API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 22nd, 2014
145
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.30 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 21-09-2014 01
  2. Ran by Vladimir (administrator) on VLADIMIR-PC on 22-09-2014 23:01:23
  3. Running from E:\Stažené soubory
  4. Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
  5. Internet Explorer Version 11
  6. Boot Mode: Normal
  7. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  8.  
  9. ==================== Processes (Whitelisted) =================
  10.  
  11. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  12.  
  13. (ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
  14. (Intel Corporation) C:\Windows\System32\igfxtray.exe
  15. (Intel Corporation) C:\Windows\System32\hkcmd.exe
  16. (Intel Corporation) C:\Windows\System32\igfxpers.exe
  17. (ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
  18. (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
  19. (Ritlabs, SRL) C:\Program Files (x86)\The Bat!\TheBat.exe
  20. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  21. (ZONER software) C:\Program Files\Zoner\Photo Studio 15\Program32\ZPSTray.exe
  22. (CANON INC.) C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe
  23. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  24. (Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
  25. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  26. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  27. () C:\Users\Vladimir\AppData\Roaming\ExampleFolder\Winconfig.exe
  28. () C:\Users\Vladimir\AppData\Roaming\ExampleFolder\Winconfig.exe
  29. (Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe
  30. (Jan Fiala) C:\Program Files (x86)\PSPad editor\PSPad.exe
  31. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  32. (AB Team) C:\Program Files (x86)\Webteh\BSPlayer\bsplayer.exe
  33. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  34. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  35. (Microsoft Corporation) C:\Windows\System32\dllhost.exe
  36.  
  37.  
  38. ==================== Registry (Whitelisted) ==================
  39.  
  40. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  41.  
  42. HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Smart Security\egui.exe [5618456 2013-09-12] (ESET)
  43. HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-06-03] (Adobe Systems Incorporated)
  44. HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-23] (CANON INC.)
  45. HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
  46. HKLM-x32\...\Run: [uni mouse driver] => "C:\Mouse driver\mouse_driver.exe" /hide
  47. HKLM-x32\...\Run: [uni mouse driver tilt] => "C:\Mouse driver\wh_exec.exe"
  48. HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  49. HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  50. Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
  51. HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-04-10] (Microsoft Corporation)
  52. HKU\S-1-5-21-12195163-1670119373-750645896-1000\...\Run: [thebat_startup] => C:\Program Files (x86)\The Bat!\TheBat.exe [22765576 2014-07-21] (Ritlabs, SRL)
  53. HKU\S-1-5-21-12195163-1670119373-750645896-1000\...\Run: [Infium] => "C:\Program Files (x86)\QIP 2012\qip.exe" /autorun
  54. HKU\S-1-5-21-12195163-1670119373-750645896-1000\...\Run: [GoogleChromeAutoLaunch_E7E7B640C719C6D8CE20F2E50D91D1E8] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-09-04] (Google Inc.)
  55. HKU\S-1-5-21-12195163-1670119373-750645896-1000\...\Run: [AdobeBridge] => [X]
  56. HKU\S-1-5-21-12195163-1670119373-750645896-1000\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [779776 2014-03-13] (ZONER software)
  57. Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\The Bat! E-Mail Client.lnk
  58. ShortcutTarget: The Bat! E-Mail Client.lnk -> C:\Windows\Installer\{044D4B52-191D-4C0F-9E4F-B0D0AEEC4C08}\NewShortcut1.30DEC6EE_6CEA_4942_B2A9_772217A27861.exe (No File)
  59. Startup: C:\Users\Vladimir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk
  60. ShortcutTarget: Samsung Magician.lnk -> C:\Windows\System32\schtasks.exe (Microsoft Corporation)
  61. Startup: C:\Users\Vladimir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Winconfig.vbs ()
  62.  
  63. ==================== Internet (Whitelisted) ====================
  64.  
  65. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  66.  
  67. HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://nmd.msn.com
  68. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://nmd.msn.com
  69. HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.tsbohemia.cz
  70. HKCU\Software\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.tsbohemia.cz
  71. Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
  72. Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
  73.  
