Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-12-2014
Ran by Douber (administrator) on DOUBER-PC on 06-12-2014 10:30:23
Running from C:\Users\Douber\Desktop
Loaded Profile: Douber (Available profiles: Douber)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Foxit Corporation) C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe
() C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe
(iZ3D Inc.) C:\Program Files (x86)\iZ3D Driver\Win32\S3DCService.exe
(iZ3D Inc.) C:\Program Files (x86)\iZ3D Driver\Win64\S3DCService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Ulead Systems, Inc.) C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Crystal Dew World) C:\Users\Douber\Desktop\DiskInfo.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(forum.viry.cz) C:\Users\Douber\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [7406392 2012-11-29] (Logitech Inc.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5595336 2014-10-01] (ESET)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767200 2014-09-15] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {13b9ffc3-27e9-11e2-a97a-00241d7db39b} - J:\Autorun\autorun.exe
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {1926e89b-e551-11e2-a112-00241d7db39b} - E:\setup.exe
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {39dee048-87ed-11e1-8625-00241d7db39b} - J:\Setup.exe
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {7183923f-6d3c-11e3-be64-00241d7db39b} - F:\Startme.exe
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {aa458893-e327-11e3-9a07-00241d7db39b} - E:\setup.exe
HKU\S-1-5-21-930455740-3333675333-983887030-1000\...\MountPoints2: {ca2643b5-ab85-11e3-be82-00241d7db39b} - F:\autorun.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-930455740-3333675333-983887030-1000\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.seznam.cz/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
SearchScopes: HKLM -> DefaultScope value is missing.
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://search.live.com/results.aspx?q={ ... rer:source?}
SearchScopes: HKLM-x32 -> DefaultScope value is missing.
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
http://search.live.com/results.aspx?q={ ... rer:source?}
SearchScopes: HKU\S-1-5-21-930455740-3333675333-983887030-1000 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL =
http://go.mail.ru/search?utf8in=1&fr=ie ... earchTerms}
SearchScopes: HKU\S-1-5-21-930455740-3333675333-983887030-1000 -> {1A739F0D-4E52-47C7-A248-24FD5F4D928F} URL =
http://websearch.ask.com/redirect?clien ... 75F8F2A024
SearchScopes: HKU\S-1-5-21-930455740-3333675333-983887030-1000 -> {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL =
http://go.mail.ru/search?utf8in=1&fr=ie ... earchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E}
http://ccfiles.creative.com/Web/softwar ... PIDPDE.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29}
http://ccfiles.creative.com/Web/softwar ... /CTPID.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 195.113.44.11 195.113.0.2
FireFox:
========
FF ProfilePath: C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default
FF Homepage: hxxp://
www.seznam.cz/
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_239.dll ()
FF Plugin: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_239.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll (ESN Social Software AB)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll (Foxit Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.72.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.72.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\
cs@dictionaries.addons.mozilla.org [2014-11-10]
FF Extension: Xmarks - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\
foxmarks@kei.com [2014-11-23]
FF Extension: Element Hiding Helper for Adblock Plus - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\
elemhidehelper@adblockplus.org.xpi [2013-04-13]
FF Extension: ExHentai Easy 2 - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\
jid1-7NbXi2AqS1oUFw@jetpack.xpi [2014-01-01]
FF Extension: Google™ Translator - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\
