pommoooc, zase soom si za...l PC :(( iStartSurf.com atd...
Napsal: 20 zář 2014 09:47
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by karol (administrator) on THINK on 20-09-2014 10:41:55
Running from C:\Users\karol\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ABBYY (BIT Software)) C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Users\karol\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\WinRAR\WinRAR.exe
() C:\Users\karol\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\karol\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe
() C:\Users\karol\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
() C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe
() C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.PurBrowse64.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [TpShocks] => C:\Windows\SYSTEM32\TpShocks.exe [380776 2011-03-29] (Lenovo.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [310912 2011-04-26] (Conexant Systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [41320 2011-01-27] (Lenovo Group Limited)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-07-13] (Lenovo Group Limited)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2014-03-14] (Lenovo)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\RunOnce: [wintoflashvddc] => [X]
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [SkyDrive] => C:\Users\karol\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251040 2014-08-07] (Microsoft Corporation)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [Google Update] => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-18] (Google Inc.)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\karol\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [cz.seznam.software.autoupdate] => C:\Users\karol\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [cz.seznam.software.szndesktop] => C:\Users\karol\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [AppsHat] => C:\Users\karol\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {1a04a16f-fdec-11e2-82b1-f0def1642597} - H:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {1a04a1cc-fdec-11e2-82b1-f0def1642597} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {83e80ec6-86de-11e0-856b-806e6f6e6963} - Q:\LenovoQDrive.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {c80e9a3b-f392-11e1-a1c6-f0def1642597} - G:\setup.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {c9620004-e54d-11e0-8d64-9ac8b3071d87} - F:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {cef79d1a-dfc5-11e0-8ce9-9106518d2087} - F:\setup_vmb_lite.exe /checkApplicationPresence
Lsa: [Notification Packages] scecli ACGina C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKCU - {2A0FB546-EBAF-472B-B7C8-0DF2A4E37B1C} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
BHO: Apps Hat -> {11111111-1111-1111-1111-110411851159} -> C:\Program Files (x86)\Apps Hat\Apps Hat-bho64.dll (Nero)
BHO: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar)
BHO: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho64.dll (Object Browser)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -> No File
BHO-x32: Apps Hat -> {11111111-1111-1111-1111-110411851159} -> C:\Program Files (x86)\Apps Hat\Apps Hat-bho.dll (Nero)
BHO-x32: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar)
BHO-x32: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho.dll (Object Browser)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: PodoWeb -> {980b8a8f-ea0b-4c24-a2e9-70635e2502e9} -> C:\Program Files (x86)\PodoWeb\PodoWebbho.dll (PodoWeb)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: istartsurf
FF SelectedSearchEngine: istartsurf
FF Homepage: hxxp://www.istartsurf.com/?type=hp&ts=14111978 ... XX5VJCAAZF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\karol\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\karol\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\karol\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\karol\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\karol\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\karol\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\istartsurf.xml
FF Extension: Apps Hat - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com [2014-09-20]
FF Extension: iWebar - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.com [2014-09-20]
FF Extension: Fast Start - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\faststartff@gmail.com [2014-09-20]
FF Extension: Senses - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\warnerroberts@hotmail.com [2014-09-20]
FF Extension: Seznam lištička - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-09-20]
FF Extension: Ghostery - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: PodoWeb - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\{00c97d86-accb-4288-9972-6d929c1fe93a}.xpi [2014-09-20]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\extensions\faststartff@gmail.com
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
Chrome:
=======
CHR HomePage: Default -> 25DBB165E9BAE08796542EC72DDC3257DC9D9228633B648635F6234A81F48C4D
CHR DefaultSearchKeyword: Default -> AF191D94064AAFDD679506EBAC0A6827D8602567BD6C0B980757275C8A0FAB7A
CHR DefaultSearchURL: Default -> 435BA29DA63AFAF5ED49C22401D151A38381B464DC3AE90D3B5266E3B78F9F2B
CHR Profile: C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-20]
CHR Extension: (Seznam Lištička - Email) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2014-09-20]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-09-20]
CHR Extension: (YouTube) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google Search) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Ghostery) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-09-20]
CHR Extension: (Marc Ecko) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjonmehjfmkejjifhhknofdnacklmjk [2014-07-21]
CHR Extension: (Quick start) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-09-20]
CHR Extension: (Gmail) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-09-20]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [660768 2007-12-06] (ABBYY (BIT Software))
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-20] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-20] (globalUpdate) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-09-20] (Cherished Technololgy LIMITED)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\RpcAgentSrv.exe [93848 2008-09-19] (SiSoftware) [File not signed]
R2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [446800 2012-03-05] (Lenovo Group Limited)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] ()
R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed]
R2 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1492280 2011-08-18] (Lenovo Group Limited)
R2 Update PodoWeb; C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe [325400 2014-09-20] ()
R2 Util PodoWeb; C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe [325400 2014-09-20] ()
S2 xras; C:\Program Files (x86)\WAN Miniport SSTP\rassstp.exe [40960 2011-09-04] (Microsoft Corporation) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [31872 2012-02-01] (Advanced Micro Devices, Inc.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [196608 2011-03-24] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [45296 2013-11-15] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2011-12-08] () [File not signed]
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R1 {00c97d86-accb-4288-9972-6d929c1fe93a}w64; C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys [44624 2014-09-19] (StdLib)
U3 axdtvrn4; C:\Windows\System32\Drivers\axdtvrn4.sys [0 ] (Microsoft Corporation)
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
R4 SPDRIVER_1.37.0.871; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.871\jsdrv.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 10:41 - 2014-09-20 10:42 - 00030783 _____ () C:\Users\karol\Desktop\FRST.txt
2014-09-20 10:41 - 2014-09-20 10:42 - 00000000 ____D () C:\FRST
2014-09-20 10:40 - 2014-09-20 10:40 - 02105856 _____ (Farbar) C:\Users\karol\Desktop\FRST64.exe
2014-09-20 10:40 - 2014-09-20 10:40 - 00112640 _____ (forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
2014-09-20 10:33 - 2014-09-20 10:33 - 1875957975 _____ () C:\Users\karol\Downloads\X15-65805.iso.part
2014-09-20 10:33 - 2014-09-20 10:33 - 00000000 _____ () C:\Users\karol\Downloads\X15-65805.iso
2014-09-20 10:27 - 2014-09-20 10:27 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 09:50 - 2014-09-20 09:50 - 00007158 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4
2014-09-20 09:50 - 2014-09-20 09:50 - 00006100 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1
2014-09-20 09:50 - 2014-09-20 09:50 - 00005790 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5
2014-09-20 09:50 - 2014-09-20 09:50 - 00005446 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2
2014-09-20 09:50 - 2014-09-20 09:50 - 00004128 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00003070 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002416 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job
2014-09-20 09:49 - 2014-09-20 09:50 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-09-20 09:49 - 2014-09-20 09:49 - 00007840 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11
2014-09-20 09:49 - 2014-09-20 09:49 - 00006814 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7
2014-09-20 09:49 - 2014-09-20 09:49 - 00006812 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6
2014-09-20 09:49 - 2014-09-20 09:49 - 00004810 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job
2014-09-20 09:30 - 2014-09-20 09:30 - 01518488 _____ (Object Browser) C:\Users\karol\AppData\Roaming\AVNUOK.exe
2014-09-20 09:30 - 2014-09-20 09:30 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
2014-09-20 09:30 - 2014-09-20 09:30 - 00006100 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
2014-09-20 09:30 - 2014-09-20 09:30 - 00005790 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
