Podstata problému stále spočívá v tom, že najednou je comp zpožděný a když zkoumám, co dělá, tak ve správci úloh naleznu 3krát bezdůvodně spuštěný iexplore.exe a jednou ctfmon.exe, který se předtím nespouštěl. To, když manuálně povypínám, tak vše běží asi tak, jak má, než se za nějakou dobu opět toto svinstvo znovu spustí a donutí mě opakovat stejný postup.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Milan (administrator) on MILAN-PC on 19-03-2015 16:39:17
Running from C:\Users\Milan\Desktop
Loaded Profiles: Milan (Available profiles: Milan)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 10 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool:
http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
(Acer Group) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe
(ELAN Microelectronic Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Power Management\ePowerEvent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Nodus Technologies s.r.o.) C:\Program Files (x86)\Ulozto File Manager\ufm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [10920552 2010-06-22] (Realtek Semiconductor)
HKLM\...\Run: [ETDWare] => C:\Program Files\Elantech\ETDCtrl.exe [649608 2010-04-13] (ELAN Microelectronic Corp.)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\eMachines\eMachines Power Management\ePowerTray.exe [861216 2010-06-11] (Acer Incorporated)
HKLM\...\Run: [Kernel and Hardware Abstraction Layer] => C:\Windows\KHALMNPR.EXE [130576 2009-06-17] (Logitech, Inc.)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [968272 2010-06-22] (Dritek System Inc.)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-04-21] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5227112 2015-02-26] (AVAST Software)
HKLM-x32\...\RunOnce: [20150107] => C:\Program Files\AVAST Software\Avast\setup\emupdate\2bbd63bd-1554-46f8-ae45-db48116a3947.exe [183232 2015-03-17] (AVAST Software)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-03-22] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-606871128-3753375214-2841838745-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://homepage.emachines.com/rdr.aspx? ... 5r4732s296
SearchScopes: HKLM-x32 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
http://www.google.com/search?sourceid=i ... lz=1I7ACEW
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {0CA3A956-A72B-47B1-8FDA-1A5250A58CB7} URL =
http://www.webhledani.cz/results.aspx?i ... earchTerms}
SearchScopes: HKU\S-1-5-21-606871128-3753375214-2841838745-1000 -> {67A2568C-7A0A-4EED-AECC-B5405DE63B64} URL =
http://www.google.com/search?sourceid=i ... EW_csCZ411
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-02-26] (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-09-23] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\ssv.dll [2014-11-13] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-02-26] (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-11-10] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2012-10-01] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\jp2ssv.dll [2014-11-13] (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2012-10-01] (Microsoft Corporation)
Hosts: 127.0.0.1 idnet.ua-corp.com
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default
FF Homepage: about:home
FF NetworkProxy: "http", "216.155.139.115"
FF NetworkProxy: "http_port", 3128
FF NetworkProxy: "no_proxies_on", ""
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-07] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-07] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2014-11-13] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files (x86)\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2014-11-13] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2012-10-01] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-11-10] (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-606871128-3753375214-2841838745-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Milan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-01-26] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\np32dsw.dll [2003-02-11] (Macromedia, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2012-10-01] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2012-09-23] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\searchplugins\heurekacz.xml [2015-03-16]
FF SearchPlugin: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\searchplugins\startpage-https.xml [2015-03-19]