jid1-dgnIBwQga0SIBw@jetpack.xpi [2014-11-14]
FF Extension: Resurrect Pages - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}.xpi [2012-04-20]
FF Extension: Flagfox - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2014-03-08]
FF Extension: Linkification - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a}.xpi [2012-04-16]
FF Extension: NoScript - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2013-02-11]
FF Extension: BBCodeXtra - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{af79f858-4b25-4ca4-822b-b5db1be628fc}.xpi [2012-04-20]
FF Extension: Adblock Plus - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2012-04-16]
FF Extension: Greasemonkey - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}.xpi [2012-08-24]
FF Extension: Theme Font & Size Changer - C:\Users\Douber\AppData\Roaming\Mozilla\Firefox\Profiles\hamuzn7p.default\Extensions\{f69e22c7-bc50-414a-9269-0f5c344cd94c}.xpi [2014-08-13]
FF HKLM-x32\...\Thunderbird\Extensions: [
eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
Chrome:
=======
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2014-09-15] (Advanced Micro Devices, Inc.) [File not signed]
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2013-07-10] (Creative Labs) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2013-07-10] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [423424 2011-10-19] (Creative Technology Ltd) [File not signed]
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1349576 2014-10-01] (ESET)
R2 FoxitCloudUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe [239680 2014-02-19] (Foxit Corporation)
R2 HiSuiteOuc64.exe; C:\ProgramData\HiSuiteOuc\HiSuiteOuc64.exe [138272 2014-09-05] ()
R2 HuaweiHiSuiteService64.exe; C:\ProgramData\HandSetService\HuaweiHiSuiteService64.exe [219680 2014-09-05] ()
R2 S3DSvc32; C:\Program Files (x86)\iZ3D Driver\Win32\S3DCService.exe [360960 2010-10-24] (iZ3D Inc.) [File not signed]
R2 S3DSvc64; C:\Program Files (x86)\iZ3D Driver\Win64\S3DCService.exe [480768 2010-10-24] (iZ3D Inc.) [File not signed]
R2 UleadBurningHelper; C:\Program Files (x86)\Common Files\Ulead Systems\DVD\ULCDRSvr.exe [49152 2006-09-29] (Ulead Systems, Inc.) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-05-24] (Disc Soft Ltd)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [243440 2014-10-10] (ESET)
U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [241368 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [169280 2014-10-10] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [222280 2014-10-10] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44632 2014-10-10] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [63160 2014-10-10] (ESET)
S3 flashusb; C:\Windows\System32\DRIVERS\flashusb.sys [19968 2012-02-27] (Danish Wireless Design A/S)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2014-07-29] (Huawei Technologies Co., Ltd.)
R1 iZ3DInjectionDriver; C:\Program Files (x86)\iZ3D Driver\Win64\S3DInjectionDriver.sys [43704 2010-10-06] ()
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [66360 2012-10-02] (Logitech Inc.)
S3 Ph3xIB64; C:\Windows\System32\DRIVERS\Ph3xIB64.sys [1627520 2009-06-10] (NXP Semiconductors)
S3 StkCMini; C:\Windows\System32\Drivers\StkCMini.sys [1816968 2010-04-16] (Syntek)
S3 UHSfiltv; C:\Windows\System32\drivers\UHSfiltv.sys [23552 2011-07-15] (Creative Technology Ltd.)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 usbbus; system32\DRIVERS\lgx64bus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgx64diag.sys [X]
S3 USBModem; system32\DRIVERS\lgx64modem.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 10:30 - 2014-12-06 10:31 - 00015978 _____ () C:\Users\Douber\Desktop\FRST.txt
2014-12-06 10:30 - 2014-12-06 10:30 - 00000000 ____D () C:\FRST
2014-12-06 10:28 - 2014-12-06 10:28 - 02117632 _____ (Farbar) C:\Users\Douber\Desktop\FRST64.exe
2014-12-06 10:28 - 2014-12-06 10:28 - 00112640 _____ (forum.viry.cz) C:\Users\Douber\Desktop\FRSTLauncher.exe
2014-12-06 10:19 - 2014-12-06 10:19 - 00000000 ____D () C:\rsit
2014-12-06 10:18 - 2014-12-06 10:18 - 01222144 _____ () C:\Users\Douber\Desktop\RSITx64.exe
