Vyskakující adware

Zpráva

zenisek2 · #1 Příspěvek od **zenisek2** » 03 lis 2013 10:06

Ahoj, mám takovýto problém. Při brouzdání na netu mám označené v textu části slov a když na ty označené části slov najedu tak mi vyskočí reklama a odkaz na stránky nav-links.com. Je to velice, velice otravné a přitom antivirus (používám microsoft security essentials) ani spybot mi nic nenajdoua já sám nevím jak se toho mám zbavit. Myslíte, že by jste mi uměli poradit?

Předem děkuji

#2 Příspěvek od **Rudy** » 03 lis 2013 10:09

Zdravím!
Zkuste tento postup: http://forum.viry.cz/viewtopic.php?f=24&t=132509 .

zenisek2 · #3 Příspěvek od **zenisek2** » 03 lis 2013 11:17

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 31-10-2013
Ran by zenda97 (administrator) on ZENDA97-HP on 03-11-2013 11:10:43
Running from C:\Users\zenda97\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 10
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(HP) C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\IDT\WDM\AESTSr64.exe
(Hewlett-Packard Company) C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Services\IPT\jhi_service.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\TouchControl.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(HP) C:\Program Files (x86)\HP SimplePass 2011\BioMonitor.exe
(Hewlett-Packard ) C:\Program Files\IDT\WDM\beats64.exe
(Hewlett-Packard) C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Alienware) C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe
(Alienware Corporation) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe
(Dropbox, Inc.) C:\Users\zenda97\AppData\Roaming\Dropbox\bin\Dropbox.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe
(OpenOffice.org) C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
() C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Safer Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook32Mngr.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFXHook64Mngr.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files\NetBeans 7.2.1\bin\netbeans64.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MpCmdRun.exe
(forum.viry.cz) C:\Users\zenda97\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BeatsOSDApp] - C:\Program Files\IDT\WDM\beats64.exe [37888 2011-08-24] (Hewlett-Packard )
HKLM\...\Run: [hpsysdrv] - C:\Program Files (x86)\Hewlett-Packard\HP Odometer\hpsysdrv.exe [62768 2008-11-20] (Hewlett-Packard)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM\...\Run: [Nvtmru] - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\NvTmru.exe [1028384 2013-10-18] (NVIDIA Corporation)
HKLM\...\Run: [Launch Keyboard CI] - C:\Program Files\Alienware\Alienware TactX Keyboard CI\txkbci.exe [3439928 2012-07-11] (Alienware)
HKLM\...\Run: [AlienFX Controller] - C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe [57672 2009-05-20] (Alienware Corporation)
HKLM\...\Run: [SysTrayApp] - C:\Program Files\IDT\WDM\sttray64.exe [1425408 2012-04-24] (IDT, Inc.)
HKLM\...\Run: [ShadowPlay] - C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1356240 2013-08-12] (Microsoft Corporation)
HKCU\...\Run: [Google Update] - C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe [136176 2011-11-12] (Google Inc.)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3514176 2011-11-10] (DT Soft Ltd)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2012-11-09] ()
HKCU\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9883440 2013-10-24] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20472992 2013-10-02] (Skype Technologies S.A.)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1820584 2013-10-30] (Valve Corporation)
HKCU\...\Run: [SpybotSD TeaTimer] - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe [2260480 2009-03-05] (Safer-Networking Ltd.)
MountPoints2: J - J:\autorun.exe
MountPoints2: {ef9aa2d9-1a9a-11e1-af30-3860773d7974} - J:\Setup.exe
HKLM-x32\...\Run: [PDF Complete] - C:\Program Files (x86)\PDF Complete\pdfsty.exe [658424 2011-05-06] (PDF Complete Inc)
HKLM-x32\...\Run: [DivXUpdate] - C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe [1259376 2011-07-29] ()
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [BCSSync] - C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2345296 2013-10-01] (LogMeIn Inc.)
HKLM-x32\...\Run: [msplxxfsSrv] - C:\Windows\inf\msplxxfs.vbe [1558 2013-08-27] ()
AppInit_DLLs: [0 ] ()
AppInit_DLLs-x32: c:\progra~2\savesh~1\sprote~1.dll [1050112 2013-01-24] ()
Startup: C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\zenda97\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.3.lnk
ShortcutTarget: OpenOffice.org 3.3.lnk -> C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe ()

