podozrenie na TeslaCrypt
Napsal: 31 bře 2016 09:46
Zdravím, mám pred sebou PC kde sa vytvárajú pár kB súbory s názvom +REcovER+xxx.
Jedná sa o WinXP bez ochrany ( bez antiviru)
Prikladám log z FRST:
vopred dík za pomoc
Jedná sa o WinXP bez ochrany ( bez antiviru)
Prikladám log z FRST:
Kód: Vybrat vše
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:05-03-2016 01
Ran by Administrator (administrator) on MAJO_B_PC (31-03-2016 10:41:35)
Running from C:\Documents and Settings\Administrator\Plocha
Loaded Profiles: Administrator (Available Profiles: Majo & Administrator)
Platform: Systém Microsoft Windows XP Professional Service Pack 2 (X86) Language: Čeština
Internet Explorer Version 6 (Default browser: Chrome)
Boot Mode: Safe Mode (minimal)
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
() C:\Program Files\Unlocker\UnlockerAssistant.exe
(forum.viry.cz) C:\Documents and Settings\Administrator\Plocha\FRSTLauncher.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [MSConfig] => C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe [159232 2004-08-17] (Microsoft Corporation)
HKLM\...\Run: [UnlockerAssistant] => C:\Program Files\Unlocker\UnlockerAssistant.exe [17408 2010-07-04] ()
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2008-10-04] (ATI Technologies Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+bisuh+.png [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+bisuh+.txt [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+jkbpx+.png [2016-03-29] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+jkbpx+.txt [2016-03-29] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+nxecd+.png [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+nxecd+.txt [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+tbmxi+.png [2016-03-31] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+tbmxi+.txt [2016-03-31] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+txtwm+.png [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+txtwm+.txt [2016-03-28] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+vgyix+.png [2016-03-31] ()
Startup: C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění\+REcovER+vgyix+.txt [2016-03-31] ()
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 194.1.215.2 194.1.215.1
Tcpip\..\Interfaces\{BA4D5824-C6AC-4B4F-95F3-F97B9A52C994}: [DhcpNameServer] 194.1.215.2 194.1.215.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-1004336348-1844237615-839522115-500\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.my-online-search.com/?babsrc=HP_ofln&mntrId=0C6999C8B174A355&cat=delta&dlb=0&affID=122471
URLSearchHook: [S-1-5-21-1004336348-1844237615-839522115-500] ATTENTION => Default URLSearchHook is missing
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
FireFox:
========
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-01] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.2 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np32dsw.dll [2007-04-30] (Adobe Systems, Inc.)
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S4 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [269504 2016-03-28] (Adobe Systems Incorporated) [File not signed]
S4 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [593920 2008-10-03] () [File not signed]
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
S4 SwitchBoard; C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 HPZid412; C:\WINDOWS\System32\DRIVERS\HPZid412.sys [49664 2006-04-13] (HP)
S3 HPZipr12; C:\WINDOWS\System32\DRIVERS\HPZipr12.sys [16496 2006-04-13] (HP)
S3 HPZius12; C:\WINDOWS\System32\DRIVERS\HPZius12.sys [21568 2006-04-13] (HP)
S3 nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [9887072 2010-12-20] (NVIDIA Corporation) [File not signed]
S3 NVHDA; C:\WINDOWS\System32\drivers\nvhda32.sys [100456 2010-11-12] (NVIDIA Corporation)
S3 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [27440 2004-07-17] ()
S2 StarOpen; C:\WINDOWS\system32\Drivers\StarOpen.sys [13120 2013-08-25] ()
S4 IntelIde; no ImagePath
S3 UIUSys; system32\DRIVERS\UIUSYS.SYS [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
U1 WS2IFSL; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 10:41 - 2016-03-31 10:42 - 00007761 _____ C:\Documents and Settings\Administrator\Plocha\FRST.txt
2016-03-31 10:41 - 2016-03-31 10:41 - 00000000 ____D C:\FRST
2016-03-31 10:41 - 2016-03-31 10:39 - 00112640 _____ (forum.viry.cz) C:\Documents and Settings\Administrator\Plocha\FRSTLauncher.exe
2016-03-31 10:40 - 2016-03-31 10:37 - 01725440 _____ (Farbar) C:\Documents and Settings\Administrator\Plocha\FRST.exe
2016-03-31 10:31 - 2016-03-31 10:31 - 00000104 _____ C:\Documents and Settings\Administrator\Plocha\Zástupce - Tento počítač.lnk
2016-03-31 10:13 - 2016-03-31 10:13 - 00001168 _____ C:\Documents and Settings\Administrator\Plocha\Zástupce - msconfig.lnk
