
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
stale sa odpojuje a pripojuje zariadenie
Moderátor: Moderátoři
Pravidla fóra
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní: http://forum.viry.cz/viewtopic.php?f=12&t=123975 . Děkujeme za pochopení.
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní: http://forum.viry.cz/viewtopic.php?f=12&t=123975 . Děkujeme za pochopení.
stale sa odpojuje a pripojuje zariadenie
Dobry den
tak zacalo mi to uz liezt na nervy lebo neviem cim to je sposobene, nb stale vydava zvuk ktory je priradeny v zvukoch ku pripojeniu a odpojeniu zariadenia, teda ako ked usb vytahujem alebo vkladam do nb, akurat, ze sa to deje bez toho aby som nieco vykonaval, tak neveim ci nejaky hardware sa pripojuje a odpojuje, ako na to pridem cim to je???? v spravcovi zariadeni nemam ziadne vykricniky, ale stale sa to tam nacitava ked otvorim toho spravcu ako keby vyhladaval nieco to tam preblikuje
dakujem
tak zacalo mi to uz liezt na nervy lebo neviem cim to je sposobene, nb stale vydava zvuk ktory je priradeny v zvukoch ku pripojeniu a odpojeniu zariadenia, teda ako ked usb vytahujem alebo vkladam do nb, akurat, ze sa to deje bez toho aby som nieco vykonaval, tak neveim ci nejaky hardware sa pripojuje a odpojuje, ako na to pridem cim to je???? v spravcovi zariadeni nemam ziadne vykricniky, ale stale sa to tam nacitava ked otvorim toho spravcu ako keby vyhladaval nieco to tam preblikuje
dakujem
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
Zdravím!
Některé zařízení při těch zvucích přestává fungovat?
Některé zařízení při těch zvucích přestává fungovat?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
praveze som nepostrehol nic zeby prestalo fungovat, lebo ono sa to vkuse odpojuje a pripojuje neviem v intervakle 3 s sa stale vyda zvuk, takze som nuteny si stlmit zvuky aby ma to neotravovalo,
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
Zkuste obnovu systému k datu, kdy korektně fungoval.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
skusal som aj toto a nepomohlo,akosi nemam starsi bod obnovenia, co sa moze v takom nb odpajat a pripajat ake zariadenie??? citacka kariet?? ako to detekovat?? skusim poslat log?? ci tam neuvidite nieco?? dakujem
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
To kdybych věděl, řekl bych vám řešení. Nikdy jsem se s touto chybou nesetkal. Zkusíme tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 03
Ran by JST (administrator) on JST-PC on 18-12-2013 20:20:38
Running from C:\Users\JST\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(National Instruments Corporation) C:\Windows\System32\lkads.exe
(National Instruments Corporation) C:\Program Files\National Instruments\MAX\nimxs.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_monitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(National Instruments, Inc.) C:\Windows\System32\lkcitdl.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(National Instruments Corporation) C:\Windows\System32\lktsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Error Reporting\nierserver.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) C:\Windows\System32\nipxism.exe
(Flexera Software, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\lmgrd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansyslmd.exe
(National Instruments Corporation) C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [NI Update Service] - C:\Program Files\National Instruments\Shared\Update Service\NIUpdateService.exe [3002976 2011-06-07] (National Instruments)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
HKCU\...\Run: [icq] - C:\Users\JST\AppData\Roaming\ICQM\icq.exe [28698984 2013-10-19] (ICQ)
HKCU\...\Run: [NIRegistrationWizard] - C:\Program Files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [846520 2010-06-21] ()
MountPoints2: {52efd5af-38f4-11e3-bea8-001e6808f4db} - F:\setup.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0C35A1F68CDCE01
SearchScopes: HKCU - DefaultScope {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [24280] (National Instruments Corporation)
Tcpip\..\Interfaces\{C4D8C9AC-FB37-4FF6-A2C0-06C691312E5A}: [NameServer]195.80.175.66 195.80.171.4
FireFox:
========
FF ProfilePath: C:\Users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default
FF Homepage: https://www.google.sk/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
========================== Services (Whitelisted) =================
R2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [3601920 2011-10-17] (ANSYS, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 LkCitadelServer; C:\Windows\system32\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\Windows\system32\lkads.exe [46192 2011-06-14] (National Instruments Corporation)
R2 lkTimeSync; C:\Windows\system32\lktsrv.exe [56952 2011-06-14] (National Instruments Corporation)
R2 mxssvr; C:\Program Files\National Instruments\MAX\nimxs.exe [12696 2011-06-14] (National Instruments Corporation)
R2 NIApplicationWebServer; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [50336 2011-05-27] (National Instruments Corporation)
R2 NIDomainService; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [362104 2011-06-14] (National Instruments Corporation)
S3 NILM License Manager; C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
R2 niLXIDiscovery; C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [233664 2011-06-19] (National Instruments Corporation)
R2 nimDNSResponder; C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [194224 2011-06-01] (National Instruments Corporation)
R2 NINetworkDiscovery; C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [121032 2011-06-10] (National Instruments Corporation)
R2 nipxirmu; C:\Windows\system32\nipxism.exe [18584 2010-06-14] (National Instruments Corporation)
R2 niSvcLoc; C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe [50328 2011-05-27] (National Instruments Corporation)
R2 NITaggerService; C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe [676016 2011-06-14] (National Instruments Corporation)
S3 OpcEnum; C:\Windows\system32\OpcEnum.exe [98304 2009-06-03] (OPC Foundation)
==================== Drivers (Whitelisted) ====================
R2 cvintdrv; C:\Windows\System32\Drivers\cvintdrv.sys [4096 2010-01-19] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S3 ni1006k; C:\Windows\system32\drivers\ni1006k.sys [26192 2011-04-08] (National Instruments Corporation)
S3 ni1045k; C:\Windows\system32\drivers\ni1045kl.sys [11344 2011-04-08] (National Instruments Corporation)
S3 ni1065k; C:\Windows\system32\drivers\ni1065k.sys [22608 2011-04-08] (National Instruments Corporation)
S3 nidimk; C:\Windows\system32\drivers\nidimkl.sys [11432 2010-06-11] (National Instruments Corporation)
R3 nimdbgk; C:\Windows\system32\drivers\nimdbgkl.sys [11424 2010-06-11] (National Instruments Corporation)
R3 nimxdfk; C:\Windows\system32\drivers\nimxdfkl.sys [11416 2010-06-18] (National Instruments Corporation)
S3 niorbk; C:\Windows\system32\drivers\niorbkl.sys [11344 2009-06-14] (National Instruments Corporation)
S3 nipalfwedl; C:\Windows\System32\drivers\nipalfwedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 NIPALK; C:\Windows\System32\drivers\nipalk.sys [573592 2011-02-14] (National Instruments Corporation)
S3 nipalusbedl; C:\Windows\System32\drivers\nipalusbedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 nipbcfk; C:\Windows\System32\drivers\nipbcfk.sys [15448 2010-03-24] (National Instruments Corporation)
R0 nipxibaf; C:\Windows\System32\drivers\nipxibaf.sys [58504 2011-04-08] (National Instruments Corporation)
R0 nipxibrc; C:\Windows\System32\drivers\nipxibrc.sys [42136 2011-04-08] (National Instruments Corporation)
S3 nipxigpk; C:\Windows\system32\drivers\nipxigpk.sys [21144 2010-06-14] (National Instruments Corporation)
R2 nipxirmk; C:\Windows\system32\drivers\nipxirmkl.sys [11416 2010-06-14] (National Instruments Corporation)
R3 NiViPciK; C:\Windows\System32\drivers\NiViPciKl.sys [11944 2011-06-19] (National Instruments Corporation)
R2 NiViPxiK; C:\Windows\System32\drivers\NiViPxiKl.sys [11944 2011-06-19] (National Instruments Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2013-10-19] ()
U3 ae6jsvmy; C:\Windows\System32\Drivers\ae6jsvmy.sys [0 ] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-18 20:20 - 2013-12-18 20:20 - 00011719 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-18 20:20 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-18 20:16 - 2013-12-18 20:16 - 00112640 _____ (forum.viry.cz) C:\Users\JST\Desktop\FRSTLauncher.exe
2013-12-18 20:14 - 2013-12-18 20:14 - 01062259 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-17 18:19 - 2013-12-17 18:19 - 00000830 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:05 - 2013-12-16 11:08 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 08:47 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 08:47 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 08:47 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 08:47 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 08:47 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 08:47 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 08:47 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 08:47 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 08:47 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 08:47 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 08:47 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 08:47 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 08:47 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 08:47 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 08:47 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 08:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 08:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 08:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 08:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 08:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 08:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 08:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 08:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 08:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 08:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 08:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 08:37 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 08:36 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 08:36 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 08:36 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-03 21:43 - 2013-12-11 18:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-03 19:07 - 2013-12-03 19:23 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:08 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:36 - 2009-07-24 10:49 - 00114688 _____ (RICOH) C:\Windows\system32\RicohMediadriverVer.dll
2013-11-28 19:36 - 2009-06-25 16:58 - 00048128 _____ (REDC) C:\Windows\system32\Drivers\rimmptsk.sys
2013-11-28 19:36 - 2009-06-25 16:25 - 00038400 _____ (REDC) C:\Windows\system32\Drivers\rixdptsk.sys
2013-11-28 19:36 - 2009-06-25 16:10 - 00044544 _____ (REDC) C:\Windows\system32\Drivers\rimsptsk.sys
2013-11-28 19:36 - 2007-07-25 12:48 - 00172032 _____ (Ricoh Company,Ltd) C:\Windows\system32\rixdicon.dll
2013-11-28 19:36 - 2004-09-04 03:00 - 00090112 _____ (Sony Corporation) C:\Windows\system32\snymsico.dll
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 12:53 - 2013-12-12 13:56 - 00024104 _____ C:\Users\JST\file.log
2013-11-28 12:53 - 2013-12-12 13:56 - 00009504 _____ C:\Users\JST\file.err
2013-11-28 12:53 - 2013-12-12 13:15 - 00000075 _____ C:\Users\JST\menust.tmp
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
==================== One Month Modified Files and Folders =======
2013-12-18 20:20 - 2013-12-18 20:20 - 00011719 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-18 20:20 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-18 20:19 - 2013-11-02 21:05 - 00000000 ____D C:\Users\JST\AppData\Roaming\SWF.max
2013-12-18 20:16 - 2013-12-18 20:16 - 00112640 _____ (forum.viry.cz) C:\Users\JST\Desktop\FRSTLauncher.exe
2013-12-18 20:14 - 2013-12-18 20:14 - 01062259 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-18 19:27 - 2013-10-19 19:59 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 19:06 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-18 19:06 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-18 19:02 - 2013-10-19 18:38 - 01518436 _____ C:\Windows\WindowsUpdate.log
2013-12-18 19:00 - 2013-10-29 20:16 - 00386792 _____ C:\Windows\setupact.log
2013-12-18 18:57 - 2013-10-19 18:46 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 18:52 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-17 18:19 - 2013-12-17 18:19 - 00000830 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:08 - 2013-12-16 11:05 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-15 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-15 09:35 - 2013-10-19 19:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 13:56 - 2013-11-28 12:53 - 00024104 _____ C:\Users\JST\file.log
2013-12-12 13:56 - 2013-11-28 12:53 - 00009504 _____ C:\Users\JST\file.err
2013-12-12 13:56 - 2013-10-22 20:01 - 00000000 ____D C:\Users\JST\AppData\Roaming\Ansys
2013-12-12 13:56 - 2013-10-19 18:43 - 00000000 ____D C:\Users\JST
2013-12-12 13:15 - 2013-11-28 12:53 - 00000075 _____ C:\Users\JST\menust.tmp
2013-12-12 13:03 - 2009-07-14 05:33 - 00410640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-12 08:46 - 2013-10-19 20:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 08:45 - 2013-10-19 23:21 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 08:43 - 2013-10-19 23:21 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:43 - 2013-12-03 21:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-10 14:29 - 2013-10-19 21:14 - 00000000 ____D C:\Users\JST\.msca
2013-12-09 12:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-06 12:20 - 2013-10-29 20:16 - 00000000 _____ C:\Windows\setuperr.log
2013-12-06 12:20 - 2013-10-20 10:38 - 00000000 ____D C:\Users\JST\AppData\Roaming\Media Player Classic
2013-12-06 12:20 - 2013-10-19 20:24 - 00000000 ____D C:\Users\JST\AppData\Roaming\DAEMON Tools Lite
2013-12-06 12:20 - 2013-10-19 19:34 - 00000000 ____D C:\Windows\Panther
2013-12-03 19:23 - 2013-12-03 19:07 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:08 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-12-02 20:09 - 2013-11-02 21:06 - 00000000 ___RD C:\Users\JST\Documents\My Flash
