Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-10-2014 01
Ran by Drako Ager (administrator) on DRAKOAGER-PC on 27-10-2014 21:18:14
Running from C:\Users\Drako Ager\Desktop
Loaded Profiles: Drako Ager & UpdatusUser (Available profiles: Drako Ager & UpdatusUser)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Slovenčina (Slovensko)
Internet Explorer Version 8
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Dritek System Inc.) C:\Program Files\dsiwmis.exe
(Nero AG) C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Dritek System Inc.) C:\Program Files\LMutilps32.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(Atheros) C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe
() C:\Program Files (x86)\HTC\HTC Sync Manager\HTC Sync\adb.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Atheros Communications) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(SkypEmoticons) C:\Users\Drako Ager\AppData\Roaming\SkypEmoticons\SE.exe
(MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe
(Dolby Laboratories Inc.) C:\Dolby PCEE4\pcee4.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dritek System Inc.) C:\Program Files\LManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Dritek System Inc.) C:\Program Files\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Dritek System Inc.) C:\Program Files\LMworker.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_189.exe
(BitTorrent Inc.) C:\Users\Drako Ager\AppData\Roaming\uTorrent\uTorrent.exe
(forum.viry.cz) C:\Users\Drako Ager\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2892072 2012-01-17] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1156712 2011-11-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12343400 2011-12-27] (Realtek Semiconductor)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [1020576 2012-02-20] (Atheros Communications)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [800416 2012-02-20] (Atheros Commnucations)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Dolby PCEE4\pcee4.exe [506712 2011-06-01] (Dolby Laboratories Inc.)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2011-11-29] (Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files\LManager.exe [1106512 2012-03-02] (Dritek System Inc.)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291608 2012-01-27] (Intel Corporation)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
Winlogon\Notify\igfxcui: C:\Windows\SYSTEM32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-4119824734-3211424985-4043866500-1000\...\Run: [Steam] => D:\Steam\Steam.exe [1939136 2014-08-28] (Valve Corporation)
HKU\S-1-5-21-4119824734-3211424985-4043866500-1000\...\Run: [se] => C:\Users\Drako Ager\AppData\Roaming\SkypEmoticons\SE.exe [5679008 2014-08-31] (SkypEmoticons)
HKU\S-1-5-21-4119824734-3211424985-4043866500-1000\...\MountPoints2: {6c4962df-dcdd-11e2-95c4-a417315a4086} - H:\SCDAAutorun.exe
HKU\S-1-5-21-4119824734-3211424985-4043866500-1000\...\MountPoints2: {f794ac9b-611a-11e2-bb15-806e6f6e6963} - E:\DistinguishOS.exe
HKU\S-1-5-21-4119824734-3211424985-4043866500-1000\...\MountPoints2: {f97aae69-f107-11e2-9235-a417315a4086} - G:\HTC_Sync_Manager_PC.exe
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [250504 2013-03-15] (NVIDIA Corporation)
AppInit_DLLs-x32: c:\windows\syswow64\nvinit.dll => c:\windows\syswow64\nvinit.dll [205184 2013-03-15] (NVIDIA Corporation)
Startup: C:\Users\Drako Ager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x6703C32A1E34CE01
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF ProfilePath: C:\Users\Drako Ager\AppData\Roaming\Mozilla\Firefox\Profiles\f4vbp5kj.default
FF DefaultSearchEngine: webssearches
FF SelectedSearchEngine: webssearches
FF Homepage: https://www.google.sk/?gws_rd=ssl
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.59 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\atlas-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\azet-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\dunaj-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slovnik-sk.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\zoznam-sk.xml
FF Extension: Adblocker - C:\Users\Drako Ager\AppData\Roaming\Mozilla\Firefox\Profiles\f4vbp5kj.default\Extensions\gfvb@csbh-.com [2014-08-31]
FF Extension: parrIcechop - C:\Users\Drako Ager\AppData\Roaming\Mozilla\Firefox\Profiles\f4vbp5kj.default\Extensions\loeuu@yiaejldp.net [2014-08-31]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-10-15]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-01-17]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\Drako Ager\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (System Drive) - C:\Users\Drako Ager\AppData\Local\Google\Chrome\User Data\Default\Extensions\ggekjaligipajhljkbemifjgmlpcfkao [2014-08-31]
CHR Extension: (safe essave) - C:\Users\Drako Ager\AppData\Local\Google\Chrome\User Data\Default\Extensions\iogadkmkaadfflmcdacjoccgpeohofbb [2013-07-24]
CHR Extension: (parrIcechop) - C:\Users\Drako Ager\AppData\Local\Google\Chrome\User Data\Default\Extensions\lnhcobcdbmpggmhgjcihcjmpmhblajeb [2014-08-31]
CHR Extension: (SearchNewTab) - C:\Users\Drako Ager\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjbcifdgmpalfpaioklceeknkgpdpfaj [2013-07-24]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [106144 2012-02-20] (Atheros Commnucations) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DsiWMIService; C:\Program Files\dsiwmis.exe [355920 2012-03-02] (Dritek System Inc.)
