Prosim o kontrolu logu
Napsal: 01 led 2015 12:44
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 28-12-2014
Ran by allynkovci (administrator) on ALLYNKOVCI-PC on 01-01-2015 12:08:48
Running from C:\Users\allynkovci\Desktop
Loaded Profile: allynkovci (Available profiles: allynkovci)
Platform: Microsoft Windows 7 Professional (X86) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\allynkovci\Desktop\FRSTLauncher (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2014-10-01] (ESET)
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [S-1-5-21-2019492850-1829170815-1786764852-1001] => Internet Explorer proxy is enabled.
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-26]
CHR Extension: (Dokumenty Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-26]
CHR Extension: (Disk Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-26]
CHR Extension: (YouTube) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-26]
CHR Extension: (Hľadať v Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-26]
CHR Extension: (Tabuľky Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-26]
CHR Extension: (Lyoness Cashback Bar) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibocncflemnoggjhchgnakpnhdiajnjl [2014-12-27]
CHR Extension: (Mesiac mapa) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\lleimkgbaochlkiikiobdpfjjamfdkpp [2014-12-29]
CHR Extension: (Peňaženka Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-26]
CHR Extension: (Gmail) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-26]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2014-10-01] (ESET)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2014-10-10] (ESET)
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [23552 2014-08-08] (The OpenVPN Project)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10252544 2007-03-27] (Sonix Co. Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-01 12:08 - 2015-01-01 12:09 - 00007402 _____ () C:\Users\allynkovci\Desktop\FRST.txt
2015-01-01 12:08 - 2015-01-01 12:08 - 00000000 ____D () C:\FRST
2015-01-01 12:06 - 2015-01-01 12:06 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Desktop\FRSTLauncher (1).exe
2015-01-01 12:05 - 2015-01-01 12:05 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 844200.crdownload
2015-01-01 12:05 - 2015-01-01 12:05 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 112047.crdownload
2015-01-01 12:04 - 2015-01-01 12:04 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 58841.crdownload
2015-01-01 12:00 - 2015-01-01 12:00 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 277376.crdownload
2015-01-01 11:59 - 2015-01-01 11:59 - 01114624 _____ (Farbar) C:\Users\allynkovci\Desktop\FRST.exe
2015-01-01 11:58 - 2015-01-01 11:58 - 00018107 _____ () C:\Users\allynkovci\Desktop\rockz.htm
2015-01-01 11:57 - 2015-01-01 11:57 - 00057560 _____ () C:\Users\allynkovci\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-01 10:57 - 2015-01-01 10:57 - 00880784 _____ (Google Inc.) C:\Users\allynkovci\Downloads\ChromeSetup.exe
2015-01-01 09:16 - 2015-01-01 11:55 - 00050985 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 03:03 - 2015-01-01 09:16 - 00000000 ____D () C:\Windows\Minidump
2014-12-30 05:11 - 2014-12-30 05:11 - 00000000 ____D () C:\ProgramData\Sun
2014-12-30 05:11 - 2014-12-30 05:10 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2014-12-30 05:11 - 2014-12-30 05:10 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2014-12-30 05:10 - 2014-12-31 20:20 - 00000000 ____D () C:\Program Files\OpenVPN Technologies
2014-12-29 21:13 - 2014-12-29 21:13 - 00880784 _____ (Google Inc.) C:\Users\allynkovci\Downloads\GoogleEarthPluginSetup.exe
2014-12-29 21:13 - 2014-12-29 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-12-29 10:03 - 2014-12-29 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-12-29 10:02 - 2014-12-29 10:02 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\NVIDIA
2014-12-29 09:51 - 2015-01-01 09:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-29 09:50 - 2014-08-19 22:16 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-12-29 09:50 - 2014-07-02 20:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-12-29 09:50 - 2014-07-02 18:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-12-29 09:50 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-12-29 09:49 - 2014-12-29 09:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-12-29 09:49 - 2014-12-29 09:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-12-29 09:46 - 2014-12-29 13:57 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-29 09:46 - 2014-12-29 09:46 - 00001059 _____ () C:\Users\Public\Desktop\Shards of War.lnk
2014-12-29 09:46 - 2014-12-29 09:46 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\UWebKit151
2014-12-29 09:46 - 2014-12-29 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shards of War
2014-12-29 09:45 - 2014-12-29 10:00 - 00000000 ____D () C:\Program Files\Shards of War
2014-12-29 09:42 - 2014-12-29 09:43 - 23533016 _____ (Bigpoint GmbH ) C:\Users\allynkovci\Downloads\ShardsOfWarSetup.exe
2014-12-28 14:50 - 2014-12-28 14:50 - 00000000 ____H () C:\Users\allynkovci\Documents\Default.rdp
2014-12-28 14:41 - 2015-01-01 03:05 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 14:40 - 2014-12-28 14:40 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-12-28 14:40 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-28 14:40 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-28 14:40 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-28 14:39 - 2014-12-28 14:40 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\allynkovci\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-28 14:31 - 2014-12-28 14:31 - 01107968 _____ () C:\Users\allynkovci\Downloads\RSIT.exe