2013-11-28 19:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-26 11:11 - 2013-12-12 08:46 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 08:46 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 08:47 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 08:47 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 08:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 08:47 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 08:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
2013-11-19 03:33 - 2013-10-19 20:05 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Some content of TEMP:
====================
C:\Users\JST\AppData\Local\Temp\FreemakeVideoConverter_4.1.2.1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-15 21:18
==================== End Of Log ============================
Ran by JST (administrator) on JST-PC on 18-12-2013 20:20:38
Running from C:\Users\JST\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(National Instruments Corporation) C:\Windows\System32\lkads.exe
(National Instruments Corporation) C:\Program Files\National Instruments\MAX\nimxs.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_monitor.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(National Instruments, Inc.) C:\Windows\System32\lkcitdl.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(National Instruments Corporation) C:\Windows\System32\lktsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Error Reporting\nierserver.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) C:\Windows\System32\nipxism.exe
(Flexera Software, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\lmgrd.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansyslmd.exe
(National Instruments Corporation) C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [NI Update Service] - C:\Program Files\National Instruments\Shared\Update Service\NIUpdateService.exe [3002976 2011-06-07] (National Instruments)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
HKCU\...\Run: [icq] - C:\Users\JST\AppData\Roaming\ICQM\icq.exe [28698984 2013-10-19] (ICQ)
HKCU\...\Run: [NIRegistrationWizard] - C:\Program Files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [846520 2010-06-21] ()
MountPoints2: {52efd5af-38f4-11e3-bea8-001e6808f4db} - F:\setup.exe
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0C35A1F68CDCE01
SearchScopes: HKCU - DefaultScope {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [24280] (National Instruments Corporation)
Tcpip\..\Interfaces\{C4D8C9AC-FB37-4FF6-A2C0-06C691312E5A}: [NameServer]195.80.175.66 195.80.171.4
FireFox:
========
FF ProfilePath: C:\Users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default
FF Homepage: https://www.google.sk/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
========================== Services (Whitelisted) =================
R2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [3601920 2011-10-17] (ANSYS, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 LkCitadelServer; C:\Windows\system32\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\Windows\system32\lkads.exe [46192 2011-06-14] (National Instruments Corporation)
R2 lkTimeSync; C:\Windows\system32\lktsrv.exe [56952 2011-06-14] (National Instruments Corporation)
R2 mxssvr; C:\Program Files\National Instruments\MAX\nimxs.exe [12696 2011-06-14] (National Instruments Corporation)
R2 NIApplicationWebServer; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [50336 2011-05-27] (National Instruments Corporation)
R2 NIDomainService; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [362104 2011-06-14] (National Instruments Corporation)
S3 NILM License Manager; C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
R2 niLXIDiscovery; C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [233664 2011-06-19] (National Instruments Corporation)
R2 nimDNSResponder; C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [194224 2011-06-01] (National Instruments Corporation)
R2 NINetworkDiscovery; C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [121032 2011-06-10] (National Instruments Corporation)
R2 nipxirmu; C:\Windows\system32\nipxism.exe [18584 2010-06-14] (National Instruments Corporation)
R2 niSvcLoc; C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe [50328 2011-05-27] (National Instruments Corporation)
R2 NITaggerService; C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe [676016 2011-06-14] (National Instruments Corporation)
S3 OpcEnum; C:\Windows\system32\OpcEnum.exe [98304 2009-06-03] (OPC Foundation)
==================== Drivers (Whitelisted) ====================
R2 cvintdrv; C:\Windows\System32\Drivers\cvintdrv.sys [4096 2010-01-19] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S3 ni1006k; C:\Windows\system32\drivers\ni1006k.sys [26192 2011-04-08] (National Instruments Corporation)
S3 ni1045k; C:\Windows\system32\drivers\ni1045kl.sys [11344 2011-04-08] (National Instruments Corporation)
S3 ni1065k; C:\Windows\system32\drivers\ni1065k.sys [22608 2011-04-08] (National Instruments Corporation)
S3 nidimk; C:\Windows\system32\drivers\nidimkl.sys [11432 2010-06-11] (National Instruments Corporation)
R3 nimdbgk; C:\Windows\system32\drivers\nimdbgkl.sys [11424 2010-06-11] (National Instruments Corporation)
R3 nimxdfk; C:\Windows\system32\drivers\nimxdfkl.sys [11416 2010-06-18] (National Instruments Corporation)
S3 niorbk; C:\Windows\system32\drivers\niorbkl.sys [11344 2009-06-14] (National Instruments Corporation)
S3 nipalfwedl; C:\Windows\System32\drivers\nipalfwedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 NIPALK; C:\Windows\System32\drivers\nipalk.sys [573592 2011-02-14] (National Instruments Corporation)
S3 nipalusbedl; C:\Windows\System32\drivers\nipalusbedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 nipbcfk; C:\Windows\System32\drivers\nipbcfk.sys [15448 2010-03-24] (National Instruments Corporation)
R0 nipxibaf; C:\Windows\System32\drivers\nipxibaf.sys [58504 2011-04-08] (National Instruments Corporation)
R0 nipxibrc; C:\Windows\System32\drivers\nipxibrc.sys [42136 2011-04-08] (National Instruments Corporation)
S3 nipxigpk; C:\Windows\system32\drivers\nipxigpk.sys [21144 2010-06-14] (National Instruments Corporation)
R2 nipxirmk; C:\Windows\system32\drivers\nipxirmkl.sys [11416 2010-06-14] (National Instruments Corporation)
R3 NiViPciK; C:\Windows\System32\drivers\NiViPciKl.sys [11944 2011-06-19] (National Instruments Corporation)
R2 NiViPxiK; C:\Windows\System32\drivers\NiViPxiKl.sys [11944 2011-06-19] (National Instruments Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2013-10-19] ()
U3 ae6jsvmy; C:\Windows\System32\Drivers\ae6jsvmy.sys [0 ] (Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-18 20:20 - 2013-12-18 20:20 - 00011719 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-18 20:20 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-18 20:16 - 2013-12-18 20:16 - 00112640 _____ (forum.viry.cz) C:\Users\JST\Desktop\FRSTLauncher.exe
2013-12-18 20:14 - 2013-12-18 20:14 - 01062259 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-17 18:19 - 2013-12-17 18:19 - 00000830 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:05 - 2013-12-16 11:08 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 08:47 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 08:47 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 08:47 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 08:47 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 08:47 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 08:47 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 08:47 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 08:47 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 08:47 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 08:47 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 08:47 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 08:47 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 08:47 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 08:47 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 08:47 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 08:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 08:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 08:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 08:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 08:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 08:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 08:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 08:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 08:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 08:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 08:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 08:37 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 08:36 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 08:36 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 08:36 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-03 21:43 - 2013-12-11 18:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-03 19:07 - 2013-12-03 19:23 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:08 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:36 - 2009-07-24 10:49 - 00114688 _____ (RICOH) C:\Windows\system32\RicohMediadriverVer.dll
2013-11-28 19:36 - 2009-06-25 16:58 - 00048128 _____ (REDC) C:\Windows\system32\Drivers\rimmptsk.sys
2013-11-28 19:36 - 2009-06-25 16:25 - 00038400 _____ (REDC) C:\Windows\system32\Drivers\rixdptsk.sys
2013-11-28 19:36 - 2009-06-25 16:10 - 00044544 _____ (REDC) C:\Windows\system32\Drivers\rimsptsk.sys
2013-11-28 19:36 - 2007-07-25 12:48 - 00172032 _____ (Ricoh Company,Ltd) C:\Windows\system32\rixdicon.dll
2013-11-28 19:36 - 2004-09-04 03:00 - 00090112 _____ (Sony Corporation) C:\Windows\system32\snymsico.dll
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 12:53 - 2013-12-12 13:56 - 00024104 _____ C:\Users\JST\file.log
2013-11-28 12:53 - 2013-12-12 13:56 - 00009504 _____ C:\Users\JST\file.err
2013-11-28 12:53 - 2013-12-12 13:15 - 00000075 _____ C:\Users\JST\menust.tmp
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
==================== One Month Modified Files and Folders =======
2013-12-18 20:20 - 2013-12-18 20:20 - 00011719 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-18 20:20 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-18 20:19 - 2013-11-02 21:05 - 00000000 ____D C:\Users\JST\AppData\Roaming\SWF.max
2013-12-18 20:16 - 2013-12-18 20:16 - 00112640 _____ (forum.viry.cz) C:\Users\JST\Desktop\FRSTLauncher.exe
2013-12-18 20:14 - 2013-12-18 20:14 - 01062259 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-18 19:27 - 2013-10-19 19:59 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-18 19:06 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-18 19:06 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-18 19:02 - 2013-10-19 18:38 - 01518436 _____ C:\Windows\WindowsUpdate.log
2013-12-18 19:00 - 2013-10-29 20:16 - 00386792 _____ C:\Windows\setupact.log
2013-12-18 18:57 - 2013-10-19 18:46 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-18 18:52 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-17 18:19 - 2013-12-17 18:19 - 00000830 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:08 - 2013-12-16 11:05 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-15 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-15 09:35 - 2013-10-19 19:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 13:56 - 2013-11-28 12:53 - 00024104 _____ C:\Users\JST\file.log
2013-12-12 13:56 - 2013-11-28 12:53 - 00009504 _____ C:\Users\JST\file.err
2013-12-12 13:56 - 2013-10-22 20:01 - 00000000 ____D C:\Users\JST\AppData\Roaming\Ansys
2013-12-12 13:56 - 2013-10-19 18:43 - 00000000 ____D C:\Users\JST
2013-12-12 13:15 - 2013-11-28 12:53 - 00000075 _____ C:\Users\JST\menust.tmp
2013-12-12 13:03 - 2009-07-14 05:33 - 00410640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-12 08:46 - 2013-10-19 20:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 08:45 - 2013-10-19 23:21 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 08:43 - 2013-10-19 23:21 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:43 - 2013-12-03 21:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-10 14:29 - 2013-10-19 21:14 - 00000000 ____D C:\Users\JST\.msca
2013-12-09 12:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-06 12:20 - 2013-10-29 20:16 - 00000000 _____ C:\Windows\setuperr.log
2013-12-06 12:20 - 2013-10-20 10:38 - 00000000 ____D C:\Users\JST\AppData\Roaming\Media Player Classic
2013-12-06 12:20 - 2013-10-19 20:24 - 00000000 ____D C:\Users\JST\AppData\Roaming\DAEMON Tools Lite
2013-12-06 12:20 - 2013-10-19 19:34 - 00000000 ____D C:\Windows\Panther
2013-12-03 19:23 - 2013-12-03 19:07 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:08 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-12-02 20:09 - 2013-11-02 21:06 - 00000000 ___RD C:\Users\JST\Documents\My Flash
2013-11-28 19:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-26 11:11 - 2013-12-12 08:46 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 08:46 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 08:47 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 08:47 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 08:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 08:47 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 08:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
2013-11-19 03:33 - 2013-10-19 20:05 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
Some content of TEMP:
====================
C:\Users\JST\AppData\Local\Temp\FreemakeVideoConverter_4.1.2.1.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-15 21:18
==================== End Of Log ============================
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
MountPoints2: {52efd5af-38f4-11e3-bea8-001e6808f4db} - F:\setup.exe
SearchScopes: HKCU - DefaultScope {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
Prikladam aj ten adition.txt
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 18-12-2013 03
Ran by JST at 2013-12-18 20:46:06 Run:1
Running from C:\Users\JST\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
MountPoints2: {52efd5af-38f4-11e3-bea8-001e6808f4db} - F:\setup.exe
SearchScopes: HKCU - DefaultScope {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
End
*****************
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52efd5af-38f4-11e3-bea8-001e6808f4db} => Key deleted successfully.