2014-12-06 10:13 - 2014-12-06 10:23 - 00014942 _____ () C:\Users\Douber\Desktop\ddd.txt
2014-12-06 10:11 - 2014-12-06 10:14 - 00000417 _____ () C:\Users\Douber\Desktop\DiskInfo.ini
2014-12-06 10:11 - 2014-12-06 10:12 - 00000000 ____D () C:\Users\Douber\Desktop\Smart
2014-12-06 10:11 - 2014-12-06 10:11 - 02817974 _____ () C:\Users\Douber\Desktop\CrystalDiskInfo6_2_1.zip
2014-12-06 10:11 - 2014-08-31 19:02 - 00000000 ____D () C:\Users\Douber\Desktop\CdiResource
2014-12-06 10:11 - 2014-08-31 18:58 - 02385016 _____ (Crystal Dew World) C:\Users\Douber\Desktop\DiskInfo.exe
2014-12-06 10:11 - 2014-01-27 21:18 - 00000000 ____D () C:\Users\Douber\Desktop\License
2014-12-06 10:05 - 2014-12-06 10:05 - 00003416 ____N () C:\bootsqm.dat
2014-12-06 02:43 - 2014-12-06 02:43 - 00000219 _____ () C:\Users\Douber\Desktop\Team Fortress 2.url
2014-12-06 02:38 - 2014-12-06 02:38 - 00000218 _____ () C:\Users\Douber\Desktop\Counter-Strike.url
2014-12-05 21:50 - 2014-12-05 21:55 - 00001292 _____ () C:\Windows\LkmdfCoInst.log
2014-12-02 23:43 - 2014-11-28 19:42 - 04027000 _____ () C:\Users\Douber\Downloads\20141128_47.mkv
2014-12-01 19:15 - 2014-12-01 19:15 - 00000000 ____D () C:\Users\Douber\AppData\Local\Smellyriver
2014-12-01 14:25 - 2014-12-01 14:25 - 00000000 ____D () C:\Users\Douber\Desktop\DungeonNightmares_Win_v1-4
2014-12-01 12:51 - 2014-02-28 19:36 - 00000000 ____D () C:\Users\Douber\FlatOut 2
2014-11-30 21:50 - 2014-11-30 22:10 - 2629105646 _____ () C:\Users\Douber\FlatOut-2--plna-hra-staci-rozbalit-a-nakopirovat-do-pc..rar
2014-11-25 10:35 - 2014-11-25 10:47 - 00000000 ____D () C:\Users\Douber\Desktop\Season 3
2014-11-19 21:04 - 2014-11-19 21:03 - 01444557 _____ () C:\Users\Douber\Desktop\20141119_2050_usa-T95_13_erlenberg.wotreplay
2014-11-19 12:37 - 2014-11-11 04:08 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-11-19 12:37 - 2014-11-11 04:08 - 00241152 _____ (Microsoft Corporation) C:\Windows\system32\pku2u.dll
2014-11-19 12:37 - 2014-11-11 03:44 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-11-19 12:37 - 2014-11-11 03:44 - 00186880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\pku2u.dll
2014-11-18 21:06 - 2014-11-18 21:01 - 01039668 _____ () C:\Users\Douber\Desktop\20141118_2055_ussr-KV2_06_ensk.wotreplay
2014-11-18 17:14 - 2014-11-18 17:14 - 00000000 ____D () C:\Users\Douber\Downloads\Doctor.Who.2005.S08E12.Death.In.Heaven.720p.HDTV.X265
2014-11-16 01:19 - 2014-11-16 01:19 - 00000000 __SHD () C:\Users\Douber\AppData\Local\EmieBrowserModeList
2014-11-16 00:05 - 2014-11-16 01:25 - 00019673 _____ () C:\Users\Douber\Desktop\nexus.txt
2014-11-15 23:17 - 2014-11-16 00:22 - 00000000 ____D () C:\Nexus
2014-11-14 09:19 - 2014-11-14 09:19 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WugFresh Development
2014-11-13 10:08 - 2014-11-13 10:08 - 00000652 _____ () C:\Windows\PFRO.log
2014-11-11 22:28 - 2014-11-07 20:49 - 00388272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-11-11 22:28 - 2014-11-07 20:23 - 00341168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-11-11 22:28 - 2014-11-06 05:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-11-11 22:28 - 2014-11-06 05:03 - 25110016 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-11-11 22:28 - 2014-11-06 05:03 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-11-11 22:28 - 2014-11-06 04:47 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-11-11 22:28 - 2014-11-06 04:46 - 00580096 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-11-11 22:28 - 2014-11-06 04:46 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-11-11 22:28 - 2014-11-06 04:44 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-11-11 22:28 - 2014-11-06 04:43 - 02884096 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-11-11 22:28 - 2014-11-06 04:36 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-11-11 22:28 - 2014-11-06 04:35 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-11-11 22:28 - 2014-11-06 04:31 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-11-11 22:28 - 2014-11-06 04:30 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-11-11 22:28 - 2014-11-06 04:30 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-11-11 22:28 - 2014-11-06 04:29 