Preventivní kontrola, HDD

Zpráva

#16 Příspěvek od **vyosek** » 25 srp 2013 19:51

Poprosim o spusteni nasledujiciho

Aplikace ke stažení:

Po stažení FRSTLauncher spustte, objevi se mozna varovani od antiviru, ignorujte a nechte FRSTL spustit

Následně dojde ke stažení FRST a inicializaci

Po spuštění FRST odsouhlasíme licenční podmínky kliknutím na Ano.
Dooznačíme položku Addition.txt - viz obrázek.
Klikneme na tlačítko Scan čímž spustíme skenování.
Počkáme na dokončení skenování FRST a vytvoření doplňkových informací naší nástavbou.
Otevře se nám textový soubor FRST.txt, což je požadovaný log a jehož obsah vložíme do svého tématu na fóru.
Po uzavření logu se FRSTLauncher.exe ukončí a na ploše nám zbyde utilta FRST a dva logy FRST.txt a Addition.txt - nic z toho zatím nemažeme.

corpop · #17 Příspěvek od **corpop** » 26 srp 2013 09:28

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-08-2013
Ran by Jakub (administrator) on 26-08-2013 10:26:13
Running from C:\Users\Jakub\Desktop
Windows 8 Enterprise (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Microsoft Corporation) C:\Windows\system32\dashost.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\javaw.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
() C:\Program Files (x86)\Opera\15.0.1147.153\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\15.0.1147.153\opera.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Start WingMan Profiler] - C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-15] (Logitech Inc.)
HKLM\...\Run: [SynTPEnh] - C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2107176 2010-03-11] (Synaptics Incorporated)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [LocalSessionManager] - C:\Users\Jakub\AppData\Roaming\lsm.exe [1692160 2013-08-22] ()
HKCU\...\Run: [sysXboot] - C:\Program Files\Java\jre7\bin\javaw.exe [188832 2013-03-14] (Oracle Corporation) <===== ATTENTION
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
Startup: C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs ()
Startup: C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\Office15\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP ... 1&tsp=4980
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={search ... 1&tsp=4980
SearchScopes: HKCU - {61B0B0E8-2066-40F0-94CB-F94F50C9DBEE} URL = http://www.mysearchresults.com/search?c ... earchTerms}
BHO: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~1\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~1\MICROS~1\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Lync Browser Helper - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~2\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper - {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} - C:\PROGRA~2\MICROS~2\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Hosts: 127.0.0.1 localhost
Tcpip\Parameters: [DhcpNameServer] 62.129.50.20 85.135.32.100

FireFox:
========
FF ProfilePath: C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\fcsxgzi0.default
FF Homepage: seznam.cz
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @java.com/DTPlugin,version=10.17.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.17.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.15.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.15.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 - C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.0.5 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Jakub\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Extension: SQLiteManager - C:\Users\Jakub\AppData\Roaming\Mozilla\Firefox\Profiles\fcsxgzi0.default\Extensions\SQLiteManager@mrinalkant.blogspot.com.xpi
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==================== Services (Whitelisted) =================