HKCR\CLSID\{52efd5af-38f4-11e3-bea8-001e6808f4db} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} => Value deleted successfully.
HKCR\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} => Key not found.
==== End of Fixlog ====
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 18-12-2013 03
Ran by JST at 2013-12-18 20:46:06 Run:1
Running from C:\Users\JST\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
MountPoints2: {52efd5af-38f4-11e3-bea8-001e6808f4db} - F:\setup.exe
SearchScopes: HKCU - DefaultScope {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
SearchScopes: HKCU - {AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} URL = http://www.daemon-search.com/search?q={searchTerms}
Toolbar: HKCU - No Name - {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
End
*****************
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{52efd5af-38f4-11e3-bea8-001e6808f4db} => Key deleted successfully.
HKCR\CLSID\{52efd5af-38f4-11e3-bea8-001e6808f4db} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{AD22EBAF-0D18-4fc7-90CC-5EA0ABBE9EB8} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{32099AAC-C132-4136-9E9A-4E364A424E17} => Value deleted successfully.
HKCR\CLSID\{32099AAC-C132-4136-9E9A-4E364A424E17} => Key not found.
==== End of Fixlog ====
- Přílohy
-
- Addition.rar
- (5.56 KiB) Staženo 105 x
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
Změnilo se něco?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
no skor nie , potom som resetol nb vydalo to raz ten zvuk a uz je ticho ani v spravcovi zariadeni to nepreblikuje stale tie polozky, nieco s tym daemonom bolo??
- Rudy
- Site Admin
- Příspěvky: 119403
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: stale sa odpojuje a pripojuje zariadenie
Dejte ještě log ComboFix:
Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe
pote spustte aplikaci pod uctem s administratorskym opravnenim
hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.
v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se
jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine
aplikace ani nic jineho
behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)
upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,
pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k
nezadoucim kolizim s rezidentem antispyware.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:

e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: stale sa odpojuje a pripojuje zariadenie
takze vcera mi to teda po tom restarte nevydavalo zvuk, combofix sa mi vcera vecer zasekol na 4 stepe tak som to po hodine cakania vypol a siel spat a dnes rano ho spustil znova s tym ze opat nb vydava zvuky odpojenia a pripojenia
tu je log::
ComboFix 13-12-18.01 - JST . 12. 2013 9:30.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2047.977 [GMT 1:00]
Running from: c:\users\JST\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\JST\AppData\Local\Msgbox.exe
c:\users\JST\menust.tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-11-19 to 2013-12-19 )))))))))))))))))))))))))))))))
.
.
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\JST\AppData\Local\temp
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-18 19:20 . 2013-12-18 19:20 -------- d-----w- C:\FRST
2013-12-17 17:57 . 2013-12-04 02:57 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{24AA9855-7FD2-4F18-96D0-29B0B35DF036}\mpengine.dll
2013-12-16 10:05 . 2013-12-16 10:12 -------- d-----w- c:\programdata\Freemake
2013-12-16 10:05 . 2013-12-16 10:12 -------- d-----w- c:\program files\Freemake
2013-12-12 07:46 . 2013-11-26 08:16 4243968 ----a-w- c:\windows\system32\jscript9.dll
2013-12-12 07:43 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-12 07:43 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-12 07:38 . 2013-10-30 02:19 301568 ----a-w- c:\windows\system32\msieftp.dll
2013-12-12 07:38 . 2013-10-19 01:36 159232 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-12 07:38 . 2013-10-12 02:04 121856 ----a-w- c:\windows\system32\wshom.ocx
2013-12-12 07:38 . 2013-10-12 02:03 163840 ----a-w- c:\windows\system32\scrrun.dll
2013-12-12 07:38 . 2013-10-12 01:15 141824 ----a-w- c:\windows\system32\wscript.exe
2013-12-12 07:38 . 2013-10-12 01:15 126976 ----a-w- c:\windows\system32\cscript.exe
2013-12-12 07:38 . 2013-11-23 18:26 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-12 07:37 . 2013-11-12 02:07 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-12 07:36 . 2013-10-30 01:27 2349056 ----a-w- c:\windows\system32\win32k.sys
2013-12-12 07:36 . 2013-10-04 01:49 81408 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-12 07:36 . 2013-10-04 01:17 177152 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-09 11:36 . 2013-12-09 11:36 -------- d-----w- c:\windows\H264MediaPlayPlugins
2013-12-03 18:07 . 2013-12-03 18:23 -------- d-----w- c:\programdata\DassaultSystemes
2013-12-03 18:07 . 2013-12-03 18:08 -------- d-----w- c:\users\JST\AppData\Local\DassaultSystemes
2013-12-03 18:07 . 2013-12-03 18:07 -------- d-----w- c:\users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 18:36 . 2009-07-24 09:49 114688 ----a-w- c:\windows\system32\RicohMediadriverVer.dll
2013-11-28 18:36 . 2009-06-25 15:25 38400 ----a-w- c:\windows\system32\drivers\rixdptsk.sys
2013-11-28 18:36 . 2009-06-25 15:58 48128 ----a-w- c:\windows\system32\drivers\rimmptsk.sys
2013-11-28 18:36 . 2009-06-25 15:10 44544 ----a-w- c:\windows\system32\drivers\rimsptsk.sys
2013-11-28 18:36 . 2004-09-04 02:00 90112 ----a-w- c:\windows\system32\snymsico.dll
2013-11-28 18:36 . 2007-07-25 11:48 172032 ----a-w- c:\windows\system32\rixdicon.dll
2013-11-28 18:36 . 2013-11-28 18:36 -------- d--h--w- c:\program files\InstallShield Installation Information
2013-11-28 18:30 . 2013-11-28 18:30 -------- d-----w- c:\windows\Migration
2013-11-28 18:28 . 2013-11-28 18:28 -------- d-----w- c:\windows\system32\SDA
2013-11-21 18:09 . 2013-11-21 18:09 -------- d-----w- c:\program files\ESET
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-11 18:27 . 2013-10-19 18:59 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:27 . 2013-10-19 18:59 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-19 02:33 . 2013-10-19 19:05 230048 ------w- c:\windows\system32\MpSigStub.exe
2013-10-20 18:29 . 2013-10-20 18:29 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-10-20 18:28 . 2013-10-20 18:28 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 906240 ----a-w- c:\windows\system32\FntCache.dll
2013-10-20 18:28 . 2013-10-20 18:28 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-10-20 18:28 . 2013-10-20 18:28 2284544 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-10-20 18:28 . 2013-10-20 18:28 1158144 ----a-w- c:\windows\system32\XpsPrint.dll
2013-10-20 18:28 . 2013-10-20 18:28 220160 ----a-w- c:\windows\system32\d3d10core.dll
2013-10-20 18:28 . 2013-10-20 18:28 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-10-20 18:28 . 2013-10-20 18:28 1080832 ----a-w- c:\windows\system32\d3d10.dll
2013-10-20 18:28 . 2013-10-20 18:28 604160 ----a-w- c:\windows\system32\d3d10level9.dll
2013-10-20 18:28 . 2013-10-20 18:28 249856 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-10-20 18:28 . 2013-10-20 18:28 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-10-20 18:28 . 2013-10-20 18:28 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2013-10-20 18:28 . 2013-10-20 18:28 3419136 ----a-w- c:\windows\system32\d2d1.dll
2013-10-20 18:28 . 2013-10-20 18:28 293376 ----a-w- c:\windows\system32\dxgi.dll
2013-10-20 18:28 . 2013-10-20 18:28 1988096 ----a-w- c:\windows\system32\d3d10warp.dll
2013-10-20 18:28 . 2013-10-20 18:28 187392 ----a-w- c:\windows\system32\UIAnimation.dll
2013-10-20 18:25 . 2013-10-20 18:25 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-10-20 09:55 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-10-20 07:11 . 2011-03-28 16:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-10-19 19:24 . 2013-10-19 19:24 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-10-12 02:03 . 2013-11-13 18:18 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:01 . 2013-11-13 18:18 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:01 . 2013-11-13 18:18 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-05 19:57 . 2013-11-13 18:18 1168384 ----a-w- c:\windows\system32\crypt32.dll
2013-10-04 01:58 . 2013-11-13 18:19 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 01:56 . 2013-11-13 18:19 168960 ----a-w- c:\windows\system32\credui.dll
2013-10-04 01:56 . 2013-11-13 18:19 1796096 ----a-w- c:\windows\system32\authui.dll
2013-10-03 01:58 . 2013-11-13 18:18 305152 ----a-w- c:\windows\system32\gdi32.dll
2013-09-25 02:01 . 2013-11-13 18:19 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-09-25 02:01 . 2013-11-13 18:19 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-09-25 01:57 . 2013-11-13 18:19 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-09-25 01:57 . 2013-11-13 18:19 22016 ----a-w- c:\windows\system32\secur32.dll