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-11-11 22:28 - 2014-11-06 04:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-11-11 22:28 - 2014-11-06 04:23 - 06040064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-11-11 22:28 - 2014-11-06 04:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-11-11 22:28 - 2014-11-06 04:16 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-11-11 22:28 - 2014-11-06 04:13 - 00501248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-11-11 22:28 - 2014-11-06 04:13 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-11-11 22:28 - 2014-11-06 04:12 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-11-11 22:28 - 2014-11-06 04:10 - 19781632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-11-11 22:28 - 2014-11-06 04:10 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-11-11 22:28 - 2014-11-06 04:07 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-11-11 22:28 - 2014-11-06 04:05 - 02277376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-11-11 22:28 - 2014-11-06 04:04 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-11-11 22:28 - 2014-11-06 04:03 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-11-11 22:28 - 2014-11-06 04:02 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-11-11 22:28 - 2014-11-06 04:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-11-11 22:28 - 2014-11-06 04:00 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-11-11 22:28 - 2014-11-06 03:59 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-11-11 22:28 - 2014-11-06 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-11-11 22:28 - 2014-11-06 03:57 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-11-11 22:28 - 2014-11-06 03:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-11-11 22:28 - 2014-11-06 03:42 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-11-11 22:28 - 2014-11-06 03:41 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-11-11 22:28 - 2014-11-06 03:41 - 00716800 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-11-11 22:28 - 2014-11-06 03:39 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-11-11 22:28 - 2014-11-06 03:38 - 02124288 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-11-11 22:28 - 2014-11-06 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-11-11 22:28 - 2014-11-06 03:36 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-11-11 22:28 - 2014-11-06 03:34 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-11-11 22:28 - 2014-11-06 03:30 - 14390272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-11-11 22:28 - 2014-11-06 03:22 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-11-11 22:28 - 2014-11-06 03:21 - 04298240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-11-11 22:28 - 2014-11-06 03:21 - 02051072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-11-11 22:28 - 2014-11-06 03:20 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-11-11 22:28 - 2014-11-06 03:17 - 02365440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-11-11 22:28 - 2014-11-06 03:04 - 01550336 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-11-11 22:28 - 2014-11-06 03:03 - 12819456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-11-11 22:28 - 2014-11-06 02:53 - 00799232 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-11-11 22:28 - 2014-11-06 02:52 - 01892864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-11-11 22:28 - 2014-11-06 02:48 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-11-11 22:28 - 2014-11-06 02:47 - 00708096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-11-11 22:28 - 2014-10-25 02:57 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-11-11 22:28 - 2014-10-25 02:32 - 00067584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-11-11 22:28 - 2014-10-14 03:16 - 00155064 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-11-11 22:28 - 2014-10-14 03:13 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-11-11 22:28 - 2014-10-14 03:13 - 00683520 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-11-11 22:28 - 2014-10-14 03:12 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-11-11 22:28 - 2014-10-14 03:09 