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-12-19] (Advanced Micro Devices, Inc.)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-08-24] ()
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16048 2013-07-02] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 AODDriver4.2; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [57472 2012-04-09] (Advanced Micro Devices)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [5139968 2012-06-02] (Broadcom Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283200 2013-03-02] (DT Soft Ltd)
R3 SensorsSimulatorDriver; C:\Windows\system32\DRIVERS\WUDFRd.sys [198656 2012-07-26] (Microsoft Corporation)
S3 usbUDisc; C:\Windows\System32\drivers\USBDrv_AMD64.sys [18392 2013-01-25] (Scott)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [89088 2012-07-26] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-08-26 10:25 - 2013-08-26 10:25 - 00000000 ____D C:\FRST
2013-08-26 10:25 - 2013-08-26 00:57 - 01577068 _____ (Farbar) C:\Users\Jakub\Desktop\FRST64.exe
2013-08-25 21:28 - 2013-08-25 21:28 - 00000000 ____D C:\Users\Jakub\AppData\Local\Macromedia
2013-08-25 20:49 - 2013-08-25 20:49 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-25 20:49 - 2013-08-25 20:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-25 20:48 - 2013-08-25 20:48 - 00281816 _____ (Mozilla) C:\Users\Jakub\Downloads\Firefox Setup Stub 23.0.1.exe
2013-08-25 20:47 - 2013-08-25 20:48 - 22256664 _____ (Mozilla) C:\Users\Jakub\Downloads\Firefox Setup 23.0.1.exe
2013-08-25 20:41 - 2013-08-25 20:42 - 00000000 ____D C:\Users\Jakub\AppData\Local\Adobe
2013-08-25 19:07 - 2013-08-25 19:07 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Opera Software
2013-08-25 19:07 - 2013-08-25 19:07 - 00000000 ____D C:\Users\Jakub\AppData\Local\Opera Software
2013-08-25 19:06 - 2013-08-25 19:06 - 00001129 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-25 19:06 - 2013-08-25 19:06 - 00000000 ____D C:\Program Files (x86)\Opera
2013-08-25 19:05 - 2013-08-25 19:06 - 31026832 _____ (Opera Software ASA) C:\Users\Jakub\Downloads\Opera_15.0.1147.153_Setup.exe
2013-08-23 15:53 - 2013-08-23 15:53 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Baumaschinen Simulator 2011
2013-08-23 15:44 - 2013-08-23 15:48 - 00000000 ____D C:\Users\Jakub\Downloads\Road Construction Simulator (2-click run)
2013-08-22 23:17 - 2013-08-22 23:17 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Unity
2013-08-22 23:16 - 2013-08-22 23:16 - 00648144 _____ (Unity Technologies ApS) C:\Users\Jakub\Downloads\UnityWebPlayer.exe
2013-08-22 23:16 - 2013-08-22 23:16 - 00000000 ____D C:\Users\Jakub\AppData\Local\Unity
2013-08-22 20:11 - 2013-08-22 20:12 - 03748385 _____ C:\Users\Jakub\Downloads\ManualAttaching_unpack_LS2013.rar
2013-08-22 20:09 - 2013-08-22 20:09 - 03935439 _____ C:\Users\Jakub\Downloads\placeable_Firework.zip
2013-08-22 19:59 - 2013-08-22 19:59 - 00321208 _____ C:\Users\Jakub\Downloads\CraftGuide-1.6.7.4.zip
2013-08-22 19:55 - 2013-08-22 19:56 - 00477213 _____ C:\Users\Jakub\Downloads\[Forge]FurnitureModv2.9.2(FULL).zip
2013-08-22 19:54 - 2013-08-22 19:55 - 04217176 _____ C:\Users\Jakub\Downloads\minecraftforge-installer-1.6.2-9.10.0.789.jar
2013-08-22 13:22 - 2013-08-22 13:22 - 00171355 _____ C:\Users\Jakub\Downloads\partsmod.rar
2013-08-22 13:08 - 2013-08-22 13:08 - 00011287 _____ C:\Users\Jakub\Downloads\nfsu2+10.zip
2013-08-22 13:06 - 2013-08-22 13:06 - 00083618 _____ C:\Users\Jakub\Downloads\profile_generator.zip
2013-08-22 12:22 - 2013-08-22 12:22 - 00220183 _____ C:\Users\Jakub\Downloads\r_pal_pocitac2b.zip
2013-08-22 00:19 - 2013-08-22 00:20 - 00000000 ____D C:\Users\Jakub\Downloads\Amateur Nude Photos - Cute Teen Brunette Loves to pose Nude
2013-08-22 00:15 - 2013-08-22 00:16 - 00000000 ____D C:\Users\Jakub\Downloads\0003
2013-08-22 00:05 - 2013-08-22 00:05 - 26391354 _____ C:\Users\Jakub\Downloads\Beyond_Perception_Win (1).zip
2013-08-22 00:03 - 2013-08-22 00:04 - 26391354 _____ C:\Users\Jakub\Downloads\Beyond_Perception_Win.zip
2013-08-21 22:35 - 2013-08-21 22:35 - 00067118 _____ C:\Users\Jakub\Downloads\GameModeSwitcher-PC.zip
2013-08-21 21:38 - 2013-08-21 21:38 - 00784880 _____ (Google Inc.) C:\Users\Jakub\Downloads\ChromeSetup.exe
2013-08-21 12:25 - 2013-08-21 12:25 - 00000000 ____D C:\Users\Jakub\AppData\Local\Deployment
2013-08-21 12:25 - 2013-08-21 12:25 - 00000000 ____D C:\Users\Jakub\AppData\Local\Apps\2.0
2013-08-20 21:14 - 2013-08-21 21:20 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Seznam.cz
2013-08-20 21:14 - 2013-08-21 21:19 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2013-08-20 21:13 - 2013-08-20 21:13 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Babylon
2013-08-20 21:12 - 2013-08-20 21:12 - 00000896 __RSH C:\Users\Jakub\ntuser.pol
2013-08-20 20:19 - 2013-08-21 21:23 - 00000000 ____D C:\Users\Jakub\Desktop\RK_Quarantine
2013-08-20 20:19 - 2013-08-20 20:19 - 00923136 _____ C:\Users\Jakub\Desktop\RogueKiller.exe
2013-08-20 20:18 - 2013-08-20 20:19 - 00923136 _____ C:\Users\Jakub\Downloads\RogueKiller.exe
2013-08-18 20:01 - 2013-08-23 15:51 - 00000000 ____D C:\2-click run
2013-08-18 19:54 - 2013-08-18 19:54 - 00000000 ____D C:\Users\Jakub\Downloads\BeamNG DRIVE 0.3.06 (2-click run)
2013-08-18 11:34 - 2013-08-18 11:34 - 02021232 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-2.rar
2013-08-18 11:33 - 2013-08-18 11:33 - 03614294 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-1.rar
2013-08-18 11:32 - 2013-08-18 11:32 - 03485125 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-3.rar
2013-08-18 11:24 - 2013-08-18 11:24 - 00000222 _____ C:\Users\Jakub\Desktop\APB Reloaded.url
2013-08-18 11:19 - 2013-08-18 11:19 - 00000000 ____D C:\Users\Jakub\Documents\Games for Windows - LIVE Demos
2013-08-17 20:51 - 2013-08-17 20:51 - 00000222 _____ C:\Users\Jakub\Desktop\Microsoft Flight.url
2013-08-17 20:48 - 2013-08-17 20:48 - 00000000 ____D C:\Users\Jakub\AppData\Local\Risen2
2013-08-17 20:46 - 2013-08-24 22:09 - 00055419 _____ C:\Windows\DirectX.log
2013-08-17 11:01 - 2013-08-18 19:34 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-17 10:40 - 2013-08-25 22:44 - 01067362 _____ C:\Windows\WindowsUpdate.log
2013-08-17 10:28 - 2013-08-17 10:31 - 00000000 ____D C:\Users\Jakub\Downloads\GRID.2.Update.v1.0.83.1050.Incl.DLC-RELOADED
2013-08-17 10:20 - 2013-08-17 10:20 - 00000000 ____D C:\ProgramData\Babylon
2013-08-16 19:24 - 2013-08-16 19:24 - 00001194 _____ C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Easy CD DVD Burner.lnk
2013-08-16 19:24 - 2013-08-16 19:24 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\FreeBurner
2013-08-16 19:23 - 2013-08-16 19:24 - 00000000 ____D C:\Program Files (x86)\Free Easy CD DVD Burner
2013-08-16 19:22 - 2013-08-16 19:24 - 00001142 _____ C:\Users\Jakub\Desktop\Free Easy Burner.lnk
2013-08-16 19:22 - 2013-08-16 19:22 - 00000000 ____D C:\Program Files (x86)\Free Easy Burner
2013-08-16 19:22 - 2011-09-28 09:20 - 00484352 _____ C:\Windows\SysWOW64\lame_enc.dll
2013-08-16 19:22 - 2006-11-18 10:38 - 00200704 _____ (vbAccelerator) C:\Windows\SysWOW64\vbalExpBar6.ocx
2013-08-16 19:22 - 2005-03-11 17:37 - 01986560 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudFile.dll
2013-08-16 19:22 - 2005-02-24 12:11 - 01212416 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\AudioInfos.dll
2013-08-16 19:22 - 2005-02-24 11:51 - 00348160 _____ (NCT Company Ltd.) C:\Windows\SysWOW64\WMAFile.dll
2013-08-16 19:22 - 2005-01-10 12:54 - 00116296 _____ C:\Windows\SysWOW64\NCTWMAProfiles.prx
2013-08-16 19:22 - 2004-03-08 21:00 - 01081616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscomctl.ocx
2013-08-16 19:22 - 2003-04-18 14:46 - 01233920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4.dll
2013-08-16 19:22 - 2003-04-18 14:29 - 00082432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4r.dll
2013-08-16 19:22 - 2003-04-18 14:29 - 00044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml4a.dll
2013-08-16 19:22 - 2003-03-18 19:20 - 01060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFC71.dll
2013-08-16 19:22 - 2003-02-21 02:42 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2013-08-16 19:22 - 2003-01-26 11:41 - 00040960 _____ (vbAccelerator) C:\Windows\SysWOW64\SSubTmr6.dll
2013-08-16 19:22 - 2000-11-29 00:07 - 00307200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr70.dll
2013-08-16 19:22 - 2000-10-01 17:00 - 00119568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6FR.DLL
2013-08-16 19:22 - 2000-05-22 13:58 - 00115920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msinet.OCX
2013-08-16 19:22 - 1999-03-25 17:00 - 00101888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VB6STKIT.DLL
2013-08-16 19:22 - 1998-07-13 16:53 - 00044544 _____ () C:\Windows\SysWOW64\GIF89.DLL
2013-08-16 19:22 - 1998-07-12 21:00 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSCMCFR.DLL
2013-08-16 19:22 - 1998-07-12 21:00 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetfr.DLL
2013-08-16 19:22 - 1998-07-12 17:00 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CMDLGFR.DLL
2013-08-16 19:08 - 2013-08-16 19:08 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Canneverbe Limited
2013-08-16 19:08 - 2013-08-16 19:08 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-08-16 19:02 - 2013-08-16 19:04 - 00000000 ____D C:\Fraps
2013-08-16 19:02 - 2013-08-16 19:02 - 00000562 _____ C:\Users\Jakub\Desktop\Fraps.lnk