2016-03-31 10:12 - 2016-03-31 10:15 - 00000000 ____D C:\Program Files\Unlocker
2016-03-31 10:12 - 2016-03-31 10:12 - 00000000 ____D C:\Documents and Settings\All Users\Data aplikací\Babylon
2016-03-31 10:12 - 2016-03-31 10:12 - 00000000 ____D C:\Documents and Settings\Administrator\Nabídka Start\Programy\Unlocker
2016-03-31 10:12 - 2016-03-31 10:12 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Data aplikací\Babylon
2016-03-31 10:12 - 2016-03-31 10:12 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\Babylon
2016-03-31 10:12 - 2016-03-31 10:04 - 01078591 _____ C:\Documents and Settings\Administrator\Plocha\Unlocker1.9.2.exe
2016-03-31 10:09 - 2016-03-31 10:42 - 00000000 ____D C:\Documents and Settings\Administrator\Local Settings\Temp
2016-03-31 10:09 - 2016-03-31 10:41 - 00000000 ___HD C:\Documents and Settings\Administrator\Local Settings\Data aplikací
2016-03-31 10:09 - 2016-03-31 10:41 - 00000000 ____D C:\Documents and Settings\Administrator\Plocha
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Příslušenství
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ____D C:\Documents and Settings\Administrator\Oblíbené položky
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ____D C:\Documents and Settings\Administrator\Dokumenty
2016-03-31 10:09 - 2016-03-31 10:14 - 00000000 ____D C:\Documents and Settings\Administrator
2016-03-31 10:09 - 2016-03-31 10:12 - 00000000 __RHD C:\Documents and Settings\Administrator\Data aplikací
2016-03-31 10:09 - 2016-03-31 10:11 - 00000000 ___RD C:\Documents and Settings\Administrator\Nabídka Start\Programy\Po spuštění
2016-03-31 10:09 - 2016-03-31 10:09 - 00000020 ___SH C:\Documents and Settings\Administrator\ntuser.ini
2016-03-31 10:09 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 00000000 ___HD C:\Documents and Settings\Administrator\Šablony
2016-03-31 10:09 - 2016-03-31 08:43 - 00000000 ____D C:\Documents and Settings\Administrator\Data aplikací\Macromedia
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Dokumenty\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Administrator\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Dokumenty\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Administrator\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní tiskárny
2016-03-31 10:09 - 2016-03-29 18:50 - 00000000 ___HD C:\Documents and Settings\Administrator\Okolní síť
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Dokumenty\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Administrator\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Dokumenty\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Administrator\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Nabídka Start\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Local Settings\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Dokumenty\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\Data aplikací\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Administrator\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2014-01-25 15:41 - 00001599 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Vzdálená pomoc.lnk
2016-03-31 10:09 - 2014-01-25 15:41 - 00000792 _____ C:\Documents and Settings\Administrator\Nabídka Start\Programy\Windows Media Player.lnk
2016-03-31 10:07 - 2016-03-31 10:40 - 00100286 _____ C:\WINDOWS\ntbtlog.txt
2016-03-31 08:46 - 2016-03-31 08:46 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:46 - 2016-03-31 08:46 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\+REcovER+tbmxi+.txt
2016-03-31 08:46 - 2016-03-31 08:46 - 00002431 _____ C:\Documents and Settings\NetworkService\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:46 - 2016-03-31 08:46 - 00002431 _____ C:\Documents and Settings\NetworkService\+REcovER+tbmxi+.txt
2016-03-31 08:45 - 2016-03-31 08:45 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:45 - 2016-03-31 08:45 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\+REcovER+tbmxi+.txt
2016-03-31 08:44 - 2016-03-31 08:44 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+tbmxi+.txt
2016-03-31 08:43 - 2016-03-31 08:43 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+tbmxi+.txt
2016-03-31 08:30 - 2016-03-31 08:30 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:30 - 2016-03-31 08:30 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\+REcovER+vgyix+.txt
2016-03-31 08:30 - 2016-03-31 08:30 - 00002431 _____ C:\Documents and Settings\NetworkService\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:30 - 2016-03-31 08:30 - 00002431 _____ C:\Documents and Settings\NetworkService\+REcovER+vgyix+.txt
2016-03-31 08:29 - 2016-03-31 08:29 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:29 - 2016-03-31 08:29 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\+REcovER+vgyix+.txt