2014-09-20 09:30 - 2014-09-20 09:30 - 00005446 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
2014-09-20 09:30 - 2014-09-20 09:30 - 00004358 _____ () C:\Windows\System32\Tasks\AVNUOK
2014-09-20 09:30 - 2014-09-20 09:30 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00003070 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002416 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00001338 _____ () C:\Windows\Tasks\AVNUOK.job
2014-09-20 09:29 - 2014-09-20 10:34 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job
2014-09-20 09:29 - 2014-09-20 09:30 - 00000000 ____D () C:\Program Files (x86)\Senses
2014-09-20 09:29 - 2014-09-20 09:29 - 01965464 _____ (Object Browser) C:\Users\karol\AppData\Roaming\SXMQIHM.exe
2014-09-20 09:29 - 2014-09-20 09:29 - 00007840 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
2014-09-20 09:29 - 2014-09-20 09:29 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
2014-09-20 09:29 - 2014-09-20 09:29 - 00006812 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
2014-09-20 09:29 - 2014-09-20 09:29 - 00006134 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
2014-09-20 09:29 - 2014-09-20 09:29 - 00004810 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00004704 _____ () C:\Windows\System32\Tasks\SXMQIHM
2014-09-20 09:29 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00003104 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00001684 _____ () C:\Windows\Tasks\SXMQIHM.job
2014-09-20 09:27 - 2014-09-19 19:51 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys
2014-09-20 09:26 - 2014-09-20 09:26 - 00000000 ____D () C:\Users\karol\Documents\Optimizer Pro
2014-09-20 09:25 - 2014-09-20 09:26 - 00000000 ____D () C:\Program Files (x86)\PodoWeb
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 09:24 - 2014-09-20 09:24 - 00000000 ____D () C:\Users\karol\AppData\Roaming\istartsurf
2014-09-20 09:23 - 2014-09-20 10:28 - 00003444 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job
2014-09-20 09:23 - 2014-09-20 09:54 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-20 09:23 - 2014-09-20 09:54 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-20 09:23 - 2014-09-20 09:49 - 00003906 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-20 09:23 - 2014-09-20 09:49 - 00003652 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-20 09:23 - 2014-09-20 09:23 - 00007500 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11
2014-09-20 09:23 - 2014-09-20 09:23 - 00007498 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4
2014-09-20 09:23 - 2014-09-20 09:23 - 00006472 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6
2014-09-20 09:23 - 2014-09-20 09:23 - 00006138 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7
2014-09-20 09:23 - 2014-09-20 09:23 - 00005764 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1
2014-09-20 09:23 - 2014-09-20 09:23 - 00005450 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5
2014-09-20 09:23 - 2014-09-20 09:23 - 00005114 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2
2014-09-20 09:23 - 2014-09-20 09:23 - 00004470 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00004468 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00003108 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002734 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002119 _____ () C:\Users\karol\Desktop\AppsHat.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00002084 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Local\WebPlayer
2014-09-20 09:22 - 2014-09-20 09:23 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Users\karol\AppData\Local\globalUpdate
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-20 09:21 - 2014-09-20 10:27 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-09-20 09:21 - 2014-09-20 09:20 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable (1).zip
2014-09-20 09:20 - 2014-09-20 09:20 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:28 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-09-20 09:19 - 2014-09-20 09:28 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2014-09-20 09:19 - 2014-09-20 09:20 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-09-20 09:18 - 2014-09-20 09:18 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable.zip
2014-09-20 09:18 - 2014-09-20 09:18 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashRpt
2014-09-19 21:56 - 2014-09-19 21:56 - 01539512 _____ () C:\Users\karol\Desktop\-Windows-7-Loader-v2.2.2-By-DAZ.rar
2014-09-19 20:28 - 2014-09-19 20:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-13 23:59 - 2014-09-13 23:59 - 17328816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 00:32 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-13 00:32 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-13 00:32 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 00:32 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 00:32 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-13 00:32 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-13 00:32 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 00:32 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 00:32 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 00:32 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-13 00:32 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-13 00:32 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-13 00:32 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 00:32 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-13 00:32 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 00:32 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-13 00:32 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-13 00:32 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-13 00:32 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 00:32 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-13 00:32 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-13 00:32 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-13 00:32 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-13 00:32 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-13 00:32 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-13 00:32 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-13 00:32 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 00:32 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-13 00:32 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-13 00:32 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-13 00:32 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-13 00:32 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 00:32 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-13 00:32 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 00:32 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-13 00:32 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-13 00:32 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-13 00:32 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-13 00:32 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-13 00:32 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 00:32 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-13 00:32 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 00:32 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-13 00:32 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-13 00:32 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-13 00:32 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 00:32 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-13 00:32 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-13 00:32 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-13 00:32 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-13 00:20 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 00:20 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-13 00:08 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-13 00:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-13 00:08 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-13 00:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-13 00:07 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-13 00:07 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-13 00:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-13 00:07 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-13 00:07 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-13 00:06 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-13 00:06 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-02 00:11 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 00:11 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 00:11 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\karol\AppData\Roaming\AVNUOK
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\karol\AppData\Roaming\SXMQIHM
2014-08-26 23:46 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-26 23:46 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-26 23:46 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-26 23:46 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-26 23:45 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-26 23:45 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-26 23:45 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-26 23:45 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-26 23:45 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-26 23:45 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-25 22:00 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-25 22:00 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-25 22:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-25 22:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-25 22:00 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-25 22:00 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-25 22:00 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-25 22:00 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-25 15:01 - 2014-08-25 15:01 - 00011046 _____ () C:\Windows\DPINST.LOG