  74. FireFox:
  75. ========
  76. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
  77. FF Plugin: @microsoft.com/GENUINE -> disabled No File
  78. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
  79. FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
  80. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  81. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
  82. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
  83. FF HKLM\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
  84. FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2014-04-10]
  85. FF HKLM-x32\...\Thunderbird\Extensions: [[email protected]] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
  86.  
  87. Chrome:
  88. =======
  89. CHR Profile: C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default
  90. CHR Extension: (Google Docs) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-18]
  91. CHR Extension: (Google Drive) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-18]
  92. CHR Extension: (YouTube) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-18]
  93. CHR Extension: (Google Search) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-18]
  94. CHR Extension: (AdBlock) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-03]
  95. CHR Extension: (Hangouts) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2014-09-02]
  96. CHR Extension: (Google Wallet) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-18]
  97. CHR Extension: (Gmail) - C:\Users\Vladimir\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-18]
  98.  
  99. ==================== Services (Whitelisted) =================
  100.  
  101. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  102.  
  103. R2 AdobeActiveFileMonitor12.0; C:\Program Files (x86)\Adobe\Elements 12 Organizer\PhotoshopElementsFileAgent.exe [181152 2013-09-25] (Adobe Systems Incorporated)
  104. R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [1337752 2013-09-12] (ESET)
  105. S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
  106.  
  107. ==================== Drivers (Whitelisted) ====================
  108.  
  109. (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
  110.  
  111. R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [239320 2013-09-17] (ESET)
  112. U5 edevmon; C:\Windows\System32\Drivers\edevmon.sys [239296 2013-09-17] (ESET)
  113. R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [168256 2013-09-17] (ESET)
  114. R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [220232 2013-09-17] (ESET)
  115. R1 EpfwLWF; C:\Windows\System32\DRIVERS\EpfwLWF.sys [44120 2013-09-17] (ESET)
  116. R0 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [62136 2013-09-17] (ESET)
  117. R0 PxHlpa64; C:\Windows\System32\drivers\PxHlpa64.sys [56336 2013-07-19] (Corel Corporation)
  118. S3 whfltr2k; C:\Windows\System32\DRIVERS\whfltr2k.sys [10368 2009-09-16] ()
  119. S3 whfltr2k; C:\Windows\SysWOW64\DRIVERS\whfltr2k.sys [10368 2009-09-16] ()
  120.  
  121. ==================== NetSvcs (Whitelisted) ===================
  122.  
  123. (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
  124.  
  125.  
  126. ==================== One Month Created Files and Folders ========
  127.  
  128. (If an entry is included in the fixlist, the file\folder will be moved.)
  129.  
  130. 2014-09-22 23:01 - 2014-09-22 23:01 - 00000000 ____D () C:\FRST
  131. 2014-09-22 21:09 - 2014-09-22 12:28 - 00000000 ____D () C:\Users\Vladimir\Desktop\bozskeslevy.cz
  132. 2014-09-22 16:24 - 2014-09-22 16:24 - 00001075 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
  133. 2014-09-22 16:23 - 2014-09-22 16:23 - 00001037 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
  134. 2014-09-22 15:12 - 2014-09-22 15:12 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\ExampleFolder
  135. 2014-09-17 22:14 - 2014-09-17 22:14 - 00000000 ____D () C:\Users\Vladimir\.ssh
  136. 2014-09-17 20:30 - 2014-09-17 20:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
  137. 2014-09-17 20:30 - 2014-09-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  138. 2014-09-17 11:03 - 2014-09-17 22:14 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\GitHub
  139. 2014-09-17 11:03 - 2014-09-17 11:12 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\GitHub
  140. 2014-09-17 11:03 - 2014-09-17 11:03 - 00002188 _____ () C:\Users\Vladimir\Desktop\Git Shell.lnk
  141. 2014-09-17 11:03 - 2014-09-17 11:03 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