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... 2&tsp=5012
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = ֔
탶仍耀֔
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {AC326112-8DD0-4E29-91F3-BEF66D520648} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKLM - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://cs.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKLM-x32 - {AC326112-8DD0-4E29-91F3-BEF66D520648} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKLM-x32 - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://cs.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKCU - DefaultScope {7E425C31-C73B-4C13-89C8-E780483B5D27} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {399a1442-7377-49e7-8d77-6dc9ed5968c1} URL = http://www.zbozi.cz/?q={searchTerms}&so ... earch_6826
SearchScopes: HKCU - {5cf5d387-d87c-4408-9a6b-301b0713d62a} URL = http://www.mapy.cz/?query={searchTerms} ... earch_6826
SearchScopes: HKCU - {7E425C31-C73B-4C13-89C8-E780483B5D27} URL = http://search.yahoo.com/search?fr=chr-g ... earchTerms}
SearchScopes: HKCU - {8172f457-818d-46db-941f-2bbe53e156af} URL = http://dts.search-results.com/sr?src=ie ... earchTerms}
SearchScopes: HKCU - {AC326112-8DD0-4E29-91F3-BEF66D520648} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... earchTerms}
SearchScopes: HKCU - {d43b3890-80c7-4010-a95d-1e77b5924dc3} URL = http://cs.wikipedia.org/wiki/Special:Se ... earchTerms}
SearchScopes: HKCU - {eb97f7df-1773-4916-aae6-5af74da8c69d} URL = http://www.firmy.cz/phr/{searchTerms}
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
BHO: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\x64\IEBHO.dll (HP)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
BHO-x32: DivX Plus Web Player HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: TrueSuite Website Log On - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll (HP)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: HP Network Check Helper - {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} - C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll (Hewlett-Packard)
Toolbar: HKLM - No Name - !{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - !{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - No File
Toolbar: HKLM - No Name - !{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No File
Toolbar: HKLM - No Name - !{687578b9-7132-4a7a-80e4-30ee31099e03} - No File
Toolbar: HKLM - No Name - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No File
Toolbar: HKLM - No Name - !{91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM - No Name - !{D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF user.js: detected! => C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
FF DefaultSearchEngine: WebSearch
FF Homepage: hxxp://websearch.pu-results.info/?pid=724&r=2013/03/15&hid=187801499&lg=EN&cc=CZ
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF DefaultSearchEngine: Yahoo
FF SelectedSearchEngine: Yahoo
FF Keyword.URL: hxxp://search.yahoo.com/search?ei=utf-8&fr=greentree_ff1&type=937811&ilc=12&p=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @java.com/DTPlugin,version=1.6.0_35 - C:\Windows\system32\npdeployJava1.dll (Sun Microsystems, Inc.)
FF Plugin: @java.com/JavaPlugin - C:\Program Files\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MIF5BA~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 - C:\Program Files (x86)\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 - C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @gamersfirst.com/LiveLauncher - C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.7.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.7.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20125.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\zenda97\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\zenda97\AppData\Local\Google\Update\1.3.21.165\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\info@bflix.info
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Yandex.Bar - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\yasearch@yandex.ru
FF Extension: uTorrentControl2 Community Toolbar - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}
FF Extension: fdm_ffext - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\fdm_ffext@freedownloadmanager.org
FF HKLM\...\Firefox\Extensions: [{336D0C35-8A85-403a-B9D2-65C292C39087}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox
FF HKLM-x32\...\Firefox\Extensions: [info@bflix.info] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\info@bflix.info
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\info@bflix.info
FF HKLM-x32\...\Firefox\Extensions: [{23fcfd51-4958-4f00-80a3-ae97e717ed8b}] - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF Extension: DivX Plus Web Player HTML5 <video> - C:\Program Files (x86)\DivX\DivX Plus Web Player\firefox\DivXHTML5
FF HKLM-x32\...\Firefox\Extensions: [t68-6k6@qubxeeeauaeu.co.uk] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF HKLM-x32\...\Firefox\Extensions: [paoie_i@zbr-gwjlkjwqtpft.net] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF HKLM-x32\...\Firefox\Extensions: [{FE1DEEEA-DB6D-44b8-83F0-34FC0F9D1052}] - C:\Program Files\Web Assistant\Firefox
FF Extension: Web Assistant - C:\Program Files\Web Assistant\Firefox

