD49C7-BC9C-4BD4-BDB8-BDAAC10CD07F}
2014-08-28 08:59 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 08:59 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 08:59 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 09:50 - 2014-08-27 09:50 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1BA1553A-2FCA-46E2-AC8B-75BD8BE7FE52}
2014-08-26 18:20 - 2014-08-26 18:20 - 356583291 _____ (Adobe Systems Inc. ) C:\Users\Dana\Documents\PhSp_CS2_English.exe
2014-08-26 18:20 - 2014-08-26 18:20 - 00000044 _____ () C:\Users\Dana\Documents\pscs2.txt
2014-08-26 16:32 - 2014-08-26 16:32 - 00000000 ____D () C:\Users\Dana\AppData\Local\{2AA9697F-46D0-427A-BFDF-2F7876090FAB}
2014-08-25 10:10 - 2014-09-18 16:32 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-25 09:20 - 2014-08-25 09:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{FFF3ACE1-2F4E-417F-95A9-8FCF1B0C060F}
2014-08-22 23:27 - 2014-08-22 23:28 - 00000000 ____D () C:\Users\Dana\AppData\Local\{48879062-D834-45B4-AFF4-043E74A4C2B1}
2014-08-22 11:26 - 2014-08-22 11:27 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A7D18FE9-954D-480E-AD90-8EA59D12B2D0}
2014-08-21 23:25 - 2014-08-21 23:25 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5FD8A4E6-0FC0-4774-8DBF-6E5350AD658E}
2014-08-21 11:24 - 2014-08-21 11:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1DC82FBE-2D05-4777-9B0C-4516F66C4CC7}
2014-08-20 22:34 - 2014-08-20 22:35 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C4D7E6D2-4965-4168-A251-DA1787571483}
2014-08-20 10:33 - 2014-08-20 10:34 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A2E00964-C6B0-4CB0-A83F-1AB6E280B900}
2014-08-20 10:18 - 2014-08-20 10:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{7010B328-A7B9-4B8E-A158-6A6BF40AC3A5}
2014-08-19 22:12 - 2014-08-19 22:12 - 00000000 ____D () C:\Users\Dana\AppData\Local\{9A9ADD8E-E763-4295-B158-36EC7633BEF5}
2014-08-19 10:11 - 2014-08-19 10:11 - 00000000 ____D () C:\Users\Dana\AppData\Local\{DD1017B2-ADBD-4087-91DA-3528ED6CFB66}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-18 16:48 - 2014-09-18 16:45 - 00022677 _____ () C:\Users\Dana\Desktop\FRST.txt
2014-09-18 16:47 - 2014-09-18 16:45 - 00000000 ____D () C:\FRST
2014-09-18 16:46 - 2011-10-13 18:23 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Skype
2014-09-18 16:42 - 2014-09-18 16:42 - 00112640 _____ (forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
2014-09-18 16:42 - 2012-01-15 15:15 - 00000000 ____D () C:\Users\Dana\AppData\Local\LogMeIn Hamachi
2014-09-18 16:41 - 2014-09-18 16:41 - 02105856 _____ (Farbar) C:\Users\Dana\Desktop\FRST64.exe
2014-09-18 16:39 - 2011-09-28 22:43 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\FileZilla
2014-09-18 16:39 - 2009-07-14 06:45 - 00015296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:39 - 2009-07-14 06:45 - 00015296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:35 - 2011-09-28 21:47 - 01758446 _____ () C:\Windows\WindowsUpdate.log
2014-09-18 16:32 - 2014-08-25 10:10 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-18 16:32 - 2014-07-27 09:07 - 00020848 _____ () C:\Windows\setupact.log
2014-09-18 16:32 - 2012-09-01 22:03 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\OnTranslator
2014-09-18 16:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-18 15:39 - 2013-01-18 12:24 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\AIMP3
2014-09-18 13:25 - 2012-09-14 14:09 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\.minecraft
2014-09-18 09:40 - 2014-09-18 09:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{60CE5886-42AA-4E2C-BFF8-FC17339D2100}
2014-09-17 22:59 - 2011-09-29 10:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-17 22:56 - 2011-09-29 10:10 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-17 21:34 - 2014-06-08 22:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-17 20:53 - 2014-09-17 20:53 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Oracle
2014-09-17 11:21 - 2014-09-17 11:21 - 00000000 ____D () C:\Users\Dana\AppData\Local\{E4B21294-902E-4DFB-87FC-2E86474B0D6F}
2014-09-17 11:07 - 2014-08-03 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1379941660
2014-09-17 11:07 - 2013-09-23 15:07 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-09-16 23:20 - 2014-09-16 23:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C2CA9C73-D189-42FA-9736-F466F9B48B36}
2014-09-16 14:29 - 2014-09-16 14:29 - 00005431 _____ () C:\Users\Dana\Downloads\URLS-16.09.2014-danasvedova.txt
2014-09-16 11:19 - 2014-09-16 11:19 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C5774B44-CB5A-402E-8FBC-CB170160A5E7}
2014-09-15 23:18 - 2014-09-15 23:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BDD8C104-B6D9-419F-B6FE-8AE633D34A9A}
2014-09-15 14:14 - 2014-09-15 14:11 - 00000000 ____D () C:\Users\Dana\Documents\signature
2014-09-15 14:11 - 2011-09-28 22:46 - 00000000 ____D () C:\Users\Dana\Documents\prace
2014-09-15 11:17 - 2014-09-15 11:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5234C4AF-210D-48B4-9129-FB591D66E72B}
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-09-14 18:12 - 2014-05-25 15:17 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-09-14 18:12 - 2012-06-13 18:29 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-09-14 09:01 - 2014-07-27 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-14 09:01 - 2014-07-27 14:28 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-14 09:01 - 2013-03-23 18:18 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-09-14 08:54 - 2012-04-24 22:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-13 12:11 - 2011-11-23 16:09 - 00001003 _____ () C:\Users\Dana\Desktop\yWriter5.lnk