2013-08-16 19:02 - 2013-08-16 19:02 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-16 19:01 - 2013-08-16 19:01 - 00000000 ____D C:\Program Files (x86)\Fraps 3.4.7. Full
2013-08-16 19:01 - 2013-08-16 19:01 - 00000000 _____ C:\Users\Jakub\regbcm
2013-08-16 14:58 - 2013-08-16 14:58 - 00000000 ____D C:\Codemasters
2013-08-14 21:41 - 2013-08-14 22:08 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-14 21:15 - 2013-08-22 22:44 - 01692160 _____ C:\Users\Jakub\AppData\Roaming\lsm.exe
2013-08-14 17:49 - 2013-08-17 10:05 - 00000000 ____D C:\Windows\erdnt
2013-08-14 15:38 - 2013-07-13 08:18 - 00337408 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2013-08-14 15:38 - 2013-07-13 08:16 - 01889280 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2013-08-14 15:38 - 2013-07-13 08:16 - 00068096 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2013-08-14 15:38 - 2013-07-13 08:15 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2013-08-14 15:38 - 2013-07-13 08:15 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2013-08-14 15:38 - 2013-07-13 06:24 - 00261120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2013-08-14 15:38 - 2013-07-13 06:23 - 01568256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2013-08-14 15:38 - 2013-07-13 06:23 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2013-08-14 15:38 - 2013-07-13 06:23 - 00074240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2013-08-14 15:38 - 2013-07-09 08:07 - 02233168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-08-14 15:38 - 2013-05-24 01:02 - 01314816 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2013-08-14 15:38 - 2013-05-24 00:25 - 00694272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2013-08-14 15:36 - 2013-08-14 15:38 - 00000000 ____D C:\Program Files\trend micro
2013-08-14 15:27 - 2013-07-26 07:13 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-08-14 15:27 - 2013-07-26 07:13 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-08-14 15:27 - 2013-07-26 07:13 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2013-08-14 15:27 - 2013-07-26 07:13 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2013-08-14 15:27 - 2013-07-26 07:13 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-08-14 15:27 - 2013-07-26 07:12 - 19239424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 15405056 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-08-14 15:27 - 2013-07-26 07:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-08-14 15:27 - 2013-07-26 05:35 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-08-14 15:27 - 2013-07-26 05:13 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-08-14 15:27 - 2013-07-26 05:13 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-08-14 15:27 - 2013-07-26 05:13 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2013-08-14 15:27 - 2013-07-26 05:12 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-08-14 15:27 - 2013-07-26 05:12 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-08-14 15:27 - 2013-07-26 05:12 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-08-14 15:27 - 2013-07-26 05:12 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-08-14 15:27 - 2013-07-26 05:11 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-08-14 15:27 - 2013-07-26 05:11 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-08-14 15:27 - 2013-07-26 04:49 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-08-14 15:27 - 2013-07-26 02:54 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2013-08-14 15:27 - 2013-07-02 02:44 - 00036288 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdBoot.sys
2013-08-14 15:27 - 2013-07-02 00:08 - 00247216 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\WdFilter.sys
2013-08-14 15:26 - 2013-07-26 07:12 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-08-14 15:26 - 2013-07-26 07:12 - 02647040 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-08-14 15:26 - 2013-07-26 05:12 - 14329344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-08-14 15:26 - 2013-07-26 05:12 - 02877440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-08-14 15:26 - 2013-07-26 05:12 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-08-14 15:26 - 2013-07-26 05:12 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-08-13 22:28 - 2013-08-14 16:50 - 00000000 ____D C:\Program Files (x86)\Live For Speed S2 Drift Edition 2010
2013-08-13 22:15 - 2013-08-13 22:15 - 00012301 _____ C:\Users\Jakub\Downloads\[CzT]Live_For_Speed_S2_Drift_Edition_2010.torrent
2013-08-13 21:34 - 2013-08-13 21:34 - 00000534 _____ C:\Users\Jakub\Desktop\LFS.lnk
2013-08-13 21:34 - 2013-08-13 21:34 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
2013-08-13 21:32 - 2013-08-16 19:05 - 00000000 ____D C:\LFS
2013-08-13 21:25 - 2013-08-13 21:29 - 00000000 ____D C:\Users\Jakub\Downloads\Live For Speed 0.6 B + Unlocker
2013-08-13 21:17 - 2012-09-14 00:04 - 00032856 _____ (Microsoft Corporation) C:\Users\Jakub\AppData\Roaming\lsaxs.exe
2013-08-12 15:03 - 2013-08-12 15:03 - 00000000 ____D C:\Users\Jakub\AppData\Local\THQ
2013-08-12 15:03 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2013-08-12 15:03 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2013-08-12 15:03 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2013-08-12 15:03 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2013-08-12 15:03 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2013-08-12 15:03 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2013-08-11 20:39 - 2013-08-16 17:37 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Little Inferno
2013-08-11 20:37 - 2013-08-11 20:37 - 00001658 _____ C:\Users\Jakub\Desktop\Little Inferno.lnk
2013-08-11 20:37 - 2013-08-11 20:37 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Inferno 1.00
2013-08-10 21:51 - 2013-08-10 21:51 - 00000222 _____ C:\Users\Jakub\Desktop\Sacred 2 Gold.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000221 _____ C:\Users\Jakub\Desktop\Saints Row The Third.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000221 _____ C:\Users\Jakub\Desktop\Risen 2 - Dark Waters.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000220 _____ C:\Users\Jakub\Desktop\Saints Row 2.url
2013-08-10 20:53 - 2013-08-10 20:53 - 00000802 _____ C:\Users\Public\Desktop\World of Warplanes.lnk
2013-08-10 14:30 - 2013-08-10 14:30 - 00001232 _____ C:\Users\Jakub\Desktop\BeamNG DRIVE.lnk
2013-08-10 14:30 - 2013-08-10 14:30 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeamNG-DRIVE-0.3
2013-08-10 14:17 - 2013-08-10 14:21 - 00000000 ____D C:\Program Files (x86)\BeamNG-DRIVE-0.3
2013-08-10 14:13 - 2013-08-17 10:17 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeamNG-Techdemo-0.3
2013-08-10 14:13 - 2013-08-10 14:13 - 00001253 _____ C:\Users\Jakub\Desktop\BeamNG Techdemo.lnk
2013-08-10 14:11 - 2013-08-17 10:18 - 00000000 ____D C:\Users\Jakub\AppData\Local\BeamNG
2013-08-09 21:21 - 2013-08-09 21:21 - 00001910 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2013-08-08 14:17 - 2013-08-08 14:17 - 00000000 ____D C:\Users\Jakub\AppData\Local\Eutechnyx
2013-08-08 11:55 - 2013-08-08 11:55 - 00001211 _____ C:\Users\Jakub\Desktop\Farming Simulator 2013 .lnk
2013-08-08 11:51 - 2013-08-08 12:05 - 00000000 ____D C:\Program Files (x86)\Farming Simulator 2013
2013-08-08 11:33 - 2013-08-08 11:35 - 00000000 ____D C:\Users\Jakub\Downloads\Farming simulator 2013
2013-08-06 05:38 - 2013-08-06 05:38 - 00065743 _____ C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\script.vbs
2013-08-05 21:31 - 2013-08-05 21:31 - 00001366 _____ C:\Users\Jakub\Desktop\Gunpoint.lnk
2013-08-05 21:28 - 2013-08-08 11:31 - 00000000 ____D C:\Users\Jakub\Downloads\GUN (Original CZ verze)
2013-08-05 21:18 - 2013-08-05 21:20 - 00000000 ____D C:\Users\Jakub\Downloads\Gunpoint
2013-08-04 18:21 - 2013-08-04 18:21 - 00000000 ____D C:\Program Files\Electronic Arts
2013-08-04 15:37 - 2013-08-04 15:37 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.3
2013-08-03 20:08 - 2013-08-03 21:14 - 00000000 ____D C:\Program Files (x86)\KSP_win
2013-08-02 08:44 - 2013-08-02 08:45 - 16009177 _____ C:\Users\Jakub\Downloads\NAVIGON-v4.7.1.apk
2013-08-01 23:16 - 2013-08-01 23:17 - 10865793 _____ C:\Users\Jakub\Downloads\GooglePlay.Installer-4.2.9-Original.apk
2013-08-01 23:16 - 2013-08-01 23:16 - 10777324 _____ C:\Users\Jakub\Downloads\GooglePlay.Installer-(4.1.6)-clear.apk
2013-07-31 13:04 - 2013-07-31 13:04 - 33133446 ____R (Friends in War) C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\ProgramsCube World v0.1.0 (FIXED)(5 July 2013)(2-click run).exe
2013-07-28 18:18 - 2013-07-28 18:18 - 00000000 ____D C:\Users\Jakub\Documents\Eden Games
2013-07-28 18:11 - 2013-07-28 18:11 - 00000000 ____D C:\Users\Jakub\AppData\Local\CrashRpt
2013-07-28 16:48 - 2013-08-18 11:24 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-07-28 16:48 - 2013-07-28 16:48 - 00000220 _____ C:\Users\Jakub\Desktop\Test Drive Unlimited 2.url
2013-07-28 16:35 - 2013-07-28 16:35 - 00000917 _____ C:\Users\Public\Desktop\Steam.lnk
2013-07-28 13:18 - 2013-07-28 13:18 - 06847436 _____ C:\Users\Jakub\Downloads\10151-GOF2-valkyrie-supernova-v2.0-Full.apk
2013-07-28 13:18 - 2013-07-28 13:18 - 00019699 _____ C:\Users\Jakub\Downloads\10151-cache-GOF2-valkyrie-supernova-v2.0zip.torrent
2013-07-28 13:17 - 2013-07-28 13:17 - 00018585 _____ C:\Users\Jakub\Downloads\67C784638C916C1F332B75F97F52E05A4721CF26.torrent
2013-07-28 13:13 - 2013-07-28 13:14 - 12150450 ____R C:\Users\Jakub\Downloads\ts.apk