2014-12-28 14:31 - 2014-12-28 14:31 - 00000000 ____D () C:\rsit
2014-12-28 14:31 - 2014-12-28 14:31 - 00000000 ____D () C:\Program Files\trend micro
2014-12-28 14:16 - 2014-12-31 20:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-28 14:16 - 2014-12-28 14:16 - 00000969 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-28 14:16 - 2014-12-28 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-28 14:13 - 2014-12-28 14:14 - 05162080 _____ (Piriform Ltd) C:\Users\allynkovci\Downloads\ccsetup500.exe
2014-12-28 03:19 - 2014-12-29 10:00 - 00007597 _____ () C:\Users\allynkovci\AppData\Local\resmon.resmoncfg
2014-12-27 21:55 - 2005-04-15 18:58 - 01071088 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX
2014-12-27 21:55 - 2004-03-08 23:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\RICHTX32.OCX
2014-12-27 21:55 - 2004-03-08 23:00 - 00124688 _____ (Microsoft Corporation) C:\Windows\system32\MSWINSCK.OCX
2014-12-27 21:55 - 2004-02-22 23:00 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\MSSTDFMT.DLL
2014-12-27 21:55 - 2003-07-06 13:07 - 00372736 _____ (Intel Corporation) C:\Windows\system32\IJL_11.DLL
2014-12-27 21:54 - 2014-12-27 21:54 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\ESET
2014-12-27 19:50 - 2014-12-27 19:50 - 36750600 _____ () C:\Users\allynkovci\Downloads\LyonessBrowserSetup.exe
2014-12-27 19:07 - 2014-12-27 19:07 - 00081560 _____ () C:\Users\allynkovci\Documents\lyones.xps
2014-12-27 18:55 - 2014-12-27 18:55 - 39042128 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\FileFormatConverters (1).exe
2014-12-27 18:54 - 2014-12-27 18:54 - 00002579 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint Viewer .lnk
2014-12-27 18:54 - 2014-12-27 18:54 - 00002537 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
2014-12-27 18:53 - 2014-12-27 18:53 - 39042128 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\FileFormatConverters.exe
2014-12-27 18:52 - 2014-12-27 18:54 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-12-27 18:52 - 2014-12-27 18:53 - 77738888 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\ExcelViewer.exe
2014-12-27 18:52 - 2014-12-27 18:53 - 71809242 _____ () C:\Users\allynkovci\Downloads\PowerPointViewer.exe
2014-12-27 18:52 - 2014-12-27 18:52 - 00002671 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
2014-12-27 18:50 - 2014-12-27 18:51 - 34077237 _____ () C:\Users\allynkovci\Downloads\wordview_cz.exe
2014-12-27 18:45 - 2015-01-01 08:58 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-27 18:42 - 2014-12-27 18:45 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-27 18:42 - 2014-11-27 16:40 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-27 18:41 - 2011-04-09 07:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-12-27 18:41 - 2011-04-09 07:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-27 18:41 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-27 18:32 - 2014-12-27 18:54 - 00000000 ____D () C:\Program Files\MSECache
2014-12-27 16:08 - 2014-12-27 16:08 - 00026356 _____ () C:\Users\allynkovci\Downloads\Moje karty Lyoness.html
2014-12-27 16:08 - 2014-12-27 16:08 - 00000000 ____D () C:\Users\allynkovci\Downloads\Moje karty Lyoness_files
2014-12-27 01:33 - 2014-12-28 14:19 - 00000000 ____D () C:\Windows\Panther
2014-12-26 21:54 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-26 21:54 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-26 21:54 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-26 21:54 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-26 21:54 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-26 21:54 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-26 16:59 - 2014-11-24 14:04 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\ProgramData\ESET
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\Program Files\ESET
2014-12-26 16:51 - 2014-12-26 16:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-12-26 16:47 - 2015-01-01 09:21 - 00713888 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-26 16:47 - 2015-01-01 00:40 - 00000000 ____D () C:\Users\allynkovci\AppData\Roaming\Skype
2014-12-26 16:47 - 2014-12-26 16:47 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Skype
2014-12-26 16:46 - 2014-12-26 16:47 - 00000000 ___RD () C:\Program Files\Skype
2014-12-26 16:46 - 2014-12-26 16:47 - 00000000 ____D () C:\ProgramData\Skype
2014-12-26 16:46 - 2014-12-26 16:46 - 01548384 _____ (Skype Technologies S.A.) C:\Users\allynkovci\Downloads\SkypeSetup.exe
2014-12-26 16:46 - 2014-12-26 16:46 - 00002701 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-12-26 16:46 - 2014-12-26 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-26 16:46 - 2014-12-26 16:46 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-12-26 16:44 - 2015-01-01 10:58 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-26 16:44 - 2015-01-01 09:14 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-26 16:44 - 2015-01-01 09:14 - 00000928 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-26 16:44 - 2014-12-29 21:13 - 00000000 ____D () C:\Program Files\Google
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Google
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Deployment
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Apps\2.0
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-26 16:42 - 2014-12-26 16:42 - 00000355 _____ () C:\Users\allynkovci\Desktop\Computer - Shortcut.lnk