2013-09-25 01:57 . 2013-11-13 18:19 247808 ----a-w- c:\windows\system32\schannel.dll
2013-09-25 01:56 . 2013-11-13 18:19 220160 ----a-w- c:\windows\system32\ncrypt.dll
2013-09-25 01:56 . 2013-11-13 18:19 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2013-09-25 00:49 . 2013-11-13 18:19 22016 ----a-w- c:\windows\system32\lsass.exe
2013-09-25 00:49 . 2013-11-13 18:19 15872 ----a-w- c:\windows\system32\sspisrv.dll
2011-06-22 09:44 . 2011-06-22 09:44 158720 ----a-w- c:\program files\internet explorer\plugins\LV2011ActiveXControl.dll
2007-02-08 08:48 . 2007-02-08 08:48 133920 ----a-w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll
2010-10-19 16:15 . 2010-10-19 16:15 158720 ----a-w- c:\program files\internet explorer\plugins\LV90ActiveXControl.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"icq"="c:\users\JST\AppData\Roaming\ICQM\icq.exe" [2013-10-19 28698984]
"NIRegistrationWizard"="c:\program files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe" [2010-06-21 846520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-05-16 1012000]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"NI Update Service"="c:\program files\National Instruments\Shared\Update Service\NIUpdateService.exe" [2011-06-07 3002976]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5110672]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-20 280576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NI Error Reporting.lnk - c:\program files\National Instruments\Shared\NI Error Reporting\nierserver.exe [2011-6-19 619672]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032]
R3 ni1006k;NI PXI-1006 Chassis Pilot;c:\windows\system32\drivers\ni1006k.sys [2011-04-08 26192]
R3 ni1045k;NI PXI-1045 Chassis Pilot;c:\windows\system32\drivers\ni1045kl.sys [2011-04-08 11344]
R3 ni1065k;NI PXIe-1065 Chassis Pilot;c:\windows\system32\drivers\ni1065k.sys [2011-04-08 22608]
R3 nidimk;nidimk;c:\windows\system32\drivers\nidimkl.sys [2010-06-11 11432]
R3 nipalfwedl;nipalfwedl;c:\windows\system32\drivers\nipalfwedl.sys [2011-02-14 11968]
R3 nipalusbedl;nipalusbedl;c:\windows\system32\drivers\nipalusbedl.sys [2011-02-14 11968]
R3 nipxigpk;NI PXI Generic Chassis Pilot;c:\windows\system32\drivers\nipxigpk.sys [2010-06-14 21144]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-10-19 1343400]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
S0 nipbcfk;National Instruments Class Upper Filter Driver;c:\windows\System32\drivers\nipbcfk.sys [2010-03-24 15448]
S0 nipxibaf;National Instruments PXI Bridge Access Driver;c:\windows\System32\drivers\nipxibaf.sys [2011-04-08 58504]
S0 nipxibrc;National Instruments PXI Bridge Configuration Driver;c:\windows\System32\drivers\nipxibrc.sys [2011-04-08 42136]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2013-10-19 691696]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
S2 ANSYS, Inc. License Manager;ANSYS, Inc. License Manager;c:\program files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [2011-10-17 3601920]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 NIApplicationWebServer;NI Application Web Server;c:\program files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [2011-05-27 50336]
S2 niLXIDiscovery;National Instruments LXI Discovery Service;c:\program files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [2011-06-19 233664]
S2 nimDNSResponder;National Instruments mDNS Responder Service;c:\program files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [2011-06-01 194224]
S2 NINetworkDiscovery;NI Network Discovery;c:\program files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [2011-06-10 121032]
S2 nipxirmk;nipxirmk;c:\windows\system32\drivers\nipxirmkl.sys [2010-06-14 11416]
S2 NiViPxiK;NI-VISA PXI Driver;c:\windows\system32\drivers\NiViPxiKl.sys [2011-06-19 11944]
S3 ATSwpWDF;AuthenTec TruePrint WBF Driver;c:\windows\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 971752]
S3 NiViPciK;NI-VISA PCI Driver;c:\windows\system32\drivers\NiViPciKl.sys [2011-06-19 11944]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HsfXAudioService REG_MULTI_SZ HsfXAudioService
.
Contents of the 'Scheduled Tasks' folder
.
2013-12-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-19 18:27]
.
.
------- Supplementary Scan -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.sk/
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-12-19 10:14:46
ComboFix-quarantined-files.txt 2013-12-19 09:14
.
Pre-Run: 35 644 944 384 bytes free
Post-Run: 37 706 977 280 bytes free
.
- - End Of File - - 56FF1CB27B6A1FA6F29774B6AF57BB9E
A36C5E4F47E84449FF07ED3517B43A31
tu je log::
ComboFix 13-12-18.01 - JST . 12. 2013 9:30.2.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1250.421.1051.18.2047.977 [GMT 1:00]
Running from: c:\users\JST\Desktop\ComboFix.exe
AV: ESET Smart Security 7.0 *Disabled/Updated* {19259FAE-8396-A113-46DB-15B0E7DFA289}
FW: ESET personal firewall *Disabled* {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
SP: ESET Smart Security 7.0 *Disabled/Updated* {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
* Created a new restore point
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\users\JST\AppData\Local\Msgbox.exe
c:\users\JST\menust.tmp
.
.
((((((((((((((((((((((((( Files Created from 2013-11-19 to 2013-12-19 )))))))))))))))))))))))))))))))
.
.
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\JST\AppData\Local\temp
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\UpdatusUser\AppData\Local\temp
2013-12-19 09:12 . 2013-12-19 09:12 -------- d-----w- c:\users\Default\AppData\Local\temp
2013-12-18 19:20 . 2013-12-18 19:20 -------- d-----w- C:\FRST
2013-12-17 17:57 . 2013-12-04 02:57 7760024 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{24AA9855-7FD2-4F18-96D0-29B0B35DF036}\mpengine.dll
2013-12-16 10:05 . 2013-12-16 10:12 -------- d-----w- c:\programdata\Freemake
2013-12-16 10:05 . 2013-12-16 10:12 -------- d-----w- c:\program files\Freemake
2013-12-12 07:46 . 2013-11-26 08:16 4243968 ----a-w- c:\windows\system32\jscript9.dll
2013-12-12 07:43 . 2013-05-10 04:56 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2013-12-12 07:43 . 2013-05-10 03:48 164864 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2013-12-12 07:38 . 2013-10-30 02:19 301568 ----a-w- c:\windows\system32\msieftp.dll
2013-12-12 07:38 . 2013-10-19 01:36 159232 ----a-w- c:\windows\system32\imagehlp.dll
2013-12-12 07:38 . 2013-10-12 02:04 121856 ----a-w- c:\windows\system32\wshom.ocx
2013-12-12 07:38 . 2013-10-12 02:03 163840 ----a-w- c:\windows\system32\scrrun.dll
2013-12-12 07:38 . 2013-10-12 01:15 141824 ----a-w- c:\windows\system32\wscript.exe
2013-12-12 07:38 . 2013-10-12 01:15 126976 ----a-w- c:\windows\system32\cscript.exe
2013-12-12 07:38 . 2013-11-23 18:26 417792 ----a-w- c:\windows\system32\WMPhoto.dll
2013-12-12 07:37 . 2013-11-12 02:07 2048 ----a-w- c:\windows\system32\tzres.dll
2013-12-12 07:36 . 2013-10-30 01:27 2349056 ----a-w- c:\windows\system32\win32k.sys
2013-12-12 07:36 . 2013-10-04 01:49 81408 ----a-w- c:\windows\system32\drivers\drmk.sys
2013-12-12 07:36 . 2013-10-04 01:17 177152 ----a-w- c:\windows\system32\drivers\portcls.sys
2013-12-09 11:36 . 2013-12-09 11:36 -------- d-----w- c:\windows\H264MediaPlayPlugins
2013-12-03 18:07 . 2013-12-03 18:23 -------- d-----w- c:\programdata\DassaultSystemes
2013-12-03 18:07 . 2013-12-03 18:08 -------- d-----w- c:\users\JST\AppData\Local\DassaultSystemes
2013-12-03 18:07 . 2013-12-03 18:07 -------- d-----w- c:\users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 18:36 . 2009-07-24 09:49 114688 ----a-w- c:\windows\system32\RicohMediadriverVer.dll
2013-11-28 18:36 . 2009-06-25 15:25 38400 ----a-w- c:\windows\system32\drivers\rixdptsk.sys
2013-11-28 18:36 . 2009-06-25 15:58 48128 ----a-w- c:\windows\system32\drivers\rimmptsk.sys
2013-11-28 18:36 . 2009-06-25 15:10 44544 ----a-w- c:\windows\system32\drivers\rimsptsk.sys
2013-11-28 18:36 . 2004-09-04 02:00 90112 ----a-w- c:\windows\system32\snymsico.dll
2013-11-28 18:36 . 2007-07-25 11:48 172032 ----a-w- c:\windows\system32\rixdicon.dll
2013-11-28 18:36 . 2013-11-28 18:36 -------- d--h--w- c:\program files\InstallShield Installation Information
2013-11-28 18:30 . 2013-11-28 18:30 -------- d-----w- c:\windows\Migration
2013-11-28 18:28 . 2013-11-28 18:28 -------- d-----w- c:\windows\system32\SDA
2013-11-21 18:09 . 2013-11-21 18:09 -------- d-----w- c:\program files\ESET
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2013-12-11 18:27 . 2013-10-19 18:59 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:27 . 2013-10-19 18:59 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-19 02:33 . 2013-10-19 19:05 230048 ------w- c:\windows\system32\MpSigStub.exe