==================== One Month Modified Files and Folders =======

2013-08-26 10:25 - 2013-08-26 10:25 - 00000000 ____D C:\Users\Jakub\AppData\Local\qb2446C88A.8E
2013-08-26 10:25 - 2013-08-26 10:25 - 00000000 ____D C:\FRST
2013-08-26 10:20 - 2013-08-17 10:40 - 01067362 _____ C:\Windows\WindowsUpdate.log
2013-08-26 10:19 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\sru
2013-08-26 00:57 - 2013-08-26 10:25 - 01577068 _____ (Farbar) C:\Users\Jakub\Desktop\FRST64.exe
2013-08-25 22:50 - 2013-03-03 13:53 - 00000000 ____D C:\Program Files (x86)\Steam
2013-08-25 21:28 - 2013-08-25 21:28 - 00000000 ____D C:\Users\Jakub\AppData\Local\Macromedia
2013-08-25 21:25 - 2013-07-02 19:15 - 00290776 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2013-08-25 21:25 - 2013-03-09 23:09 - 00290776 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2013-08-25 21:25 - 2013-03-09 23:09 - 00000000 ____D C:\Users\Jakub\AppData\Local\PunkBuster
2013-08-25 21:08 - 2013-03-11 14:06 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\vlc
2013-08-25 20:49 - 2013-08-25 20:49 - 00001147 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-25 20:49 - 2013-08-25 20:49 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-25 20:49 - 2013-03-22 18:39 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-25 20:48 - 2013-08-25 20:48 - 00281816 _____ (Mozilla) C:\Users\Jakub\Downloads\Firefox Setup Stub 23.0.1.exe
2013-08-25 20:48 - 2013-08-25 20:47 - 22256664 _____ (Mozilla) C:\Users\Jakub\Downloads\Firefox Setup 23.0.1.exe
2013-08-25 20:43 - 2013-08-25 20:41 - 00000000 ____D C:\Users\Jakub\AppData\Local\Adobe
2013-08-25 19:45 - 2012-07-26 12:01 - 00727488 _____ C:\Windows\system32\perfh005.dat
2013-08-25 19:45 - 2012-07-26 12:01 - 00148006 _____ C:\Windows\system32\perfc005.dat
2013-08-25 19:45 - 2012-07-26 09:28 - 01714430 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-25 19:13 - 2013-03-01 20:12 - 00000000 ____D C:\Users\Jakub\AppData\Local\Google
2013-08-25 19:13 - 2013-03-01 20:12 - 00000000 ____D C:\Program Files (x86)\Google
2013-08-25 19:07 - 2013-08-25 19:07 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Opera Software
2013-08-25 19:07 - 2013-08-25 19:07 - 00000000 ____D C:\Users\Jakub\AppData\Local\Opera Software
2013-08-25 19:06 - 2013-08-25 19:06 - 00001129 _____ C:\Users\Public\Desktop\Opera.lnk
2013-08-25 19:06 - 2013-08-25 19:06 - 00000000 ____D C:\Program Files (x86)\Opera
2013-08-25 19:06 - 2013-08-25 19:05 - 31026832 _____ (Opera Software ASA) C:\Users\Jakub\Downloads\Opera_15.0.1147.153_Setup.exe
2013-08-24 22:10 - 2013-03-09 23:09 - 00281872 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2013-08-24 22:10 - 2013-03-09 23:09 - 00076888 _____ C:\Windows\SysWOW64\PnkBstrA.exe
2013-08-24 22:09 - 2013-08-17 20:46 - 00055419 _____ C:\Windows\DirectX.log
2013-08-24 22:02 - 2013-03-10 19:21 - 00000000 ____D C:\ProgramData\Package Cache
2013-08-23 17:51 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\rescache
2013-08-23 17:06 - 2013-03-01 19:48 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\uTorrent
2013-08-23 16:56 - 2013-03-01 19:50 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2915941593-469292477-2556682576-1001
2013-08-23 15:53 - 2013-08-23 15:53 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Baumaschinen Simulator 2011
2013-08-23 15:53 - 2013-05-20 10:51 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\1-click run
2013-08-23 15:51 - 2013-08-18 20:01 - 00000000 ____D C:\2-click run
2013-08-23 15:48 - 2013-08-23 15:44 - 00000000 ____D C:\Users\Jakub\Downloads\Road Construction Simulator (2-click run)
2013-08-22 23:17 - 2013-08-22 23:17 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Unity
2013-08-22 23:16 - 2013-08-22 23:16 - 00648144 _____ (Unity Technologies ApS) C:\Users\Jakub\Downloads\UnityWebPlayer.exe
2013-08-22 23:16 - 2013-08-22 23:16 - 00000000 ____D C:\Users\Jakub\AppData\Local\Unity
2013-08-22 22:44 - 2013-08-14 21:15 - 01692160 _____ C:\Users\Jakub\AppData\Roaming\lsm.exe
2013-08-22 20:12 - 2013-08-22 20:11 - 03748385 _____ C:\Users\Jakub\Downloads\ManualAttaching_unpack_LS2013.rar
2013-08-22 20:09 - 2013-08-22 20:09 - 03935439 _____ C:\Users\Jakub\Downloads\placeable_Firework.zip
2013-08-22 19:59 - 2013-08-22 19:59 - 00321208 _____ C:\Users\Jakub\Downloads\CraftGuide-1.6.7.4.zip
2013-08-22 19:57 - 2013-03-01 20:18 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\.minecraft
2013-08-22 19:56 - 2013-08-22 19:55 - 00477213 _____ C:\Users\Jakub\Downloads\[Forge]FurnitureModv2.9.2(FULL).zip
2013-08-22 19:55 - 2013-08-22 19:54 - 04217176 _____ C:\Users\Jakub\Downloads\minecraftforge-installer-1.6.2-9.10.0.789.jar
2013-08-22 13:22 - 2013-08-22 13:22 - 00171355 _____ C:\Users\Jakub\Downloads\partsmod.rar
2013-08-22 13:08 - 2013-08-22 13:08 - 00011287 _____ C:\Users\Jakub\Downloads\nfsu2+10.zip
2013-08-22 13:06 - 2013-08-22 13:06 - 00083618 _____ C:\Users\Jakub\Downloads\profile_generator.zip
2013-08-22 12:44 - 2013-03-02 20:42 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\DAEMON Tools Lite
2013-08-22 12:22 - 2013-08-22 12:22 - 00220183 _____ C:\Users\Jakub\Downloads\r_pal_pocitac2b.zip
2013-08-22 09:58 - 2013-06-11 10:11 - 00000000 ____D C:\Games
2013-08-22 00:20 - 2013-08-22 00:19 - 00000000 ____D C:\Users\Jakub\Downloads\Amateur Nude Photos - Cute Teen Brunette Loves to pose Nude
2013-08-22 00:16 - 2013-08-22 00:15 - 00000000 ____D C:\Users\Jakub\Downloads\0003
2013-08-22 00:05 - 2013-08-22 00:05 - 26391354 _____ C:\Users\Jakub\Downloads\Beyond_Perception_Win (1).zip
2013-08-22 00:04 - 2013-08-22 00:03 - 26391354 _____ C:\Users\Jakub\Downloads\Beyond_Perception_Win.zip
2013-08-21 22:35 - 2013-08-21 22:35 - 00067118 _____ C:\Users\Jakub\Downloads\GameModeSwitcher-PC.zip
2013-08-21 21:38 - 2013-08-21 21:38 - 00784880 _____ (Google Inc.) C:\Users\Jakub\Downloads\ChromeSetup.exe
2013-08-21 21:30 - 2013-04-26 18:38 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Activision Value
2013-08-21 21:29 - 2013-04-06 22:29 - 00000000 ____D C:\Program Files (x86)\Demolition Company
2013-08-21 21:28 - 2013-03-02 21:32 - 00000000 ____D C:\Users\Jakub\Documents\My Games
2013-08-21 21:28 - 2013-03-01 19:44 - 00000000 ____D C:\Users\Jakub
2013-08-21 21:23 - 2013-08-20 20:19 - 00000000 ____D C:\Users\Jakub\Desktop\RK_Quarantine
2013-08-21 21:20 - 2013-08-20 21:14 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Seznam.cz
2013-08-21 21:19 - 2013-08-20 21:14 - 00000000 ____D C:\Program Files (x86)\Seznam.cz
2013-08-21 12:25 - 2013-08-21 12:25 - 00000000 ____D C:\Users\Jakub\AppData\Local\Deployment
2013-08-21 12:25 - 2013-08-21 12:25 - 00000000 ____D C:\Users\Jakub\AppData\Local\Apps\2.0
2013-08-20 21:13 - 2013-08-20 21:13 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Babylon
2013-08-20 21:12 - 2013-08-20 21:12 - 00000896 __RSH C:\Users\Jakub\ntuser.pol
2013-08-20 21:12 - 2012-07-26 10:12 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2013-08-20 21:12 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\SysWOW64\GroupPolicy
2013-08-20 20:19 - 2013-08-20 20:19 - 00923136 _____ C:\Users\Jakub\Desktop\RogueKiller.exe
2013-08-20 20:19 - 2013-08-20 20:18 - 00923136 _____ C:\Users\Jakub\Downloads\RogueKiller.exe
2013-08-19 09:20 - 2012-07-26 09:22 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-19 09:18 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files\Windows Defender
2013-08-19 09:18 - 2012-07-26 10:12 - 00000000 ____D C:\Program Files (x86)\Windows Defender
2013-08-18 19:54 - 2013-08-18 19:54 - 00000000 ____D C:\Users\Jakub\Downloads\BeamNG DRIVE 0.3.06 (2-click run)
2013-08-18 19:34 - 2013-08-17 11:01 - 00000000 ___HD C:\Windows\msdownld.tmp
2013-08-18 19:34 - 2013-03-02 21:27 - 00000000 ____D C:\Windows\SysWOW64\directx
2013-08-18 19:26 - 2013-03-06 22:45 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-08-18 11:34 - 2013-08-18 11:34 - 02021232 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-2.rar
2013-08-18 11:33 - 2013-08-18 11:33 - 03614294 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-1.rar
2013-08-18 11:32 - 2013-08-18 11:32 - 03485125 _____ C:\Users\Jakub\Downloads\Minecraft-Adventura-SK-3.rar