2014-12-26 16:39 - 2014-12-26 16:39 - 00001417 _____ () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-26 16:39 - 2014-12-26 16:39 - 00000020 ___SH () C:\Users\allynkovci\ntuser.ini
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 __SHD () C:\Recovery
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\VirtualStore
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 ____D () C:\Users\allynkovci
2014-12-26 16:39 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-26 16:39 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-26 16:36 - 2014-12-26 16:36 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-12-26 16:36 - 2014-12-26 16:36 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-01 12:02 - 2009-07-14 05:34 - 00020512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-01 12:02 - 2009-07-14 05:34 - 00020512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-01 10:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2015-01-01 09:14 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-01 08:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-29 11:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-12-29 09:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-12-28 18:54 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\twain_32
2014-12-28 11:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-12-28 03:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Registration
2014-12-27 18:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-27 01:33 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-12-27 01:33 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-12-26 17:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-12-26 16:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2014-12-26 16:39 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-26 16:36 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-26 16:34 - 2009-07-14 08:50 - 00000000 ____D () C:\Windows\CSC
Some content of TEMP:
====================
C:\Users\allynkovci\AppData\Local\Temp\i4jdel0.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-27 03:41
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:196.13 GB) (Free:175.17 GB) NTFS
Drive d: () (Fixed) (Total:269.53 GB) (Free:269.43 GB) NTFS
Drive z: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Available physical RAM: 1278.81 MB
Total physical RAM: 2046.49 MB
Percentage of memory in use: 37%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 33FE9666)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=196.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=269.5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\allynkovci\Desktop" je 1 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend
"C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3
C:\Windows\vsnpstd3.exe
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Pridaavam aj log z DDS..
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.7600.16385
Run by allynkovci at 12:49:07 on 2015-01-01
Microsoft Windows 7 Professional 6.1.7600.0.1250.421.1033.18.2046.1162 [GMT 1:00]
.
AV: ESET NOD32 Antivirus 8.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 8.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
uRun: [CCleaner Monitoring] "c:\program files\ccleaner\CCleaner.exe" /MONITOR
uRun: [CCleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{2155C6F0-7D24-42B5-8C1C-E83A48314B54} : DHCPNameServer = 192.168.0.1
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\39.0.2171.95\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R1 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2014-10-10 191928]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\skype\toolbars\autoupdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\skype\toolbars\pnrsvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2014-10-1 1349576]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2014-10-10 123424]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2014-12-29 413128]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-1 139776]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2014-12-11 315496]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 ptun0901;TAP Adapter V9 for Private Tunnel;c:\windows\system32\drivers\ptun0901.sys [2014-8-8 23552]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
.
=============== Created Last 30 ================
.
2015-01-01 11:08:03 -------- d-----w- C:\FRST
2015-01-01 07:50:31 -------- dc----w- c:\users\allynkovci\appdata\local\MigWiz
2015-01-01 03:22:07 -------- d-----w- c:\users\allynkovci\appdata\local\Diagnostics
2014-12-30 04:11:19 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2014-12-30 04:11:19 789416 ----a-w- c:\windows\system32\deployJava1.dll
2014-12-30 04:10:26 -------- d-----w- c:\program files\OpenVPN Technologies
2014-12-29 09:02:35 -------- d-----w- c:\users\allynkovci\appdata\local\NVIDIA
2014-12-29 08:50:54 609240 ----a-w- c:\windows\system32\nvStreaming.exe
2014-12-29 08:50:38 670552 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-29 08:50:38 62936 ----a-w- c:\windows\system32\nvshext.dll
2014-12-29 08:50:38 4389848 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-29 08:50:38 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-29 08:50:38 3063256 ----a-w- c:\windows\system32\nvsvc.dll
2014-12-29 08:50:38 2556360 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-29 08:50:37 377288 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-29 08:50:13 61728 ----a-w- c:\windows\system32\OpenCL.dll
2014-12-29 08:49:42 -------- d-----w- c:\programdata\NVIDIA Corporation
2014-12-29 08:49:29 -------- d-----w- c:\program files\NVIDIA Corporation