2014-09-13 12:11 - 2011-09-29 18:42 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-09-13 09:28 - 2014-09-13 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-12 21:26 - 2011-11-20 17:09 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 21:26 - 2011-09-28 23:06 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-09-12 21:26 - 2011-09-28 23:06 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-09-12 21:26 - 2009-07-14 07:13 - 01563000 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-12 21:24 - 2013-08-14 17:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 21:11 - 2011-09-29 10:08 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-12 21:08 - 2014-07-08 08:59 - 00000000 ___RD () C:\Users\Dana\Dropbox
2014-09-12 16:53 - 2014-07-08 08:57 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Dropbox
2014-09-12 13:33 - 2014-09-12 13:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{B2B462FD-EBA7-4A20-8BC8-66B805ED6231}
2014-09-10 09:32 - 2012-12-01 11:37 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 09:32 - 2012-12-01 11:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 09:32 - 2012-12-01 11:37 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 08:41 - 2014-09-10 08:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{3B24C1D0-7E43-4C85-AF89-8A738F333794}
2014-09-09 15:45 - 2011-11-17 11:41 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-09-09 15:45 - 2011-09-28 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-09-09 15:41 - 2014-09-09 15:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{78A943F5-7CE9-44C2-844B-5644055D1E68}
2014-09-08 10:16 - 2014-09-08 10:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{732518D4-70E6-4143-9AB0-02D836AEF144}
2014-09-07 22:35 - 2012-10-23 13:52 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\TS3Client
2014-09-07 13:24 - 2014-09-07 13:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{39CE8EDA-F342-4888-AC52-6CDF3977BED1}
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-05 10:26 - 2012-11-05 23:24 - 00000000 ____D () C:\de-zaloha
2014-09-05 09:14 - 2014-09-05 09:14 - 00000000 ____D () C:\Users\Dana\AppData\Local\{F2A98C95-C7C1-4150-AF5B-8BD916A17040}
2014-09-04 15:01 - 2014-09-04 15:01 - 00003537 _____ () C:\Users\Dana\AppData\Local\recently-used.xbel
2014-09-04 15:01 - 2014-03-11 22:20 - 00000000 ____D () C:\Users\Dana\.gimp-2.8
2014-09-04 14:40 - 2014-09-04 14:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{4C6FEB01-FC44-4AA4-85B7-20D969168EEB}
2014-09-04 14:32 - 2014-06-10 15:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\gtk-2.0
2014-09-03 11:05 - 2014-09-03 11:05 - 00000000 ____D () C:\Users\Dana\AppData\Local\{451D47E4-5232-4558-9D8B-548E607D516F}
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\Fraps19d
2014-09-02 09:36 - 2014-09-02 09:36 - 00000000 ____D () C:\Users\Dana\AppData\Local\{CA46257A-B5CE-40E4-A619-6097377E4D1B}
2014-09-01 21:17 - 2014-09-01 21:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{435A5D52-99F6-42F3-A877-3F216FC78FEB}
2014-09-01 09:16 - 2014-09-01 09:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5DFE2B05-40E5-4C62-BD3A-B1787732006E}
2014-08-29 18:35 - 2014-07-16 14:36 - 00000000 ____D () C:\Users\Dana\Documents\XNALara_XPS
2014-08-29 10:33 - 2014-08-29 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{71990CD5-D192-4742-8D6E-4862F18A495D}
2014-08-29 08:59 - 2009-07-14 06:45 - 03821776 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BBCD49C7-BC9C-4BD4-BDB8-BDAAC10CD07F}
2014-08-27 15:17 - 2012-12-17 11:34 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Audacity
2014-08-27 09:50 - 2014-08-27 09:50 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1BA1553A-2FCA-46E2-AC8B-75BD8BE7FE52}
2014-08-26 18:20 - 2014-08-26 18:20 - 356583291 _____ (Adobe Systems Inc. ) C:\Users\Dana\Documents\PhSp_CS2_English.exe
2014-08-26 18:20 - 2014-08-26 18:20 - 00000044 _____ () C:\Users\Dana\Documents\pscs2.txt
2014-08-26 16:32 - 2014-08-26 16:32 - 00000000 ____D () C:\Users\Dana\AppData\Local\{2AA9697F-46D0-427A-BFDF-2F7876090FAB}
2014-08-25 21:42 - 2014-01-05 14:20 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-25 09:20 - 2014-08-25 09:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{FFF3ACE1-2F4E-417F-95A9-8FCF1B0C060F}
2014-08-23 04:07 - 2014-08-28 08:59 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 08:59 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 08:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 23:28 - 2014-08-22 23:27 - 00000000 ____D () C:\Users\Dana\AppData\Local\{48879062-D834-45B4-AFF4-043E74A4C2B1}
2014-08-22 11:27 - 2014-08-22 11:26 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A7D18FE9-954D-480E-AD90-8EA59D12B2D0}
2014-08-21 23:25 - 2014-08-21 23:25 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5FD8A4E6-0FC0-4774-8DBF-6E5350AD658E}
2014-08-21 11:24 - 2014-08-21 11:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1DC82FBE-2D05-4777-9B0C-4516F66C4CC7}
2014-08-20 22:35 - 2014-08-20 22:34 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C4D7E6D2-4965-4168-A251-DA1787571483}
2014-08-20 10:34 - 2014-08-20 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A2E00964-C6B0-4CB0-A83F-1AB6E280B900}
2014-08-20 10:18 - 2014-08-20 10:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{7010B328-A7B9-4B8E-A158-6A6BF40AC3A5}
2014-08-19 22:12 - 2014-08-19 22:12 - 00000000 ____D () C:\Users\Dana\AppData\Local\{9A9ADD8E-E763-4295-B158-36EC7633BEF5}
2014-08-19 20:05 - 2014-09-12 21:29 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-12 21:29 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 10:11 - 2014-08-19 10:11 - 00000000 ____D () C:\Users\Dana\AppData\Local\{DD1017B2-ADBD-4087-91DA-3528ED6CFB66}