2016-03-31 08:28 - 2016-03-31 08:28 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+vgyix+.txt
2016-03-31 08:27 - 2016-03-31 08:27 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+vgyix+.txt
2016-03-29 18:53 - 2016-03-29 18:53 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:53 - 2016-03-29 18:53 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\+REcovER+jkbpx+.txt
2016-03-29 18:53 - 2016-03-29 18:53 - 00002431 _____ C:\Documents and Settings\NetworkService\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:53 - 2016-03-29 18:53 - 00002431 _____ C:\Documents and Settings\NetworkService\+REcovER+jkbpx+.txt
2016-03-29 18:53 - 2016-03-29 18:53 - 00002431 _____ C:\Documents and Settings\Majo\+REcovER+jkbpx+.txt
2016-03-29 18:51 - 2016-03-29 18:51 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:51 - 2016-03-29 18:51 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Majo\Dokumenty\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+jkbpx+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 00002431 _____ C:\Documents and Settings\All Users\+REcovER+jkbpx+.txt
2016-03-28 20:47 - 2016-03-28 20:47 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:47 - 2016-03-28 20:47 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\+REcovER+bisuh+.txt
2016-03-28 20:47 - 2016-03-28 20:47 - 00002431 _____ C:\Documents and Settings\NetworkService\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:47 - 2016-03-28 20:47 - 00002431 _____ C:\Documents and Settings\NetworkService\+REcovER+bisuh+.txt
2016-03-28 20:47 - 2016-03-28 20:47 - 00002431 _____ C:\Documents and Settings\Majo\+REcovER+bisuh+.txt
2016-03-28 20:46 - 2016-03-28 20:46 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:46 - 2016-03-28 20:46 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\+REcovER+bisuh+.txt
2016-03-28 20:45 - 2016-03-28 20:45 - 00002431 _____ C:\Documents and Settings\Majo\Dokumenty\+REcovER+bisuh+.txt
2016-03-28 20:45 - 2016-03-28 20:45 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+bisuh+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 00002431 _____ C:\Documents and Settings\All Users\+REcovER+bisuh+.txt
2016-03-28 11:41 - 2016-03-28 11:41 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:41 - 2016-03-28 11:41 - 00002431 _____ C:\Documents and Settings\NetworkService\Local Settings\+REcovER+txtwm+.txt
2016-03-28 11:41 - 2016-03-28 11:41 - 00002431 _____ C:\Documents and Settings\NetworkService\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:41 - 2016-03-28 11:41 - 00002431 _____ C:\Documents and Settings\NetworkService\+REcovER+txtwm+.txt
2016-03-28 11:41 - 2016-03-28 11:41 - 00002431 _____ C:\Documents and Settings\Majo\+REcovER+txtwm+.txt
2016-03-28 11:27 - 2016-03-28 11:27 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:27 - 2016-03-28 11:27 - 00002431 _____ C:\Documents and Settings\Majo\Local Settings\+REcovER+txtwm+.txt
2016-03-28 11:26 - 2016-03-28 11:26 - 00002431 _____ C:\Documents and Settings\Majo\Dokumenty\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+txtwm+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 00002431 _____ C:\Documents and Settings\All Users\+REcovER+txtwm+.txt
2016-03-28 11:03 - 2016-03-28 11:03 - 00002431 _____ C:\Documents and Settings\Majo\Dokumenty\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Majo\Data aplikací\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\Data aplikací\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\LocalService\Local Settings\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\LocalService\Data aplikací\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\LocalService\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\Programy\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Nabídka Start\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\Data aplikací\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Local Settings\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Dokumenty\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\Data aplikací\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\Default User\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\All Users\Nabídka Start\+REcovER+nxecd+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 00002431 _____ C:\Documents and Settings\All Users\+REcovER+nxecd+.txt
2016-03-28 10:59 - 2016-03-31 08:43 - 00000256 _____ C:\Documents and Settings\Majo\Dokumenty\+recover+file.txt
2016-03-28 10:59 - 2016-03-28 10:59 - 00002431 _____ C:\Documents and Settings\All Users\Dokumenty\+REcovER+nxecd+.txt
2016-03-28 10:59 - 2016-03-28 10:58 - 00368640 ____H C:\Documents and Settings\Majo\Dokumenty\yeqnlb.exe
2016-03-21 19:06 - 2016-03-28 11:28 - 00032880 _____ C:\Documents and Settings\Majo\Plocha\doklad poistenie.pdf
2016-03-10 01:00 - 2016-03-10 01:00 - 00000000 ____D C:\Documents and Settings\Majo\Plocha\okná