2014-08-25 15:01 - 2014-08-25 15:01 - 00002982 _____ () C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2014-08-25 15:01 - 2014-08-25 15:01 - 00001436 _____ () C:\Windows\Synaptics.log
2014-08-25 15:01 - 2014-08-25 15:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-08-25 15:00 - 2013-11-15 15:39 - 00540400 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00461040 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2014-08-25 15:00 - 2013-11-15 15:39 - 00229616 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00178416 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo14.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00114416 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00045296 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2014-08-25 14:58 - 2013-12-17 17:59 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-08-25 14:58 - 2013-12-17 17:59 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-08-25 14:58 - 2013-12-17 17:59 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-08-25 14:58 - 2013-12-17 17:59 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-08-25 14:57 - 2014-08-25 14:57 - 00000000 ____D () C:\Users\karol\AppData\Local\Tvsukernel
2014-08-25 09:49 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-25 09:49 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-25 09:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-25 09:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-25 09:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-25 09:48 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-25 09:48 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-25 09:48 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-25 09:48 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-25 09:48 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 10:42 - 2014-09-20 10:41 - 00030783 _____ () C:\Users\karol\Desktop\FRST.txt
2014-09-20 10:42 - 2014-09-20 10:41 - 00000000 ____D () C:\FRST
2014-09-20 10:40 - 2014-09-20 10:40 - 02105856 _____ (Farbar) C:\Users\karol\Desktop\FRST64.exe
2014-09-20 10:40 - 2014-09-20 10:40 - 00112640 _____ (forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
2014-09-20 10:37 - 2013-09-12 22:04 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-20 10:34 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job
2014-09-20 10:33 - 2014-09-20 10:33 - 1875957975 _____ () C:\Users\karol\Downloads\X15-65805.iso.part
2014-09-20 10:33 - 2014-09-20 10:33 - 00000000 _____ () C:\Users\karol\Downloads\X15-65805.iso
2014-09-20 10:31 - 2013-10-15 19:52 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004UA.job
2014-09-20 10:28 - 2014-09-20 09:23 - 00003444 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job
2014-09-20 10:27 - 2014-09-20 10:27 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 10:27 - 2014-09-20 09:21 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-09-20 10:27 - 2012-12-10 23:28 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashDumps
2014-09-20 10:19 - 2013-10-10 19:25 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-20 10:16 - 2013-10-17 21:16 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003UA.job
2014-09-20 10:13 - 2014-07-21 17:08 - 00000982 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000UA.job
2014-09-20 10:05 - 2011-05-25 16:58 - 01790474 _____ () C:\Windows\WindowsUpdate.log
2014-09-20 09:54 - 2014-09-20 09:23 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-20 09:54 - 2014-09-20 09:23 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00007158 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4
2014-09-20 09:50 - 2014-09-20 09:50 - 00006100 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1
2014-09-20 09:50 - 2014-09-20 09:50 - 00005790 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5
2014-09-20 09:50 - 2014-09-20 09:50 - 00005446 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2
2014-09-20 09:50 - 2014-09-20 09:50 - 00004128 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00003070 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002416 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job
2014-09-20 09:50 - 2014-09-20 09:49 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-09-20 09:49 - 2014-09-20 09:49 - 00007840 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11
2014-09-20 09:49 - 2014-09-20 09:49 - 00006814 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7
2014-09-20 09:49 - 2014-09-20 09:49 - 00006812 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6
2014-09-20 09:49 - 2014-09-20 09:49 - 00004810 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job
2014-09-20 09:49 - 2014-09-20 09:23 - 00003906 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-20 09:49 - 2014-09-20 09:23 - 00003652 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-20 09:30 - 2014-09-20 09:30 - 01518488 _____ (Object Browser) C:\Users\karol\AppData\Roaming\AVNUOK.exe
2014-09-20 09:30 - 2014-09-20 09:30 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
2014-09-20 09:30 - 2014-09-20 09:30 - 00006100 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
2014-09-20 09:30 - 2014-09-20 09:30 - 00005790 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
2014-09-20 09:30 - 2014-09-20 09:30 - 00005446 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
2014-09-20 09:30 - 2014-09-20 09:30 - 00004358 _____ () C:\Windows\System32\Tasks\AVNUOK
2014-09-20 09:30 - 2014-09-20 09:30 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00003070 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002416 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00001338 _____ () C:\Windows\Tasks\AVNUOK.job
2014-09-20 09:30 - 2014-09-20 09:29 - 00000000 ____D () C:\Program Files (x86)\Senses
2014-09-20 09:29 - 2014-09-20 09:29 - 01965464 _____ (Object Browser) C:\Users\karol\AppData\Roaming\SXMQIHM.exe
2014-09-20 09:29 - 2014-09-20 09:29 - 00007840 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
2014-09-20 09:29 - 2014-09-20 09:29 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
2014-09-20 09:29 - 2014-09-20 09:29 - 00006812 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
2014-09-20 09:29 - 2014-09-20 09:29 - 00006134 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
2014-09-20 09:29 - 2014-09-20 09:29 - 00004810 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00004704 _____ () C:\Windows\System32\Tasks\SXMQIHM
2014-09-20 09:29 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00003104 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00001684 _____ () C:\Windows\Tasks\SXMQIHM.job
2014-09-20 09:28 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-09-20 09:28 - 2014-09-20 09:19 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2014-09-20 09:27 - 2011-10-08 23:02 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-20 09:27 - 2009-07-14 04:34 - 00000489 _____ () C:\Windows\win.ini
2014-09-20 09:26 - 2014-09-20 09:26 - 00000000 ____D () C:\Users\karol\Documents\Optimizer Pro
2014-09-20 09:26 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\PodoWeb
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 09:24 - 2014-09-20 09:24 - 00000000 ____D () C:\Users\karol\AppData\Roaming\istartsurf
2014-09-20 09:24 - 2012-04-25 00:52 - 00001590 _____ () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-20 09:24 - 2011-11-09 21:44 - 00001351 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-20 09:24 - 2011-10-14 20:55 - 00002046 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00007500 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11
2014-09-20 09:23 - 2014-09-20 09:23 - 00007498 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4
2014-09-20 09:23 - 2014-09-20 09:23 - 00006472 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6
2014-09-20 09:23 - 2014-09-20 09:23 - 00006138 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7
2014-09-20 09:23 - 2014-09-20 09:23 - 00005764 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1
2014-09-20 09:23 - 2014-09-20 09:23 - 00005450 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5
2014-09-20 09:23 - 2014-09-20 09:23 - 00005114 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2
2014-09-20 09:23 - 2014-09-20 09:23 - 00004470 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00004468 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00003108 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002734 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002119 _____ () C:\Users\karol\Desktop\AppsHat.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00002084 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Local\WebPlayer
2014-09-20 09:23 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Users\karol\AppData\Local\globalUpdate
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-20 09:20 - 2014-09-20 09:21 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable (1).zip
2014-09-20 09:20 - 2014-09-20 09:20 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-09-20 09:20 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-09-20 09:19 - 2012-05-06 01:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-20 09:18 - 2014-09-20 09:18 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable.zip
2014-09-20 09:18 - 2014-09-20 09:18 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashRpt
2014-09-20 09:18 - 2011-09-05 20:26 - 00000000 ____D () C:\temp
2014-09-19 22:12 - 2013-11-26 22:34 - 00017954 _____ () C:\Windows\setupact.log
2014-09-19 21:56 - 2014-09-19 21:56 - 01539512 _____ () C:\Users\karol\Desktop\-Windows-7-Loader-v2.2.2-By-DAZ.rar
2014-09-19 20:32 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 20:32 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 20:28 - 2014-09-19 20:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-19 20:28 - 2009-07-14 07:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-19 20:21 - 2014-01-19 02:38 - 00000000 ____D () C:\Users\karol\AppData\Roaming\newnext.me
2014-09-19 20:21 - 2013-10-08 20:05 - 00000000 ___RD () C:\Users\karol\SkyDrive
2014-09-19 20:19 - 2013-10-10 19:25 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-19 20:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-19 19:51 - 2014-09-20 09:27 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys
2014-09-17 23:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-17 19:32 - 2012-11-05 01:56 - 00000000 ____D () C:\Users\karol\AppData\Roaming\vlc
2014-09-16 23:15 - 2012-11-11 14:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-09-16 00:02 - 2013-10-15 19:52 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004Core.job
2014-09-15 23:50 - 2014-07-21 17:08 - 00000930 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000Core.job
2014-09-15 23:49 - 2013-10-17 21:16 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003Core.job
2014-09-14 23:38 - 2012-04-04 08:37 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-14 23:37 - 2012-04-04 08:37 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-14 23:37 - 2011-09-05 20:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-13 23:59 - 2014-09-13 23:59 - 17328816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 00:36 - 2011-12-01 23:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-13 00:31 - 2011-10-01 10:30 - 00766820 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-13 00:30 - 2011-10-01 10:31 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-09-13 00:30 - 2011-10-01 10:30 - 00002088 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-13 00:29 - 2013-07-20 00:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 00:29 - 2012-05-02 21:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-13 00:29 - 2011-10-01 10:30 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-13 00:21 - 2011-09-05 22:41 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-13 00:20 - 2014-05-10 00:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-05 04:10 - 2014-09-13 00:06 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-13 00:06 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 22:32 - 2013-11-26 22:33 - 00200032 _____ () C:\Windows\PFRO.log
2014-09-03 23:43 - 2013-11-26 22:14 - 00439528 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\karol\AppData\Roaming\AVNUOK
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\karol\AppData\Roaming\SXMQIHM
2014-08-27 19:03 - 2014-06-10 22:45 - 00000000 ____D () C:\Users\Michaela\AppData\Local\Lenovo
2014-08-27 19:03 - 2012-01-19 20:04 - 00000000 ___RD () C:\Users\Michaela\Podcasts
2014-08-27 19:02 - 2013-04-14 10:07 - 00002592 _____ () C:\QcOSD.txt
2014-08-26 23:38 - 2014-03-26 12:33 - 00000000 ____D () C:\Users\karol\AppData\Local\Lenovo
2014-08-26 23:37 - 2012-04-25 00:52 - 00000000 ___RD () C:\Users\karol\Podcasts
2014-08-26 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-25 15:01 - 2014-08-25 15:01 - 00011046 _____ () C:\Windows\DPINST.LOG
2014-08-25 15:01 - 2014-08-25 15:01 - 00002982 _____ () C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2014-08-25 15:01 - 2014-08-25 15:01 - 00001436 _____ () C:\Windows\Synaptics.log
2014-08-25 15:01 - 2014-08-25 15:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-08-25 15:00 - 2011-05-25 17:19 - 00003020 _____ () C:\Windows\System32\Tasks\PMTask
2014-08-25 14:59 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-08-25 14:57 - 2014-08-25 14:57 - 00000000 ____D () C:\Users\karol\AppData\Local\Tvsukernel
2014-08-25 14:54 - 2011-05-25 16:28 - 00000000 ____D () C:\ProgramData\Lenovo
2014-08-25 14:37 - 2011-09-10 15:44 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-08-25 14:37 - 2011-05-25 17:04 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2014-08-25 14:37 - 2011-05-25 17:00 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-08-25 14:36 - 2011-05-25 17:22 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-25 10:52 - 2014-07-18 19:40 - 00000000 ____D () C:\Users\karol\AppData\Roaming\LSC
2014-08-23 04:07 - 2014-09-02 00:11 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 00:11 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 00:11 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
Some content of TEMP:
====================
C:\Users\karol\AppData\Local\Temp\6_Offer_3.exe
C:\Users\karol\AppData\Local\Temp\appshat_generic.exe
C:\Users\karol\AppData\Local\Temp\biclient.exe
C:\Users\karol\AppData\Local\Temp\cabex.dll
C:\Users\karol\AppData\Local\Temp\DownloadManager.exe
C:\Users\karol\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\karol\AppData\Local\Temp\GreyGraySetup.exe
C:\Users\karol\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\karol\AppData\Local\Temp\OptimizerPro.exe
C:\Users\karol\AppData\Local\Temp\optprosetup.exe
C:\Users\karol\AppData\Local\Temp\PartnerInstaller_smtyc.exe
C:\Users\karol\AppData\Local\Temp\setup.exe
C:\Users\karol\AppData\Local\Temp\SkypeSetup.exe
C:\Users\karol\AppData\Local\Temp\smt_istartsurf.exe
C:\Users\karol\AppData\Local\Temp\tu17p84.exe
C:\Users\karol\AppData\Local\Temp\unelevate.exe
C:\Users\karol\AppData\Local\Temp\vlc-2.1.2-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
TreeSize Professional 5.2.3 (HKLM-x32\...\TreeSize Professional_is1) (Version: - JAM Software)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job => C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job => C:\Program Files (x86)\Senses\Senses-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVNUOK.job => C:\Users\karol\AppData\Roaming\AVNUOK.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000Core.job => C:\Users\Jozef&Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000UA.job => C:\Users\Jozef&Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003Core.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003UA.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004Core.job => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004UA.job => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask-Delay.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SXMQIHM.job => C:\Users\karol\AppData\Roaming\SXMQIHM.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\karol\Desktop" je 1242 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PicPick Start
C:\Program Files (x86)\PicPick\picpick.exe /startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Michaela^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk
C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by karol (administrator) on THINK on 20-09-2014 10:41:55
Running from C:\Users\karol\Desktop
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Authentec Inc.) C:\Program Files\ThinkVantage Fingerprint Software\upeksvr.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(ABBYY (BIT Software)) C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcPrfMgrSvc.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\btwdins.exe
(Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
() C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\CamMute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TPKNRSVC.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\lvvsst.exe
(Nalpeiron Ltd.) C:\Windows\SysWOW64\NLSSRV32.EXE
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Conexant Systems, Inc.) C:\Windows\SysWOW64\SASrv.exe
(Rocket Division Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcSvc.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\VIRTSCRL\virtscrl.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\mkrmsg.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SRORest.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\SvcGuiHlpr.exe
(Lenovo) C:\Program Files (x86)\Lenovo\Access Connections\AcDeskBandHlpr.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Program Files\Zune\ZuneLauncher.exe
(Lenovo.) C:\Windows\System32\TpShocks.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\Communications Utility\TpKnrres.exe
() C:\Program Files\CONEXANT\ForteConfig\fmapp.exe
(Lenovo Group Limited) C:\Program Files\Lenovo\AutoLock\ALCKRESI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Users\karol\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
(Broadcom Corporation.) C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Lenovo Group Limited) C:\Program Files (x86)\ThinkPad\Utilities\SCHTASK.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Lenovo) C:\Program Files (x86)\ThinkPad\Utilities\PWMDBSVC.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Lenovo Group Limited) C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe
() C:\Program Files (x86)\Lenovo\Message Center Plus\MCPLaunch.exe
(Lenovo Group Limited) C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
() C:\Program Files\WinRAR\WinRAR.exe
() C:\Users\karol\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\karol\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\Alcohol.exe
() C:\Users\karol\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
(Cherished Technololgy LIMITED) C:\ProgramData\IePluginServices\PluginService.exe
() C:\Program Files (x86)\SupTab\HpUI.exe
() C:\Program Files (x86)\SupTab\Loader64.exe
() C:\Program Files (x86)\SupTab\Loader32.exe
() C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe
() C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.PurBrowse64.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter.exe
() C:\Program Files (x86)\PodoWeb\bin\PodoWeb.BrowserAdapter64.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM\...\Run: [TpShocks] => C:\Windows\SYSTEM32\TpShocks.exe [380776 2011-03-29] (Lenovo.)
HKLM\...\Run: [SmartAudio] => C:\Program Files\CONEXANT\SAII\SAIICpl.exe [310912 2011-04-26] (Conexant Systems, Inc.)
HKLM\...\Run: [LENOVO.TPKNRRES] => C:\Program Files\Lenovo\Communications Utility\TPKNRRES.exe [41320 2011-01-27] (Lenovo Group Limited)
HKLM\...\Run: [ForteConfig] => C:\Program Files\Conexant\ForteConfig\fmapp.exe [49056 2010-10-26] ()
HKLM\...\Run: [ALCKRESI.EXE] => C:\Program Files\Lenovo\AutoLock\ALCKRESI.EXE [281960 2011-07-13] (Lenovo Group Limited)
HKLM\...\Run: [AcWin7Hlpr] => C:\Program Files (x86)\Lenovo\Access Connections\AcTBenabler.exe [63832 2014-03-14] (Lenovo)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [PWMTRV] => rundll32 "C:\Program Files (x86)\ThinkPad\Utilities\PWMTR64V.DLL",PwrMgrBkGndMonitor