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-11-11 22:28 - 2014-10-14 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-11-11 22:28 - 2014-10-14 02:50 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-11-11 22:28 - 2014-10-14 02:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-11-11 22:28 - 2014-10-14 02:49 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-11-11 22:28 - 2014-10-14 02:47 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-11-11 22:28 - 2014-10-14 02:46 - 00681984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-11-11 22:28 - 2014-10-03 03:12 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2014-11-11 22:28 - 2014-10-03 03:11 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2014-11-11 22:28 - 2014-10-03 03:11 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2014-11-11 22:28 - 2014-10-03 03:11 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2014-11-11 22:28 - 2014-10-03 03:11 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2014-11-11 22:28 - 2014-10-03 02:44 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2014-11-11 22:28 - 2014-10-03 02:44 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2014-11-11 22:28 - 2014-10-03 02:44 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2014-11-11 22:28 - 2014-08-21 07:43 - 01882624 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-11-11 22:28 - 2014-08-21 07:40 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-11-11 22:28 - 2014-08-21 07:26 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-11-11 22:28 - 2014-08-21 07:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-11-11 22:28 - 2014-08-12 03:02 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\IMJP10K.DLL
2014-11-11 22:28 - 2014-08-12 02:36 - 00701440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IMJP10K.DLL
2014-11-11 22:27 - 2014-09-19 10:42 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-11-11 22:27 - 2014-09-19 10:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-11-11 22:27 - 2014-09-19 10:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-11-11 22:27 - 2014-09-19 10:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-11-11 22:27 - 2014-09-19 10:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-11-11 22:27 - 2014-09-19 10:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-11-11 22:27 - 2014-09-19 10:23 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-11-11 22:26 - 2014-10-18 03:05 - 00861696 _____ (Microsoft Corporation) C:\Windows\system32\oleaut32.dll
2014-11-11 22:26 - 2014-10-18 02:33 - 00571904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\oleaut32.dll
2014-11-11 22:26 - 2014-10-10 01:57 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-11-11 20:23 - 2014-11-11 20:24 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-11-09 20:01 - 2014-11-09 20:01 - 00000935 _____ () C:\Users\Douber\Desktop\TeamSpeak 3 Client.lnk
2014-11-09 19:19 - 2014-11-09 19:19 - 00000219 _____ () C:\Users\Douber\Desktop\Half-Life 2 Episode Two.url
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-12-06 10:19 - 2013-11-01 00:44 - 00000000 ____D () C:\Program Files\trend micro
2014-12-06 10:16 - 2012-04-16 08:57 - 00011440 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-12-06 10:16 - 2012-04-16 08:57 - 00011440 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-12-06 10:08 - 2013-03-30 16:02 - 00000434 _____ () C:\Windows\system32\Drivers\etc\hosts.ics
2014-12-06 10:07 - 2014-10-23 15:18 - 03100995 _____ () C:\Windows\setupact.log
2014-12-06 10:07 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-12-06 05:41 - 2014-05-21 11:23 - 00000000 ____D () C:\Users\Douber\AppData\Local\CrashDumps
2014-12-06 05:41 - 2012-10-16 21:56 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-12-06 05:41 - 2012-04-16 09:04 - 01485392 _____ () C:\Windows\WindowsUpdate.log
2014-12-06 05:25 - 2012-04-16 12:49 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\Skype
2014-12-06 04:48 - 2012-09-01 20:41 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-12-06 03:45 - 2009-07-14 16:18 - 00668882 _____ () C:\Windows\system32\perfh005.dat
2014-12-06 03:45 - 2009-07-14 16:18 - 00141542 _____ () C:\Windows\system32\perfc005.dat