  142. 2014-09-10 16:52 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
  143. 2014-09-10 16:52 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
  144. 2014-09-10 16:52 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
  145. 2014-09-10 16:52 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
  146. 2014-09-10 16:52 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
  147. 2014-09-10 16:52 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
  148. 2014-09-10 16:52 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
  149. 2014-09-10 16:52 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
  150. 2014-09-10 16:52 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
  151. 2014-09-10 16:52 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
  152. 2014-09-10 16:52 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
  153. 2014-09-10 16:52 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
  154. 2014-09-10 16:52 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
  155. 2014-09-10 16:52 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
  156. 2014-09-10 16:52 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
  157. 2014-09-10 16:52 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
  158. 2014-09-10 16:52 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
  159. 2014-09-10 16:52 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
  160. 2014-09-10 16:52 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
  161. 2014-09-10 16:52 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
  162. 2014-09-10 16:52 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
  163. 2014-09-10 16:52 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
  164. 2014-09-10 16:52 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
  165. 2014-09-10 16:52 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
  166. 2014-09-10 16:52 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
  167. 2014-09-10 16:52 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
  168. 2014-09-10 16:52 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
  169. 2014-09-10 16:52 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
  170. 2014-09-10 16:52 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
  171. 2014-09-10 16:52 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
  172. 2014-09-10 16:52 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
  173. 2014-09-10 16:52 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
  174. 2014-09-10 16:52 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
  175. 2014-09-10 16:52 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
  176. 2014-09-10 16:52 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
  177. 2014-09-10 16:52 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
  178. 2014-09-10 16:52 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
  179. 2014-09-10 16:52 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
  180. 2014-09-10 16:52 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
  181. 2014-09-10 16:52 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
  182. 2014-09-10 16:52 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
  183. 2014-09-10 16:52 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
  184. 2014-09-10 16:52 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
  185. 2014-09-10 16:52 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
  186. 2014-09-10 16:52 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
  187. 2014-09-10 16:52 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
  188. 2014-09-10 16:52 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
  189. 2014-09-10 16:52 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
  190. 2014-09-10 16:52 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
  191. 2014-09-10 16:52 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
  192. 2014-09-10 16:52 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
  193. 2014-09-10 16:52 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
  194. 2014-09-10 16:52 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
  195. 2014-09-10 16:51 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
  196. 2014-09-10 16:51 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
  197. 2014-09-10 16:51 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
  198. 2014-09-10 16:47 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
  199. 2014-09-10 16:47 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