2014-08-19 01:01 - 2014-09-12 21:29 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-12 21:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-12 21:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-12 21:29 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-12 21:29 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-12 21:29 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-12 21:29 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-12 21:29 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-12 21:29 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-12 21:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-12 21:29 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-12 21:29 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-12 21:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-12 21:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
Some content of TEMP:
====================
C:\Users\Dana\AppData\Local\Temp\API.dll
C:\Users\Dana\AppData\Local\Temp\avgnt.exe
C:\Users\Dana\AppData\Local\Temp\Base64.dll
C:\Users\Dana\AppData\Local\Temp\Calc.dll
C:\Users\Dana\AppData\Local\Temp\Canvas.dll
C:\Users\Dana\AppData\Local\Temp\Clipboard.dll
C:\Users\Dana\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Dana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpylz3jc.dll
C:\Users\Dana\AppData\Local\Temp\Dumper.dll
C:\Users\Dana\AppData\Local\Temp\Entry.dll
C:\Users\Dana\AppData\Local\Temp\Event.dll
C:\Users\Dana\AppData\Local\Temp\Expat.dll
C:\Users\Dana\AppData\Local\Temp\Fcntl.dll
C:\Users\Dana\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Dana\AppData\Local\Temp\HiRes.dll
C:\Users\Dana\AppData\Local\Temp\HList.dll
C:\Users\Dana\AppData\Local\Temp\IO.dll
C:\Users\Dana\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.9-R0.1-10-g8688bd4-b3092jnks.dll
C:\Users\Dana\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Dana\AppData\Local\Temp\Listbox.dll
C:\Users\Dana\AppData\Local\Temp\MsgPlusUninstall.exe
C:\Users\Dana\AppData\Local\Temp\NBFrame.dll
C:\Users\Dana\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Dana\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Dana\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Dana\AppData\Local\Temp\nvStInst.exe
C:\Users\Dana\AppData\Local\Temp\OLE.dll
C:\Users\Dana\AppData\Local\Temp\PerfLib.dll
C:\Users\Dana\AppData\Local\Temp\Photo.dll
C:\Users\Dana\AppData\Local\Temp\Pixmap.dll
C:\Users\Dana\AppData\Local\Temp\POSIX.dll
C:\Users\Dana\AppData\Local\Temp\Process.dll
C:\Users\Dana\AppData\Local\Temp\Registry.dll
C:\Users\Dana\AppData\Local\Temp\Scale.dll
C:\Users\Dana\AppData\Local\Temp\Scrollbar.dll
C:\Users\Dana\AppData\Local\Temp\Shell.dll
C:\Users\Dana\AppData\Local\Temp\Shortcut.dll
C:\Users\Dana\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Dana\AppData\Local\Temp\Socket.dll
C:\Users\Dana\AppData\Local\Temp\Sound.dll
C:\Users\Dana\AppData\Local\Temp\Text.dll
C:\Users\Dana\AppData\Local\Temp\Tk.dll
C:\Users\Dana\AppData\Local\Temp\Win32.dll
C:\Users\Dana\AppData\Local\Temp\Zlib.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {E6380B7E-D4B2-19F1-083E-56486607704B}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Dana\Desktop" je 3 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI
"C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor
"C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Monitor Apache Servers.lnk
C:\PROGRA~2\APACHE~1\Apache2.2\bin\APACHE~1.EXE
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk
C:\PROGRA~2\MICROS~3\Office12\ONENOTEM.EXE
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
od včerejška mám mírné problémy, sice to spíše vypadá na problémy s grafikou, ale pro jistotu jsem to chtěla zkontrolovat.
Před chvílí se mi mírně zpomalil, každé okno co jsem otevřela mělo místo obsahu uvnitř černou plochu. Operovat s okny šlo (zavírat, minimalizovat, přesouvat, ukládat), akorát nebylo vidět když se psalo dovnitř, popř. hlášky na ukožení, takže jsem vše dělala poslepu.

Předem děkuji!

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by Dana (administrator) on HOME on 18-09-2014 16:45:23
Running from C:\Users\Dana\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\audiodg.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
() C:\xampp\mysql\bin\mysqld.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PSIService.exe
(Apache Software Foundation) C:\xampp\apache\bin\httpd.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Check Point Software Technologies, Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe
(VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(FileZilla Project) C:\Program Files (x86)\FileZilla FTP Client\filezilla.exe
(forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2403104 2014-07-25] (NVIDIA Corporation)
HKLM-x32\...\Run: [ZoneAlarm] => C:\Program Files (x86)\CheckPoint\ZoneAlarm\zatray.exe [137352 2014-04-25] (Check Point Software Technologies Ltd.)
HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [2171904 2009-06-05] (VIA)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [135536 2010-12-13] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [751184 2014-08-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3802448 2014-09-04] (LogMeIn Inc.)
HKLM-x32\...\Run: [Avira Systray] => C:\Program Files (x86)\Avira\My Avira\Avira.OE.Systray.exe [164656 2014-08-27] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-1602808253-430055931-27258192-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21650016 2014-07-24] (Skype Technologies S.A.)