2013-10-20 18:29 . 2013-10-20 18:29 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-10-20 18:28 . 2013-10-20 18:28 4096 ---ha-w- c:\windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 5632 ---ha-w- c:\windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3584 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 3072 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 2560 ---ha-w- c:\windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 10752 ---ha-w- c:\windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2013-10-20 18:28 . 2013-10-20 18:28 906240 ----a-w- c:\windows\system32\FntCache.dll
2013-10-20 18:28 . 2013-10-20 18:28 364544 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2013-10-20 18:28 . 2013-10-20 18:28 2284544 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2013-10-20 18:28 . 2013-10-20 18:28 1158144 ----a-w- c:\windows\system32\XpsPrint.dll
2013-10-20 18:28 . 2013-10-20 18:28 220160 ----a-w- c:\windows\system32\d3d10core.dll
2013-10-20 18:28 . 2013-10-20 18:28 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-10-20 18:28 . 2013-10-20 18:28 1080832 ----a-w- c:\windows\system32\d3d10.dll
2013-10-20 18:28 . 2013-10-20 18:28 604160 ----a-w- c:\windows\system32\d3d10level9.dll
2013-10-20 18:28 . 2013-10-20 18:28 249856 ----a-w- c:\windows\system32\d3d10_1core.dll
2013-10-20 18:28 . 2013-10-20 18:28 207872 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2013-10-20 18:28 . 2013-10-20 18:28 161792 ----a-w- c:\windows\system32\d3d10_1.dll
2013-10-20 18:28 . 2013-10-20 18:28 3419136 ----a-w- c:\windows\system32\d2d1.dll
2013-10-20 18:28 . 2013-10-20 18:28 293376 ----a-w- c:\windows\system32\dxgi.dll
2013-10-20 18:28 . 2013-10-20 18:28 1988096 ----a-w- c:\windows\system32\d3d10warp.dll
2013-10-20 18:28 . 2013-10-20 18:28 187392 ----a-w- c:\windows\system32\UIAnimation.dll
2013-10-20 18:25 . 2013-10-20 18:25 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-10-20 09:55 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-10-20 07:11 . 2011-03-28 16:36 22240 ----a-w- c:\programdata\Microsoft\IdentityCRL\production\ppcrlconfig600.dll
2013-10-19 19:24 . 2013-10-19 19:24 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2013-10-12 02:03 . 2013-11-13 18:18 656896 ----a-w- c:\windows\system32\nshwfp.dll
2013-10-12 02:01 . 2013-11-13 18:18 679424 ----a-w- c:\windows\system32\IKEEXT.DLL
2013-10-12 02:01 . 2013-11-13 18:18 216576 ----a-w- c:\windows\system32\FWPUCLNT.DLL
2013-10-05 19:57 . 2013-11-13 18:18 1168384 ----a-w- c:\windows\system32\crypt32.dll
2013-10-04 01:58 . 2013-11-13 18:19 152576 ----a-w- c:\windows\system32\SmartcardCredentialProvider.dll
2013-10-04 01:56 . 2013-11-13 18:19 168960 ----a-w- c:\windows\system32\credui.dll
2013-10-04 01:56 . 2013-11-13 18:19 1796096 ----a-w- c:\windows\system32\authui.dll
2013-10-03 01:58 . 2013-11-13 18:18 305152 ----a-w- c:\windows\system32\gdi32.dll
2013-09-25 02:01 . 2013-11-13 18:19 136640 ----a-w- c:\windows\system32\drivers\ksecpkg.sys
2013-09-25 02:01 . 2013-11-13 18:19 67520 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2013-09-25 01:57 . 2013-11-13 18:19 99840 ----a-w- c:\windows\system32\sspicli.dll
2013-09-25 01:57 . 2013-11-13 18:19 22016 ----a-w- c:\windows\system32\secur32.dll
2013-09-25 01:57 . 2013-11-13 18:19 247808 ----a-w- c:\windows\system32\schannel.dll
2013-09-25 01:56 . 2013-11-13 18:19 220160 ----a-w- c:\windows\system32\ncrypt.dll
2013-09-25 01:56 . 2013-11-13 18:19 1038848 ----a-w- c:\windows\system32\lsasrv.dll
2013-09-25 00:49 . 2013-11-13 18:19 22016 ----a-w- c:\windows\system32\lsass.exe
2013-09-25 00:49 . 2013-11-13 18:19 15872 ----a-w- c:\windows\system32\sspisrv.dll
2011-06-22 09:44 . 2011-06-22 09:44 158720 ----a-w- c:\program files\internet explorer\plugins\LV2011ActiveXControl.dll
2007-02-08 08:48 . 2007-02-08 08:48 133920 ----a-w- c:\program files\internet explorer\plugins\LV82ActiveXControl.dll
2010-10-19 16:15 . 2010-10-19 16:15 158720 ----a-w- c:\program files\internet explorer\plugins\LV90ActiveXControl.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"icq"="c:\users\JST\AppData\Roaming\ICQM\icq.exe" [2013-10-19 28698984]
"NIRegistrationWizard"="c:\program files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe" [2010-06-21 846520]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Nvtmru"="c:\program files\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [2013-05-16 1012000]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2013-04-04 958576]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2009-02-26 30040]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2011-10-14 2299176]
"NI Update Service"="c:\program files\National Instruments\Shared\Update Service\NIUpdateService.exe" [2011-06-07 3002976]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2013-09-12 5110672]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"SPReview"="c:\windows\System32\SPReview\SPReview.exe" [2013-10-20 280576]
.
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
NI Error Reporting.lnk - c:\program files\National Instruments\Shared\NI Error Reporting\nierserver.exe [2011-6-19 619672]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe [2013-11-26 108032]
R3 ni1006k;NI PXI-1006 Chassis Pilot;c:\windows\system32\drivers\ni1006k.sys [2011-04-08 26192]
R3 ni1045k;NI PXI-1045 Chassis Pilot;c:\windows\system32\drivers\ni1045kl.sys [2011-04-08 11344]
R3 ni1065k;NI PXIe-1065 Chassis Pilot;c:\windows\system32\drivers\ni1065k.sys [2011-04-08 22608]
R3 nidimk;nidimk;c:\windows\system32\drivers\nidimkl.sys [2010-06-11 11432]
R3 nipalfwedl;nipalfwedl;c:\windows\system32\drivers\nipalfwedl.sys [2011-02-14 11968]
R3 nipalusbedl;nipalusbedl;c:\windows\system32\drivers\nipalusbedl.sys [2011-02-14 11968]
R3 nipxigpk;NI PXI Generic Chassis Pilot;c:\windows\system32\drivers\nipxigpk.sys [2010-06-14 21144]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2012-08-23 14848]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\DRIVERS\VSTAZL3.SYS [2009-07-13 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\DRIVERS\VSTDPV3.SYS [2009-07-13 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\DRIVERS\VSTCNXT3.SYS [2009-07-13 661504]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2012-08-23 49664]
R3 WatAdminSvc;Služba Windows Activation Technologies;c:\windows\system32\Wat\WatAdminSvc.exe [2013-10-19 1343400]
S0 epfwwfp;epfwwfp;c:\windows\system32\DRIVERS\epfwwfp.sys [2013-09-17 49240]
S0 nipbcfk;National Instruments Class Upper Filter Driver;c:\windows\System32\drivers\nipbcfk.sys [2010-03-24 15448]
S0 nipxibaf;National Instruments PXI Bridge Access Driver;c:\windows\System32\drivers\nipxibaf.sys [2011-04-08 58504]
S0 nipxibrc;National Instruments PXI Bridge Configuration Driver;c:\windows\System32\drivers\nipxibrc.sys [2011-04-08 42136]
S0 sptd;sptd;c:\windows\System32\Drivers\sptd.sys [2013-10-19 691696]
S1 eamonm;eamonm;c:\windows\system32\DRIVERS\eamonm.sys [2013-09-17 188808]
S1 ehdrv;ehdrv;c:\windows\system32\DRIVERS\ehdrv.sys [2013-09-17 134248]
S1 EpfwLWF;Epfw NDIS LightWeight Filter;c:\windows\system32\DRIVERS\EpfwLWF.sys [2013-09-17 37416]
S2 ANSYS, Inc. License Manager;ANSYS, Inc. License Manager;c:\program files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [2011-10-17 3601920]
S2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [2013-09-12 1337752]
S2 HsfXAudioService;HsfXAudioService;c:\windows\system32\svchost.exe [2009-07-14 20992]
S2 NIApplicationWebServer;NI Application Web Server;c:\program files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [2011-05-27 50336]
S2 niLXIDiscovery;National Instruments LXI Discovery Service;c:\program files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [2011-06-19 233664]
S2 nimDNSResponder;National Instruments mDNS Responder Service;c:\program files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [2011-06-01 194224]
S2 NINetworkDiscovery;NI Network Discovery;c:\program files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [2011-06-10 121032]
S2 nipxirmk;nipxirmk;c:\windows\system32\drivers\nipxirmkl.sys [2010-06-14 11416]
S2 NiViPxiK;NI-VISA PXI Driver;c:\windows\system32\drivers\NiViPxiKl.sys [2011-06-19 11944]
S3 ATSwpWDF;AuthenTec TruePrint WBF Driver;c:\windows\system32\DRIVERS\ATSwpWDF.sys [2012-10-18 971752]
S3 NiViPciK;NI-VISA PCI Driver;c:\windows\system32\drivers\NiViPciKl.sys [2011-06-19 11944]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - WS2IFSL
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HsfXAudioService REG_MULTI_SZ HsfXAudioService
.
Contents of the 'Scheduled Tasks' folder
.
2013-12-19 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2013-10-19 18:27]
.
.
------- Supplementary Scan -------
.
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default\
FF - prefs.js: browser.startup.homepage - hxxps://www.google.sk/
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2013-12-19 10:14:46
ComboFix-quarantined-files.txt 2013-12-19 09:14
.
Pre-Run: 35 644 944 384 bytes free
Post-Run: 37 706 977 280 bytes free
.