S4 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1329304 2012-11-26] (ESET)
R2 HTCMonitorService; C:\Program Files (x86)\HTC\HTC Sync Manager\HSMServiceEntry.exe [87368 2014-04-02] (Nero AG)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2012-02-08] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
S3 TunngleService; D:\Tunngle\TnglCtrl.exe [757144 2013-08-16] (Tunngle.net GmbH) [File not signed]
R2 ZAtheros Wlan Agent; C:\Program Files (x86)\Atheros\Ath_WlanAgent.exe [72864 2012-02-19] (Atheros) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [211344 2012-10-08] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [149592 2012-10-08] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [189208 2012-10-08] (ESET)
R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [57904 2012-11-28] (ESET)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-27] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2014-10-01] (Malwarebytes Corporation)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 btwampfl; \??\C:\Windows\system32\drivers\btwampfl.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-27 21:18 - 2014-10-27 21:18 - 00015222 _____ () C:\Users\Drako Ager\Desktop\FRST.txt
2014-10-27 21:17 - 2014-10-27 21:18 - 00000000 ____D () C:\FRST
2014-10-27 21:14 - 2014-10-27 21:14 - 00112640 _____ (forum.viry.cz) C:\Users\Drako Ager\Desktop\FRSTLauncher.exe
2014-10-27 21:13 - 2014-10-27 21:13 - 02113024 _____ (Farbar) C:\Users\Drako Ager\Desktop\FRST64.exe
2014-10-27 20:26 - 2014-10-27 20:26 - 00022879 _____ () C:\Users\Drako Ager\Downloads\[CzT]Zloba_Kralovna_cerne_magie_Maleficent_2014_CZ_EN_720pHD_.torrent
2014-10-27 20:25 - 2014-10-27 20:25 - 00022953 _____ () C:\Users\Drako Ager\Downloads\[CzT]Ocista_Anarchie_The_Purge_Anarchy_2014_720pHD_.torrent
2014-10-27 18:27 - 2014-10-27 18:27 - 00000000 ___RD () C:\Users\Drako Ager\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-10-22 18:52 - 2014-10-22 18:52 - 00968311 _____ () C:\Users\Drako Ager\Downloads\AutoSave_elektrina.skb
2014-10-18 19:56 - 2014-10-18 19:56 - 00003120 _____ () C:\Windows\SysWOW64\ALLFSAF14a.ocx
2014-10-18 19:56 - 2014-10-18 19:56 - 00000000 ____D () C:\Users\Drako Ager\AppData\Roaming\SketchUp
2014-10-18 19:55 - 2014-10-18 19:55 - 00002188 _____ () C:\Users\Public\Desktop\Style Builder 2014.lnk
2014-10-18 19:55 - 2014-10-18 19:55 - 00002102 _____ () C:\Users\Public\Desktop\LayOut 2014.lnk
2014-10-18 19:55 - 2014-10-18 19:55 - 00002017 _____ () C:\Users\Public\Desktop\SketchUp 2014.lnk
2014-10-18 19:55 - 2014-10-18 19:55 - 00000000 ____D () C:\ProgramData\SketchUp
2014-10-18 19:55 - 2014-10-18 19:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2014
2014-10-18 19:55 - 2014-10-18 19:55 - 00000000 ____D () C:\Program Files (x86)\SketchUp
2014-10-18 19:51 - 2014-10-18 19:54 - 83651744 _____ (Trimble Navigation Limited) C:\Users\Drako Ager\Downloads\SketchUpMake-en.exe
2014-10-15 20:55 - 2014-10-15 20:55 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-15 20:16 - 2014-10-15 20:16 - 00024132 _____ () C:\Users\Drako Ager\Downloads\[CzT]Sprostarny_Bad_Words_2013_CZ_EN_720pHD_.torrent
2014-10-14 21:02 - 2014-10-14 21:02 - 00090851 _____ () C:\Users\Drako Ager\Downloads\[CzT]K_kaku_kid_tai_Arise_Border_1_4_1080pHD_.torrent
2014-10-10 19:02 - 2014-10-10 19:02 - 00000074 _____ () C:\Users\Drako Ager\Desktop\peto canon.rar
2014-10-08 16:55 - 2014-10-08 16:55 - 03780891 _____ () C:\Users\Drako Ager\Downloads\Adam-Ďurica---Neľutujem.mp3.crdownload
2014-10-08 15:58 - 2014-10-08 15:58 - 00023086 _____ () C:\Users\Drako Ager\Downloads\[CzT]Zloba_Kralovna_cerne_magie_Maleficent_2014_720pHD_.torrent
2014-10-02 16:33 - 2014-10-02 16:33 - 00035045 _____ () C:\Users\Drako Ager\Downloads\[CzT]X_Men_Budouci_minulost_X_Men_Days_of_Future_Past_2014_CZ_EN_720pHD_.torrent
2014-10-01 18:01 - 2014-10-01 18:01 - 00015657 _____ () C:\Users\Drako Ager\Downloads\[CzT]Elitni_jednotka_2_Vnitrni_nepritel_Tropa_de_Elite_2_O_Inimigo_Agora_E_Outro_Elite_Squad_2_2010_720p_(1).torrent
2014-09-28 17:16 - 2014-09-28 17:16 - 00031338 _____ () C:\Users\Drako Ager\Downloads\[CzT]Blended_2014_CZ_EN_720pHD_.torrent
2014-09-27 12:13 - 2014-09-27 12:13 - 00027873 _____ () C:\Users\Drako Ager\Downloads\[CzT]Dedictvi_aneb_Kurva_se_nerika_2014_CZ_720pHD_.torrent
2014-09-27 12:11 - 2014-09-27 12:11 - 00074317 _____ () C:\Users\Drako Ager\Downloads\[CzT]Godzilla_2014_CZ_EN_1080pHD_.torrent