FF Extension: Firebug - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\
firebug@software.joehewitt.com.xpi [2015-01-25]
FF Extension: MEGA - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\
firefox@mega.co.nz.xpi [2014-08-20]
FF Extension: Video DownloadHelper - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2015-03-14]
FF Extension: Adblock Plus - C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\8uvf0pmk.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-06-18]
FF HKLM-x32\...\Firefox\Extensions: [
wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-02-26]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [Not Found]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2015-02-26]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-02-26]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2015-02-26] (AVAST Software)
R2 ePowerSvc; C:\Program Files\eMachines\eMachines Power Management\ePowerSvc.exe [868896 2010-06-11] (Acer Incorporated)
R2 GREGService; C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe [23584 2010-01-08] (Acer Incorporated)
R2 Updater Service; C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2015-02-26] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [87912 2015-02-26] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2015-02-26] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2015-02-26] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1050432 2015-02-26] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [436624 2015-02-26] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [116728 2015-02-26] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [267632 2015-02-26] ()
R1 HMFAxCore5decdc700443adec5f3e84408e3098ff; C:\Windows\HMFAxCore5decdc700443adec5f3e84408e3098ff.sys [115272 2014-06-18] (Eltima Software)
S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus64.sys [261120 2005-09-23] (Pinnacle Systems GmbH) [File not signed]
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2015-03-07] (Malwarebytes Corporation)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-19 16:39 - 2015-03-19 16:40 - 00014957 _____ () C:\Users\Milan\Desktop\FRST.txt
2015-03-19 16:38 - 2015-03-19 16:39 - 00000000 ____D () C:\FRST
2015-03-19 16:38 - 2015-03-19 16:38 - 00112640 _____ (forum.viry.cz) C:\Users\Milan\Desktop\FRSTLauncher.exe
2015-03-19 16:35 - 2015-03-19 16:35 - 02095616 _____ (Farbar) C:\Users\Milan\Desktop\FRST64.exe
2015-03-18 16:27 - 2015-03-18 16:27 - 00000000 ____D () C:\Program Files\ConvertHelper3
2015-03-18 16:24 - 2015-03-18 16:25 - 29654131 _____ (DownloadHelper ) C:\Users\Milan\Downloads\ConvertHelper3Setup.exe
2015-03-18 16:19 - 2015-03-18 16:19 - 07083952 _____ () C:\Users\Milan\Downloads\Kristina_Svarinska-Love.avi
2015-03-18 16:18 - 2015-03-18 17:02 - 711966328 _____ () C:\Users\Milan\Downloads\damska-jizda-se-stripterama.mp4
2015-03-18 16:17 - 2015-03-18 16:30 - 638361400 _____ () C:\Users\Milan\Downloads\fantasticka-31-s-velkyma-kozama.flv
2015-03-18 07:11 - 2015-03-18 07:14 - 41680896 _____ () C:\Users\Milan\Downloads\09.03.2015-17_26-PRVÉ-TELEVÍZNE-NOVINY.Joined.TS4
2015-03-18 07:06 - 2015-03-18 07:09 - 56623104 _____ () C:\Users\Milan\Downloads\13.03.2015-17_49-PRVÉ-TELEVÍZNE-NOVINY.Joined.TS4
2015-03-17 19:14 - 2015-03-17 19:14 - 00001107 _____ () C:\Users\Milan\Desktop\ASIO4ALL v2 Instruction Manual.lnk
2015-03-17 19:14 - 2015-03-17 19:14 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2015-03-17 19:14 - 2015-03-17 19:14 - 00000000 ____D () C:\Program Files (x86)\ASIO4ALL v2
2015-03-17 19:10 - 2015-03-17 19:10 - 00001108 _____ () C:\Users\Milan\Desktop\FL Studio 9.lnk
2015-03-17 19:10 - 2006-06-20 09:56 - 00225280 _____ (Propellerhead Software AB) C:\Windows\SysWOW64\rewire.dll
2015-03-17 19:09 - 2015-03-17 19:09 - 00000000 ____D () C:\Users\Milan\Documents\Image-Line
2015-03-17 19:09 - 2009-08-02 21:09 - 01554944 _____ (HMS
http://hp.vector.co.jp/authors/VA012897/) C:\Windows\SysWOW64\vorbis.acm
2015-03-17 19:05 - 2015-03-17 19:10 - 00000000 ____D () C:\Program Files (x86)\VstPlugins
2015-03-17 19:05 - 2015-03-17 19:09 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2015-03-17 19:04 - 2015-03-17 19:04 - 00000000 ____D () C:\Program Files (x86)\Outsim
2015-03-17 18:50 - 2015-03-17 19:09 - 00000000 ____D () C:\Program Files (x86)\Image-Line