AppInit_DLLs-x32: => "" File Not Found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\OnTranslator.lnk
ShortcutTarget: OnTranslator.lnk -> C:\Program Files (x86)\OnTranslator.com\OnTranslator.exe ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:Tabs
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {06A8AFCA-3834-4726-BC43-1F90B285805F} URL = http://search.zonealarm.com/search?src= ... er=&&r=170
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - ZoneAlarm Security Toolbar - {438FAE3E-BDEF-44D3-AB8B-0C7C8350DF59} - C:\Program Files (x86)\Check Point Software Technologies LTD\zonealarm\1.8.22.0\zonealarmTlbr.dll (Check Point Software Technologies LTD)
DPF: HKLM-x32 {0D41B8C5-2599-4893-8183-00195EC8D5F9} http://support.asus.com.tw/common/asusTek_sys_ctrl.cab
DPF: HKLM-x32 {1E54D648-B804-468d-BC78-4AFFED8E262F} http://www.nvidia.com/content/DriverDow ... ab_nvd.cab
DPF: HKLM-x32 {74DBCB52-F298-4110-951D-AD2FF67BC8AB} http://www.nvidia.com/content/DriverDow ... rtScan.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/s ... wflash.cab
Handler: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - No File
Handler-x32: gcf - {9875BFAF-B04D-445E-8A69-BE36838CDE3E} - C:\Program Files (x86)\Google\Chrome Frame\Application\32.0.1700.107\npchrome_frame.dll (Google Inc.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF ProfilePath: C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default
FF Homepage: hxxp://www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> C:\Windows\system32\Wat\npWatWeb.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3555.0308 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @spoon.net/Spoon Plugin 3.33 -> C:\Users\Dana\AppData\Local\Spoon\3.33.3.13\npMozillaSpoonPlugin.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Dana\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Dana\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np-mswmp.dll (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin2.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin3.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin4.dll (Apple Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npqtplugin5.dll (Apple Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Avira Browser Safety - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\abs@avira.com [2014-09-04]
FF Extension: SEO Workers Analysis Tool - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\seoanalysistool@seoworkers [2014-05-04]
FF Extension: SeoQuake - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{317B5128-0B0B-49b2-B2DB-1E7560E16C74} [2014-09-03]
FF Extension: Dust-Me Selectors - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{3c6e1eed-a07e-4c80-9cf3-66ea0bf40b37} [2013-10-04]
FF Extension: Flashblock - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2013-11-25]
FF Extension: Classic Theme Restorer - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\ClassicThemeRestorer@ArisT2Noia4dev.xpi [2014-05-01]
FF Extension: Firebug - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\firebug@software.joehewitt.com.xpi [2011-09-28]
FF Extension: Validaty - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\validaty@gemal.dk.xpi [2014-08-05]
FF Extension: 1-Click YouTube Video Downloader - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\YoutubeDownloader@PeterOlayev.com.xpi [2013-09-09]
FF Extension: Gmail Manager - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{582195F5-92E7-40a0-A127-DB71295901D7}.xpi [2011-09-28]
FF Extension: YouTube High Definition - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{7b1bf0b6-a1b9-42b0-b75d-252036438bdc}.xpi [2014-07-10]
FF Extension: Adblock Plus - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2011-09-28]
FF Extension: Screenshoter - C:\Users\Dana\AppData\Roaming\Mozilla\Firefox\Profiles\1ggffnvb.default\Extensions\{d9babd10-47de-11df-9879-0800200c9a66}.xpi [2011-12-01]
Chrome:
=======
CHR HomePage: Default ->
CHR DefaultSearchKeyword: Default -> BA06E9E5512D89163333A00DBBF567EB788B0EF5C38A485E3AD9DA1EE6780C75
CHR DefaultSearchURL: Default -> 50F07C692FD3B2B8AE0CED8920DA455CDEFF8EB84010AF2D18013911A47F30D3
CHR Profile: C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-08]
CHR Extension: (MozBar) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\eakacpaijcpapndcfffdgphdiccmpknp [2014-07-08]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-07-22]
CHR Extension: (AdBlock) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-10]
CHR Extension: (LiveJournal Extension) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkmfgnboikinlhnaomlhalipemjbmfgi [2014-07-22]
CHR Extension: (Google Mail Checker) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-07-22]
CHR Extension: (Google Wallet) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-22]
CHR Profile: C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Docs) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-18]
CHR Extension: (Google Drive) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-18]
CHR Extension: (YouTube) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-18]
CHR Extension: (Google Search) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-18]
CHR Extension: (Avira Browser Safety) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-08-18]
CHR Extension: (Chrome Remote Desktop) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2014-08-18]
CHR Extension: (Google Wallet) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-18]
CHR Extension: (Gmail) - C:\Users\Dana\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-18]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [430160 2014-08-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [430160 2014-08-12] (Avira Operations GmbH & Co. KG)
R2 Apache2.4; C:\xampp\apache\bin\httpd.exe [22016 2013-02-23] (Apache Software Foundation) [File not signed]
R2 Avira.OE.ServiceHost; C:\Program Files (x86)\Avira\My Avira\Avira.OE.ServiceHost.exe [160048 2014-08-27] (Avira Operations GmbH & Co. KG)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\37.0.2062.28\remoting_host.exe [51016 2014-07-17] (Google Inc.)
R2 FoxitCloudUpdateService; C:\PROGRAM FILES (X86)\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [242216 2014-06-17] (Foxit Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-08-08] (LogMeIn, Inc.)
S4 LMIMaint; C:\Program Files (x86)\LogMeIn\x64\RaMaint.exe [147368 2012-09-24] (LogMeIn, Inc.)
S4 LogMeIn; C:\Program Files (x86)\LogMeIn\x64\LogMeIn.exe [407424 2011-09-16] (LogMeIn, Inc.)
R2 mysql; C:\xampp\mysql\bin\mysqld.exe [8151040 2013-05-16] () [File not signed]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1720608 2014-07-25] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [18956064 2014-07-25] (NVIDIA Corporation)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-07-15] ()
R2 ProtexisLicensing; C:\Windows\SysWOW64\PSIService.exe [177704 2007-06-05] ()
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 vsmon; C:\Program Files (x86)\CheckPoint\ZoneAlarm\vsmon.exe [3592120 2014-04-25] (Check Point Software Technologies Ltd.)
S2 XAMPP; C:\xampp\service.exe [60928 2013-03-30] () [File not signed]
R2 ZAPrivacyService; C:\Program Files (x86)\CheckPoint\ZoneAlarm\ZAPrivacyService.exe [92176 2014-04-09] (Check Point Software Technologies, Ltd.)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S3 AndNetDiag; C:\Windows\System32\DRIVERS\lgandnetdiag64.sys [29184 2013-04-18] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\System32\DRIVERS\lgandnetmodem64.sys [36352 2013-06-28] (LG Electronics Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13368 2009-04-06] ()
R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [117712 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [130584 2014-07-02] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-02] (Avira Operations GmbH & Co. KG)
R2 LMIInfo; C:\Program Files (x86)\LogMeIn\x64\RaInfo.sys [15928 2011-09-16] (LogMeIn, Inc.)