2014-12-29 08:46:15 -------- d-----w- c:\users\allynkovci\appdata\local\UWebKit151
2014-12-29 08:46:15 -------- d-----w- c:\programdata\boost_interprocess
2014-12-29 08:45:44 -------- d-----w- c:\program files\Shards of War
2014-12-28 13:41:11 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-12-28 13:40:53 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-12-28 13:40:53 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-12-28 13:40:53 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-12-28 13:40:53 -------- d-----w- c:\programdata\Malwarebytes
2014-12-28 13:40:53 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-12-28 13:31:40 -------- d-----w- c:\program files\trend micro
2014-12-28 13:16:30 -------- d-----w- c:\program files\CCleaner
2014-12-27 20:55:34 372736 ----a-w- c:\windows\system32\IJL_11.DLL
2014-12-27 20:55:34 212240 ----a-w- c:\windows\system32\RICHTX32.OCX
2014-12-27 20:55:34 124688 ----a-w- c:\windows\system32\MSWINSCK.OCX
2014-12-27 20:55:34 119808 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2014-12-27 20:55:34 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2014-12-27 20:54:46 -------- d-----w- c:\users\allynkovci\appdata\local\ESET
2014-12-27 20:54:35 -------- d-----w- c:\users\allynkovci\appdata\local\Programs
2014-12-27 17:45:06 -------- d-----w- c:\windows\system32\appmgmt
2014-12-27 17:42:44 -------- d-----w- c:\windows\system32\MRT
2014-12-27 17:41:37 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2014-12-27 17:41:37 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-12-27 17:41:35 123904 ----a-w- c:\windows\system32\poqexec.exe
2014-12-27 17:32:31 -------- d-----w- c:\program files\MSECache
2014-12-27 00:33:26 -------- d-----w- c:\windows\Panther
2014-12-26 20:54:41 2422272 ----a-w- c:\windows\system32\wucltux.dll
2014-12-26 20:54:35 88576 ----a-w- c:\windows\system32\wudriver.dll
2014-12-26 20:54:29 33792 ----a-w- c:\windows\system32\wuapp.exe
2014-12-26 20:54:29 171904 ----a-w- c:\windows\system32\wuwebv.dll
2014-12-26 15:59:41 9054624 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{c1cea8d7-69bd-4986-a682-826ce0c996b0}\mpengine.dll
2014-12-26 15:59:41 229000 ------w- c:\windows\system32\MpSigStub.exe
2014-12-26 15:54:54 -------- d-----w- c:\program files\ESET
2014-12-26 15:47:06 -------- d-----w- c:\users\allynkovci\appdata\local\Skype
2014-12-26 15:46:58 -------- d-----r- c:\program files\Skype
2014-12-26 15:46:55 -------- d-sh--w- c:\windows\Installer
2014-12-26 15:46:10 -------- d-----w- c:\windows\system32\wbem\Performance
2014-12-26 15:44:24 -------- d-----w- c:\users\allynkovci\appdata\local\Google
2014-12-26 15:44:13 -------- d-----w- c:\users\allynkovci\appdata\local\Deployment
2014-12-26 15:44:13 -------- d-----w- c:\users\allynkovci\appdata\local\Apps
.
==================== Find3M ====================
.
2014-10-10 07:59:12 191928 ----a-w- c:\windows\system32\drivers\eamonm.sys
2014-10-10 07:59:12 135296 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2014-10-10 07:59:12 123424 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
.
============= FINISH: 12:49:19,01 ===============
Ran by allynkovci (administrator) on ALLYNKOVCI-PC on 01-01-2015 12:08:48
Running from C:\Users\allynkovci\Desktop
Loaded Profile: allynkovci (Available profiles: allynkovci)
Platform: Microsoft Windows 7 Professional (X86) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\allynkovci\Desktop\FRSTLauncher (1).exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2014-10-01] (ESET)
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
ProxyEnable: [S-1-5-21-2019492850-1829170815-1786764852-1001] => Internet Explorer proxy is enabled.
HKU\S-1-5-21-2019492850-1829170815-1786764852-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin: @java.com/DTPlugin,version=10.25.2 -> C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @nvidia.com/3DVision -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin: @nvidia.com/3DVisionStreaming -> C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.25.11\npGoogleUpdate3.dll (Google Inc.)
Chrome:
=======
CHR Profile: C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentácie Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-12-26]
CHR Extension: (Dokumenty Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-12-26]
CHR Extension: (Disk Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-12-26]
CHR Extension: (YouTube) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-12-26]
CHR Extension: (Hľadať v Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-12-26]
CHR Extension: (Tabuľky Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-12-26]
CHR Extension: (Lyoness Cashback Bar) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\ibocncflemnoggjhchgnakpnhdiajnjl [2014-12-27]
CHR Extension: (Mesiac mapa) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\lleimkgbaochlkiikiobdpfjjamfdkpp [2014-12-29]
CHR Extension: (Peňaženka Google) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-26]
CHR Extension: (Gmail) - C:\Users\allynkovci\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-12-26]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2014-10-01] (ESET)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [191928 2014-10-10] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [135296 2014-10-10] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [123424 2014-10-10] (ESET)
S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [23552 2014-08-08] (The OpenVPN Project)
S3 SNPSTD3; C:\Windows\System32\DRIVERS\snpstd3.sys [10252544 2007-03-27] (Sonix Co. Ltd.)