2016-03-07 21:08 - 2016-03-28 11:03 - 00000944 _____ C:\Documents and Settings\Majo\Dokumenty\spider.sav
2016-03-05 14:09 - 2016-03-05 14:10 - 00000000 ____D C:\Documents and Settings\Majo\Plocha\Súmračná foto
2016-03-03 01:38 - 2016-03-13 00:15 - 00000000 ____D C:\Documents and Settings\Majo\Plocha\Výpis z účtu
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-03-31 10:14 - 2016-01-30 15:49 - 00000000 ___RD C:\Documents and Settings\Majo\Dokumenty\Filmy
2016-03-31 10:14 - 2014-09-11 22:24 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe
2016-03-31 10:14 - 2014-04-14 21:57 - 00000000 ____D C:\Documents and Settings\Majo\adidas
2016-03-31 10:14 - 2014-04-14 21:57 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\miCoach Manager
2016-03-31 10:14 - 2014-03-30 21:52 - 00000000 ___SD C:\Documents and Settings\Majo\UserData
2016-03-31 10:14 - 2014-03-28 08:02 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\HP
2016-03-31 10:14 - 2014-03-12 08:08 - 00000000 ____D C:\Documents and Settings\Majo\Dokumenty\Preberanie
2016-03-31 10:14 - 2014-03-01 10:12 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Moj CEWE FOTOSVET
2016-03-31 10:14 - 2014-01-28 00:02 - 00000000 ____D C:\Documents and Settings\Majo\Dokumenty\My Scans
2016-03-31 10:14 - 2014-01-28 00:02 - 00000000 ____D C:\Documents and Settings\Majo\Dokumenty\Juraj byt
2016-03-31 10:14 - 2014-01-27 23:59 - 00000000 ____D C:\Documents and Settings\Majo\Dokumenty\Autocad 2010 CZ
2016-03-31 10:14 - 2014-01-27 23:58 - 00000000 ____D C:\Documents and Settings\Majo\Dokumenty\Záhrada
2016-03-31 10:14 - 2014-01-27 21:56 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Canon Printer Uninstaller
2016-03-31 10:14 - 2014-01-27 20:50 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Microsoft Office
2016-03-31 10:14 - 2014-01-26 18:01 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\VideoLAN
2016-03-31 10:14 - 2014-01-26 18:00 - 00000000 ____D C:\Documents and Settings\Majo\Nabídka Start\Programy\WinRAR
2016-03-31 10:14 - 2014-01-26 18:00 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\WinRAR
2016-03-31 10:14 - 2014-01-26 18:00 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\K-Lite Codec Pack
2016-03-31 10:14 - 2014-01-26 17:59 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Skype
2016-03-31 10:14 - 2014-01-26 17:54 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Běžecké tratě
2016-03-31 10:14 - 2014-01-26 17:53 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\CCleaner
2016-03-31 10:14 - 2014-01-25 17:20 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Winamp
2016-03-31 10:14 - 2014-01-25 17:19 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\ESTsoft
2016-03-31 10:14 - 2014-01-25 17:04 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\REALTEK PCIE NIC Driver
2016-03-31 10:14 - 2014-01-25 16:51 - 00000000 ____D C:\Intel
2016-03-31 10:14 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy
2016-03-31 10:14 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start
2016-03-31 10:14 - 2014-01-25 16:28 - 00000000 ____D C:\Documents and Settings\All Users\Oblíbené položky
2016-03-31 10:14 - 2014-01-25 16:25 - 00000000 ____D C:\Documents and Settings\All Users
2016-03-31 10:14 - 2014-01-25 15:52 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Total Commander
2016-03-31 10:14 - 2014-01-25 15:49 - 00000000 ____D C:\WINDOWS\pss
2016-03-31 10:14 - 2014-01-25 15:49 - 00000000 ____D C:\Documents and Settings\All Users\Nabídka Start\Programy\Windows Support Tools
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Oblíbené položky
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Nabídka Start\Programy\Příslušenství
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Dokumenty\Obrázky
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Dokumenty\Hudba
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Dokumenty
2016-03-31 10:14 - 2014-01-25 15:47 - 00000000 ____D C:\Documents and Settings\Majo
2016-03-31 10:14 - 2014-01-25 15:38 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Nástroje pro správu
2016-03-31 10:14 - 2014-01-25 15:38 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Hry
2016-03-31 10:14 - 2014-01-25 15:38 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Obrázky
2016-03-31 10:14 - 2014-01-25 15:37 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Hudba
2016-03-31 10:14 - 2014-01-25 15:36 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Příslušenství
2016-03-31 10:14 - 2014-01-25 15:36 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty\Filmy
2016-03-31 10:12 - 2014-01-25 16:26 - 00000000 __RHD C:\Documents and Settings\All Users\Data aplikací
2016-03-31 10:11 - 2014-01-25 16:24 - 00000211 ___SH C:\boot.ini
2016-03-31 10:11 - 2002-09-23 14:00 - 00000628 _____ C:\WINDOWS\win.ini