2015-03-17 17:31 - 2015-03-17 17:31 - 00148856 _____ () C:\Users\Milan\Downloads\b r 17.3.2015.htm
2015-03-17 17:31 - 2015-03-17 17:31 - 00126641 _____ () C:\Users\Milan\Downloads\b p 17.3.2015.htm
2015-03-17 17:30 - 2015-03-17 17:30 - 00136149 _____ () C:\Users\Milan\Downloads\b v 17.3.2015.htm
2015-03-17 17:29 - 2015-03-17 17:29 - 00060765 _____ () C:\Users\Milan\Downloads\p 17.3.2015.htm
2015-03-17 17:29 - 2015-03-17 17:29 - 00050970 _____ () C:\Users\Milan\Downloads\r 17.3.2015.htm
2015-03-17 17:28 - 2015-03-17 17:28 - 00061386 _____ () C:\Users\Milan\Downloads\v 17.3.2015.htm
2015-03-17 16:32 - 2015-03-17 16:46 - 268436448 _____ () C:\Users\Milan\Downloads\ceske-krasky-ve-vane.mp4
2015-03-16 07:39 - 2015-03-16 08:21 - 180776597 _____ () C:\Users\Milan\Downloads\warcolwp.mkv
2015-03-15 19:57 - 2015-03-15 20:41 - 184803124 _____ () C:\Users\Milan\Downloads\Romy_Betty_Christine_-_Le_Mouton_Enrage-(FR1974)-1080p-RUFFAH.rar
2015-03-15 18:10 - 2015-03-19 08:00 - 00001064 _____ () C:\Windows\setupact.log
2015-03-15 18:10 - 2015-03-15 18:10 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-13 23:18 - 2015-03-13 23:18 - 00000151 _____ () C:\Users\Milan\Documents\denc.txt
2015-03-13 23:15 - 2015-03-13 23:15 - 00003030 _____ () C:\Users\Milan\Documents\cc_20150313_231523.reg
2015-03-09 20:28 - 2015-03-10 15:53 - 00000081 _____ () C:\Windows\YouTubeDownloaderHD.ini
2015-03-08 21:05 - 2015-03-10 17:22 - 00001105 _____ () C:\Windows\system32\Spolčení k ovládnutí světa Tajná organizace svobodných zednářů je stále realitou. Jejich vraždy měnily moderní svět. Zednářský atentát spustil první „průmyslové vraždění“ na světě _ PROTIPROUD.htm.lnk
2015-03-08 21:03 - 2015-03-10 17:22 - 00001162 _____ () C:\Windows\system32\Svobodní zednáři a jejich vraždy Dějiny plné zrádných úkladů a vydírání. Dva císaři a korunní princ. Svět bez svobody a lidské důstojnosti. Padla jim za oběť i Sissi Stop řekl až císař František.htm.lnk
2015-03-08 19:54 - 2015-03-14 09:36 - 00000000 ____D () C:\KVRT_Data
2015-03-08 17:02 - 2015-03-17 19:22 - 00000000 ____D () C:\Downs
2015-03-07 10:03 - 2015-03-08 17:47 - 00000588 _____ () C:\Users\Milan\Documents\startup.txt
2015-03-07 08:53 - 2015-03-07 08:53 - 00000061 _____ () C:\Users\Milan\Documents\d.txt
2015-03-03 11:56 - 2015-03-15 16:35 - 00000143 _____ () C:\Users\Milan\Desktop\tasks.txt
2015-03-02 08:22 - 2015-03-02 08:22 - 00000137 _____ () C:\Users\Milan\Desktop\bet.txt
2015-03-01 19:48 - 2015-03-01 19:48 - 00000000 _____ () C:\Windows\SysWOW64\debug.log
2015-03-01 19:30 - 2015-03-15 18:01 - 00000000 ____D () C:\Loc
2015-03-01 16:52 - 2015-03-01 16:53 - 02126848 _____ () C:\Users\Milan\Desktop\adwcleaner_4.111.exe
2015-03-01 13:48 - 2015-03-01 13:48 - 00000042 _____ () C:\Users\Milan\Documents\nw.txt
2015-02-26 19:11 - 2015-02-26 19:11 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVAST Software
2015-02-26 19:09 - 2015-02-26 19:09 - 00001933 _____ () C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-02-26 19:09 - 2015-02-26 19:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-02-26 19:08 - 2015-03-17 19:10 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-02-26 19:07 - 2015-02-26 19:09 - 00087912 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2015-02-26 19:07 - 2015-02-26 19:08 - 01050432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00436624 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00364512 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-02-26 19:07 - 2015-02-26 19:07 - 00267632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00116728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-02-26 19:07 - 2015-02-26 19:07 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-02-26 19:06 - 2015-02-26 19:06 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-02-26 19:04 - 2015-02-26 19:04 - 00000000 ____D () C:\Program Files\AVAST Software
2015-02-23 13:33 - 2015-02-23 13:33 - 00000000 ____D () C:\Users\Milan\Documents\eRightSoft
2015-02-23 13:30 - 2015-02-23 13:30 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\tricomfi