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-01 12:08 - 2015-01-01 12:09 - 00007402 _____ () C:\Users\allynkovci\Desktop\FRST.txt
2015-01-01 12:08 - 2015-01-01 12:08 - 00000000 ____D () C:\FRST
2015-01-01 12:06 - 2015-01-01 12:06 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Desktop\FRSTLauncher (1).exe
2015-01-01 12:05 - 2015-01-01 12:05 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 844200.crdownload
2015-01-01 12:05 - 2015-01-01 12:05 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 112047.crdownload
2015-01-01 12:04 - 2015-01-01 12:04 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 58841.crdownload
2015-01-01 12:00 - 2015-01-01 12:00 - 00112640 _____ (forum.viry.cz) C:\Users\allynkovci\Downloads\Nepotvrdené 277376.crdownload
2015-01-01 11:59 - 2015-01-01 11:59 - 01114624 _____ (Farbar) C:\Users\allynkovci\Desktop\FRST.exe
2015-01-01 11:58 - 2015-01-01 11:58 - 00018107 _____ () C:\Users\allynkovci\Desktop\rockz.htm
2015-01-01 11:57 - 2015-01-01 11:57 - 00057560 _____ () C:\Users\allynkovci\AppData\Local\GDIPFONTCACHEV1.DAT
2015-01-01 10:57 - 2015-01-01 10:57 - 00880784 _____ (Google Inc.) C:\Users\allynkovci\Downloads\ChromeSetup.exe
2015-01-01 09:16 - 2015-01-01 11:55 - 00050985 _____ () C:\Windows\WindowsUpdate.log
2015-01-01 03:03 - 2015-01-01 09:16 - 00000000 ____D () C:\Windows\Minidump
2014-12-30 05:11 - 2014-12-30 05:11 - 00000000 ____D () C:\ProgramData\Sun
2014-12-30 05:11 - 2014-12-30 05:10 - 00867240 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2014-12-30 05:11 - 2014-12-30 05:10 - 00789416 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2014-12-30 05:10 - 2014-12-31 20:20 - 00000000 ____D () C:\Program Files\OpenVPN Technologies
2014-12-29 21:13 - 2014-12-29 21:13 - 00880784 _____ (Google Inc.) C:\Users\allynkovci\Downloads\GoogleEarthPluginSetup.exe
2014-12-29 21:13 - 2014-12-29 21:13 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2014-12-29 10:03 - 2014-12-29 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-12-29 10:02 - 2014-12-29 10:02 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\NVIDIA
2014-12-29 09:51 - 2015-01-01 09:14 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-12-29 09:50 - 2014-08-19 22:16 - 00061728 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 04389848 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 03063256 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 02556360 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 00670552 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-12-29 09:50 - 2014-07-02 20:42 - 00377288 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-12-29 09:50 - 2014-07-02 20:42 - 00062936 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-12-29 09:50 - 2014-07-02 18:39 - 00609240 _____ (NVIDIA Corporation) C:\Windows\system32\nvStreaming.exe
2014-12-29 09:50 - 2014-07-02 06:14 - 03826628 _____ () C:\Windows\system32\nvcoproc.bin
2014-12-29 09:49 - 2014-12-29 09:51 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-12-29 09:49 - 2014-12-29 09:51 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-12-29 09:46 - 2014-12-29 13:57 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-12-29 09:46 - 2014-12-29 09:46 - 00001059 _____ () C:\Users\Public\Desktop\Shards of War.lnk
2014-12-29 09:46 - 2014-12-29 09:46 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\UWebKit151
2014-12-29 09:46 - 2014-12-29 09:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shards of War
2014-12-29 09:45 - 2014-12-29 10:00 - 00000000 ____D () C:\Program Files\Shards of War
2014-12-29 09:42 - 2014-12-29 09:43 - 23533016 _____ (Bigpoint GmbH ) C:\Users\allynkovci\Downloads\ShardsOfWarSetup.exe
2014-12-28 14:50 - 2014-12-28 14:50 - 00000000 ____H () C:\Users\allynkovci\Documents\Default.rdp
2014-12-28 14:41 - 2015-01-01 03:05 - 00114904 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-12-28 14:40 - 2014-12-28 14:40 - 00001064 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-12-28 14:40 - 2014-12-28 14:40 - 00000000 ____D () C:\Program Files\Malwarebytes Anti-Malware
2014-12-28 14:40 - 2014-11-21 06:14 - 00075480 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-12-28 14:40 - 2014-11-21 06:14 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-12-28 14:40 - 2014-11-21 06:14 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-12-28 14:39 - 2014-12-28 14:40 - 20447072 _____ (Malwarebytes Corporation ) C:\Users\allynkovci\Downloads\mbam-setup-2.0.4.1028.exe
2014-12-28 14:31 - 2014-12-28 14:31 - 01107968 _____ () C:\Users\allynkovci\Downloads\RSIT.exe
2014-12-28 14:31 - 2014-12-28 14:31 - 00000000 ____D () C:\rsit
2014-12-28 14:31 - 2014-12-28 14:31 - 00000000 ____D () C:\Program Files\trend micro
2014-12-28 14:16 - 2014-12-31 20:20 - 00000000 ____D () C:\Program Files\CCleaner
2014-12-28 14:16 - 2014-12-28 14:16 - 00000969 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-12-28 14:16 - 2014-12-28 14:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-12-28 14:13 - 2014-12-28 14:14 - 05162080 _____ (Piriform Ltd) C:\Users\allynkovci\Downloads\ccsetup500.exe
2014-12-28 03:19 - 2014-12-29 10:00 - 00007597 _____ () C:\Users\allynkovci\AppData\Local\resmon.resmoncfg
2014-12-27 21:55 - 2005-04-15 18:58 - 01071088 _____ (Microsoft Corporation) C:\Windows\system32\MSCOMCTL.OCX