- - End Of File - - 56FF1CB27B6A1FA6F29774B6AF57BB9E
A36C5E4F47E84449FF07ED3517B43A31
Re: stale sa odpojuje a pripojuje zariadenie
ospravedlnujem sa za vstup:
vloz este aktualny log FRST
vloz este aktualny log FRST
FRST |ADWCleaner |MBAM |CCleaner |AVPTool
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
V prípade spokojnosti je možné podporiť fórum https://platba.viry.cz/payment/
Re: stale sa odpojuje a pripojuje zariadenie
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 18-12-2013 05
Ran by JST (administrator) on JST-PC on 19-12-2013 11:25:06
Running from C:\Users\JST\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(National Instruments Corporation) C:\Windows\System32\lkads.exe
(National Instruments Corporation) C:\Program Files\National Instruments\MAX\nimxs.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Flexera Software, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\lmgrd.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansyslmd.exe
(National Instruments, Inc.) C:\Windows\System32\lkcitdl.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Error Reporting\nierserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(National Instruments Corporation) C:\Windows\System32\lktsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) C:\Windows\System32\nipxism.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(National Instruments Corporation) C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
() C:\Users\JST\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [NI Update Service] - C:\Program Files\National Instruments\Shared\Update Service\NIUpdateService.exe [3002976 2011-06-07] (National Instruments)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
HKCU\...\Run: [icq] - C:\Users\JST\AppData\Roaming\ICQM\icq.exe [28698984 2013-10-19] (ICQ)
HKCU\...\Run: [NIRegistrationWizard] - C:\Program Files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [846520 2010-06-21] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0C35A1F68CDCE01
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [24280] (National Instruments Corporation)
Tcpip\..\Interfaces\{C4D8C9AC-FB37-4FF6-A2C0-06C691312E5A}: [NameServer]195.80.175.66 195.80.171.4
FireFox:
========
FF ProfilePath: C:\Users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default
FF Homepage: https://www.google.sk/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
========================== Services (Whitelisted) =================
R2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [3601920 2011-10-17] (ANSYS, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 LkCitadelServer; C:\Windows\system32\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\Windows\system32\lkads.exe [46192 2011-06-14] (National Instruments Corporation)
R2 lkTimeSync; C:\Windows\system32\lktsrv.exe [56952 2011-06-14] (National Instruments Corporation)
R2 mxssvr; C:\Program Files\National Instruments\MAX\nimxs.exe [12696 2011-06-14] (National Instruments Corporation)
R2 NIApplicationWebServer; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [50336 2011-05-27] (National Instruments Corporation)
R2 NIDomainService; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [362104 2011-06-14] (National Instruments Corporation)
S3 NILM License Manager; C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
R2 niLXIDiscovery; C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [233664 2011-06-19] (National Instruments Corporation)
R2 nimDNSResponder; C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [194224 2011-06-01] (National Instruments Corporation)
R2 NINetworkDiscovery; C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [121032 2011-06-10] (National Instruments Corporation)
R2 nipxirmu; C:\Windows\system32\nipxism.exe [18584 2010-06-14] (National Instruments Corporation)
R2 niSvcLoc; C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe [50328 2011-05-27] (National Instruments Corporation)
R2 NITaggerService; C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe [676016 2011-06-14] (National Instruments Corporation)
S3 OpcEnum; C:\Windows\system32\OpcEnum.exe [98304 2009-06-03] (OPC Foundation)
==================== Drivers (Whitelisted) ====================
R2 cvintdrv; C:\Windows\System32\Drivers\cvintdrv.sys [4096 2010-01-19] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S3 ni1006k; C:\Windows\system32\drivers\ni1006k.sys [26192 2011-04-08] (National Instruments Corporation)
S3 ni1045k; C:\Windows\system32\drivers\ni1045kl.sys [11344 2011-04-08] (National Instruments Corporation)
S3 ni1065k; C:\Windows\system32\drivers\ni1065k.sys [22608 2011-04-08] (National Instruments Corporation)
S3 nidimk; C:\Windows\system32\drivers\nidimkl.sys [11432 2010-06-11] (National Instruments Corporation)
R3 nimdbgk; C:\Windows\system32\drivers\nimdbgkl.sys [11424 2010-06-11] (National Instruments Corporation)
R3 nimxdfk; C:\Windows\system32\drivers\nimxdfkl.sys [11416 2010-06-18] (National Instruments Corporation)
S3 niorbk; C:\Windows\system32\drivers\niorbkl.sys [11344 2009-06-14] (National Instruments Corporation)
S3 nipalfwedl; C:\Windows\System32\drivers\nipalfwedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 NIPALK; C:\Windows\System32\drivers\nipalk.sys [573592 2011-02-14] (National Instruments Corporation)
S3 nipalusbedl; C:\Windows\System32\drivers\nipalusbedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 nipbcfk; C:\Windows\System32\drivers\nipbcfk.sys [15448 2010-03-24] (National Instruments Corporation)
R0 nipxibaf; C:\Windows\System32\drivers\nipxibaf.sys [58504 2011-04-08] (National Instruments Corporation)
R0 nipxibrc; C:\Windows\System32\drivers\nipxibrc.sys [42136 2011-04-08] (National Instruments Corporation)
S3 nipxigpk; C:\Windows\system32\drivers\nipxigpk.sys [21144 2010-06-14] (National Instruments Corporation)
R2 nipxirmk; C:\Windows\system32\drivers\nipxirmkl.sys [11416 2010-06-14] (National Instruments Corporation)
R3 NiViPciK; C:\Windows\System32\drivers\NiViPciKl.sys [11944 2011-06-19] (National Instruments Corporation)
R2 NiViPxiK; C:\Windows\System32\drivers\NiViPxiKl.sys [11944 2011-06-19] (National Instruments Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2013-10-19] ()
U3 aiui0652; C:\Windows\System32\Drivers\aiui0652.sys [0 ] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\JST\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-19 11:25 - 2013-12-19 11:25 - 00011746 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-19 11:24 - 2013-12-19 11:24 - 00000000 ____D C:\Users\JST\Desktop\FRST-OlderVersion
2013-12-19 10:14 - 2013-12-19 10:14 - 00015564 _____ C:\ComboFix.txt
2013-12-18 22:22 - 2013-12-19 10:14 - 00000000 ____D C:\Qoobox
2013-12-18 22:22 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-18 22:22 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-18 22:22 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-18 22:21 - 2013-12-19 10:13 - 00000000 ____D C:\Windows\erdnt
2013-12-18 22:19 - 2013-12-18 22:20 - 05154906 ____R (Swearware) C:\Users\JST\Desktop\ComboFix.exe
2013-12-18 20:44 - 2013-12-18 20:44 - 00005693 _____ C:\Users\JST\Desktop\Addition.rar
2013-12-18 20:20 - 2013-12-19 11:24 - 00000000 ____D C:\FRST
2013-12-18 20:14 - 2013-12-19 11:24 - 01325654 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-17 18:19 - 2013-12-19 10:39 - 00001940 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:05 - 2013-12-16 11:08 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 08:47 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 08:47 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 08:47 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 08:47 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 08:47 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 08:47 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 08:47 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 08:47 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 08:47 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 08:47 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 08:47 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 08:47 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 08:47 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 08:47 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 08:47 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 08:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 08:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 08:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 08:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 08:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 08:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 08:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 08:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 08:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 08:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 08:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 08:37 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 08:36 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 08:36 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 08:36 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-03 21:43 - 2013-12-11 18:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-03 19:07 - 2013-12-03 19:23 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:08 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:36 - 2009-07-24 10:49 - 00114688 _____ (RICOH) C:\Windows\system32\RicohMediadriverVer.dll
2013-11-28 19:36 - 2009-06-25 16:58 - 00048128 _____ (REDC) C:\Windows\system32\Drivers\rimmptsk.sys
2013-11-28 19:36 - 2009-06-25 16:25 - 00038400 _____ (REDC) C:\Windows\system32\Drivers\rixdptsk.sys
2013-11-28 19:36 - 2009-06-25 16:10 - 00044544 _____ (REDC) C:\Windows\system32\Drivers\rimsptsk.sys
2013-11-28 19:36 - 2007-07-25 12:48 - 00172032 _____ (Ricoh Company,Ltd) C:\Windows\system32\rixdicon.dll
2013-11-28 19:36 - 2004-09-04 03:00 - 00090112 _____ (Sony Corporation) C:\Windows\system32\snymsico.dll
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 12:53 - 2013-12-12 13:56 - 00024104 _____ C:\Users\JST\file.log
2013-11-28 12:53 - 2013-12-12 13:56 - 00009504 _____ C:\Users\JST\file.err
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
==================== One Month Modified Files and Folders =======
2013-12-19 11:25 - 2013-12-19 11:25 - 00011746 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-19 11:24 - 2013-12-19 11:24 - 00000000 ____D C:\Users\JST\Desktop\FRST-OlderVersion
2013-12-19 11:24 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-19 11:24 - 2013-12-18 20:14 - 01325654 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-19 11:24 - 2013-11-02 21:05 - 00000000 ____D C:\Users\JST\AppData\Roaming\SWF.max
2013-12-19 10:47 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:47 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:44 - 2013-10-29 20:16 - 00418208 _____ C:\Windows\setupact.log
2013-12-19 10:44 - 2013-10-19 18:46 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 10:43 - 2013-10-19 18:38 - 01554860 _____ C:\Windows\WindowsUpdate.log
2013-12-19 10:39 - 2013-12-17 18:19 - 00001940 _____ C:\Windows\PFRO.log
2013-12-19 10:39 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-19 10:27 - 2013-10-19 19:59 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 10:14 - 2013-12-19 10:14 - 00015564 _____ C:\ComboFix.txt
2013-12-19 10:14 - 2013-12-18 22:22 - 00000000 ____D C:\Qoobox
2013-12-19 10:14 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2013-12-19 10:14 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2013-12-19 10:13 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\erdnt
2013-12-19 10:12 - 2013-10-19 18:43 - 00000000 ____D C:\Users\JST
2013-12-19 10:12 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2013-12-18 22:20 - 2013-12-18 22:19 - 05154906 ____R (Swearware) C:\Users\JST\Desktop\ComboFix.exe
2013-12-18 20:44 - 2013-12-18 20:44 - 00005693 _____ C:\Users\JST\Desktop\Addition.rar
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:08 - 2013-12-16 11:05 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-15 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-15 09:35 - 2013-10-19 19:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 13:56 - 2013-11-28 12:53 - 00024104 _____ C:\Users\JST\file.log