2016-03-31 10:11 - 2002-09-23 14:00 - 00000227 _____ C:\WINDOWS\system.ini
2016-03-31 10:09 - 2014-01-25 16:25 - 03563520 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-03-31 10:09 - 2014-01-25 16:25 - 00000000 ____D C:\Documents and Settings
2016-03-31 09:49 - 2014-01-26 19:34 - 00000000 ___RD C:\Documents and Settings\Majo\Nabídka Start\Programy\Nástroje pro správu
2016-03-31 09:49 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Nabídka Start\Programy
2016-03-31 09:49 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Nabídka Start
2016-03-31 09:47 - 2014-01-25 15:47 - 00000000 ____D C:\Documents and Settings\Majo\Plocha
2016-03-31 09:43 - 2014-01-26 17:54 - 00000920 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-31 09:43 - 2014-01-25 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-03-31 09:42 - 2014-01-25 15:47 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Temp
2016-03-31 09:42 - 2014-01-25 15:45 - 00032464 _____ C:\WINDOWS\SchedLgU.Txt
2016-03-31 09:41 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\All Users\Nabídka Start\Programy\Po spuštění
2016-03-31 09:41 - 2014-01-25 15:47 - 00000000 ___RD C:\Documents and Settings\Majo\Nabídka Start\Programy\Po spuštění
2016-03-31 09:20 - 2014-01-26 17:54 - 00000924 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-31 09:10 - 2014-01-26 17:58 - 00000914 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-03-31 08:45 - 2015-06-18 20:42 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Thunderbird
2016-03-31 08:45 - 2014-02-27 23:23 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Mozilla
2016-03-31 08:45 - 2014-01-26 17:54 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Google
2016-03-31 08:45 - 2014-01-25 15:47 - 00000000 ___HD C:\Documents and Settings\Majo\Okolní tiskárny
2016-03-31 08:45 - 2014-01-25 15:47 - 00000000 ___HD C:\Documents and Settings\Majo\Okolní síť
2016-03-31 08:45 - 2014-01-25 15:47 - 00000000 ___HD C:\Documents and Settings\Majo\Local Settings\Data aplikací
2016-03-31 08:44 - 2015-06-18 20:42 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Thunderbird
2016-03-31 08:44 - 2014-02-27 23:23 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Mozilla
2016-03-31 08:44 - 2014-01-25 15:47 - 00000000 __RHD C:\Documents and Settings\Majo\Data aplikací
2016-03-31 08:43 - 2014-09-11 22:23 - 00000000 ____D C:\Documents and Settings\Default User\Data aplikací\Macromedia
2016-03-31 08:43 - 2014-01-26 17:55 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Adobe
2016-03-31 08:43 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\All Users\Dokumenty
2016-03-31 08:43 - 2014-01-25 16:28 - 00000000 ___HD C:\Documents and Settings\Default User\Šablony
2016-03-31 08:43 - 2014-01-25 16:28 - 00000000 ___HD C:\Documents and Settings\All Users\Šablony
2016-03-31 08:43 - 2014-01-25 16:25 - 00000000 ___HD C:\Documents and Settings\Default User
2016-03-31 08:43 - 2014-01-25 15:45 - 00000000 __SHD C:\Documents and Settings\LocalService
2016-03-31 08:43 - 2014-01-25 15:45 - 00000000 ___HD C:\Documents and Settings\LocalService\Local Settings\Data aplikací
2016-03-31 08:43 - 2014-01-25 15:45 - 00000000 ____D C:\Documents and Settings\LocalService\Data aplikací
2016-03-31 08:43 - 2014-01-25 15:40 - 00000000 __SHD C:\Documents and Settings\All Users\DRM
2016-03-31 08:26 - 2002-09-23 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2016-03-29 18:53 - 2014-01-25 15:47 - 00000000 ___HD C:\Documents and Settings\Majo\Šablony
2016-03-29 18:53 - 2014-01-25 15:45 - 00000000 __SHD C:\Documents and Settings\NetworkService
2016-03-29 18:53 - 2014-01-25 15:45 - 00000000 ___HD C:\Documents and Settings\NetworkService\Local Settings\Data aplikací
2016-03-29 18:53 - 2014-01-25 15:45 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Temp
2016-03-29 18:53 - 2014-01-25 15:45 - 00000000 ____D C:\Documents and Settings\NetworkService\Data aplikací
2016-03-29 18:51 - 2015-12-31 00:28 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Downloaded Installations
2016-03-29 18:51 - 2015-01-25 18:42 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Xenocode
2016-03-29 18:51 - 2014-02-01 16:48 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Adobe
2016-03-29 18:51 - 2014-01-26 18:02 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Apple Computer
2016-03-29 18:51 - 2014-01-26 18:01 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Apple
2016-03-29 18:51 - 2014-01-25 15:52 - 00000000 ____D C:\Documents and Settings\Majo\Local Settings\Data aplikací\Help
2016-03-29 18:50 - 2015-05-04 22:26 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\U3
2016-03-29 18:50 - 2014-09-13 13:11 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
2016-03-29 18:50 - 2014-09-13 13:11 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Adobe Mini Bridge CS5