2014-12-27 21:55 - 2004-03-08 23:00 - 00212240 _____ (Microsoft Corporation) C:\Windows\system32\RICHTX32.OCX
2014-12-27 21:55 - 2004-03-08 23:00 - 00124688 _____ (Microsoft Corporation) C:\Windows\system32\MSWINSCK.OCX
2014-12-27 21:55 - 2004-02-22 23:00 - 00119808 _____ (Microsoft Corporation) C:\Windows\system32\MSSTDFMT.DLL
2014-12-27 21:55 - 2003-07-06 13:07 - 00372736 _____ (Intel Corporation) C:\Windows\system32\IJL_11.DLL
2014-12-27 21:54 - 2014-12-27 21:54 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\ESET
2014-12-27 19:50 - 2014-12-27 19:50 - 36750600 _____ () C:\Users\allynkovci\Downloads\LyonessBrowserSetup.exe
2014-12-27 19:07 - 2014-12-27 19:07 - 00081560 _____ () C:\Users\allynkovci\Documents\lyones.xps
2014-12-27 18:55 - 2014-12-27 18:55 - 39042128 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\FileFormatConverters (1).exe
2014-12-27 18:54 - 2014-12-27 18:54 - 00002579 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft PowerPoint Viewer .lnk
2014-12-27 18:54 - 2014-12-27 18:54 - 00002537 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Excel Viewer.lnk
2014-12-27 18:53 - 2014-12-27 18:53 - 39042128 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\FileFormatConverters.exe
2014-12-27 18:52 - 2014-12-27 18:54 - 00000000 ____D () C:\Program Files\Microsoft Office
2014-12-27 18:52 - 2014-12-27 18:53 - 77738888 _____ (Microsoft Corporation) C:\Users\allynkovci\Downloads\ExcelViewer.exe
2014-12-27 18:52 - 2014-12-27 18:53 - 71809242 _____ () C:\Users\allynkovci\Downloads\PowerPointViewer.exe
2014-12-27 18:52 - 2014-12-27 18:52 - 00002671 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Word Viewer 2003.lnk
2014-12-27 18:50 - 2014-12-27 18:51 - 34077237 _____ () C:\Users\allynkovci\Downloads\wordview_cz.exe
2014-12-27 18:45 - 2015-01-01 08:58 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-12-27 18:42 - 2014-12-27 18:45 - 00000000 ____D () C:\Windows\system32\MRT
2014-12-27 18:42 - 2014-11-27 16:40 - 109818608 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-12-27 18:41 - 2011-04-09 07:13 - 03957632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2014-12-27 18:41 - 2011-04-09 07:13 - 03901824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-12-27 18:41 - 2011-04-09 06:56 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-12-27 18:32 - 2014-12-27 18:54 - 00000000 ____D () C:\Program Files\MSECache
2014-12-27 16:08 - 2014-12-27 16:08 - 00026356 _____ () C:\Users\allynkovci\Downloads\Moje karty Lyoness.html
2014-12-27 16:08 - 2014-12-27 16:08 - 00000000 ____D () C:\Users\allynkovci\Downloads\Moje karty Lyoness_files
2014-12-27 01:33 - 2014-12-28 14:19 - 00000000 ____D () C:\Windows\Panther
2014-12-26 21:54 - 2012-06-02 23:19 - 01933848 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00577048 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00053784 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-12-26 21:54 - 2012-06-02 23:19 - 00045080 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-12-26 21:54 - 2012-06-02 23:19 - 00035864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-12-26 21:54 - 2012-06-02 23:12 - 02422272 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-12-26 21:54 - 2012-06-02 23:12 - 00088576 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-12-26 21:54 - 2012-06-02 15:19 - 00171904 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-12-26 21:54 - 2012-06-02 15:12 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-12-26 16:59 - 2014-11-24 14:04 - 00229000 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\ProgramData\ESET
2014-12-26 16:54 - 2014-12-26 16:54 - 00000000 ____D () C:\Program Files\ESET
2014-12-26 16:51 - 2014-12-26 16:51 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf
2014-12-26 16:47 - 2015-01-01 09:21 - 00713888 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-12-26 16:47 - 2015-01-01 00:40 - 00000000 ____D () C:\Users\allynkovci\AppData\Roaming\Skype
2014-12-26 16:47 - 2014-12-26 16:47 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Skype
2014-12-26 16:46 - 2014-12-26 16:47 - 00000000 ___RD () C:\Program Files\Skype
2014-12-26 16:46 - 2014-12-26 16:47 - 00000000 ____D () C:\ProgramData\Skype
2014-12-26 16:46 - 2014-12-26 16:46 - 01548384 _____ (Skype Technologies S.A.) C:\Users\allynkovci\Downloads\SkypeSetup.exe
2014-12-26 16:46 - 2014-12-26 16:46 - 00002701 _____ () C:\Users\Public\Desktop\Skype.lnk
2014-12-26 16:46 - 2014-12-26 16:46 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-12-26 16:46 - 2014-12-26 16:46 - 00000000 ____D () C:\Program Files\Common Files\Skype
2014-12-26 16:44 - 2015-01-01 10:58 - 00002217 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-12-26 16:44 - 2015-01-01 09:14 - 00000932 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-12-26 16:44 - 2015-01-01 09:14 - 00000928 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-12-26 16:44 - 2014-12-29 21:13 - 00000000 ____D () C:\Program Files\Google
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Google
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Deployment
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\Apps\2.0
2014-12-26 16:44 - 2014-12-26 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-12-26 16:42 - 2014-12-26 16:42 - 00000355 _____ () C:\Users\allynkovci\Desktop\Computer - Shortcut.lnk