S4 LMIRfsClientNP; No ImagePath
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42016 2013-11-27] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35232 2013-12-06] (Visicom Media Inc.)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-05-14] ()
R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [20256 2014-07-25] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [52736 2012-07-09] (Apple, Inc.) [File not signed]
S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [117040 2011-11-04] (Oracle Corporation)
R3 VCSVADHWSer; C:\Windows\System32\DRIVERS\vcsvad.sys [21504 2008-12-26] (Avnex)
R1 Vsdatant; C:\Windows\System32\DRIVERS\vsdatant.sys [450968 2014-04-24] (Check Point Software Technologies Ltd.)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S0 vmci; system32\DRIVERS\vmci.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-18 16:45 - 2014-09-18 16:48 - 00022677 _____ () C:\Users\Dana\Desktop\FRST.txt
2014-09-18 16:45 - 2014-09-18 16:47 - 00000000 ____D () C:\FRST
2014-09-18 16:42 - 2014-09-18 16:42 - 00112640 _____ (forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
2014-09-18 16:41 - 2014-09-18 16:41 - 02105856 _____ (Farbar) C:\Users\Dana\Desktop\FRST64.exe
2014-09-18 09:40 - 2014-09-18 09:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{60CE5886-42AA-4E2C-BFF8-FC17339D2100}
2014-09-17 20:53 - 2014-09-17 20:53 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Oracle
2014-09-17 11:21 - 2014-09-17 11:21 - 00000000 ____D () C:\Users\Dana\AppData\Local\{E4B21294-902E-4DFB-87FC-2E86474B0D6F}
2014-09-16 23:20 - 2014-09-16 23:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C2CA9C73-D189-42FA-9736-F466F9B48B36}
2014-09-16 14:29 - 2014-09-16 14:29 - 00005431 _____ () C:\Users\Dana\Downloads\URLS-16.09.2014-danasvedova.txt
2014-09-16 11:19 - 2014-09-16 11:19 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C5774B44-CB5A-402E-8FBC-CB170160A5E7}
2014-09-15 23:18 - 2014-09-15 23:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BDD8C104-B6D9-419F-B6FE-8AE633D34A9A}
2014-09-15 14:11 - 2014-09-15 14:14 - 00000000 ____D () C:\Users\Dana\Documents\signature
2014-09-15 11:17 - 2014-09-15 11:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5234C4AF-210D-48B4-9129-FB591D66E72B}
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-09-13 09:28 - 2014-09-13 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-12 21:29 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-12 21:29 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-12 21:29 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-12 21:29 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-12 21:29 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-12 21:29 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-12 21:29 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-12 21:29 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-12 21:29 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-12 21:29 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-12 21:29 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-12 21:29 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-12 21:29 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-12 21:29 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-12 21:29 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-12 21:29 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-12 21:29 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-12 21:29 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-12 21:29 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-12 21:29 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-12 21:29 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-12 21:29 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-12 21:29 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-12 21:29 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-12 21:29 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-12 21:29 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-12 21:29 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-12 21:29 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-12 21:29 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-12 21:29 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-12 21:29 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-12 21:29 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-12 21:29 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-12 21:29 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-12 21:29 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-12 21:29 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-12 21:29 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-12 21:29 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-12 21:29 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-12 21:29 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-12 21:29 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-12 21:29 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-12 21:29 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-12 21:29 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-12 21:29 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-12 21:29 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-12 21:29 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-12 21:29 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-12 21:29 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-12 21:29 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-12 21:29 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-12 21:29 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-12 21:09 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-12 21:09 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-12 13:50 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-12 13:50 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-12 13:49 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-12 13:49 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-12 13:49 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-12 13:49 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-12 13:49 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-12 13:49 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-12 13:49 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-12 13:33 - 2014-09-12 13:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{B2B462FD-EBA7-4A20-8BC8-66B805ED6231}