2016-03-29 18:50 - 2014-09-11 22:33 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1
2016-03-29 18:50 - 2014-04-25 17:55 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Image Zone Express
2016-03-29 18:50 - 2014-03-30 21:49 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\HP
2016-03-29 18:50 - 2014-02-14 22:21 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\LANGMaster
2016-03-29 18:50 - 2014-01-27 21:52 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\WinRAR
2016-03-29 18:50 - 2014-01-26 18:02 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\vlc
2016-03-29 18:50 - 2014-01-26 18:02 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Apple Computer
2016-03-29 18:50 - 2014-01-26 18:00 - 00000000 ____D C:\Documents and Settings\LocalService\Data aplikací\Apple Computer
2016-03-29 18:50 - 2014-01-25 17:19 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\ESTsoft
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\Default User\Nabídka Start\Programy\Po spuštění
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\Default User\Nabídka Start\Programy
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___RD C:\Documents and Settings\Default User\Nabídka Start
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___HD C:\Documents and Settings\Default User\Okolní tiskárny
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___HD C:\Documents and Settings\Default User\Okolní síť
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ___HD C:\Documents and Settings\Default User\Local Settings\Data aplikací
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ____D C:\Documents and Settings\Default User\Oblíbené položky
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ____D C:\Documents and Settings\Default User\Local Settings\Temp
2016-03-29 18:50 - 2014-01-25 16:28 - 00000000 ____D C:\Documents and Settings\Default User\Dokumenty
2016-03-29 18:50 - 2014-01-25 16:26 - 00000000 __RHD C:\Documents and Settings\Default User\Data aplikací
2016-03-29 18:50 - 2014-01-25 15:52 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Help
2016-03-29 18:50 - 2014-01-25 15:45 - 00000000 ____D C:\Documents and Settings\LocalService\Local Settings\Temp
2016-03-29 18:50 - 2014-01-25 15:40 - 00000000 ___RD C:\Documents and Settings\Default User\Nabídka Start\Programy\Příslušenství
2016-03-28 11:41 - 2015-01-27 21:49 - 00029568 _____ C:\Documents and Settings\Majo\Plocha\škandinávia.xls
2016-03-28 11:41 - 2014-02-01 13:29 - 00000000 ____D C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\Apple
2016-03-28 11:41 - 2014-01-27 20:46 - 00000000 __RHD C:\MSOCache
2016-03-28 11:39 - 2015-12-09 21:27 - 00020352 _____ C:\Documents and Settings\Majo\Plocha\poisťovňa Dovera.xls
2016-03-28 11:39 - 2015-09-08 20:30 - 00024448 _____ C:\Documents and Settings\Majo\Plocha\stanice TV.xls
2016-03-28 11:39 - 2014-01-22 00:48 - 00106368 _____ C:\Documents and Settings\Majo\Plocha\spotreba.xls
2016-03-28 11:28 - 2015-11-01 15:43 - 00016256 _____ C:\Documents and Settings\Majo\Plocha\AJ - MD.xls
2016-03-28 11:27 - 2014-06-01 21:54 - 05674448 _____ C:\Documents and Settings\Majo\Plocha\20130922_092641.mp4
2016-03-28 11:25 - 2015-11-28 14:29 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Canneverbe Limited
2016-03-28 11:25 - 2014-01-27 20:49 - 00000000 ____D C:\Documents and Settings\Majo\Data aplikací\Macromedia
2016-03-28 11:25 - 2014-01-26 17:58 - 00797376 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2016-03-28 11:25 - 2014-01-26 17:58 - 00142528 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2016-03-27 11:38 - 2014-01-25 16:28 - 01056832 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-03-27 11:38 - 2002-09-23 14:00 - 00442960 _____ C:\WINDOWS\system32\perfh005.dat
2016-03-27 11:38 - 2002-09-23 14:00 - 00083008 _____ C:\WINDOWS\system32\perfc005.dat
2016-03-15 20:22 - 2014-01-26 17:55 - 00001831 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Google Chrome.lnk
2016-03-15 20:05 - 2015-12-24 12:35 - 00000000 ____D C:\WINDOWS\Minidump
2016-03-15 20:05 - 2014-02-15 12:50 - 00000012 _____ C:\Documents and Settings\Majo\intlname.ols
2016-03-10 00:00 - 2016-02-27 19:38 - 00000000 ____D C:\Documents and Settings\Majo\Plocha\SUMRACNA
2016-03-04 19:29 - 2014-01-26 17:52 - 00002315 _____ C:\Documents and Settings\All Users\Nabídka Start\Programy\Adobe Reader XI.lnk
==================== Files in the root of some directories =======
2016-03-31 10:09 - 2016-03-28 20:44 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+bisuh+.png
2016-03-31 10:09 - 2016-03-28 20:44 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+jkbpx+.png
2016-03-31 10:09 - 2016-03-29 18:50 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+nxecd+.png
2016-03-31 10:09 - 2016-03-28 11:00 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+tbmxi+.png