  200. 2014-09-10 16:46 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
  201. 2014-09-10 16:46 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
  202. 2014-09-10 16:46 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
  203. 2014-09-10 16:46 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
  204. 2014-09-10 16:46 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
  205. 2014-09-10 16:46 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
  206. 2014-09-10 16:46 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
  207. 2014-09-10 16:46 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
  208. 2014-09-10 16:46 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
  209. 2014-09-10 16:45 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  210. 2014-09-10 16:45 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  211. 2014-09-09 09:49 - 2014-09-09 09:49 - 00001313 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 6 FREE.lnk
  212. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000214 _____ () C:\Users\Public\Desktop\Your Software Deals.url
  213. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Ashampoo
  214. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\ashampoo
  215. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
  216. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\ProgramData\Ashampoo
  217. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
  218. 2014-08-28 10:49 - 2014-08-28 10:59 - 00000000 ____D () C:\Program Files\Nitro
  219. 2014-08-28 10:49 - 2014-08-28 10:51 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Nitro
  220. 2014-08-28 10:49 - 2014-08-28 10:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Downloaded Installations
  221. 2014-08-28 10:49 - 2014-08-28 10:49 - 00000000 ____D () C:\ProgramData\Nitro
  222. 2014-08-27 21:59 - 2014-08-27 21:59 - 00051107 _____ () C:\Users\Vladimir\Desktop\vodne-stocne.odt
  223. 2014-08-27 21:44 - 2014-08-27 21:44 - 00044661 _____ () C:\Users\Vladimir\Desktop\svoz odpadu.odt
  224. 2014-08-27 20:22 - 2014-08-27 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3
  225. 2014-08-27 20:22 - 2014-08-27 20:22 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
  226. 2014-08-27 19:52 - 2014-08-27 19:52 - 00000000 ____D () C:\Windows\ERUNT
  227. 2014-08-27 19:48 - 2014-08-27 19:50 - 00000000 ____D () C:\AdwCleaner
  228. 2014-08-27 19:48 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
  229. 2014-08-27 19:38 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  230. 2014-08-27 19:38 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  231. 2014-08-27 19:38 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  232. 2014-08-27 00:19 - 2014-08-27 00:19 - 00003282 _____ () C:\Windows\System32\Tasks\SamsungMagician
  233. 2014-08-27 00:19 - 2014-08-27 00:19 - 00000000 ____D () C:\ProgramData\Samsung
  234. 2014-08-27 00:19 - 2014-08-27 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
  235. 2014-08-26 23:28 - 2014-08-26 23:28 - 00276496 _____ () C:\Windows\Minidump\082614-7316-01.dmp
  236. 2014-08-23 21:21 - 2014-08-23 21:21 - 00276552 _____ () C:\Windows\Minidump\082314-7924-01.dmp
  237. 2014-08-23 12:49 - 2014-08-26 23:28 - 312600533 _____ () C:\Windows\MEMORY.DMP
  238. 2014-08-23 12:49 - 2014-08-26 23:28 - 00000000 ____D () C:\Windows\Minidump
  239. 2014-08-23 12:49 - 2014-08-23 12:49 - 00276552 _____ () C:\Windows\Minidump\082314-8268-01.dmp
  240.  
  241. ==================== One Month Modified Files and Folders =======
  242.  
  243. (If an entry is included in the fixlist, the file\folder will be moved.)
  244.  
  245. 2014-09-22 23:01 - 2014-09-22 23:01 - 00000000 ____D () C:\FRST
  246. 2014-09-22 21:39 - 2014-04-10 12:25 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\FileZilla
  247. 2014-09-22 19:01 - 2009-07-14 06:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  248. 2014-09-22 19:01 - 2009-07-14 06:45 - 00023056 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  249. 2014-09-22 19:00 - 2009-07-14 17:18 - 00668542 _____ () C:\Windows\system32\perfh005.dat
  250. 2014-09-22 19:00 - 2009-07-14 17:18 - 00141202 _____ () C:\Windows\system32\perfc005.dat
  251. 2014-09-22 19:00 - 2009-07-14 07:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
  252. 2014-09-22 18:55 - 2014-04-09 22:26 - 01533321 _____ () C:\Windows\WindowsUpdate.log
  253. 2014-09-22 18:54 - 2014-05-18 20:13 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  254. 2014-09-22 18:54 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