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [10752 2012-01-31] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\RunOnce: [wintoflashvddc] => [X]
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\psfus: C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll (Authentec Inc.)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [SkyDrive] => C:\Users\karol\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [251040 2014-08-07] (Microsoft Corporation)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [Google Update] => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2013-02-18] (Google Inc.)
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\karol\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [cz.seznam.software.autoupdate] => C:\Users\karol\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [cz.seznam.software.szndesktop] => C:\Users\karol\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\Run: [AppsHat] => C:\Users\karol\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [202752 2012-10-26] ()
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: F - F:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: H - H:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {1a04a16f-fdec-11e2-82b1-f0def1642597} - H:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {1a04a1cc-fdec-11e2-82b1-f0def1642597} - E:\setup_vmb_lite.exe /checkApplicationPresence
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {83e80ec6-86de-11e0-856b-806e6f6e6963} - Q:\LenovoQDrive.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {c80e9a3b-f392-11e1-a1c6-f0def1642597} - G:\setup.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {c9620004-e54d-11e0-8d64-9ac8b3071d87} - F:\AutoRun.exe
HKU\S-1-5-21-1212182777-1079031378-3419217657-1004\...\MountPoints2: {cef79d1a-dfc5-11e0-8ce9-9106518d2087} - F:\setup_vmb_lite.exe /checkApplicationPresence
Lsa: [Notification Packages] scecli ACGina C:\Program Files\ThinkVantage Fingerprint Software\psqlpwd.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\ThinkPad\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.lenovo.com/welcome/thinkpad
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.istartsurf.com/?type=hp&ts=1 ... XX5VJCAAZF
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
SearchScopes: HKCU - {2A0FB546-EBAF-472B-B7C8-0DF2A4E37B1C} URL =
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.istartsurf.com/web/?type=ds& ... earchTerms}
BHO: Apps Hat -> {11111111-1111-1111-1111-110411851159} -> C:\Program Files (x86)\Apps Hat\Apps Hat-bho64.dll (Nero)
BHO: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho64.dll (iWebar)
BHO: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho64.dll (Object Browser)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -> No File
BHO-x32: Apps Hat -> {11111111-1111-1111-1111-110411851159} -> C:\Program Files (x86)\Apps Hat\Apps Hat-bho.dll (Nero)
BHO-x32: iWebar -> {11111111-1111-1111-1111-110611191113} -> C:\Program Files (x86)\iWebar\iWebar-bho.dll (iWebar)
BHO-x32: Senses -> {11111111-1111-1111-1111-110611191115} -> C:\Program Files (x86)\Senses\Senses-bho.dll (Object Browser)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\SupTab\SupTab.dll (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: PodoWeb -> {980b8a8f-ea0b-4c24-a2e9-70635e2502e9} -> C:\Program Files (x86)\PodoWeb\PodoWebbho.dll (PodoWeb)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: istartsurf
FF SelectedSearchEngine: istartsurf
FF Homepage: hxxp://www.istartsurf.com/?type=hp&ts=14111978 ... XX5VJCAAZF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\karol\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\karol\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\karol\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\karol\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF user.js: detected! => C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\user.js
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\NPOFF12.DLL (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\karol\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\karol\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\istartsurf.xml
FF Extension: Apps Hat - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\39ed7c16-185d-4f88-b976-666d4928ba01@fe4550c1-7a4f-4a62-ad1c-45e0afdf81a4.com [2014-09-20]
FF Extension: iWebar - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\927571a5c34c476fbf9f2ed9e@8e7e940e6a314c63a357ced35576d.com [2014-09-20]
FF Extension: Fast Start - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\faststartff@gmail.com [2014-09-20]
FF Extension: Senses - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\warnerroberts@hotmail.com [2014-09-20]
FF Extension: Seznam lištička - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b} [2014-09-20]
FF Extension: Ghostery - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\firefox@ghostery.com.xpi [2013-08-03]
FF Extension: PodoWeb - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\Extensions\{00c97d86-accb-4288-9972-6d929c1fe93a}.xpi [2014-09-20]
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\karol\AppData\Roaming\Mozilla\Firefox\Profiles\pr4u9n61.default\extensions\faststartff@gmail.com
FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Mozilla Firefox\firefox.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
Chrome:
=======
CHR HomePage: Default -> 25DBB165E9BAE08796542EC72DDC3257DC9D9228633B648635F6234A81F48C4D
CHR DefaultSearchKeyword: Default -> AF191D94064AAFDD679506EBAC0A6827D8602567BD6C0B980757275C8A0FAB7A
CHR DefaultSearchURL: Default -> 435BA29DA63AFAF5ED49C22401D151A38381B464DC3AE90D3B5266E3B78F9F2B
CHR Profile: C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-07-20]
CHR Extension: (Seznam Lištička - Email) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgjpfhpjcgdppjbgnpnjllokbmcdllig [2014-09-20]
CHR Extension: (Seznam Lištička - Slovník) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\blmojkbhnkkphngknkmgccmlenfaelkd [2014-09-20]
CHR Extension: (YouTube) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-07-21]
CHR Extension: (Google Search) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-07-21]
CHR Extension: (Ghostery) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2014-07-21]
CHR Extension: (Google Wallet) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-29]
CHR Extension: (Seznam Lištička - Rychlá volba) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\olfeabkoenfaoljndfecamgilllcpiak [2014-09-20]
CHR Extension: (Marc Ecko) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\opjonmehjfmkejjifhhknofdnacklmjk [2014-07-21]
CHR Extension: (Quick start) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pelmeidfhdlhlbjimpabfcbnnojbboma [2014-09-20]
CHR Extension: (Gmail) - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-07-21]
CHR HKLM-x32\...\Chrome\Extension: [pelmeidfhdlhlbjimpabfcbnnojbboma] - C:\Users\karol\AppData\Local\Google\Chrome\User Data\Default\Extensions\newtabv3.crx [2014-09-20]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.istartsurf.com/?type=sc&ts=1 ... XX5VJCAAZF
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 ABBYY.Licensing.FineReader.Professional.9.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\9.00\Licensing\PE\NetworkLicenseServer.exe [660768 2007-12-06] (ABBYY (BIT Software))
R2 DokanMounter; C:\Program Files (x86)\Dokan\DokanLibrary\mounter.exe [14848 2011-01-10] () [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-20] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-09-20] (globalUpdate) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 IePluginServices; C:\ProgramData\IePluginServices\PluginService.exe [715656 2014-09-20] (Cherished Technololgy LIMITED)
R2 Lenovo.VIRTSCRLSVC; C:\Program Files\LENOVO\VIRTSCRL\lvvsst.exe [133992 2011-07-12] (Lenovo Group Limited)
S3 LSCWinService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSCWinService.exe [1663880 2014-05-06] ()
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [273136 2013-02-08] ()
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)
S3 SandraAgentSrv; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\RpcAgentSrv.exe [93848 2008-09-19] (SiSoftware) [File not signed]
R2 SROSVC; C:\Program Files (x86)\Lenovo\Screen Reading Optimizer\SROSVC.exe [446800 2012-03-05] (Lenovo Group Limited)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [275968 2007-05-28] (Rocket Division Software) [File not signed]
S3 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [24560 2014-06-18] ()
R2 ThinkVantage Registry Monitor Service; C:\Program Files (x86)\Common Files\Lenovo\tvt_reg_monitor_svc.exe [1028096 2010-08-31] (Lenovo Group Limited) [File not signed]
R2 TVT Backup Service; C:\Program Files (x86)\Lenovo\Rescue and Recovery\rrservice.exe [1492280 2011-08-18] (Lenovo Group Limited)
R2 Update PodoWeb; C:\Program Files (x86)\PodoWeb\updatePodoWeb.exe [325400 2014-09-20] ()
R2 Util PodoWeb; C:\Program Files (x86)\PodoWeb\bin\utilPodoWeb.exe [325400 2014-09-20] ()
S2 xras; C:\Program Files (x86)\WAN Miniport SSTP\rassstp.exe [40960 2011-09-04] (Microsoft Corporation) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3386608 2013-02-08] (Intel® Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [31872 2012-02-01] (Advanced Micro Devices, Inc.)
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [120408 2011-01-10] (Windows (R) Win 7 DDK provider)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [196608 2011-03-24] (Huawei Technologies Co., Ltd.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Research In Motion Limited)
S3 SANDRA; C:\Program Files\SiSoftware\SiSoftware Sandra Lite 2011.SP5\WNt500x64\Sandra.sys [23112 2009-08-08] (SiSoftware)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [45296 2013-11-15] (Synaptics Incorporated)
R2 smihlp; C:\Program Files\ThinkVantage Fingerprint Software\smihlp.sys [13128 2011-05-30] (Authentec Inc.)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [530488 2011-12-08] () [File not signed]
R3 TVTI2C; C:\Windows\System32\DRIVERS\Tvti2c.sys [40248 2011-05-30] (Lenovo Information Product(ShenZhen China) Inc.)