2014-12-06 03:45 - 2009-07-14 06:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-06 03:05 - 2013-12-14 21:31 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\TS3Client
2014-12-05 21:55 - 2012-04-16 12:45 - 00018960 _____ (Logitech, Inc.) C:\Windows\system32\Drivers\LNonPnP.sys
2014-12-05 21:42 - 2012-04-16 08:59 - 00000000 ____D () C:\Users\Douber
2014-12-05 21:39 - 2012-04-17 23:25 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\IrfanView
2014-12-05 21:39 - 2009-07-14 16:36 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-12-05 21:39 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-12-03 23:46 - 2014-01-05 15:21 - 00000000 ____D () C:\Users\Douber\Desktop\res_mods
2014-12-03 20:18 - 2014-03-25 19:34 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\ViberPC
2014-12-02 01:29 - 2012-04-16 12:58 - 00000000 ____D () C:\JDownloader
2014-12-01 19:01 - 2013-09-17 14:48 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-12-01 11:29 - 2014-03-25 19:33 - 00000000 ____D () C:\Users\Douber\AppData\Local\Viber
2014-11-30 23:47 - 2012-06-20 16:10 - 00000000 ____D () C:\Users\Douber\Podcasts
2014-11-30 20:35 - 2012-05-26 11:39 - 00001658 _____ () C:\Users\Public\Desktop\Recuva.lnk
2014-11-30 20:35 - 2012-05-26 11:39 - 00000000 ____D () C:\Program Files\Recuva
2014-11-25 21:50 - 2012-09-01 20:41 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-11-25 21:50 - 2012-04-16 11:14 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-25 21:50 - 2012-04-16 11:14 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-18 17:21 - 2012-04-18 09:36 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\uTorrent
2014-11-15 20:03 - 2014-06-05 12:06 - 00001332 _____ () C:\Users\Douber\Desktop\Nexus Root Toolkit.lnk
2014-11-15 20:02 - 2014-06-05 12:06 - 00000000 ____D () C:\Program Files (x86)\WugFresh Development
2014-11-13 12:28 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-11 22:44 - 2009-07-14 05:45 - 00339328 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-11-11 22:43 - 2012-05-04 22:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-11-11 22:36 - 2012-04-20 23:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-11-11 22:33 - 2013-07-10 00:23 - 00000000 ____D () C:\Windows\system32\MRT
2014-11-11 22:30 - 2012-04-16 09:29 - 103374192 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-11-06 20:13 - 2014-06-05 12:06 - 00000000 ____D () C:\Users\Douber\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wugs Nexus Root Tookit
Some content of TEMP:
====================
C:\Users\Douber\AppData\Local\Temp\Foxit Reader Updater.exe
C:\Users\Douber\AppData\Local\Temp\InstHelper.exe
C:\Users\Douber\AppData\Local\Temp\Papers_Please_v1.1.67_S_setup.exe
C:\Users\Douber\AppData\Local\Temp\servicecheck.exe
C:\Users\Douber\AppData\Local\Temp\utils.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-11-26 12:02
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:698.63 GB) (Free:111.48 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive e: () (CDROM) (Total:23.73 GB) (Free:0 GB) CDFS
Drive i: (My Book) (Fixed) (Total:596.17 GB) (Free:36.71 GB) NTFS
Available physical RAM: 5936.34 MB
Total physical RAM: 8189.49 MB
Percentage of memory in use: 27%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: E353C3C5)
Partition 1: (Active) - (Size=698.6 GB) - (Type=07 NTFS)
Disk: 1 (Size: 596.2 GB) (Disk ID: ACDD9B22)
Partition 1: (Not Active) - (Size=596.2 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET Personální firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Douber\Desktop" je 28027 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"C:\\Program Files (x86)\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe"="C:\\Program Files (x86)\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\\Program Files (x86)\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe"="C:\\Program Files (x86)\\Logitech\\Logitech Harmony Remote Software 7\\HarmonyRemote.exe:*:Enabled:Logitech Harmony Remote Software 7"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
==================== End Of Log ==============================