2013-12-12 13:56 - 2013-11-28 12:53 - 00009504 _____ C:\Users\JST\file.err
2013-12-12 13:56 - 2013-10-22 20:01 - 00000000 ____D C:\Users\JST\AppData\Roaming\Ansys
2013-12-12 13:03 - 2009-07-14 05:33 - 00410640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-12 08:46 - 2013-10-19 20:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 08:45 - 2013-10-19 23:21 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 08:43 - 2013-10-19 23:21 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:43 - 2013-12-03 21:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-10 14:29 - 2013-10-19 21:14 - 00000000 ____D C:\Users\JST\.msca
2013-12-09 12:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-06 12:20 - 2013-10-29 20:16 - 00000000 _____ C:\Windows\setuperr.log
2013-12-06 12:20 - 2013-10-20 10:38 - 00000000 ____D C:\Users\JST\AppData\Roaming\Media Player Classic
2013-12-06 12:20 - 2013-10-19 20:24 - 00000000 ____D C:\Users\JST\AppData\Roaming\DAEMON Tools Lite
2013-12-06 12:20 - 2013-10-19 19:34 - 00000000 ____D C:\Windows\Panther
2013-12-03 19:23 - 2013-12-03 19:07 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:08 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-12-02 20:09 - 2013-11-02 21:06 - 00000000 ___RD C:\Users\JST\Documents\My Flash
2013-11-28 19:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-26 11:11 - 2013-12-12 08:46 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 08:46 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 08:47 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 08:47 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 08:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 08:47 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 08:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
2013-11-19 03:33 - 2013-10-19 20:05 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-15 21:18
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:73.14 GB) (Free:35.4 GB) NTFS
Drive d: () (Fixed) (Total:75.81 GB) (Free:47.61 GB) NTFS
Available physical RAM: 674.14 MB
Total physical RAM: 2046.98 MB
Percentage of memory in use: 67%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: E24DB087)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=76 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\JST\Desktop" je 8 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by JST (administrator) on JST-PC on 19-12-2013 11:25:06
Running from C:\Users\JST\Desktop
Microsoft Windows 7 Home Premium Service Pack 1 (X86) OS Language: 041B
Internet Explorer Version 11
Boot Mode: Normal
==================== Processes (Whitelisted) ===================
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\ekrn.exe
(National Instruments Corporation) C:\Windows\System32\lkads.exe
(National Instruments Corporation) C:\Program Files\National Instruments\MAX\nimxs.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_monitor.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Flexera Software, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\lmgrd.exe
(ANSYS, Inc.) C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansyslmd.exe
(National Instruments, Inc.) C:\Windows\System32\lkcitdl.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Error Reporting\nierserver.exe
(Microsoft Corp.) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(National Instruments Corporation) C:\Windows\System32\lktsrv.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) C:\Windows\System32\nipxism.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(National Instruments Corporation) C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe
(National Instruments Corporation) C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_9_900_170.exe
() C:\Users\JST\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [Nvtmru] - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1012000 2013-05-16] (NVIDIA Corporation)
HKLM\...\Run: [Adobe ARM] - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [GrooveMonitor] - C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2299176 2011-10-14] (Synaptics Incorporated)
HKLM\...\Run: [NI Update Service] - C:\Program Files\National Instruments\Shared\Update Service\NIUpdateService.exe [3002976 2011-06-07] (National Instruments)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [5110672 2013-09-12] (ESET)
HKCU\...\Run: [icq] - C:\Users\JST\AppData\Roaming\ICQM\icq.exe [28698984 2013-10-19] (ICQ)
HKCU\...\Run: [NIRegistrationWizard] - C:\Program Files\National Instruments\Shared\RegistrationWizard\Bin\RegistrationWizard.exe [846520 2010-06-21] ()
==================== Internet (Whitelisted) ====================
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xD0C35A1F68CDCE01
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Winsock: Catalog5 09 C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [24280] (National Instruments Corporation)
Tcpip\..\Interfaces\{C4D8C9AC-FB37-4FF6-A2C0-06C691312E5A}: [NameServer]195.80.175.66 195.80.171.4
FireFox:
========
FF ProfilePath: C:\Users\JST\AppData\Roaming\Mozilla\Firefox\Profiles\txhhn0o9.default
FF Homepage: https://www.google.sk/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: Adobe Reader - C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
========================== Services (Whitelisted) =================
R2 ANSYS, Inc. License Manager; C:\Program Files\ANSYS Inc\Shared Files\Licensing\win32\ansysli_server.exe [3601920 2011-10-17] (ANSYS, Inc.)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\ekrn.exe [1337752 2013-09-12] (ESET)
R2 LkCitadelServer; C:\Windows\system32\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\Windows\system32\lkads.exe [46192 2011-06-14] (National Instruments Corporation)
R2 lkTimeSync; C:\Windows\system32\lktsrv.exe [56952 2011-06-14] (National Instruments Corporation)
R2 mxssvr; C:\Program Files\National Instruments\MAX\nimxs.exe [12696 2011-06-14] (National Instruments Corporation)
R2 NIApplicationWebServer; C:\Program Files\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [50336 2011-05-27] (National Instruments Corporation)
R2 NIDomainService; C:\Program Files\National Instruments\Shared\Security\nidmsrv.exe [362104 2011-06-14] (National Instruments Corporation)
S3 NILM License Manager; C:\Program Files\National Instruments\Shared\License Manager\Bin\lmgrd.exe [1427688 2010-08-02] (Macrovision Corporation)
R2 niLXIDiscovery; C:\Program Files\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [233664 2011-06-19] (National Instruments Corporation)
R2 nimDNSResponder; C:\Program Files\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [194224 2011-06-01] (National Instruments Corporation)
R2 NINetworkDiscovery; C:\Program Files\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [121032 2011-06-10] (National Instruments Corporation)
R2 nipxirmu; C:\Windows\system32\nipxism.exe [18584 2010-06-14] (National Instruments Corporation)
R2 niSvcLoc; C:\Program Files\National Instruments\Shared\NI WebServer\SystemWebServer.exe [50328 2011-05-27] (National Instruments Corporation)
R2 NITaggerService; C:\Program Files\National Instruments\Shared\Tagger\tagsrv.exe [676016 2011-06-14] (National Instruments Corporation)
S3 OpcEnum; C:\Windows\system32\OpcEnum.exe [98304 2009-06-03] (OPC Foundation)
==================== Drivers (Whitelisted) ====================
R2 cvintdrv; C:\Windows\System32\Drivers\cvintdrv.sys [4096 2010-01-19] ()
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [188808 2013-09-17] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [134248 2013-09-17] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [174400 2013-09-17] (ESET)
R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [37416 2013-09-17] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [49240 2013-09-17] (ESET)
R3 HpqRemHid; C:\Windows\System32\DRIVERS\HpqRemHid.sys [7168 2007-07-11] (Hewlett-Packard Development Company, L.P.)
S3 ni1006k; C:\Windows\system32\drivers\ni1006k.sys [26192 2011-04-08] (National Instruments Corporation)
S3 ni1045k; C:\Windows\system32\drivers\ni1045kl.sys [11344 2011-04-08] (National Instruments Corporation)
S3 ni1065k; C:\Windows\system32\drivers\ni1065k.sys [22608 2011-04-08] (National Instruments Corporation)
S3 nidimk; C:\Windows\system32\drivers\nidimkl.sys [11432 2010-06-11] (National Instruments Corporation)
R3 nimdbgk; C:\Windows\system32\drivers\nimdbgkl.sys [11424 2010-06-11] (National Instruments Corporation)
R3 nimxdfk; C:\Windows\system32\drivers\nimxdfkl.sys [11416 2010-06-18] (National Instruments Corporation)
S3 niorbk; C:\Windows\system32\drivers\niorbkl.sys [11344 2009-06-14] (National Instruments Corporation)
S3 nipalfwedl; C:\Windows\System32\drivers\nipalfwedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 NIPALK; C:\Windows\System32\drivers\nipalk.sys [573592 2011-02-14] (National Instruments Corporation)
S3 nipalusbedl; C:\Windows\System32\drivers\nipalusbedl.sys [11968 2011-02-14] (National Instruments Corporation)
R0 nipbcfk; C:\Windows\System32\drivers\nipbcfk.sys [15448 2010-03-24] (National Instruments Corporation)
R0 nipxibaf; C:\Windows\System32\drivers\nipxibaf.sys [58504 2011-04-08] (National Instruments Corporation)
R0 nipxibrc; C:\Windows\System32\drivers\nipxibrc.sys [42136 2011-04-08] (National Instruments Corporation)
S3 nipxigpk; C:\Windows\system32\drivers\nipxigpk.sys [21144 2010-06-14] (National Instruments Corporation)
R2 nipxirmk; C:\Windows\system32\drivers\nipxirmkl.sys [11416 2010-06-14] (National Instruments Corporation)
R3 NiViPciK; C:\Windows\System32\drivers\NiViPciKl.sys [11944 2011-06-19] (National Instruments Corporation)
R2 NiViPxiK; C:\Windows\System32\drivers\NiViPxiKl.sys [11944 2011-06-19] (National Instruments Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [691696 2013-10-19] ()
U3 aiui0652; C:\Windows\System32\Drivers\aiui0652.sys [0 ] (Microsoft Corporation)
U5 AppMgmt; C:\Windows\system32\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\Users\JST\AppData\Local\Temp\catchme.sys [x]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2013-12-19 11:25 - 2013-12-19 11:25 - 00011746 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-19 11:24 - 2013-12-19 11:24 - 00000000 ____D C:\Users\JST\Desktop\FRST-OlderVersion
2013-12-19 10:14 - 2013-12-19 10:14 - 00015564 _____ C:\ComboFix.txt
2013-12-18 22:22 - 2013-12-19 10:14 - 00000000 ____D C:\Qoobox
2013-12-18 22:22 - 2011-06-26 07:45 - 00256000 _____ C:\Windows\PEV.exe
2013-12-18 22:22 - 2010-11-07 18:20 - 00208896 _____ C:\Windows\MBR.exe
2013-12-18 22:22 - 2009-04-20 05:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00098816 _____ C:\Windows\sed.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00080412 _____ C:\Windows\grep.exe
2013-12-18 22:22 - 2000-08-31 01:00 - 00068096 _____ C:\Windows\zip.exe
2013-12-18 22:21 - 2013-12-19 10:13 - 00000000 ____D C:\Windows\erdnt
2013-12-18 22:19 - 2013-12-18 22:20 - 05154906 ____R (Swearware) C:\Users\JST\Desktop\ComboFix.exe
2013-12-18 20:44 - 2013-12-18 20:44 - 00005693 _____ C:\Users\JST\Desktop\Addition.rar
2013-12-18 20:20 - 2013-12-19 11:24 - 00000000 ____D C:\FRST
2013-12-18 20:14 - 2013-12-19 11:24 - 01325654 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-17 18:19 - 2013-12-19 10:39 - 00001940 _____ C:\Windows\PFRO.log
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:05 - 2013-12-16 11:12 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:05 - 2013-12-16 11:08 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 08:47 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-12-12 08:47 - 2013-11-26 10:22 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-12-12 08:47 - 2013-11-26 09:53 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-12-12 08:47 - 2013-11-26 09:52 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-12-12 08:47 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-12-12 08:47 - 2013-11-26 09:36 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-12-12 08:47 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-12-12 08:47 - 2013-11-26 09:29 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-12-12 08:47 - 2013-11-26 09:29 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-12-12 08:47 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-12-12 08:47 - 2013-11-26 09:13 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-12-12 08:47 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-12-12 08:47 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-12-12 08:47 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-12-12 08:47 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-12-12 08:47 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-12-12 08:46 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-12-12 08:46 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-12-12 08:43 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2013-12-12 08:43 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2013-12-12 08:38 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-12-12 08:38 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