R1 {00c97d86-accb-4288-9972-6d929c1fe93a}w64; C:\Windows\System32\drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys [44624 2014-09-19] (StdLib)
U3 axdtvrn4; C:\Windows\System32\Drivers\axdtvrn4.sys [0 ] (Microsoft Corporation)
S3 massfilter; system32\drivers\massfilter.sys [X]
S3 PCDSRVC{127174DC-C366ED8B-06020200}_0; \??\c:\program files\pc-doctor\pcdsrvc_x64.pkms [X]
S1 SBRE; \??\C:\Windows\system32\drivers\SBREdrv.sys [X]
R4 SPDRIVER_1.37.0.871; \??\C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.871\jsdrv.sys [X]
S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]
S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]
S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 10:41 - 2014-09-20 10:42 - 00030783 _____ () C:\Users\karol\Desktop\FRST.txt
2014-09-20 10:41 - 2014-09-20 10:42 - 00000000 ____D () C:\FRST
2014-09-20 10:40 - 2014-09-20 10:40 - 02105856 _____ (Farbar) C:\Users\karol\Desktop\FRST64.exe
2014-09-20 10:40 - 2014-09-20 10:40 - 00112640 _____ (forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
2014-09-20 10:33 - 2014-09-20 10:33 - 1875957975 _____ () C:\Users\karol\Downloads\X15-65805.iso.part
2014-09-20 10:33 - 2014-09-20 10:33 - 00000000 _____ () C:\Users\karol\Downloads\X15-65805.iso
2014-09-20 10:27 - 2014-09-20 10:27 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 09:50 - 2014-09-20 09:50 - 00007158 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4
2014-09-20 09:50 - 2014-09-20 09:50 - 00006100 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1
2014-09-20 09:50 - 2014-09-20 09:50 - 00005790 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5
2014-09-20 09:50 - 2014-09-20 09:50 - 00005446 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2
2014-09-20 09:50 - 2014-09-20 09:50 - 00004128 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00003070 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002416 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job
2014-09-20 09:49 - 2014-09-20 09:50 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-09-20 09:49 - 2014-09-20 09:49 - 00007840 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11
2014-09-20 09:49 - 2014-09-20 09:49 - 00006814 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7
2014-09-20 09:49 - 2014-09-20 09:49 - 00006812 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6
2014-09-20 09:49 - 2014-09-20 09:49 - 00004810 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job
2014-09-20 09:30 - 2014-09-20 09:30 - 01518488 _____ (Object Browser) C:\Users\karol\AppData\Roaming\AVNUOK.exe
2014-09-20 09:30 - 2014-09-20 09:30 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
2014-09-20 09:30 - 2014-09-20 09:30 - 00006100 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
2014-09-20 09:30 - 2014-09-20 09:30 - 00005790 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
2014-09-20 09:30 - 2014-09-20 09:30 - 00005446 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
2014-09-20 09:30 - 2014-09-20 09:30 - 00004358 _____ () C:\Windows\System32\Tasks\AVNUOK
2014-09-20 09:30 - 2014-09-20 09:30 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00003070 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002416 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00001338 _____ () C:\Windows\Tasks\AVNUOK.job
2014-09-20 09:29 - 2014-09-20 10:34 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job
2014-09-20 09:29 - 2014-09-20 09:30 - 00000000 ____D () C:\Program Files (x86)\Senses
2014-09-20 09:29 - 2014-09-20 09:29 - 01965464 _____ (Object Browser) C:\Users\karol\AppData\Roaming\SXMQIHM.exe
2014-09-20 09:29 - 2014-09-20 09:29 - 00007840 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
2014-09-20 09:29 - 2014-09-20 09:29 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
2014-09-20 09:29 - 2014-09-20 09:29 - 00006812 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
2014-09-20 09:29 - 2014-09-20 09:29 - 00006134 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
2014-09-20 09:29 - 2014-09-20 09:29 - 00004810 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00004704 _____ () C:\Windows\System32\Tasks\SXMQIHM
2014-09-20 09:29 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00003104 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00001684 _____ () C:\Windows\Tasks\SXMQIHM.job
2014-09-20 09:27 - 2014-09-19 19:51 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys
2014-09-20 09:26 - 2014-09-20 09:26 - 00000000 ____D () C:\Users\karol\Documents\Optimizer Pro
2014-09-20 09:25 - 2014-09-20 09:26 - 00000000 ____D () C:\Program Files (x86)\PodoWeb
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 09:24 - 2014-09-20 09:24 - 00000000 ____D () C:\Users\karol\AppData\Roaming\istartsurf
2014-09-20 09:23 - 2014-09-20 10:28 - 00003444 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job
2014-09-20 09:23 - 2014-09-20 09:54 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-20 09:23 - 2014-09-20 09:54 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-20 09:23 - 2014-09-20 09:49 - 00003906 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-20 09:23 - 2014-09-20 09:49 - 00003652 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-20 09:23 - 2014-09-20 09:23 - 00007500 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11
2014-09-20 09:23 - 2014-09-20 09:23 - 00007498 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4
2014-09-20 09:23 - 2014-09-20 09:23 - 00006472 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6
2014-09-20 09:23 - 2014-09-20 09:23 - 00006138 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7
2014-09-20 09:23 - 2014-09-20 09:23 - 00005764 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1
2014-09-20 09:23 - 2014-09-20 09:23 - 00005450 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5
2014-09-20 09:23 - 2014-09-20 09:23 - 00005114 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2
2014-09-20 09:23 - 2014-09-20 09:23 - 00004470 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00004468 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00003108 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002734 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002119 _____ () C:\Users\karol\Desktop\AppsHat.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00002084 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Local\WebPlayer
2014-09-20 09:22 - 2014-09-20 09:23 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Users\karol\AppData\Local\globalUpdate
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-20 09:21 - 2014-09-20 10:27 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-09-20 09:21 - 2014-09-20 09:20 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable (1).zip
2014-09-20 09:20 - 2014-09-20 09:20 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:28 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-09-20 09:19 - 2014-09-20 09:28 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2014-09-20 09:19 - 2014-09-20 09:20 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-09-20 09:18 - 2014-09-20 09:18 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable.zip
2014-09-20 09:18 - 2014-09-20 09:18 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashRpt
2014-09-19 21:56 - 2014-09-19 21:56 - 01539512 _____ () C:\Users\karol\Desktop\-Windows-7-Loader-v2.2.2-By-DAZ.rar
2014-09-19 20:28 - 2014-09-19 20:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-13 23:59 - 2014-09-13 23:59 - 17328816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 00:32 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-13 00:32 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-13 00:32 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-13 00:32 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-13 00:32 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-13 00:32 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-13 00:32 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-13 00:32 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-13 00:32 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-13 00:32 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-13 00:32 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-13 00:32 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-13 00:32 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-13 00:32 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-13 00:32 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-13 00:32 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-13 00:32 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-13 00:32 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-13 00:32 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-13 00:32 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-13 00:32 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-13 00:32 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-13 00:32 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-13 00:32 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-13 00:32 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-13 00:32 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-13 00:32 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-13 00:32 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-13 00:32 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-13 00:32 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-13 00:32 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-13 00:32 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-13 00:32 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-13 00:32 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-13 00:32 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-13 00:32 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-13 00:32 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-13 00:32 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-13 00:32 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-13 00:32 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-13 00:32 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-13 00:32 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-13 00:32 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-13 00:32 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-13 00:32 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-13 00:32 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-13 00:32 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-13 00:32 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-13 00:32 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-13 00:32 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-13 00:32 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-13 00:32 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-13 00:20 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-13 00:20 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-13 00:08 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-13 00:08 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-13 00:08 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-13 00:08 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-13 00:07 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-13 00:07 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-13 00:07 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-13 00:07 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-13 00:07 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-13 00:06 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-13 00:06 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-02 00:11 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-09-02 00:11 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-09-02 00:11 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\karol\AppData\Roaming\AVNUOK