2013-08-18 11:24 - 2013-08-18 11:24 - 00000222 _____ C:\Users\Jakub\Desktop\APB Reloaded.url
2013-08-18 11:24 - 2013-07-28 16:48 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-08-18 11:19 - 2013-08-18 11:19 - 00000000 ____D C:\Users\Jakub\Documents\Games for Windows - LIVE Demos
2013-08-17 20:51 - 2013-08-17 20:51 - 00000222 _____ C:\Users\Jakub\Desktop\Microsoft Flight.url
2013-08-17 20:48 - 2013-08-17 20:48 - 00000000 ____D C:\Users\Jakub\AppData\Local\Risen2
2013-08-17 11:02 - 2013-05-28 23:53 - 00000000 ____D C:\Program Files (x86)\GRID 2
2013-08-17 10:43 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\AUInstallAgent
2013-08-17 10:31 - 2013-08-17 10:28 - 00000000 ____D C:\Users\Jakub\Downloads\GRID.2.Update.v1.0.83.1050.Incl.DLC-RELOADED
2013-08-17 10:20 - 2013-08-17 10:20 - 00000000 ____D C:\ProgramData\Babylon
2013-08-17 10:20 - 2013-03-22 20:35 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-17 10:18 - 2013-08-10 14:11 - 00000000 ____D C:\Users\Jakub\AppData\Local\BeamNG
2013-08-17 10:17 - 2013-08-10 14:13 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeamNG-Techdemo-0.3
2013-08-17 10:05 - 2013-08-14 17:49 - 00000000 ____D C:\Windows\erdnt
2013-08-16 19:24 - 2013-08-16 19:24 - 00001194 _____ C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Free Easy CD DVD Burner.lnk
2013-08-16 19:24 - 2013-08-16 19:24 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\FreeBurner
2013-08-16 19:24 - 2013-08-16 19:23 - 00000000 ____D C:\Program Files (x86)\Free Easy CD DVD Burner
2013-08-16 19:24 - 2013-08-16 19:22 - 00001142 _____ C:\Users\Jakub\Desktop\Free Easy Burner.lnk
2013-08-16 19:22 - 2013-08-16 19:22 - 00000000 ____D C:\Program Files (x86)\Free Easy Burner
2013-08-16 19:08 - 2013-08-16 19:08 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Canneverbe Limited
2013-08-16 19:08 - 2013-08-16 19:08 - 00000000 ____D C:\ProgramData\Canneverbe Limited
2013-08-16 19:05 - 2013-08-13 21:32 - 00000000 ____D C:\LFS
2013-08-16 19:04 - 2013-08-16 19:02 - 00000000 ____D C:\Fraps
2013-08-16 19:02 - 2013-08-16 19:02 - 00000562 _____ C:\Users\Jakub\Desktop\Fraps.lnk
2013-08-16 19:02 - 2013-08-16 19:02 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fraps
2013-08-16 19:01 - 2013-08-16 19:01 - 00000000 ____D C:\Program Files (x86)\Fraps 3.4.7. Full
2013-08-16 19:01 - 2013-08-16 19:01 - 00000000 _____ C:\Users\Jakub\regbcm
2013-08-16 17:37 - 2013-08-11 20:39 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Little Inferno
2013-08-16 14:58 - 2013-08-16 14:58 - 00000000 ____D C:\Codemasters
2013-08-14 22:08 - 2013-08-14 21:41 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2013-08-14 18:17 - 2012-07-26 07:37 - 00000000 __RHD C:\Users\Default
2013-08-14 18:06 - 2012-07-26 07:26 - 00000215 _____ C:\Windows\system.ini
2013-08-14 16:50 - 2013-08-13 22:28 - 00000000 ____D C:\Program Files (x86)\Live For Speed S2 Drift Edition 2010
2013-08-14 16:27 - 2012-07-26 07:26 - 00000167 _____ C:\Windows\win.ini
2013-08-14 16:25 - 2013-07-26 17:19 - 00000000 ____D C:\Windows\system32\MRT
2013-08-14 16:21 - 2013-03-04 21:35 - 78161360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2013-08-14 15:38 - 2013-08-14 15:36 - 00000000 ____D C:\Program Files\trend micro
2013-08-13 22:15 - 2013-08-13 22:15 - 00012301 _____ C:\Users\Jakub\Downloads\[CzT]Live_For_Speed_S2_Drift_Edition_2010.torrent
2013-08-13 21:34 - 2013-08-13 21:34 - 00000534 _____ C:\Users\Jakub\Desktop\LFS.lnk
2013-08-13 21:34 - 2013-08-13 21:34 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Live for Speed
2013-08-13 21:29 - 2013-08-13 21:25 - 00000000 ____D C:\Users\Jakub\Downloads\Live For Speed 0.6 B + Unlocker
2013-08-13 09:16 - 2013-07-23 21:18 - 00000000 ____D C:\Users\Jakub\Desktop\bordel
2013-08-12 15:54 - 2012-07-26 10:12 - 00000000 ____D C:\Windows\system32\NDF
2013-08-12 15:03 - 2013-08-12 15:03 - 00000000 ____D C:\Users\Jakub\AppData\Local\THQ
2013-08-12 13:12 - 2012-07-26 07:26 - 00262144 ___SH C:\Windows\system32\config\BBI
2013-08-11 20:37 - 2013-08-11 20:37 - 00001658 _____ C:\Users\Jakub\Desktop\Little Inferno.lnk
2013-08-11 20:37 - 2013-08-11 20:37 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Little Inferno 1.00
2013-08-10 22:11 - 2013-06-11 11:09 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Wargaming.net
2013-08-10 21:51 - 2013-08-10 21:51 - 00000222 _____ C:\Users\Jakub\Desktop\Sacred 2 Gold.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000221 _____ C:\Users\Jakub\Desktop\Saints Row The Third.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000221 _____ C:\Users\Jakub\Desktop\Risen 2 - Dark Waters.url
2013-08-10 21:51 - 2013-08-10 21:51 - 00000220 _____ C:\Users\Jakub\Desktop\Saints Row 2.url
2013-08-10 20:53 - 2013-08-10 20:53 - 00000802 _____ C:\Users\Public\Desktop\World of Warplanes.lnk
2013-08-10 14:30 - 2013-08-10 14:30 - 00001232 _____ C:\Users\Jakub\Desktop\BeamNG DRIVE.lnk
2013-08-10 14:30 - 2013-08-10 14:30 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BeamNG-DRIVE-0.3
2013-08-10 14:21 - 2013-08-10 14:17 - 00000000 ____D C:\Program Files (x86)\BeamNG-DRIVE-0.3
2013-08-10 14:13 - 2013-08-10 14:13 - 00001253 _____ C:\Users\Jakub\Desktop\BeamNG Techdemo.lnk
2013-08-09 22:19 - 2013-05-20 10:51 - 00000000 ____D C:\Program Files (x86)\1-click run
2013-08-09 22:19 - 2013-03-01 19:45 - 00000000 ___RD C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2013-08-09 21:21 - 2013-08-09 21:21 - 00001910 _____ C:\Users\Public\Desktop\GTA San Andreas.lnk
2013-08-08 21:04 - 2013-03-30 21:06 - 00000000 ____D C:\Users\Jakub\AppData\Roaming\Skype
2013-08-08 14:17 - 2013-08-08 14:17 - 00000000 ____D C:\Users\Jakub\AppData\Local\Eutechnyx
2013-08-08 12:05 - 2013-08-08 11:51 - 00000000 ____D C:\Program Files (x86)\Farming Simulator 2013
2013-08-08 11:55 - 2013-08-08 11:55 - 00001211 _____ C:\Users\Jakub\Desktop\Farming Simulator 2013 .lnk
2013-08-08 11:35 - 2013-08-08 11:33 - 00000000 ____D C:\Users\Jakub\Downloads\Farming simulator 2013
2013-08-08 11:31 - 2013-08-05 21:28 - 00000000 ____D C:\Users\Jakub\Downloads\GUN (Original CZ verze)
2013-08-07 18:15 - 2013-03-01 19:44 - 00000000 ____D C:\Users\Jakub\AppData\Local\Packages
2013-08-06 05:38 - 2013-08-06 05:38 - 00065743 _____ C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\script.vbs
2013-08-05 21:31 - 2013-08-05 21:31 - 00001366 _____ C:\Users\Jakub\Desktop\Gunpoint.lnk
2013-08-05 21:20 - 2013-08-05 21:18 - 00000000 ____D C:\Users\Jakub\Downloads\Gunpoint
2013-08-04 18:21 - 2013-08-04 18:21 - 00000000 ____D C:\Program Files\Electronic Arts
2013-08-04 15:37 - 2013-08-04 15:37 - 00000000 ____D C:\Program Files (x86)\Cheat Engine 6.3
2013-08-03 21:14 - 2013-08-03 20:08 - 00000000 ____D C:\Program Files (x86)\KSP_win
2013-08-02 08:45 - 2013-08-02 08:44 - 16009177 _____ C:\Users\Jakub\Downloads\NAVIGON-v4.7.1.apk
2013-08-01 23:17 - 2013-08-01 23:16 - 10865793 _____ C:\Users\Jakub\Downloads\GooglePlay.Installer-4.2.9-Original.apk
2013-08-01 23:16 - 2013-08-01 23:16 - 10777324 _____ C:\Users\Jakub\Downloads\GooglePlay.Installer-(4.1.6)-clear.apk
2013-07-31 13:04 - 2013-07-31 13:04 - 33133446 ____R (Friends in War) C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\ProgramsCube World v0.1.0 (FIXED)(5 July 2013)(2-click run).exe
2013-07-28 20:54 - 2013-03-01 20:45 - 00000000 ____D C:\Users\Jakub\Documents\Euro Truck Simulator 2
2013-07-28 18:18 - 2013-07-28 18:18 - 00000000 ____D C:\Users\Jakub\Documents\Eden Games
2013-07-28 18:11 - 2013-07-28 18:11 - 00000000 ____D C:\Users\Jakub\AppData\Local\CrashRpt
2013-07-28 16:48 - 2013-07-28 16:48 - 00000220 _____ C:\Users\Jakub\Desktop\Test Drive Unlimited 2.url
2013-07-28 16:35 - 2013-07-28 16:35 - 00000917 _____ C:\Users\Public\Desktop\Steam.lnk
2013-07-28 13:18 - 2013-07-28 13:18 - 06847436 _____ C:\Users\Jakub\Downloads\10151-GOF2-valkyrie-supernova-v2.0-Full.apk
2013-07-28 13:18 - 2013-07-28 13:18 - 00019699 _____ C:\Users\Jakub\Downloads\10151-cache-GOF2-valkyrie-supernova-v2.0zip.torrent
2013-07-28 13:17 - 2013-07-28 13:17 - 00018585 _____ C:\Users\Jakub\Downloads\67C784638C916C1F332B75F97F52E05A4721CF26.torrent
2013-07-28 13:14 - 2013-07-28 13:13 - 12150450 ____R C:\Users\Jakub\Downloads\ts.apk