2014-09-10 08:41 - 2014-09-10 08:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{3B24C1D0-7E43-4C85-AF89-8A738F333794}
2014-09-09 15:41 - 2014-09-09 15:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{78A943F5-7CE9-44C2-844B-5644055D1E68}
2014-09-08 10:16 - 2014-09-08 10:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{732518D4-70E6-4143-9AB0-02D836AEF144}
2014-09-07 13:24 - 2014-09-07 13:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{39CE8EDA-F342-4888-AC52-6CDF3977BED1}
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-05 09:14 - 2014-09-05 09:14 - 00000000 ____D () C:\Users\Dana\AppData\Local\{F2A98C95-C7C1-4150-AF5B-8BD916A17040}
2014-09-04 15:01 - 2014-09-04 15:01 - 00003537 _____ () C:\Users\Dana\AppData\Local\recently-used.xbel
2014-09-04 14:40 - 2014-09-04 14:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{4C6FEB01-FC44-4AA4-85B7-20D969168EEB}
2014-09-03 11:05 - 2014-09-03 11:05 - 00000000 ____D () C:\Users\Dana\AppData\Local\{451D47E4-5232-4558-9D8B-548E607D516F}
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\Fraps19d
2014-09-02 09:36 - 2014-09-02 09:36 - 00000000 ____D () C:\Users\Dana\AppData\Local\{CA46257A-B5CE-40E4-A619-6097377E4D1B}
2014-09-01 21:17 - 2014-09-01 21:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{435A5D52-99F6-42F3-A877-3F216FC78FEB}
2014-09-01 09:16 - 2014-09-01 09:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5DFE2B05-40E5-4C62-BD3A-B1787732006E}
2014-08-29 10:33 - 2014-08-29 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{71990CD5-D192-4742-8D6E-4862F18A495D}
2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BBCD49C7-BC9C-4BD4-BDB8-BDAAC10CD07F}
2014-08-28 08:59 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-28 08:59 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-28 08:59 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 09:50 - 2014-08-27 09:50 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1BA1553A-2FCA-46E2-AC8B-75BD8BE7FE52}
2014-08-26 18:20 - 2014-08-26 18:20 - 356583291 _____ (Adobe Systems Inc. ) C:\Users\Dana\Documents\PhSp_CS2_English.exe
2014-08-26 18:20 - 2014-08-26 18:20 - 00000044 _____ () C:\Users\Dana\Documents\pscs2.txt
2014-08-26 16:32 - 2014-08-26 16:32 - 00000000 ____D () C:\Users\Dana\AppData\Local\{2AA9697F-46D0-427A-BFDF-2F7876090FAB}
2014-08-25 10:10 - 2014-09-18 16:32 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-08-25 09:20 - 2014-08-25 09:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{FFF3ACE1-2F4E-417F-95A9-8FCF1B0C060F}
2014-08-22 23:27 - 2014-08-22 23:28 - 00000000 ____D () C:\Users\Dana\AppData\Local\{48879062-D834-45B4-AFF4-043E74A4C2B1}
2014-08-22 11:26 - 2014-08-22 11:27 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A7D18FE9-954D-480E-AD90-8EA59D12B2D0}
2014-08-21 23:25 - 2014-08-21 23:25 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5FD8A4E6-0FC0-4774-8DBF-6E5350AD658E}
2014-08-21 11:24 - 2014-08-21 11:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1DC82FBE-2D05-4777-9B0C-4516F66C4CC7}
2014-08-20 22:34 - 2014-08-20 22:35 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C4D7E6D2-4965-4168-A251-DA1787571483}
2014-08-20 10:33 - 2014-08-20 10:34 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A2E00964-C6B0-4CB0-A83F-1AB6E280B900}
2014-08-20 10:18 - 2014-08-20 10:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{7010B328-A7B9-4B8E-A158-6A6BF40AC3A5}
2014-08-19 22:12 - 2014-08-19 22:12 - 00000000 ____D () C:\Users\Dana\AppData\Local\{9A9ADD8E-E763-4295-B158-36EC7633BEF5}
2014-08-19 10:11 - 2014-08-19 10:11 - 00000000 ____D () C:\Users\Dana\AppData\Local\{DD1017B2-ADBD-4087-91DA-3528ED6CFB66}
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-18 16:48 - 2014-09-18 16:45 - 00022677 _____ () C:\Users\Dana\Desktop\FRST.txt
2014-09-18 16:47 - 2014-09-18 16:45 - 00000000 ____D () C:\FRST
2014-09-18 16:46 - 2011-10-13 18:23 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Skype
2014-09-18 16:42 - 2014-09-18 16:42 - 00112640 _____ (forum.viry.cz) C:\Users\Dana\Desktop\FRSTLauncher.exe
2014-09-18 16:42 - 2012-01-15 15:15 - 00000000 ____D () C:\Users\Dana\AppData\Local\LogMeIn Hamachi
2014-09-18 16:41 - 2014-09-18 16:41 - 02105856 _____ (Farbar) C:\Users\Dana\Desktop\FRST64.exe
2014-09-18 16:39 - 2011-09-28 22:43 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\FileZilla
2014-09-18 16:39 - 2009-07-14 06:45 - 00015296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:39 - 2009-07-14 06:45 - 00015296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:35 - 2011-09-28 21:47 - 01758446 _____ () C:\Windows\WindowsUpdate.log
2014-09-18 16:32 - 2014-08-25 10:10 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-18 16:32 - 2014-07-27 09:07 - 00020848 _____ () C:\Windows\setupact.log
2014-09-18 16:32 - 2012-09-01 22:03 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\OnTranslator
2014-09-18 16:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-18 15:39 - 2013-01-18 12:24 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\AIMP3
2014-09-18 13:25 - 2012-09-14 14:09 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\.minecraft
2014-09-18 09:40 - 2014-09-18 09:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{60CE5886-42AA-4E2C-BFF8-FC17339D2100}
2014-09-17 22:59 - 2011-09-29 10:11 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-17 22:56 - 2011-09-29 10:10 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-09-17 21:34 - 2014-06-08 22:21 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-17 20:53 - 2014-09-17 20:53 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Oracle
2014-09-17 11:21 - 2014-09-17 11:21 - 00000000 ____D () C:\Users\Dana\AppData\Local\{E4B21294-902E-4DFB-87FC-2E86474B0D6F}