2014-09-27 12:09 - 2014-09-27 12:09 - 00024605 _____ () C:\Users\Drako Ager\Downloads\[CzT]Leprechaun_Origins_2014_EN_720pHD_.torrent
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-10-27 21:18 - 2013-01-28 20:11 - 00000000 ____D () C:\Users\Drako Ager\AppData\Roaming\uTorrent
2014-10-27 21:07 - 2013-01-18 19:21 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-27 20:54 - 2014-09-18 11:29 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-27 20:14 - 2013-01-18 23:57 - 00000000 ____D () C:\Users\Drako Ager\AppData\Roaming\vlc
2014-10-27 20:14 - 2013-01-18 04:01 - 01129685 _____ () C:\Windows\WindowsUpdate.log
2014-10-27 19:04 - 2013-09-20 23:25 - 00115945 _____ () C:\Windows\setupact.log
2014-10-27 18:34 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-27 18:34 - 2009-07-14 05:45 - 00021248 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-27 18:33 - 2009-07-14 06:13 - 00778150 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-27 18:27 - 2013-05-19 08:43 - 00000000 ____D () C:\Users\Drako Ager\AppData\Local\HTC MediaHub
2014-10-27 18:26 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-26 18:52 - 2013-01-18 04:05 - 00000000 ____D () C:\Users\Drako Ager\AppData\Local\VirtualStore
2014-10-26 17:22 - 2014-08-31 12:02 - 00000426 __RSH () C:\ProgramData\ntuser.pol
2014-10-26 08:09 - 2014-09-18 11:29 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-25 21:43 - 2014-09-18 11:29 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-25 21:43 - 2013-07-30 20:02 - 00001106 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-24 19:38 - 2014-07-05 10:08 - 00000000 ____D () C:\Users\Drako Ager\Desktop\svadba
2014-10-22 22:13 - 2014-01-25 10:05 - 00000000 ____D () C:\Users\Drako Ager\Desktop\Obývačka
2014-10-21 06:06 - 2013-08-12 09:16 - 00000000 ____D () C:\Program Files (x86)\trend micro
2014-10-18 08:26 - 2013-01-18 19:21 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-18 08:26 - 2013-01-18 19:21 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-18 08:26 - 2013-01-18 19:21 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-18 08:25 - 2014-06-12 20:51 - 00000000 ____D () C:\Users\Drako Ager\AppData\Local\Adobe
2014-10-16 16:27 - 2013-01-20 12:40 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-05 19:19 - 2009-07-14 06:08 - 00032568 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-01 10:11 - 2014-09-18 11:29 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-01 10:11 - 2014-09-18 11:29 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-01 10:11 - 2013-07-30 20:02 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-09-27 19:42 - 2014-02-13 21:47 - 00000000 ____D () C:\Users\Drako Ager\Downloads\Torenty
Files to move or delete:
====================
C:\Users\Drako Ager\32 bit 64 bit w7lxe.exe
Some content of TEMP:
====================
C:\Users\Drako Ager\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Drako Ager\AppData\Local\Temp\utt446E.tmp.exe
C:\Users\Drako Ager\AppData\Local\Temp\utt9224.tmp.exe
C:\Users\Drako Ager\AppData\Local\Temp\vlc-2.1.2-win32.exe
C:\Users\Drako Ager\AppData\Local\Temp\vlc-2.1.3-win32.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-10-26 17:41
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:39.36 GB) (Free:4.58 GB) NTFS
Drive d: () (Fixed) (Total:659.18 GB) (Free:2.16 GB) NTFS
Drive f: ([Repack by Mlčik) (CDROM) (Total:3.54 GB) (Free:0 GB) CDFS
Available physical RAM: 1627.25 MB
Total physical RAM: 3934.36 MB
Percentage of memory in use: 58%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 698.6 GB) (Disk ID: 1AAF1E19)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=39.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=659.2 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: ESET Smart Security 6.0 (Disabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 6.0 (Disabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Disabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Drako Ager\Desktop" je 2347 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\egui
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x0
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Jen se zeptam pouzivate legalni operacni system, nejvyssi licence Ultimate zrovna neni bezna domaci verze 
Přispějete na provoz fóra?