Files to move or delete:
====================
C:\Program Files\Java\jre7\bin\javaw.exe
C:\Users\Jakub\AppData\Local\Temp\-1152411120.exe
C:\Users\Jakub\AppData\Local\Temp\-1284560683.exe
C:\Users\Jakub\AppData\Local\Temp\-1305023572.exe
C:\Users\Jakub\AppData\Local\Temp\-1749177512.exe
C:\Users\Jakub\AppData\Local\Temp\-1839243148.exe
C:\Users\Jakub\AppData\Local\Temp\-2112120.exe
C:\Users\Jakub\AppData\Local\Temp\-232407933.exe
C:\Users\Jakub\AppData\Local\Temp\-669818441.exe
C:\Users\Jakub\AppData\Local\Temp\-809911354.exe
C:\Users\Jakub\AppData\Local\Temp\1229596825.exe
C:\Users\Jakub\AppData\Local\Temp\1604314666.exe
C:\Users\Jakub\AppData\Local\Temp\1873113593.exe
C:\Users\Jakub\AppData\Local\Temp\1993153374.exe
C:\Users\Jakub\AppData\Local\Temp\3279873.exe
C:\Users\Jakub\AppData\Local\Temp\424680338.exe
C:\Users\Jakub\AppData\Local\Temp\45886161.exe
C:\Users\Jakub\AppData\Local\Temp\554921580.exe
C:\Users\Jakub\AppData\Local\Temp\6_Offer_4.exe
C:\Users\Jakub\AppData\Local\Temp\987097068.exe
C:\Users\Jakub\AppData\Local\Temp\biclient.exe
C:\Users\Jakub\AppData\Local\Temp\DownloadManager.exe
C:\Users\Jakub\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\Jakub\AppData\Local\Temp\InstallMonetizer.exe
C:\Users\Jakub\AppData\Local\Temp\install_flashplayer11x32_chra_aaa_aih.exe
C:\Users\Jakub\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Jakub\AppData\Local\Temp\SevenZip_9.20.exe
C:\Users\Jakub\AppData\Local\Temp\Uninstall.exe
C:\Users\Jakub\AppData\Local\Temp\_TinDel.exe
C:\Users\Jakub\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Jakub\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Jakub\AppData\Local\Temp\nsqEA09.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\Registry.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\sqlite3.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BExternal.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\sqlite3.dll