2014-12-26 16:39 - 2014-12-26 16:39 - 00001417 _____ () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-12-26 16:39 - 2014-12-26 16:39 - 00000020 ___SH () C:\Users\allynkovci\ntuser.ini
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 __SHD () C:\Recovery
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 ____D () C:\Users\allynkovci\AppData\Local\VirtualStore
2014-12-26 16:39 - 2014-12-26 16:39 - 00000000 ____D () C:\Users\allynkovci
2014-12-26 16:39 - 2009-07-14 05:42 - 00000000 ___RD () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-26 16:39 - 2009-07-14 05:37 - 00000000 ___RD () C:\Users\allynkovci\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2014-12-26 16:36 - 2014-12-26 16:36 - 00001345 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2014-12-26 16:36 - 2014-12-26 16:36 - 00001326 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-01-01 12:02 - 2009-07-14 05:34 - 00020512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-01-01 12:02 - 2009-07-14 05:34 - 00020512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-01-01 10:57 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\tracing
2015-01-01 09:14 - 2009-07-14 05:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-01-01 08:46 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\NDF
2014-12-29 11:39 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\rescache
2014-12-29 09:50 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Help
2014-12-28 18:54 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\twain_32
2014-12-28 11:00 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\system32\LogFiles
2014-12-28 03:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Registration
2014-12-27 18:54 - 2009-07-14 03:37 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2014-12-27 01:33 - 2009-07-14 05:57 - 00025600 ___SH () C:\Windows\system32\config\BCD-Template.LOG
2014-12-27 01:33 - 2009-07-14 05:52 - 00028672 _____ () C:\Windows\system32\config\BCD-Template
2014-12-26 17:03 - 2009-07-14 03:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2014-12-26 16:51 - 2009-07-14 05:52 - 00000000 ____D () C:\Windows\system32\restore
2014-12-26 16:39 - 2009-07-14 03:37 - 00000000 __RHD () C:\Users\Public\Libraries
2014-12-26 16:36 - 2009-07-14 03:37 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-12-26 16:34 - 2009-07-14 08:50 - 00000000 ____D () C:\Windows\CSC
Some content of TEMP:
====================
C:\Users\allynkovci\AppData\Local\Temp\i4jdel0.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-12-27 03:41
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:196.13 GB) (Free:175.17 GB) NTFS
Drive d: () (Fixed) (Total:269.53 GB) (Free:269.43 GB) NTFS
Drive z: () (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Available physical RAM: 1278.81 MB
Total physical RAM: 2046.49 MB
Percentage of memory in use: 37%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 33FE9666)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=196.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=269.5 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Disabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\allynkovci\Desktop" je 1 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend
"C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\snpstd3
C:\Windows\vsnpstd3.exe
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Pridaavam aj log z DDS..
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.7600.16385
Run by allynkovci at 12:49:07 on 2015-01-01
Microsoft Windows 7 Professional 6.1.7600.0.1250.421.1033.18.2046.1162 [GMT 1:00]
.
AV: ESET NOD32 Antivirus 8.0 *Enabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: ESET NOD32 Antivirus 8.0 *Enabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\notepad.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
BHO: Skype Click to Call for Internet Explorer: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
uRun: [CCleaner Monitoring] "c:\program files\ccleaner\CCleaner.exe" /MONITOR
uRun: [CCleaner] "c:\program files\ccleaner\CCleaner.exe" /AUTO
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
TCP: NameServer = 192.168.0.1
TCP: Interfaces\{2155C6F0-7D24-42B5-8C1C-E83A48314B54} : DHCPNameServer = 192.168.0.1
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
SSODL: WebCheck - <orphaned>
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\39.0.2171.95\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R1 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2014-10-10 191928]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\skype\toolbars\autoupdate\SkypeC2CAutoUpdateSvc.exe [2014-7-14 1390176]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\skype\toolbars\pnrsvc\SkypeC2CPNRSvc.exe [2014-7-14 1767520]
R2 ekrn;ESET Service;c:\program files\eset\eset nod32 antivirus\ekrn.exe [2014-10-1 1349576]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2014-10-10 123424]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2014-12-29 413128]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-3-1 139776]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2014-12-11 315496]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 ptun0901;TAP Adapter V9 for Private Tunnel;c:\windows\system32\drivers\ptun0901.sys [2014-8-8 23552]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
.
=============== Created Last 30 ================
.