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\karol\AppData\Roaming\SXMQIHM
2014-08-26 23:46 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-26 23:46 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-26 23:46 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-26 23:46 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-26 23:45 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-26 23:45 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-26 23:45 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-26 23:45 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-26 23:45 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-26 23:45 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-26 23:45 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-25 22:00 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-25 22:00 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-25 22:00 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-25 22:00 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-25 22:00 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-25 22:00 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-25 22:00 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-25 22:00 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-25 15:01 - 2014-08-25 15:01 - 00011046 _____ () C:\Windows\DPINST.LOG
2014-08-25 15:01 - 2014-08-25 15:01 - 00002982 _____ () C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2014-08-25 15:01 - 2014-08-25 15:01 - 00001436 _____ () C:\Windows\Synaptics.log
2014-08-25 15:01 - 2014-08-25 15:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-08-25 15:00 - 2013-11-15 15:39 - 00540400 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynCOM.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00461040 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\SynTP.sys
2014-08-25 15:00 - 2013-11-15 15:39 - 00229616 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPAPI.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00178416 _____ (Synaptics Incorporated) C:\Windows\system32\SynTPCo14.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00114416 _____ (Synaptics Incorporated) C:\Windows\SysWOW64\SynTPCOM.dll
2014-08-25 15:00 - 2013-11-15 15:39 - 00045296 _____ (Synaptics Incorporated) C:\Windows\system32\Drivers\Smb_driver_Intel.sys
2014-08-25 14:58 - 2013-12-17 17:59 - 00068440 _____ (Lenovo.) C:\Windows\system32\ibmpmsvc.exe
2014-08-25 14:58 - 2013-12-17 17:59 - 00060760 _____ (Lenovo.) C:\Windows\system32\ibmpmctl.exe
2014-08-25 14:58 - 2013-12-17 17:59 - 00057144 _____ (Lenovo.) C:\Windows\system32\Drivers\ibmpmdrv.sys
2014-08-25 14:58 - 2013-12-17 17:59 - 00040280 _____ (Lenovo.) C:\Windows\system32\tpinspm.dll
2014-08-25 14:57 - 2014-08-25 14:57 - 00000000 ____D () C:\Users\karol\AppData\Local\Tvsukernel
2014-08-25 09:49 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-25 09:49 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-25 09:49 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-25 09:49 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-25 09:49 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-25 09:49 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-25 09:48 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-25 09:48 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-25 09:48 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-25 09:48 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-25 09:48 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-20 10:42 - 2014-09-20 10:41 - 00030783 _____ () C:\Users\karol\Desktop\FRST.txt
2014-09-20 10:42 - 2014-09-20 10:41 - 00000000 ____D () C:\FRST
2014-09-20 10:40 - 2014-09-20 10:40 - 02105856 _____ (Farbar) C:\Users\karol\Desktop\FRST64.exe
2014-09-20 10:40 - 2014-09-20 10:40 - 00112640 _____ (forum.viry.cz) C:\Users\karol\Desktop\FRSTLauncher.exe
2014-09-20 10:37 - 2013-09-12 22:04 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-20 10:34 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job
2014-09-20 10:33 - 2014-09-20 10:33 - 1875957975 _____ () C:\Users\karol\Downloads\X15-65805.iso.part
2014-09-20 10:33 - 2014-09-20 10:33 - 00000000 _____ () C:\Users\karol\Downloads\X15-65805.iso
2014-09-20 10:31 - 2013-10-15 19:52 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004UA.job
2014-09-20 10:28 - 2014-09-20 09:23 - 00003444 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job
2014-09-20 10:27 - 2014-09-20 10:27 - 00000000 ____D () C:\ProgramData\374311380
2014-09-20 10:27 - 2014-09-20 09:21 - 00000000 ____D () C:\Program Files (x86)\Optimizer Pro
2014-09-20 10:27 - 2012-12-10 23:28 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashDumps
2014-09-20 10:19 - 2013-10-10 19:25 - 00000936 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-20 10:16 - 2013-10-17 21:16 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003UA.job
2014-09-20 10:13 - 2014-07-21 17:08 - 00000982 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000UA.job
2014-09-20 10:05 - 2011-05-25 16:58 - 01790474 _____ () C:\Windows\WindowsUpdate.log
2014-09-20 09:54 - 2014-09-20 09:23 - 00000908 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-20 09:54 - 2014-09-20 09:23 - 00000904 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00007158 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4
2014-09-20 09:50 - 2014-09-20 09:50 - 00006100 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1
2014-09-20 09:50 - 2014-09-20 09:50 - 00005790 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5
2014-09-20 09:50 - 2014-09-20 09:50 - 00005446 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2
2014-09-20 09:50 - 2014-09-20 09:50 - 00004128 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00003070 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002760 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job
2014-09-20 09:50 - 2014-09-20 09:50 - 00002416 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job
2014-09-20 09:50 - 2014-09-20 09:49 - 00000000 ____D () C:\Program Files (x86)\iWebar
2014-09-20 09:49 - 2014-09-20 09:49 - 00007840 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11
2014-09-20 09:49 - 2014-09-20 09:49 - 00006814 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7
2014-09-20 09:49 - 2014-09-20 09:49 - 00006812 _____ () C:\Windows\System32\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6
2014-09-20 09:49 - 2014-09-20 09:49 - 00004810 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job
2014-09-20 09:49 - 2014-09-20 09:49 - 00003784 _____ () C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job
2014-09-20 09:49 - 2014-09-20 09:23 - 00003906 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-09-20 09:49 - 2014-09-20 09:23 - 00003652 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-09-20 09:30 - 2014-09-20 09:30 - 01518488 _____ (Object Browser) C:\Users\karol\AppData\Roaming\AVNUOK.exe
2014-09-20 09:30 - 2014-09-20 09:30 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4
2014-09-20 09:30 - 2014-09-20 09:30 - 00006100 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1
2014-09-20 09:30 - 2014-09-20 09:30 - 00005790 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5
2014-09-20 09:30 - 2014-09-20 09:30 - 00005446 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2
2014-09-20 09:30 - 2014-09-20 09:30 - 00004358 _____ () C:\Windows\System32\Tasks\AVNUOK
2014-09-20 09:30 - 2014-09-20 09:30 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00003070 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002760 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00002416 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job
2014-09-20 09:30 - 2014-09-20 09:30 - 00001338 _____ () C:\Windows\Tasks\AVNUOK.job
2014-09-20 09:30 - 2014-09-20 09:29 - 00000000 ____D () C:\Program Files (x86)\Senses
2014-09-20 09:29 - 2014-09-20 09:29 - 01965464 _____ (Object Browser) C:\Users\karol\AppData\Roaming\SXMQIHM.exe
2014-09-20 09:29 - 2014-09-20 09:29 - 00007840 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11
2014-09-20 09:29 - 2014-09-20 09:29 - 00006814 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7
2014-09-20 09:29 - 2014-09-20 09:29 - 00006812 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6
2014-09-20 09:29 - 2014-09-20 09:29 - 00006134 _____ () C:\Windows\System32\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3
2014-09-20 09:29 - 2014-09-20 09:29 - 00004810 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00004704 _____ () C:\Windows\System32\Tasks\SXMQIHM
2014-09-20 09:29 - 2014-09-20 09:29 - 00003784 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00003104 _____ () C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job
2014-09-20 09:29 - 2014-09-20 09:29 - 00001684 _____ () C:\Windows\Tasks\SXMQIHM.job
2014-09-20 09:28 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\GOOBZO
2014-09-20 09:28 - 2014-09-20 09:19 - 00000000 ____D () C:\Program Files (x86)\YouTube Accelerator
2014-09-20 09:27 - 2011-10-08 23:02 - 00000000 ____D () C:\ProgramData\TEMP
2014-09-20 09:27 - 2009-07-14 04:34 - 00000489 _____ () C:\Windows\win.ini
2014-09-20 09:26 - 2014-09-20 09:26 - 00000000 ____D () C:\Users\karol\Documents\Optimizer Pro
2014-09-20 09:26 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\PodoWeb
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\ProgramData\IePluginServices
2014-09-20 09:25 - 2014-09-20 09:25 - 00000000 ____D () C:\Program Files (x86)\SupTab
2014-09-20 09:24 - 2014-09-20 09:24 - 00000000 ____D () C:\Users\karol\AppData\Roaming\istartsurf
2014-09-20 09:24 - 2012-04-25 00:52 - 00001590 _____ () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-09-20 09:24 - 2011-11-09 21:44 - 00001351 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-20 09:24 - 2011-10-14 20:55 - 00002046 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00007500 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11
2014-09-20 09:23 - 2014-09-20 09:23 - 00007498 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4
2014-09-20 09:23 - 2014-09-20 09:23 - 00006472 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6
2014-09-20 09:23 - 2014-09-20 09:23 - 00006138 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7
2014-09-20 09:23 - 2014-09-20 09:23 - 00005764 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1