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Scheduled Tasks (whitelisted) ===========

==================== Supplementary Scan (All) ================

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableVirtualization"=dword:00000001
"EnableInstallerDetection"=dword:00000001
"PromptOnSecureDesktop"=dword:00000000
"EnableLUA"=dword:00000001
"EnableSecureUIAPaths"=dword:00000001
"ConsentPromptBehaviorAdmin"=dword:00000000
"ValidateAdminCodeSignatures"=dword:00000000
"EnableUIADesktopToggle"=dword:00000000
"EnableCursorSuppression"=dword:00000001
"ConsentPromptBehaviorUser"=dword:00000003
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"scforceoption"=dword:00000000
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
"FilterAdministratorToken"=dword:00000000

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval"=dword:00000001
"FirewallDisableNotify"=dword:00000000
"AntiVirusDisableNotify"=dword:00000000
"UpdatesDisableNotify"=dword:00000000
"AntiVirusOverride"=dword:00000000
"AntiSpywareOverride"=dword:00000000
"FirewallOverride"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"="C:\\Windows\\System32\\l3codeca.acm"
"VIDC.YUY2"="msyuv.dll"
"vidc.i420"="iyuv_32.dll"
"msacm.msgsm610"="msgsm32.acm"
"msacm.msg711"="msg711.acm"
"VIDC.YVYU"="msyuv.dll"
"VIDC.YVU9"="tsbyuv.dll"
"wavemapper"="msacm32.drv"
"midimapper"="midimap.dll"
"VIDC.UYVY"="msyuv.dll"
"VIDC.IYUV"="iyuv_32.dll"
"vidc.mrle"="msrle32.dll"
"msacm.imaadpcm"="imaadp32.acm"
"msacm.msadpcm"="msadp32.acm"
"vidc.msvc"="msvidc32.dll"
"wave"="wdmaud.drv"
"midi"="wdmaud.drv"
"mixer"="wdmaud.drv"
"aux"="wdmaud.drv"
"wave1"="wdmaud.drv"
"midi1"="wdmaud.drv"
"mixer1"="wdmaud.drv"
"aux1"="wdmaud.drv"
"MSVideo8"="VfWWDM32.dll"
"wave2"="wdmaud.drv"
"midi2"="wdmaud.drv"
"mixer2"="wdmaud.drv"
"aux2"="wdmaud.drv"
"wave3"="wdmaud.drv"
"midi3"="wdmaud.drv"
"mixer3"="wdmaud.drv"
"aux3"="wdmaud.drv"
"VIDC.FPS1"="frapsv64.dll"

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:596.17 GB) (Free:278 GB) NTFS ==>[Drive with boot components (obtained from BCD)]

Available physical RAM: 2704.39 MB
Total physical RAM: 4094.29 MB
Percentage of memory in use: 33%

LastRegBack: 2013-08-13 09:16

==================== End Of Log ==============================

#18 Příspěvek od **vyosek** » 26 srp 2013 21:47

Nasledujici soubory otestujte na VirusTotalu https://www.virustotal.com/cs/

C:\Program Files\Java\jre7\bin\javaw.exe
Kliknete na Choose file
Soubor nehledejte, jen vlozte cestu souboru, ktery chci otestovat
Kliknete na Scan It
Pokud na Vas vyskoci obrazovka jako je nize, tak kliknete na ReAnalyse
Vysledek analyzy sem vlozte (jako odkaz)

corpop · #19 Příspěvek od **corpop** » 28 srp 2013 18:20

https://www.virustotal.com/cs/file/3910 ... 377710355/

#20 Příspěvek od **vyosek** » 29 srp 2013 10:07

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [LocalSessionManager] - C:\Users\Jakub\AppData\Roaming\lsm.exe [1692160 2013-08-22] ()
HKCU\...\Run: [sysXboot] - C:\Program Files\Java\jre7\bin\javaw.exe [188832 2013-03-14] (Oracle Corporation) <===== ATTENTION
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
Startup: C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs ()
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP ... 1&tsp=4980
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=CC1A7AE4004EDBA0&affID=123511&tsp=4980
SearchScopes: HKCU - {61B0B0E8-2066-40F0-94CB-F94F50C9DBEE} URL = http://www.mysearchresults.com/search?c=8004&t=11&q={searchTerms}
C:\Users\Jakub\AppData\Local\Temp\-1152411120.exe
C:\Users\Jakub\AppData\Local\Temp\-1284560683.exe
C:\Users\Jakub\AppData\Local\Temp\-1305023572.exe
C:\Users\Jakub\AppData\Local\Temp\-1749177512.exe
C:\Users\Jakub\AppData\Local\Temp\-1839243148.exe
C:\Users\Jakub\AppData\Local\Temp\-2112120.exe
C:\Users\Jakub\AppData\Local\Temp\-232407933.exe
C:\Users\Jakub\AppData\Local\Temp\-669818441.exe
C:\Users\Jakub\AppData\Local\Temp\-809911354.exe
C:\Users\Jakub\AppData\Local\Temp\1229596825.exe
C:\Users\Jakub\AppData\Local\Temp\1604314666.exe
C:\Users\Jakub\AppData\Local\Temp\1873113593.exe
C:\Users\Jakub\AppData\Local\Temp\1993153374.exe
C:\Users\Jakub\AppData\Local\Temp\3279873.exe
C:\Users\Jakub\AppData\Local\Temp\424680338.exe
C:\Users\Jakub\AppData\Local\Temp\45886161.exe
C:\Users\Jakub\AppData\Local\Temp\554921580.exe
C:\Users\Jakub\AppData\Local\Temp\6_Offer_4.exe
C:\Users\Jakub\AppData\Local\Temp\987097068.exe
C:\Users\Jakub\AppData\Local\Temp\biclient.exe
C:\Users\Jakub\AppData\Local\Temp\DownloadManager.exe
C:\Users\Jakub\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\Jakub\AppData\Local\Temp\InstallMonetizer.exe
C:\Users\Jakub\AppData\Local\Temp\install_flashplayer11x32_chra_aaa_aih.exe
C:\Users\Jakub\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Jakub\AppData\Local\Temp\SevenZip_9.20.exe
C:\Users\Jakub\AppData\Local\Temp\Uninstall.exe
C:\Users\Jakub\AppData\Local\Temp\_TinDel.exe
C:\Users\Jakub\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Jakub\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Jakub\AppData\Local\Temp\nsqEA09.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\Registry.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\sqlite3.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BExternal.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\sqlite3.dll
C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs
C:\Windows\inf\ntvdm.vbe 
C:\Users\Jakub\AppData\Roaming\lsm.exe
Hosts:
CMD: shutdown /r /f /t 2
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