2014-09-17 11:07 - 2014-08-03 11:04 - 00003822 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1379941660
2014-09-17 11:07 - 2013-09-23 15:07 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-09-16 23:20 - 2014-09-16 23:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C2CA9C73-D189-42FA-9736-F466F9B48B36}
2014-09-16 14:29 - 2014-09-16 14:29 - 00005431 _____ () C:\Users\Dana\Downloads\URLS-16.09.2014-danasvedova.txt
2014-09-16 11:19 - 2014-09-16 11:19 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C5774B44-CB5A-402E-8FBC-CB170160A5E7}
2014-09-15 23:18 - 2014-09-15 23:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BDD8C104-B6D9-419F-B6FE-8AE633D34A9A}
2014-09-15 14:14 - 2014-09-15 14:11 - 00000000 ____D () C:\Users\Dana\Documents\signature
2014-09-15 14:11 - 2011-09-28 22:46 - 00000000 ____D () C:\Users\Dana\Documents\prace
2014-09-15 11:17 - 2014-09-15 11:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5234C4AF-210D-48B4-9129-FB591D66E72B}
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\Users\Public\Foxit Software
2014-09-15 00:16 - 2014-09-15 00:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2014-09-14 18:12 - 2014-05-25 15:17 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.xtr
2014-09-14 18:12 - 2012-06-13 18:29 - 00281392 _____ () C:\Windows\SysWOW64\PnkBstrB.exe
2014-09-14 09:01 - 2014-07-27 14:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2014-09-14 09:01 - 2014-07-27 14:28 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-14 09:01 - 2013-03-23 18:18 - 00000000 ____D () C:\Program Files (x86)\Avira
2014-09-14 08:54 - 2012-04-24 22:54 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-13 12:11 - 2011-11-23 16:09 - 00001003 _____ () C:\Users\Dana\Desktop\yWriter5.lnk
2014-09-13 12:11 - 2011-09-29 18:42 - 00000000 ____D () C:\Program Files (x86)\yWriter5
2014-09-13 09:28 - 2014-09-13 09:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-12 21:26 - 2011-11-20 17:09 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-12 21:26 - 2011-09-28 23:06 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-09-12 21:26 - 2011-09-28 23:06 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-09-12 21:26 - 2009-07-14 07:13 - 01563000 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-12 21:24 - 2013-08-14 17:37 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-12 21:11 - 2011-09-29 10:08 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-12 21:08 - 2014-07-08 08:59 - 00000000 ___RD () C:\Users\Dana\Dropbox
2014-09-12 16:53 - 2014-07-08 08:57 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Dropbox
2014-09-12 13:33 - 2014-09-12 13:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{B2B462FD-EBA7-4A20-8BC8-66B805ED6231}
2014-09-10 09:32 - 2012-12-01 11:37 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-10 09:32 - 2012-12-01 11:37 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-10 09:32 - 2012-12-01 11:37 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-10 08:41 - 2014-09-10 08:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{3B24C1D0-7E43-4C85-AF89-8A738F333794}
2014-09-09 15:45 - 2011-11-17 11:41 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
2014-09-09 15:45 - 2011-09-28 22:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2014-09-09 15:41 - 2014-09-09 15:41 - 00000000 ____D () C:\Users\Dana\AppData\Local\{78A943F5-7CE9-44C2-844B-5644055D1E68}
2014-09-08 10:16 - 2014-09-08 10:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{732518D4-70E6-4143-9AB0-02D836AEF144}
2014-09-07 22:35 - 2012-10-23 13:52 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\TS3Client
2014-09-07 13:24 - 2014-09-07 13:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{39CE8EDA-F342-4888-AC52-6CDF3977BED1}
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-06 08:50 - 2014-09-06 08:50 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-05 10:26 - 2012-11-05 23:24 - 00000000 ____D () C:\de-zaloha
2014-09-05 09:14 - 2014-09-05 09:14 - 00000000 ____D () C:\Users\Dana\AppData\Local\{F2A98C95-C7C1-4150-AF5B-8BD916A17040}
2014-09-04 15:01 - 2014-09-04 15:01 - 00003537 _____ () C:\Users\Dana\AppData\Local\recently-used.xbel
2014-09-04 15:01 - 2014-03-11 22:20 - 00000000 ____D () C:\Users\Dana\.gimp-2.8
2014-09-04 14:40 - 2014-09-04 14:40 - 00000000 ____D () C:\Users\Dana\AppData\Local\{4C6FEB01-FC44-4AA4-85B7-20D969168EEB}
2014-09-04 14:32 - 2014-06-10 15:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\gtk-2.0
2014-09-03 11:05 - 2014-09-03 11:05 - 00000000 ____D () C:\Users\Dana\AppData\Local\{451D47E4-5232-4558-9D8B-548E607D516F}
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2014-09-02 17:43 - 2014-09-02 17:43 - 00000000 ____D () C:\Fraps19d
2014-09-02 09:36 - 2014-09-02 09:36 - 00000000 ____D () C:\Users\Dana\AppData\Local\{CA46257A-B5CE-40E4-A619-6097377E4D1B}
2014-09-01 21:17 - 2014-09-01 21:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{435A5D52-99F6-42F3-A877-3F216FC78FEB}
2014-09-01 09:16 - 2014-09-01 09:16 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5DFE2B05-40E5-4C62-BD3A-B1787732006E}
2014-08-29 18:35 - 2014-07-16 14:36 - 00000000 ____D () C:\Users\Dana\Documents\XNALara_XPS
2014-08-29 10:33 - 2014-08-29 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{71990CD5-D192-4742-8D6E-4862F18A495D}
2014-08-29 08:59 - 2009-07-14 06:45 - 03821776 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-28 10:17 - 2014-08-28 10:17 - 00000000 ____D () C:\Users\Dana\AppData\Local\{BBCD49C7-BC9C-4BD4-BDB8-BDAAC10CD07F}
2014-08-27 15:17 - 2012-12-17 11:34 - 00000000 ____D () C:\Users\Dana\AppData\Roaming\Audacity
2014-08-27 09:50 - 2014-08-27 09:50 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1BA1553A-2FCA-46E2-AC8B-75BD8BE7FE52}
2014-08-26 18:20 - 2014-08-26 18:20 - 356583291 _____ (Adobe Systems Inc. ) C:\Users\Dana\Documents\PhSp_CS2_English.exe
2014-08-26 18:20 - 2014-08-26 18:20 - 00000044 _____ () C:\Users\Dana\Documents\pscs2.txt
2014-08-26 16:32 - 2014-08-26 16:32 - 00000000 ____D () C:\Users\Dana\AppData\Local\{2AA9697F-46D0-427A-BFDF-2F7876090FAB}