2016-03-31 10:09 - 2016-03-31 08:43 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+txtwm+.png
2016-03-31 10:09 - 2016-03-28 11:25 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+vgyix+.png
2016-03-31 10:09 - 2016-03-31 08:27 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+bisuh+.png
2016-03-31 10:09 - 2016-03-28 20:44 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+jkbpx+.png
2016-03-31 10:09 - 2016-03-29 18:50 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+nxecd+.png
2016-03-31 10:09 - 2016-03-28 11:00 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+tbmxi+.png
2016-03-31 10:09 - 2016-03-31 08:43 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+txtwm+.png
2016-03-31 10:09 - 2016-03-28 11:25 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 0074194 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+vgyix+.png
2016-03-31 10:09 - 2016-03-31 08:27 - 0002431 _____ () C:\Documents and Settings\Administrator\Data aplikací\Microsoft\+REcovER+vgyix+.txt
2016-03-31 10:09 - 2016-03-28 20:44 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+bisuh+.png
2016-03-31 10:09 - 2016-03-28 20:44 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+bisuh+.txt
2016-03-31 10:09 - 2016-03-29 18:50 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+jkbpx+.png
2016-03-31 10:09 - 2016-03-29 18:50 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+jkbpx+.txt
2016-03-31 10:09 - 2016-03-28 11:00 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+nxecd+.png
2016-03-31 10:09 - 2016-03-28 11:00 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+nxecd+.txt
2016-03-31 10:09 - 2016-03-31 08:43 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+tbmxi+.png
2016-03-31 10:09 - 2016-03-31 08:43 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+tbmxi+.txt
2016-03-31 10:09 - 2016-03-28 11:25 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+txtwm+.png
2016-03-31 10:09 - 2016-03-28 11:25 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+txtwm+.txt
2016-03-31 10:09 - 2016-03-31 08:27 - 0074194 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+vgyix+.png
2016-03-31 10:09 - 2016-03-31 08:27 - 0002431 _____ () C:\Documents and Settings\Administrator\Local Settings\Data aplikací\+REcovER+vgyix+.txt
2016-03-28 20:44 - 2016-03-28 20:44 - 0074194 _____ () C:\Documents and Settings\All Users\+REcovER+bisuh+.png
2016-03-28 20:44 - 2016-03-28 20:44 - 0002431 _____ () C:\Documents and Settings\All Users\+REcovER+bisuh+.txt
2016-03-29 18:50 - 2016-03-29 18:50 - 0074194 _____ () C:\Documents and Settings\All Users\+REcovER+jkbpx+.png
2016-03-29 18:50 - 2016-03-29 18:50 - 0002431 _____ () C:\Documents and Settings\All Users\+REcovER+jkbpx+.txt
2016-03-28 11:00 - 2016-03-28 11:00 - 0074194 _____ () C:\Documents and Settings\All Users\+REcovER+nxecd+.png
2016-03-28 11:00 - 2016-03-28 11:00 - 0002431 _____ () C:\Documents and Settings\All Users\+REcovER+nxecd+.txt
2016-03-28 11:25 - 2016-03-28 11:25 - 0074194 _____ () C:\Documents and Settings\All Users\+REcovER+txtwm+.png
2016-03-28 11:25 - 2016-03-28 11:25 - 0002431 _____ () C:\Documents and Settings\All Users\+REcovER+txtwm+.txt
2014-03-28 07:48 - 2014-03-30 21:49 - 0000849 _____ () C:\Documents and Settings\All Users\Data aplikací\hpzinstall.log
Some files in TEMP:
====================
C:\Documents and Settings\Administrator\Local Settings\Temp\DeltaTB.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Documents and Settings\Administrator\Plocha" je 2 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeBridge
"C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe" -launchedbylogin [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS5ServiceManager
"C:\Program Files\CCleaner\CCleaner.exe" /MONITOR [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\CNAP2LAK.EXE
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CNAP2 Launcher
"C:\Program Files\iTunes\iTunesHelper.exe" [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update
"C:\Program Files\Messenger\msmsgs.exe" /background [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper
RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS
RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvCplDaemon
"C:\Program Files\Skype\Phone\Skype.exe" /minimized /regrun [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvMediaCenter
C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vssejkbqh
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vssflxqco
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vssitmkbf
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vsspxlviq
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vssrpsdsv
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\vssvctftg