2015-01-01 11:08:03 -------- d-----w- C:\FRST
2015-01-01 07:50:31 -------- dc----w- c:\users\allynkovci\appdata\local\MigWiz
2015-01-01 03:22:07 -------- d-----w- c:\users\allynkovci\appdata\local\Diagnostics
2014-12-30 04:11:19 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2014-12-30 04:11:19 789416 ----a-w- c:\windows\system32\deployJava1.dll
2014-12-30 04:10:26 -------- d-----w- c:\program files\OpenVPN Technologies
2014-12-29 09:02:35 -------- d-----w- c:\users\allynkovci\appdata\local\NVIDIA
2014-12-29 08:50:54 609240 ----a-w- c:\windows\system32\nvStreaming.exe
2014-12-29 08:50:38 670552 ----a-w- c:\windows\system32\nvvsvc.exe
2014-12-29 08:50:38 62936 ----a-w- c:\windows\system32\nvshext.dll
2014-12-29 08:50:38 4389848 ----a-w- c:\windows\system32\nvcpl.dll
2014-12-29 08:50:38 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-12-29 08:50:38 3063256 ----a-w- c:\windows\system32\nvsvc.dll
2014-12-29 08:50:38 2556360 ----a-w- c:\windows\system32\nvsvcr.dll
2014-12-29 08:50:37 377288 ----a-w- c:\windows\system32\nvmctray.dll
2014-12-29 08:50:13 61728 ----a-w- c:\windows\system32\OpenCL.dll
2014-12-29 08:49:42 -------- d-----w- c:\programdata\NVIDIA Corporation
2014-12-29 08:49:29 -------- d-----w- c:\program files\NVIDIA Corporation
2014-12-29 08:46:15 -------- d-----w- c:\users\allynkovci\appdata\local\UWebKit151
2014-12-29 08:46:15 -------- d-----w- c:\programdata\boost_interprocess
2014-12-29 08:45:44 -------- d-----w- c:\program files\Shards of War
2014-12-28 13:41:11 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-12-28 13:40:53 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-12-28 13:40:53 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-12-28 13:40:53 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-12-28 13:40:53 -------- d-----w- c:\programdata\Malwarebytes
2014-12-28 13:40:53 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-12-28 13:31:40 -------- d-----w- c:\program files\trend micro
2014-12-28 13:16:30 -------- d-----w- c:\program files\CCleaner
2014-12-27 20:55:34 372736 ----a-w- c:\windows\system32\IJL_11.DLL
2014-12-27 20:55:34 212240 ----a-w- c:\windows\system32\RICHTX32.OCX
2014-12-27 20:55:34 124688 ----a-w- c:\windows\system32\MSWINSCK.OCX
2014-12-27 20:55:34 119808 ----a-w- c:\windows\system32\MSSTDFMT.DLL
2014-12-27 20:55:34 1071088 ----a-w- c:\windows\system32\MSCOMCTL.OCX
2014-12-27 20:54:46 -------- d-----w- c:\users\allynkovci\appdata\local\ESET
2014-12-27 20:54:35 -------- d-----w- c:\users\allynkovci\appdata\local\Programs
2014-12-27 17:45:06 -------- d-----w- c:\windows\system32\appmgmt
2014-12-27 17:42:44 -------- d-----w- c:\windows\system32\MRT
2014-12-27 17:41:37 3957632 ----a-w- c:\windows\system32\ntkrnlpa.exe
2014-12-27 17:41:37 3901824 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-12-27 17:41:35 123904 ----a-w- c:\windows\system32\poqexec.exe
2014-12-27 17:32:31 -------- d-----w- c:\program files\MSECache
2014-12-27 00:33:26 -------- d-----w- c:\windows\Panther
2014-12-26 20:54:41 2422272 ----a-w- c:\windows\system32\wucltux.dll
2014-12-26 20:54:35 88576 ----a-w- c:\windows\system32\wudriver.dll
2014-12-26 20:54:29 33792 ----a-w- c:\windows\system32\wuapp.exe
2014-12-26 20:54:29 171904 ----a-w- c:\windows\system32\wuwebv.dll
2014-12-26 15:59:41 9054624 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{c1cea8d7-69bd-4986-a682-826ce0c996b0}\mpengine.dll
2014-12-26 15:59:41 229000 ------w- c:\windows\system32\MpSigStub.exe
2014-12-26 15:54:54 -------- d-----w- c:\program files\ESET
2014-12-26 15:47:06 -------- d-----w- c:\users\allynkovci\appdata\local\Skype
2014-12-26 15:46:58 -------- d-----r- c:\program files\Skype
2014-12-26 15:46:55 -------- d-sh--w- c:\windows\Installer
2014-12-26 15:46:10 -------- d-----w- c:\windows\system32\wbem\Performance
2014-12-26 15:44:24 -------- d-----w- c:\users\allynkovci\appdata\local\Google
2014-12-26 15:44:13 -------- d-----w- c:\users\allynkovci\appdata\local\Deployment
2014-12-26 15:44:13 -------- d-----w- c:\users\allynkovci\appdata\local\Apps
.
==================== Find3M ====================
.
2014-10-10 07:59:12 191928 ----a-w- c:\windows\system32\drivers\eamonm.sys
2014-10-10 07:59:12 135296 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2014-10-10 07:59:12 123424 ----a-w- c:\windows\system32\drivers\epfwwfpr.sys
.
============= FINISH: 12:49:19,01 ===============
Jak jsme na tom s legalitou OS a NODu?