2013-12-12 08:38 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
2013-12-12 08:38 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
2013-12-12 08:38 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
2013-12-12 08:38 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
2013-12-12 08:38 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
2013-12-12 08:37 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2013-12-12 08:36 - 2013-10-30 02:27 - 02349056 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-12-12 08:36 - 2013-10-04 02:49 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
2013-12-12 08:36 - 2013-10-04 02:17 - 00177152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-03 21:43 - 2013-12-11 18:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-03 19:07 - 2013-12-03 19:23 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:08 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:36 - 2009-07-24 10:49 - 00114688 _____ (RICOH) C:\Windows\system32\RicohMediadriverVer.dll
2013-11-28 19:36 - 2009-06-25 16:58 - 00048128 _____ (REDC) C:\Windows\system32\Drivers\rimmptsk.sys
2013-11-28 19:36 - 2009-06-25 16:25 - 00038400 _____ (REDC) C:\Windows\system32\Drivers\rixdptsk.sys
2013-11-28 19:36 - 2009-06-25 16:10 - 00044544 _____ (REDC) C:\Windows\system32\Drivers\rimsptsk.sys
2013-11-28 19:36 - 2007-07-25 12:48 - 00172032 _____ (Ricoh Company,Ltd) C:\Windows\system32\rixdicon.dll
2013-11-28 19:36 - 2004-09-04 03:00 - 00090112 _____ (Sony Corporation) C:\Windows\system32\snymsico.dll
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 12:53 - 2013-12-12 13:56 - 00024104 _____ C:\Users\JST\file.log
2013-11-28 12:53 - 2013-12-12 13:56 - 00009504 _____ C:\Users\JST\file.err
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
==================== One Month Modified Files and Folders =======
2013-12-19 11:25 - 2013-12-19 11:25 - 00011746 _____ C:\Users\JST\Desktop\FRST.txt
2013-12-19 11:24 - 2013-12-19 11:24 - 00000000 ____D C:\Users\JST\Desktop\FRST-OlderVersion
2013-12-19 11:24 - 2013-12-18 20:20 - 00000000 ____D C:\FRST
2013-12-19 11:24 - 2013-12-18 20:14 - 01325654 _____ (Farbar) C:\Users\JST\Desktop\FRST.exe
2013-12-19 11:24 - 2013-11-02 21:05 - 00000000 ____D C:\Users\JST\AppData\Roaming\SWF.max
2013-12-19 10:47 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:47 - 2009-07-14 05:34 - 00013232 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-12-19 10:44 - 2013-10-29 20:16 - 00418208 _____ C:\Windows\setupact.log
2013-12-19 10:44 - 2013-10-19 18:46 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI
2013-12-19 10:43 - 2013-10-19 18:38 - 01554860 _____ C:\Windows\WindowsUpdate.log
2013-12-19 10:39 - 2013-12-17 18:19 - 00001940 _____ C:\Windows\PFRO.log
2013-12-19 10:39 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-12-19 10:27 - 2013-10-19 19:59 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-12-19 10:14 - 2013-12-19 10:14 - 00015564 _____ C:\ComboFix.txt
2013-12-19 10:14 - 2013-12-18 22:22 - 00000000 ____D C:\Qoobox
2013-12-19 10:14 - 2009-07-14 03:37 - 00000000 __RHD C:\Users\Default
2013-12-19 10:14 - 2009-07-14 03:37 - 00000000 ___RD C:\Users\Public
2013-12-19 10:13 - 2013-12-18 22:21 - 00000000 ____D C:\Windows\erdnt
2013-12-19 10:12 - 2013-10-19 18:43 - 00000000 ____D C:\Users\JST
2013-12-19 10:12 - 2009-07-14 03:04 - 00000215 _____ C:\Windows\system.ini
2013-12-18 22:20 - 2013-12-18 22:19 - 05154906 ____R (Swearware) C:\Users\JST\Desktop\ComboFix.exe
2013-12-18 20:44 - 2013-12-18 20:44 - 00005693 _____ C:\Users\JST\Desktop\Addition.rar
2013-12-16 11:15 - 2013-12-16 11:15 - 00002444 _____ C:\Users\JST\Documents\cc_20131216_111521.reg
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\ProgramData\Freemake
2013-12-16 11:12 - 2013-12-16 11:05 - 00000000 ____D C:\Program Files\Freemake
2013-12-16 11:08 - 2013-12-16 11:05 - 00000000 ____D C:\Users\JST\Documents\Freemake
2013-12-15 21:26 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2013-12-15 09:35 - 2013-10-19 19:36 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2013-12-12 19:45 - 2013-12-12 19:45 - 00000000 ____D C:\Program Files\Mozilla Firefox
2013-12-12 13:56 - 2013-11-28 12:53 - 00024104 _____ C:\Users\JST\file.log
2013-12-12 13:56 - 2013-11-28 12:53 - 00009504 _____ C:\Users\JST\file.err
2013-12-12 13:56 - 2013-10-22 20:01 - 00000000 ____D C:\Users\JST\AppData\Roaming\Ansys
2013-12-12 13:03 - 2009-07-14 05:33 - 00410640 _____ C:\Windows\system32\FNTCACHE.DAT
2013-12-12 13:01 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\sk-SK
2013-12-12 08:46 - 2013-10-19 20:31 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-12 08:45 - 2013-10-19 23:21 - 00000000 ____D C:\Windows\system32\MRT
2013-12-12 08:43 - 2013-10-19 23:21 - 88123800 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2013-12-11 19:27 - 2013-10-19 19:59 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2013-12-11 18:43 - 2013-12-03 21:43 - 00000000 _____ C:\Users\JST\file.page
2013-12-10 14:29 - 2013-10-19 21:14 - 00000000 ____D C:\Users\JST\.msca
2013-12-09 12:59 - 2009-07-14 05:52 - 00000000 ____D C:\Windows\system32\FxsTmp
2013-12-09 12:36 - 2013-12-09 12:36 - 00000000 ____D C:\Windows\H264MediaPlayPlugins
2013-12-06 12:21 - 2013-12-06 12:21 - 00008428 _____ C:\Users\JST\Documents\cc_20131206_122125.reg
2013-12-06 12:20 - 2013-10-29 20:16 - 00000000 _____ C:\Windows\setuperr.log
2013-12-06 12:20 - 2013-10-20 10:38 - 00000000 ____D C:\Users\JST\AppData\Roaming\Media Player Classic
2013-12-06 12:20 - 2013-10-19 20:24 - 00000000 ____D C:\Users\JST\AppData\Roaming\DAEMON Tools Lite
2013-12-06 12:20 - 2013-10-19 19:34 - 00000000 ____D C:\Windows\Panther
2013-12-03 19:23 - 2013-12-03 19:07 - 00000000 ____D C:\ProgramData\DassaultSystemes
2013-12-03 19:08 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Local\DassaultSystemes
2013-12-03 19:07 - 2013-12-03 19:07 - 00000000 ____D C:\Users\JST\AppData\Roaming\DassaultSystemes
2013-12-02 20:09 - 2013-11-02 21:06 - 00000000 ___RD C:\Users\JST\Documents\My Flash
2013-11-28 19:58 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2013-11-28 19:36 - 2013-11-28 19:36 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2013-11-28 19:28 - 2013-11-28 19:28 - 00000000 ____D C:\Windows\system32\SDA
2013-11-28 14:37 - 2013-11-28 14:37 - 01051136 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00645120 _____ (Microsoft Corporation) C:\Windows\system32\jsIntl.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00616104 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dat
2013-11-28 14:37 - 2013-11-28 14:37 - 00610304 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00523776 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00454656 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00367104 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2013-11-28 14:37 - 2013-11-28 14:37 - 00244736 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00238288 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00233472 _____ (Microsoft Corporation) C:\Windows\system32\url.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00208384 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00194048 _____ (Microsoft Corporation) C:\Windows\system32\elshyph.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00182272 _____ (Microsoft Corporation) C:\Windows\system32\msls31.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00151552 _____ (Microsoft Corporation) C:\Windows\system32\iexpress.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\wextract.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00127488 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\IEAdvpack.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00086016 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00083456 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00074240 _____ (Microsoft Corporation) C:\Windows\system32\SetIEInstalledDate.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00071680 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\icardie.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2013-11-28 14:37 - 2013-11-28 14:37 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\pngfilt.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\mshtmler.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\msfeedsbs.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\system32\imgutil.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\licmgr10.dll
2013-11-28 14:37 - 2013-11-28 14:37 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\mshta.exe
2013-11-28 14:37 - 2013-11-28 14:37 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\msfeedssync.exe
2013-11-28 11:59 - 2013-11-28 11:59 - 00009000 _____ C:\Users\JST\Documents\cc_20131128_115948.reg
2013-11-26 11:11 - 2013-12-12 08:46 - 17112576 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-11-26 10:23 - 2013-12-12 08:47 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-11-26 10:22 - 2013-12-12 08:47 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2013-11-26 09:53 - 2013-12-12 08:47 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-11-26 09:52 - 2013-12-12 08:47 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 02166784 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-11-26 09:38 - 2013-12-12 08:47 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-11-26 09:36 - 2013-12-12 08:47 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-11-26 09:32 - 2013-12-12 08:47 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-11-26 09:29 - 2013-12-12 08:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2013-11-26 09:29 - 2013-12-12 08:47 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2013-11-26 09:28 - 2013-12-12 08:47 - 00553472 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2013-11-26 09:16 - 2013-12-12 08:46 - 04243968 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-11-26 09:13 - 2013-12-12 08:47 - 00208896 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-11-26 08:32 - 2013-12-12 08:47 - 01928192 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2013-11-26 08:26 - 2013-12-12 08:47 - 11221504 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-11-26 07:34 - 2013-12-12 08:47 - 00703488 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2013-11-26 07:33 - 2013-12-12 08:47 - 01820160 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-11-26 07:27 - 2013-12-12 08:47 - 01157632 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-11-23 19:26 - 2013-12-12 08:38 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\ProgramData\ESET
2013-11-21 19:09 - 2013-11-21 19:09 - 00000000 ____D C:\Program Files\ESET
2013-11-19 03:33 - 2013-10-19 20:05 - 00230048 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
==================== Bamital & volsnap Check =================
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2013-12-15 21:18
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:73.14 GB) (Free:35.4 GB) NTFS
Drive d: () (Fixed) (Total:75.81 GB) (Free:47.61 GB) NTFS
Available physical RAM: 674.14 MB
Total physical RAM: 2046.98 MB
Percentage of memory in use: 67%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 149 GB) (Disk ID: E24DB087)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=73 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=76 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 7.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET Smart Security 7.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}
FW: ESET personal firewall (Enabled) {211E1E8B-C9F9-A04B-6D84-BC85190CE5F2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\JST\Desktop" je 8 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition.rar
- (5.76 KiB) Staženo 109 x