  255. 2014-09-22 18:54 - 2009-07-14 06:51 - 00061688 _____ () C:\Windows\setupact.log
  256. 2014-09-22 18:54 - 2009-07-14 06:45 - 04918064 _____ () C:\Windows\system32\FNTCACHE.DAT
  257. 2014-09-22 16:33 - 2014-04-09 22:26 - 00071432 _____ () C:\Users\Vladimir\AppData\Local\GDIPFONTCACHEV1.DAT
  258. 2014-09-22 16:31 - 2014-04-11 12:36 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\CrashDumps
  259. 2014-09-22 16:24 - 2014-09-22 16:24 - 00001075 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk
  260. 2014-09-22 16:24 - 2014-04-18 11:59 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
  261. 2014-09-22 16:24 - 2014-04-18 11:57 - 00000000 ____D () C:\Program Files\Common Files\Adobe
  262. 2014-09-22 16:24 - 2014-04-18 11:57 - 00000000 ____D () C:\Program Files\Adobe
  263. 2014-09-22 16:24 - 2014-04-10 11:19 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Adobe
  264. 2014-09-22 16:23 - 2014-09-22 16:23 - 00001037 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk
  265. 2014-09-22 16:23 - 2014-04-15 12:02 - 00000000 ____D () C:\Program Files (x86)\Adobe
  266. 2014-09-22 16:20 - 2014-04-09 22:26 - 00000000 ____D () C:\ProgramData\Adobe
  267. 2014-09-22 16:19 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
  268. 2014-09-22 15:23 - 2014-04-10 16:46 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Skype
  269. 2014-09-22 15:12 - 2014-09-22 15:12 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\ExampleFolder
  270. 2014-09-22 12:28 - 2014-09-22 21:09 - 00000000 ____D () C:\Users\Vladimir\Desktop\bozskeslevy.cz
  271. 2014-09-22 09:51 - 2014-04-09 22:30 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\Adobe
  272. 2014-09-17 22:14 - 2014-09-17 22:14 - 00000000 ____D () C:\Users\Vladimir\.ssh
  273. 2014-09-17 22:14 - 2014-09-17 11:03 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\GitHub
  274. 2014-09-17 22:14 - 2014-04-09 22:26 - 00000000 ____D () C:\Users\Vladimir
  275. 2014-09-17 20:30 - 2014-09-17 20:30 - 00000000 ___RD () C:\Program Files (x86)\Skype
  276. 2014-09-17 20:30 - 2014-09-17 20:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
  277. 2014-09-17 20:30 - 2014-04-10 16:45 - 00000000 ____D () C:\ProgramData\Skype
  278. 2014-09-17 14:30 - 2014-04-15 12:02 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
  279. 2014-09-17 13:04 - 2014-04-10 06:37 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\Deployment
  280. 2014-09-17 11:12 - 2014-09-17 11:03 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\GitHub
  281. 2014-09-17 11:03 - 2014-09-17 11:03 - 00002188 _____ () C:\Users\Vladimir\Desktop\Git Shell.lnk
  282. 2014-09-17 11:03 - 2014-09-17 11:03 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
  283. 2014-09-13 21:27 - 2014-04-10 16:37 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\BSplayer
  284. 2014-09-13 09:50 - 2014-04-10 12:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
  285. 2014-09-13 09:50 - 2014-04-10 12:49 - 00000000 ____D () C:\Program Files (x86)\FileZilla FTP Client
  286. 2014-09-11 20:29 - 2014-05-18 20:13 - 00002183 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
  287. 2014-09-11 17:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
  288. 2014-09-10 16:51 - 2014-04-10 08:35 - 01557940 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
  289. 2014-09-10 16:50 - 2014-04-10 05:44 - 00000000 ____D () C:\Windows\system32\MRT
  290. 2014-09-10 16:48 - 2014-04-10 05:44 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
  291. 2014-09-10 16:47 - 2014-04-22 23:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
  292. 2014-09-09 09:49 - 2014-09-09 09:49 - 00001313 _____ () C:\Users\Public\Desktop\Ashampoo Burning Studio 6 FREE.lnk
  293. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000214 _____ () C:\Users\Public\Desktop\Your Software Deals.url
  294. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Ashampoo
  295. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Local\ashampoo
  296. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
  297. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\ProgramData\Ashampoo
  298. 2014-09-09 09:49 - 2014-09-09 09:49 - 00000000 ____D () C:\Program Files (x86)\Ashampoo
  299. 2014-09-05 04:10 - 2014-09-10 16:45 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
  300. 2014-09-05 04:05 - 2014-09-10 16:45 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
  301. 2014-08-28 10:59 - 2014-08-28 10:49 - 00000000 ____D () C:\Program Files\Nitro