2015-02-23 13:29 - 2014-03-07 10:03 - 03109520 ____N (FFmpeg Project) C:\Windows\SysWOW64\avcodec-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00550032 ____N (FFmpeg Project) C:\Windows\SysWOW64\avformat-lav-55.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00313520 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLvideo.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00203408 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLsplit.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00181392 ____N (FFmpeg Project) C:\Windows\SysWOW64\avutil-lav-52.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00122512 ____N (1f0.de - Hendrik Leppkes) C:\Windows\SysWOW64\HLaudio.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00118416 ____N (FFmpeg Project) C:\Windows\SysWOW64\swscale-lav-2.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00109712 ____N () C:\Windows\SysWOW64\libbluray.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00098960 ____N (FFmpeg Project) C:\Windows\SysWOW64\avfilter-lav-4.dll
2015-02-23 13:29 - 2014-03-07 10:03 - 00059536 ____N (FFmpeg Project) C:\Windows\SysWOW64\avresample-lav-1.dll
2015-02-23 13:29 - 2012-10-05 18:54 - 00188416 ____N () C:\Windows\SysWOW64\winDCE32.dll
2015-02-23 13:29 - 2011-06-14 19:05 - 00121344 ____N () C:\Windows\SysWOW64\TAKDSDecoder.ax
2015-02-23 13:29 - 2011-02-11 09:26 - 00112128 ____N () C:\Windows\SysWOW64\OptimFROG.dll
2015-02-23 13:29 - 2010-01-06 23:00 - 00107520 ____N () C:\Windows\SysWOW64\TAKDSDecoder.dll
2015-02-23 13:29 - 2009-08-10 22:00 - 00352768 ____N () C:\Windows\SysWOW64\ac3DX.ax
2015-02-23 13:29 - 2005-02-22 16:55 - 00081920 ____N () C:\Windows\SysWOW64\aac_parser.ax
2015-02-23 13:29 - 2004-10-10 08:50 - 00278528 ____N (Real Networks, Inc) C:\Windows\SysWOW64\pncrt.dll
2015-02-23 13:29 - 2004-07-02 16:33 - 00327749 ____N (RealNetworks, Inc.) C:\Windows\SysWOW64\drvc.dll
2015-02-23 13:29 - 2004-04-27 15:03 - 00017408 ____N (RadLight) C:\Windows\SysWOW64\RLOFRDec.ax
2015-02-23 12:49 - 2015-03-12 17:05 - 00000000 ____D () C:\Program Files\MKVToolNix
2015-02-23 12:45 - 2015-02-23 12:45 - 00000000 ____D () C:\Users\Milan\AppData\Local\Pinnacle
2015-02-23 12:34 - 2015-02-23 12:34 - 00000000 ____D () C:\ProgramData\Pinnacle Studio Ultimate Collection
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\ProgramData\Pinnacle
2015-02-23 12:12 - 2015-02-27 19:44 - 00000000 ____D () C:\Program Files (x86)\Pinnacle
2015-02-22 01:47 - 2015-02-22 01:47 - 00060846 _____ () C:\Users\Milan\Documents\200.txt
2015-02-21 15:03 - 2015-02-21 15:10 - 04613332 _____ () C:\Users\Milan\bk mux2.ts
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-19 15:43 - 2014-12-27 13:32 - 00000081 _____ () C:\out.txt
2015-03-19 14:52 - 2010-09-15 21:00 - 01878261 _____ () C:\Windows\WindowsUpdate.log
2015-03-19 08:01 - 2014-06-17 16:48 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\uTorrent
2015-03-19 07:30 - 2014-06-22 02:08 - 00000000 ____D () C:\Users\Milan\Desktop\Tors
2015-03-18 16:32 - 2014-06-18 07:05 - 00000000 ____D () C:\The KMPlayer
2015-03-18 16:30 - 2014-06-18 07:10 - 00000000 ____D () C:\Users\Milan\dwhelper
2015-03-17 19:12 - 2010-12-26 10:14 - 00000000 ____D () C:\Users\Milan\AppData\Local\CrashDumps
2015-03-17 08:26 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-17 08:26 - 2009-07-14 05:45 - 00018736 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-15 17:59 - 2014-06-18 14:57 - 00000073 ___SH () C:\Windows\hlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-03-15 17:59 - 2014-06-18 14:57 - 00000000 ____D () C:\ProgramData\TEMP
2015-03-15 17:58 - 2014-06-18 14:57 - 00000138 ___SH () C:\Windows\wlistHMFAxCore5decdc700443adec5f3e84408e3098ff
2015-03-15 16:25 - 2014-12-22 10:28 - 00000000 ____D () C:\Users\Milan\Desktop\pix
2015-03-14 04:07 - 2014-11-15 23:38 - 00000000 ____D () C:\Windows\rescache
2015-03-13 23:16 - 2014-06-16 19:09 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2015-03-13 22:16 - 2010-12-23 18:41 - 00000000 ____D () C:\Users\Milan
2015-03-12 17:06 - 2014-11-29 21:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Daum
2015-03-12 17:06 - 2014-11-29 21:22 - 00000000 ____D () C:\Program Files\DAUM
2015-03-12 17:06 - 2010-07-15 02:27 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eMachines
2015-03-12 17:06 - 2010-07-15 02:27 - 00000000 ____D () C:\Program Files (x86)\eMachines
2015-03-12 16:59 - 2014-12-28 04:05 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2015-03-12 16:54 - 2015-01-18 16:07 - 00000000 ____D () C:\Program Files (x86)\VideoReDoTVSuite5
2015-03-12 16:51 - 2014-06-29 18:13 - 00000000 ____D () C:\Users\Milan\Documents\Pdf
2015-03-12 16:49 - 2014-10-04 09:52 - 00022016 ___SH () C:\Users\Milan\Documents\Thumbs.db