2014-08-25 21:42 - 2014-01-05 14:20 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-25 09:20 - 2014-08-25 09:20 - 00000000 ____D () C:\Users\Dana\AppData\Local\{FFF3ACE1-2F4E-417F-95A9-8FCF1B0C060F}
2014-08-23 04:07 - 2014-08-28 08:59 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-28 08:59 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-28 08:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 23:28 - 2014-08-22 23:27 - 00000000 ____D () C:\Users\Dana\AppData\Local\{48879062-D834-45B4-AFF4-043E74A4C2B1}
2014-08-22 11:27 - 2014-08-22 11:26 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A7D18FE9-954D-480E-AD90-8EA59D12B2D0}
2014-08-21 23:25 - 2014-08-21 23:25 - 00000000 ____D () C:\Users\Dana\AppData\Local\{5FD8A4E6-0FC0-4774-8DBF-6E5350AD658E}
2014-08-21 11:24 - 2014-08-21 11:24 - 00000000 ____D () C:\Users\Dana\AppData\Local\{1DC82FBE-2D05-4777-9B0C-4516F66C4CC7}
2014-08-20 22:35 - 2014-08-20 22:34 - 00000000 ____D () C:\Users\Dana\AppData\Local\{C4D7E6D2-4965-4168-A251-DA1787571483}
2014-08-20 10:34 - 2014-08-20 10:33 - 00000000 ____D () C:\Users\Dana\AppData\Local\{A2E00964-C6B0-4CB0-A83F-1AB6E280B900}
2014-08-20 10:18 - 2014-08-20 10:18 - 00000000 ____D () C:\Users\Dana\AppData\Local\{7010B328-A7B9-4B8E-A158-6A6BF40AC3A5}
2014-08-19 22:12 - 2014-08-19 22:12 - 00000000 ____D () C:\Users\Dana\AppData\Local\{9A9ADD8E-E763-4295-B158-36EC7633BEF5}
2014-08-19 20:05 - 2014-09-12 21:29 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-19 19:39 - 2014-09-12 21:29 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-19 10:11 - 2014-08-19 10:11 - 00000000 ____D () C:\Users\Dana\AppData\Local\{DD1017B2-ADBD-4087-91DA-3528ED6CFB66}
2014-08-19 01:01 - 2014-09-12 21:29 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-19 00:29 - 2014-09-12 21:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-19 00:29 - 2014-09-12 21:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-19 00:26 - 2014-09-12 21:29 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-19 00:20 - 2014-09-12 21:29 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-19 00:19 - 2014-09-12 21:29 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-19 00:15 - 2014-09-12 21:29 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-19 00:15 - 2014-09-12 21:29 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-19 00:14 - 2014-09-12 21:29 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-19 00:14 - 2014-09-12 21:29 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-19 00:08 - 2014-09-12 21:29 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-19 00:05 - 2014-09-12 21:29 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-19 00:03 - 2014-09-12 21:29 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-19 00:03 - 2014-09-12 21:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-19 00:03 - 2014-09-12 21:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
Some content of TEMP:
====================
C:\Users\Dana\AppData\Local\Temp\API.dll
C:\Users\Dana\AppData\Local\Temp\avgnt.exe
C:\Users\Dana\AppData\Local\Temp\Base64.dll
C:\Users\Dana\AppData\Local\Temp\Calc.dll
C:\Users\Dana\AppData\Local\Temp\Canvas.dll
C:\Users\Dana\AppData\Local\Temp\Clipboard.dll
C:\Users\Dana\AppData\Local\Temp\drm_dyndata_7400009.dll
C:\Users\Dana\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpylz3jc.dll
C:\Users\Dana\AppData\Local\Temp\Dumper.dll
C:\Users\Dana\AppData\Local\Temp\Entry.dll
C:\Users\Dana\AppData\Local\Temp\Event.dll
C:\Users\Dana\AppData\Local\Temp\Expat.dll
C:\Users\Dana\AppData\Local\Temp\Fcntl.dll
C:\Users\Dana\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Dana\AppData\Local\Temp\HiRes.dll
C:\Users\Dana\AppData\Local\Temp\HList.dll
C:\Users\Dana\AppData\Local\Temp\IO.dll
C:\Users\Dana\AppData\Local\Temp\jansi-64-git-Bukkit-1.7.9-R0.1-10-g8688bd4-b3092jnks.dll
C:\Users\Dana\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\Dana\AppData\Local\Temp\Listbox.dll
C:\Users\Dana\AppData\Local\Temp\MsgPlusUninstall.exe
C:\Users\Dana\AppData\Local\Temp\NBFrame.dll
C:\Users\Dana\AppData\Local\Temp\NOSEventMessages.dll
C:\Users\Dana\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Dana\AppData\Local\Temp\nvSCPAPISvr.exe
C:\Users\Dana\AppData\Local\Temp\nvStInst.exe
C:\Users\Dana\AppData\Local\Temp\OLE.dll
C:\Users\Dana\AppData\Local\Temp\PerfLib.dll
C:\Users\Dana\AppData\Local\Temp\Photo.dll
C:\Users\Dana\AppData\Local\Temp\Pixmap.dll
C:\Users\Dana\AppData\Local\Temp\POSIX.dll
C:\Users\Dana\AppData\Local\Temp\Process.dll
C:\Users\Dana\AppData\Local\Temp\Registry.dll
C:\Users\Dana\AppData\Local\Temp\Scale.dll
C:\Users\Dana\AppData\Local\Temp\Scrollbar.dll
C:\Users\Dana\AppData\Local\Temp\Shell.dll
C:\Users\Dana\AppData\Local\Temp\Shortcut.dll
C:\Users\Dana\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Dana\AppData\Local\Temp\Socket.dll
C:\Users\Dana\AppData\Local\Temp\Sound.dll
C:\Users\Dana\AppData\Local\Temp\Text.dll
C:\Users\Dana\AppData\Local\Temp\Tk.dll
C:\Users\Dana\AppData\Local\Temp\Win32.dll
C:\Users\Dana\AppData\Local\Temp\Zlib.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Avira Desktop (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Desktop (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ZoneAlarm Free Firewall Firewall (Enabled) {E6380B7E-D4B2-19F1-083E-56486607704B}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Dana\Desktop" je 3 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\APSDaemon
"C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn GUI
"C:\Program Files (x86)\LogMeIn\x64\LogMeInSystray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Print2PDF Print Monitor
"C:\Program Files (x86)\Software602\Print2PDF\Print2PDF.exe" /server [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Monitor Apache Servers.lnk
C:\PROGRA~2\APACHE~1\Apache2.2\bin\APACHE~1.EXE
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Dana^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^V��ezy obrazovky a spu�t�n� aplikace OneNote 2007.lnk
C:\PROGRA~2\MICROS~3\Office12\ONENOTEM.EXE
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0
DoNotAllowExceptions REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================