  302. 2014-08-28 10:51 - 2014-08-28 10:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Nitro
  303. 2014-08-28 10:49 - 2014-08-28 10:49 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\Downloaded Installations
  304. 2014-08-28 10:49 - 2014-08-28 10:49 - 00000000 ____D () C:\ProgramData\Nitro
  305. 2014-08-27 21:59 - 2014-08-27 21:59 - 00051107 _____ () C:\Users\Vladimir\Desktop\vodne-stocne.odt
  306. 2014-08-27 21:44 - 2014-08-27 21:44 - 00044661 _____ () C:\Users\Vladimir\Desktop\svoz odpadu.odt
  307. 2014-08-27 20:22 - 2014-08-27 20:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 4.3
  308. 2014-08-27 20:22 - 2014-08-27 20:22 - 00000000 ____D () C:\Program Files (x86)\LibreOffice 4
  309. 2014-08-27 20:06 - 2009-07-14 07:08 - 00032554 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
  310. 2014-08-27 19:52 - 2014-08-27 19:52 - 00000000 ____D () C:\Windows\ERUNT
  311. 2014-08-27 19:50 - 2014-08-27 19:48 - 00000000 ____D () C:\AdwCleaner
  312. 2014-08-27 19:50 - 2014-04-09 22:35 - 00141482 _____ () C:\Windows\PFRO.log
  313. 2014-08-27 00:19 - 2014-08-27 00:19 - 00003282 _____ () C:\Windows\System32\Tasks\SamsungMagician
  314. 2014-08-27 00:19 - 2014-08-27 00:19 - 00000000 ____D () C:\ProgramData\Samsung
  315. 2014-08-27 00:19 - 2014-08-27 00:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
  316. 2014-08-27 00:19 - 2014-04-15 12:20 - 00000000 ____D () C:\Program Files (x86)\Samsung
  317. 2014-08-26 23:58 - 2014-04-10 12:55 - 00000000 ____D () C:\Users\Vladimir\AppData\Roaming\PSpad
  318. 2014-08-26 23:58 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
  319. 2014-08-26 23:28 - 2014-08-26 23:28 - 00276496 _____ () C:\Windows\Minidump\082614-7316-01.dmp
  320. 2014-08-26 23:28 - 2014-08-23 12:49 - 312600533 _____ () C:\Windows\MEMORY.DMP
  321. 2014-08-26 23:28 - 2014-08-23 12:49 - 00000000 ____D () C:\Windows\Minidump
  322. 2014-08-25 06:53 - 2014-04-10 05:43 - 00270496 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  323. 2014-08-23 21:21 - 2014-08-23 21:21 - 00276552 _____ () C:\Windows\Minidump\082314-7924-01.dmp
  324. 2014-08-23 12:49 - 2014-08-23 12:49 - 00276552 _____ () C:\Windows\Minidump\082314-8268-01.dmp
  325. 2014-08-23 04:07 - 2014-08-27 19:38 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
  326. 2014-08-23 03:45 - 2014-08-27 19:38 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
  327. 2014-08-23 02:59 - 2014-08-27 19:38 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
  328.  
  329. Some content of TEMP:
  330. ====================
  331. C:\Users\Vladimir\AppData\Local\Temp\bitool.dll
  332. C:\Users\Vladimir\AppData\Local\Temp\CMInstaller.exe
  333. C:\Users\Vladimir\AppData\Local\Temp\Execute2App.exe
  334. C:\Users\Vladimir\AppData\Local\Temp\fp_pl_pfs_installer.exe
  335. C:\Users\Vladimir\AppData\Local\Temp\icqsetup.exe
  336. C:\Users\Vladimir\AppData\Local\Temp\Kies3RemoveAll.exe
  337. C:\Users\Vladimir\AppData\Local\Temp\msvcp90.dll
  338. C:\Users\Vladimir\AppData\Local\Temp\msvcr90.dll
  339. C:\Users\Vladimir\AppData\Local\Temp\paint.net.4.0.install.exe
  340. C:\Users\Vladimir\AppData\Local\Temp\Quarantine.exe
  341. C:\Users\Vladimir\AppData\Local\Temp\readSTILog.dll
  342. C:\Users\Vladimir\AppData\Local\Temp\xmlUpdater.exe
  343.  
  344.  
  345. ==================== Bamital & volsnap Check =================
  346.  
  347. (There is no automatic fix for files that do not pass verification.)
  348.  
  349. C:\Windows\System32\winlogon.exe => File is digitally signed
  350. C:\Windows\System32\wininit.exe => File is digitally signed
  351. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  352. C:\Windows\explorer.exe => File is digitally signed
  353. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  354. C:\Windows\System32\svchost.exe => File is digitally signed
  355. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  356. C:\Windows\System32\services.exe => File is digitally signed
  357. C:\Windows\System32\User32.dll => File is digitally signed
  358. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  359. C:\Windows\System32\userinit.exe => File is digitally signed
  360. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  361. C:\Windows\System32\rpcss.dll => File is digitally signed
  362. C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
  363.  
  364.  
  365. LastRegBack: 2014-09-16 10:55
  366.  
  367. ==================== End Of Log ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!