2014-09-20 09:23 - 2014-09-20 09:23 - 00005450 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5
2014-09-20 09:23 - 2014-09-20 09:23 - 00005114 _____ () C:\Windows\System32\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2
2014-09-20 09:23 - 2014-09-20 09:23 - 00004470 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00004468 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00003108 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002734 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002420 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00002119 _____ () C:\Users\karol\Desktop\AppsHat.lnk
2014-09-20 09:23 - 2014-09-20 09:23 - 00002084 _____ () C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-09-20 09:23 - 2014-09-20 09:23 - 00000000 ____D () C:\Users\karol\AppData\Local\WebPlayer
2014-09-20 09:23 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\Apps Hat
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Users\karol\AppData\Local\globalUpdate
2014-09-20 09:22 - 2014-09-20 09:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-09-20 09:20 - 2014-09-20 09:21 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable (1).zip
2014-09-20 09:20 - 2014-09-20 09:20 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-09-20 09:20 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\karol\AppData\Roaming\Seznam.cz
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\YTAHelper
2014-09-20 09:19 - 2014-09-20 09:19 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2014-09-20 09:19 - 2012-05-06 01:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-20 09:18 - 2014-09-20 09:18 - 34082966 _____ () C:\Users\karol\Desktop\novicorpwintoflash0.8.0009betaportable.zip
2014-09-20 09:18 - 2014-09-20 09:18 - 00000000 ____D () C:\Users\karol\AppData\Local\CrashRpt
2014-09-20 09:18 - 2011-09-05 20:26 - 00000000 ____D () C:\temp
2014-09-19 22:12 - 2013-11-26 22:34 - 00017954 _____ () C:\Windows\setupact.log
2014-09-19 21:56 - 2014-09-19 21:56 - 01539512 _____ () C:\Users\karol\Desktop\-Windows-7-Loader-v2.2.2-By-DAZ.rar
2014-09-19 20:32 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-19 20:32 - 2009-07-14 06:45 - 00031296 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-19 20:28 - 2014-09-19 20:28 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-19 20:28 - 2009-07-14 07:13 - 00782510 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-19 20:21 - 2014-01-19 02:38 - 00000000 ____D () C:\Users\karol\AppData\Roaming\newnext.me
2014-09-19 20:21 - 2013-10-08 20:05 - 00000000 ___RD () C:\Users\karol\SkyDrive
2014-09-19 20:19 - 2013-10-10 19:25 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-19 20:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-19 19:51 - 2014-09-20 09:27 - 00044624 _____ (StdLib) C:\Windows\system32\Drivers\{00c97d86-accb-4288-9972-6d929c1fe93a}w64.sys
2014-09-17 23:13 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-17 19:32 - 2012-11-05 01:56 - 00000000 ____D () C:\Users\karol\AppData\Roaming\vlc
2014-09-16 23:15 - 2012-11-11 14:40 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2014-09-16 00:02 - 2013-10-15 19:52 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004Core.job
2014-09-15 23:50 - 2014-07-21 17:08 - 00000930 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000Core.job
2014-09-15 23:49 - 2013-10-17 21:16 - 00000906 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003Core.job
2014-09-14 23:38 - 2012-04-04 08:37 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-14 23:37 - 2012-04-04 08:37 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-14 23:37 - 2011-09-05 20:35 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-13 23:59 - 2014-09-13 23:59 - 17328816 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-13 00:36 - 2011-12-01 23:27 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-13 00:31 - 2011-10-01 10:30 - 00766820 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-13 00:30 - 2011-10-01 10:31 - 00001945 _____ () C:\Windows\epplauncher.mif
2014-09-13 00:30 - 2011-10-01 10:30 - 00002088 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-13 00:29 - 2013-07-20 00:54 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-13 00:29 - 2012-05-02 21:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-13 00:29 - 2011-10-01 10:30 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-13 00:21 - 2011-09-05 22:41 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-13 00:20 - 2014-05-10 00:58 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-05 04:10 - 2014-09-13 00:06 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-13 00:06 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-04 22:32 - 2013-11-26 22:33 - 00200032 _____ () C:\Windows\PFRO.log
2014-09-03 23:43 - 2013-11-26 22:14 - 00439528 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-09-01 10:18 - 2014-09-01 10:18 - 00002086 _____ () C:\Users\karol\AppData\Roaming\AVNUOK
2014-09-01 10:18 - 2014-09-01 10:18 - 00001248 _____ () C:\Users\karol\AppData\Roaming\SXMQIHM
2014-08-27 19:03 - 2014-06-10 22:45 - 00000000 ____D () C:\Users\Michaela\AppData\Local\Lenovo
2014-08-27 19:03 - 2012-01-19 20:04 - 00000000 ___RD () C:\Users\Michaela\Podcasts
2014-08-27 19:02 - 2013-04-14 10:07 - 00002592 _____ () C:\QcOSD.txt
2014-08-26 23:38 - 2014-03-26 12:33 - 00000000 ____D () C:\Users\karol\AppData\Local\Lenovo
2014-08-26 23:37 - 2012-04-25 00:52 - 00000000 ___RD () C:\Users\karol\Podcasts
2014-08-26 23:29 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-25 15:01 - 2014-08-25 15:01 - 00011046 _____ () C:\Windows\DPINST.LOG
2014-08-25 15:01 - 2014-08-25 15:01 - 00002982 _____ () C:\Windows\System32\Tasks\Synaptics TouchPad Enhancements
2014-08-25 15:01 - 2014-08-25 15:01 - 00001436 _____ () C:\Windows\Synaptics.log
2014-08-25 15:01 - 2014-08-25 15:01 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01009.Wdf
2014-08-25 15:00 - 2011-05-25 17:19 - 00003020 _____ () C:\Windows\System32\Tasks\PMTask
2014-08-25 14:59 - 2009-07-14 05:20 - 00000000 __RSD () C:\Windows\Media
2014-08-25 14:57 - 2014-08-25 14:57 - 00000000 ____D () C:\Users\karol\AppData\Local\Tvsukernel
2014-08-25 14:54 - 2011-05-25 16:28 - 00000000 ____D () C:\ProgramData\Lenovo
2014-08-25 14:37 - 2011-09-10 15:44 - 00000000 ____D () C:\Windows\System32\Tasks\TVT
2014-08-25 14:37 - 2011-05-25 17:04 - 00000000 ___HD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lenovo ThinkVantage Tools
2014-08-25 14:37 - 2011-05-25 17:00 - 00000000 ____D () C:\Program Files (x86)\Lenovo
2014-08-25 14:36 - 2011-05-25 17:22 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-25 10:52 - 2014-07-18 19:40 - 00000000 ____D () C:\Users\karol\AppData\Roaming\LSC
2014-08-23 04:07 - 2014-09-02 00:11 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-09-02 00:11 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-09-02 00:11 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
Some content of TEMP:
====================
C:\Users\karol\AppData\Local\Temp\6_Offer_3.exe
C:\Users\karol\AppData\Local\Temp\appshat_generic.exe
C:\Users\karol\AppData\Local\Temp\biclient.exe
C:\Users\karol\AppData\Local\Temp\cabex.dll
C:\Users\karol\AppData\Local\Temp\DownloadManager.exe
C:\Users\karol\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\karol\AppData\Local\Temp\GreyGraySetup.exe
C:\Users\karol\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u65-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\jre-7u67-windows-i586-iftw.exe
C:\Users\karol\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\karol\AppData\Local\Temp\OptimizerPro.exe
C:\Users\karol\AppData\Local\Temp\optprosetup.exe
C:\Users\karol\AppData\Local\Temp\PartnerInstaller_smtyc.exe
C:\Users\karol\AppData\Local\Temp\setup.exe
C:\Users\karol\AppData\Local\Temp\SkypeSetup.exe
C:\Users\karol\AppData\Local\Temp\smt_istartsurf.exe
C:\Users\karol\AppData\Local\Temp\tu17p84.exe
C:\Users\karol\AppData\Local\Temp\unelevate.exe
C:\Users\karol\AppData\Local\Temp\vlc-2.1.2-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
TreeSize Professional 5.2.3 (HKLM-x32\...\TreeSize Professional_is1) (Version: - JAM Software)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-1.job => C:\Program Files (x86)\Apps Hat\Apps Hat-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-11.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-2.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-4.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-5_user.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-6.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\36316498-b3d9-47dd-98ae-f60936fb007c-7.job => C:\Program Files (x86)\Apps Hat\36316498-b3d9-47dd-98ae-f60936fb007c-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-1.job => C:\Program Files (x86)\Senses\Senses-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-3.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5_user.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.job => C:\Program Files (x86)\Senses\44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-1.job => C:\Program Files (x86)\iWebar\iWebar-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-2.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-4.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5_user.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-5.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-6.exe <==== ATTENTION
Task: C:\Windows\Tasks\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.job => C:\Program Files (x86)\iWebar\87dbc6dc-6261-4486-899d-ccf09f6eb0c0-7.exe <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AVNUOK.job => C:\Users\karol\AppData\Roaming\AVNUOK.exe
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000Core.job => C:\Users\Jozef&Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1000UA.job => C:\Users\Jozef&Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003Core.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1003UA.job => C:\Users\Michaela\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004Core.job => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1212182777-1079031378-3419217657-1004UA.job => C:\Users\karol\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\PCDoctorBackgroundMonitorTask-Delay.job => C:\Program Files\PC-Doctor\uaclauncher.exe
Task: C:\Windows\Tasks\SXMQIHM.job => C:\Users\karol\AppData\Roaming\SXMQIHM.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: Microsoft Security Essentials (Enabled - Up to date) {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
AS: Microsoft Security Essentials (Enabled - Up to date) {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\karol\Desktop" je 1242 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PicPick Start
C:\Program Files (x86)\PicPick\picpick.exe /startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony PC Companion
"C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Michaela^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk
C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================