2015-03-12 16:46 - 2012-08-12 20:26 - 00000000 ____D () C:\Users\Milan\AppData\Local\Downloaded Installations
2015-03-11 21:45 - 2013-09-29 11:56 - 00935424 ___SH () C:\Users\Milan\Desktop\Thumbs.db
2015-03-10 14:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2015-03-09 21:09 - 2014-06-18 18:27 - 00000000 ____D () C:\Program Files (x86)\Youtube Downloader HD
2015-03-08 17:46 - 2010-12-25 13:53 - 00003538 _____ () C:\Windows\System32\Tasks\CreateChoiceProcessTask
2015-03-08 01:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-08 01:39 - 2014-07-31 13:22 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-03-07 11:57 - 2014-08-03 10:46 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-03-07 11:12 - 2015-01-17 19:21 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-03-07 09:23 - 2015-01-25 21:02 - 00018432 ___SH () C:\Users\Milan\Thumbs.db
2015-03-07 08:48 - 2014-07-10 06:14 - 00007670 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2015-03-07 07:58 - 2007-07-12 02:49 - 00000000 ____D () C:\Windows\Panther
2015-03-02 08:23 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2015-03-01 18:11 - 2014-06-18 06:17 - 00000000 ____D () C:\AdwCleaner
2015-02-28 18:05 - 2014-06-17 18:45 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\vlc
2015-02-27 18:39 - 2014-11-15 17:36 - 00000000 ____D () C:\Users\Milan\Desktop\Tor Browser
2015-02-27 06:47 - 2010-09-15 21:46 - 00671748 _____ () C:\Windows\system32\perfh005.dat
2015-02-27 06:47 - 2010-09-15 21:46 - 00142974 _____ () C:\Windows\system32\perfc005.dat
2015-02-27 06:47 - 2009-07-14 06:13 - 01592446 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-02-26 19:04 - 2014-06-15 18:11 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-02-25 10:58 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-02-25 10:52 - 2014-09-13 20:29 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\.ACEStream
2015-02-25 10:52 - 2014-07-27 08:10 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Ulozto File Manager
2015-02-25 10:52 - 2014-06-28 14:26 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\Capcom
2015-02-25 10:52 - 2014-06-17 20:05 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\PowerISO
2015-02-25 10:52 - 2011-01-27 12:04 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\AVG9
2015-02-25 10:51 - 2014-11-03 17:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth
2015-02-25 10:51 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2015-02-24 04:17 - 2010-12-26 09:55 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 14:55 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Resources
2015-02-23 13:41 - 2009-07-14 05:45 - 05145680 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-02-23 12:43 - 2010-12-23 18:41 - 00148208 _____ () C:\Users\Milan\AppData\Local\GDIPFONTCACHEV1.DAT
2015-02-22 10:52 - 2014-08-10 11:17 - 00000000 ____D () C:\Users\Milan\AppData\Roaming\YouTube Downloader
==================== Files in the root of some directories =======
2014-09-18 22:34 - 2014-09-18 22:34 - 0000037 ___SH () C:\Users\Milan\AppData\Local\69ff07055291669bb2b218.72821112
2014-07-10 06:14 - 2015-03-07 08:48 - 0007670 _____ () C:\Users\Milan\AppData\Local\Resmon.ResmonCfg
2013-10-05 15:11 - 2013-10-05 15:11 - 0000057 _____ () C:\ProgramData\Ament.ini
2014-06-18 14:57 - 2014-06-18 14:57 - 0000072 _____ () C:\ProgramData\flfconfig.ini
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Milan\Desktop" je 477 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Acrobat Speed Launcher
"C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
C:\Program Files (x86)\Samsung\Kies\KiesAirMessage.exe -startup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Kernel and Hardware Abstraction Layer
C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesAirMessage
C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPDLR
C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesPreload
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KiesTrayAgent
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Logitech SetPoint.lnk
C:\PROGRA~1\Logitech\SetPoint\SetPoint.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MagicDisc.lnk
C:\PROGRA~2\MAGICD~1\MAGICD~1.EXE
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Milan^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.2.lnk
C:\PROGRA~2\OPENOF~1.ORG\program\QUICKS~1.EXE [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================