corpop · #21 Příspěvek od **corpop** » 29 srp 2013 17:47

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 26-08-2013
Ran by Jakub at 2013-08-29 18:47:25 Run:1
Running from C:\Users\Jakub\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3674320 2013-01-08] (DT Soft Ltd)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [LocalSessionManager] - C:\Users\Jakub\AppData\Roaming\lsm.exe [1692160 2013-08-22] ()
HKCU\...\Run: [sysXboot] - C:\Program Files\Java\jre7\bin\javaw.exe [188832 2013-03-14] (Oracle Corporation) <===== ATTENTION
HKLM-x32\...\Run: [NtVdmSrv] - C:\Windows\inf\ntvdm.vbe [1219 2013-06-20] ()
Startup: C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs ()
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.delta-search.com/?babsrc=HP ... 1&tsp=4980
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www1.delta-search.com/?q={search ... 1&tsp=4980
SearchScopes: HKCU - {61B0B0E8-2066-40F0-94CB-F94F50C9DBEE} URL = http://www.mysearchresults.com/search?c ... earchTerms}
C:\Users\Jakub\AppData\Local\Temp\-1152411120.exe
C:\Users\Jakub\AppData\Local\Temp\-1284560683.exe
C:\Users\Jakub\AppData\Local\Temp\-1305023572.exe
C:\Users\Jakub\AppData\Local\Temp\-1749177512.exe
C:\Users\Jakub\AppData\Local\Temp\-1839243148.exe
C:\Users\Jakub\AppData\Local\Temp\-2112120.exe
C:\Users\Jakub\AppData\Local\Temp\-232407933.exe
C:\Users\Jakub\AppData\Local\Temp\-669818441.exe
C:\Users\Jakub\AppData\Local\Temp\-809911354.exe
C:\Users\Jakub\AppData\Local\Temp\1229596825.exe
C:\Users\Jakub\AppData\Local\Temp\1604314666.exe
C:\Users\Jakub\AppData\Local\Temp\1873113593.exe
C:\Users\Jakub\AppData\Local\Temp\1993153374.exe
C:\Users\Jakub\AppData\Local\Temp\3279873.exe
C:\Users\Jakub\AppData\Local\Temp\424680338.exe
C:\Users\Jakub\AppData\Local\Temp\45886161.exe
C:\Users\Jakub\AppData\Local\Temp\554921580.exe
C:\Users\Jakub\AppData\Local\Temp\6_Offer_4.exe
C:\Users\Jakub\AppData\Local\Temp\987097068.exe
C:\Users\Jakub\AppData\Local\Temp\biclient.exe
C:\Users\Jakub\AppData\Local\Temp\DownloadManager.exe
C:\Users\Jakub\AppData\Local\Temp\GLB1A2B.EXE
C:\Users\Jakub\AppData\Local\Temp\InstallMonetizer.exe
C:\Users\Jakub\AppData\Local\Temp\install_flashplayer11x32_chra_aaa_aih.exe
C:\Users\Jakub\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe
C:\Users\Jakub\AppData\Local\Temp\SevenZip_9.20.exe
C:\Users\Jakub\AppData\Local\Temp\Uninstall.exe
C:\Users\Jakub\AppData\Local\Temp\_TinDel.exe
C:\Users\Jakub\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
C:\Users\Jakub\AppData\Local\Temp\~nsu.tmp\Au_.exe
C:\Users\Jakub\AppData\Local\Temp\nsqEA09.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\Registry.dll
C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\utils.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\sqlite3.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BabMaint.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BExternal.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolForMontiera.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolution.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\ChromeToolbarSetup.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\enhancedNT.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\GUninstaller.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\IEHelper.dll
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\Setup.exe
C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\sqlite3.dll
C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs
C:\Windows\inf\ntvdm.vbe
C:\Users\Jakub\AppData\Roaming\lsm.exe
Hosts:
CMD: shutdown /r /f /t 2
End
*****************

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Steam => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\LocalSessionManager => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\sysXboot => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\NtVdmSrv => Value deleted successfully.
C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{61B0B0E8-2066-40F0-94CB-F94F50C9DBEE} => Key deleted successfully.
HKCR\CLSID\{61B0B0E8-2066-40F0-94CB-F94F50C9DBEE} => Key not found.
"C:\Users\Jakub\AppData\Local\Temp\-1152411120.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-1284560683.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-1305023572.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-1749177512.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-1839243148.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-2112120.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-232407933.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-669818441.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\-809911354.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\1229596825.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\1604314666.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\1873113593.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\1993153374.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\3279873.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\424680338.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\45886161.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\554921580.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\6_Offer_4.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\987097068.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\biclient.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\DownloadManager.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\GLB1A2B.EXE" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\InstallMonetizer.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\install_flashplayer11x32_chra_aaa_aih.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\listicka-partner-13415-1.1.2-offline.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\SevenZip_9.20.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\Uninstall.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\_TinDel.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe" => File/Directory not found.
C:\Users\Jakub\AppData\Local\Temp\~nsu.tmp\Au_.exe => Moved successfully.
"C:\Users\Jakub\AppData\Local\Temp\nsqEA09.tmp\utils.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\Registry.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\nsf2296.tmp\utils.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BabMaint.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolForMontiera.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\BUSolution.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\ChromeToolbarSetup.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\enhancedNT.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\GUninstaller.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\IEHelper.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\Setup.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\974D0356-BAB0-7891-B3BB-7E08F8D9B22D\sqlite3.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BabMaint.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BExternal.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolForMontiera.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\BUSolution.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\ChromeToolbarSetup.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\enhancedNT.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\GUninstaller.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\IEHelper.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\Setup.exe" => File/Directory not found.
"C:\Users\Jakub\AppData\Local\Temp\613258ED-BAB0-7891-9740-F01E500A3407\Latest\sqlite3.dll" => File/Directory not found.
"C:\Users\Jakub\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\script.vbs" => File/Directory not found.
C:\Windows\inf\ntvdm.vbe => Moved successfully.
C:\Users\Jakub\AppData\Roaming\lsm.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

==== End of Fixlog ====

#22 Příspěvek od **vyosek** » 29 srp 2013 18:41

Tak jeste uklidime

Odinstalujte Combofix

Prejmenujte ComboFix na Uninstall
Spustte jej
Tohle smaze Combofix a jeho slozky

T-Cleaner http://vyosek.ic.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

corpop · #23 Příspěvek od **corpop** » 29 srp 2013 19:58

řekl bych, že to bude vše.

Díky

#24 Příspěvek od **vyosek** » 29 srp 2013 20:17

Neni zac, uvidime se o sekci vedle

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD

Re: Preventivní kontrola, HDD