Re�im ECHO je vypnut.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+nxecd+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+nxecd+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+nxecd+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+nxecd+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.png
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Administrator^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.txt
C:\Documents and Settings\Administrator\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+nxecd+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+nxecd+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+nxecd+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+nxecd+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.png
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.txt
C:\Documents and Settings\All Users\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Nab�dka Start^Programy^Po spu�t�n�^HP Digital Imaging Monitor.lnk
C:\PROGRA~1\HP\DIGITA~1\bin\hpqtra08.exe
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.png
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+bisuh+.txt
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+bisuh+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.png
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+jkbpx+.txt
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+jkbpx+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.png
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+tbmxi+.txt
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+tbmxi+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.png
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+txtwm+.txt
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+txtwm+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.png
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.png [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Majo^Nab�dka Start^Programy^Po spu�t�n�^+REcovER+vgyix+.txt
C:\Documents and Settings\Majo\Nab�dka Start\Programy\Po spu�t�n�\+REcovER+vgyix+.txt [x]
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services
wscsvc REG_DWORD 0x2
wuauserv REG_DWORD 0x2
SkypeUpdate REG_DWORD 0x2
iPod Service REG_DWORD 0x3
Bonjour Service REG_DWORD 0x2
Apple Mobile Device REG_DWORD 0x2
AdobeFlashPlayerUpdateSvc REG_DWORD 0x3
SwitchBoard REG_DWORD 0x3
ose REG_DWORD 0x3
MDM REG_DWORD 0x2
IDriverT REG_DWORD 0x3
gupdatem REG_DWORD 0x3
gupdate REG_DWORD 0x2
ATI Smart REG_DWORD 0x2
Ati HotKey Poller REG_DWORD 0x2
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe:*:Enabled:hpqtra08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe:*:Enabled:hpqste08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe:*:Enabled:hpofxm08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe:*:Enabled:hposfx08.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe:*:Enabled:hposid01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe:*:Enabled:hpqscnvw.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe:*:Enabled:hpqkygrp.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe:*:Enabled:hpqcopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe:*:Enabled:hpfccopy.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe:*:Enabled:hpzwiz01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe:*:Enabled:hpqphunl.exe"
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe"="C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqDIA.exe:*:Enabled:hpqdia.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe:*:Enabled:hpoews01.exe"
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe"="C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqnrs08.exe:*:Enabled:hpqnrs08.exe"
"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe"="C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe:*:Enabled:Google Chrome"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
==================== End Of Log ==============================
Kód: Vybrat vše
Additional scan result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Administrator (2016-03-31 10:42:59)
Running from C:\Documents and Settings\Administrator\Plocha
Systém Microsoft Windows XP Professional Service Pack 2 (X86) (2014-01-25 13:44:18)
Boot Mode: Safe Mode (minimal)
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1004336348-1844237615-839522115-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrator
ASPNET (S-1-5-21-1004336348-1844237615-839522115-1005 - Limited - Enabled)
Guest (S-1-5-21-1004336348-1844237615-839522115-501 - Limited - Disabled)
HelpAssistant (S-1-5-21-1004336348-1844237615-839522115-1000 - Limited - Disabled)
Majo (S-1-5-21-1004336348-1844237615-839522115-1003 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Majo
SUPPORT_388945a0 (S-1-5-21-1004336348-1844237615-839522115-1002 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
vopred dík za pomoc