Chrome:
=======
CHR Extension: (Savenshaare, ) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjafdkkmalcjfhjpalmhcdaliajfkjkl\5.10
CHR Extension: (AdBlock) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.11_0
CHR Extension: (Website Logon) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpgfhihjicjofdejkbjgnjlaglaciobe\1.0_0
CHR Extension: (Google Wallet) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.5.0_0
CHR Extension: (DivX Plus Web Player HTML5 \u003Cvideo\u003E) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.145_0
CHR Extension: (uTorrentControl2) - C:\Users\zenda97\AppData\Local\Google\Chrome\User Data\Default\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\2.5.0.1_0
CHR HKLM-x32\...\Chrome\Extension: [bmbpbcpokffodhpcdjaoopolhdlbconi] - C:\Users\zenda97\AppData\Local\Temp\tbch.crx
CHR HKLM-x32\...\Chrome\Extension: [fgnippahjheicjenccifemomfgjofdhp] - C:\ProgramData\TheBflix\fgnippahjheicjenccifemomfgjofdhp.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [jpgfhihjicjofdejkbjgnjlaglaciobe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [nneajnkjbffgblleaoojgaacokifdkhm] - C:\Program Files (x86)\DivX\DivX Plus Web Player\chrome\DivXHTML5\DivXHTML5.crx
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\zenda97\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
CHR StartMenuInternet: Google Chrome - C:\Users\zenda97\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-08-12] (Microsoft Corporation)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366600 2013-08-12] (Microsoft Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15122208 2013-10-18] (NVIDIA Corporation)
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1128952 2011-05-06] (PDF Complete Inc)
R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-07-22] ()
R2 SBSDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
S3 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1328736 2012-09-24] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [656480 2012-09-24] (Secunia)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [746392 2013-03-20] (Tunngle.net GmbH)
R2 Web Assistant; C:\Program Files\Web Assistant\ExtensionUpdaterService.exe [188760 2013-01-29] ()

==================== Drivers (Whitelisted) ====================

S3 1394hub; C:\Windows\System32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 1394hub; C:\Windows\SysWow64\svchost.exe [20992 2009-07-14] (Microsoft Corporation)
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [312480 2013-01-11] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [279616 2011-11-29] (DT Soft Ltd)
R1 HWiNFO32; C:\Program Files (x86)\HWiNFO32\HWiNFO64A.SYS [30080 2011-12-19] (REALiX(tm))
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2013-01-11] ()
S3 Maplom; No ImagePath
S3 MaplomL; No ImagePath
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [247216 2013-06-18] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [139616 2013-06-18] (Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-09-28] (NVIDIA Corporation)
S3 pmxdrv; C:\Windows\system32\drivers\pmxdrv.sys [31152 2011-10-17] ()
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 CrystalSysInfo; \??\C:\Program Files (x86)\MediaCoder\SysInfoX64.sys [x]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [x]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [x]
S3 MSICDSetup; \??\E:\CDriver64.sys [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2013-11-03 11:10 - 2013-11-03 11:10 - 00000000 ____D C:\FRST
2013-11-03 11:09 - 2013-11-03 11:09 - 00112128 _____ (forum.viry.cz) C:\Users\zenda97\Desktop\FRSTLauncher.exe
2013-11-03 11:08 - 2013-11-03 11:08 - 01957098 _____ (Farbar) C:\Users\zenda97\Desktop\FRST64.exe
2013-11-03 10:34 - 2013-11-03 10:34 - 00048492 _____ C:\Users\zenda97\Downloads\java_cviceni_4.zip
2013-11-03 09:58 - 2013-11-03 09:58 - 00003198 _____ C:\Windows\System32\Tasks\HPCeeScheduleForzenda97
2013-11-03 09:58 - 2013-11-03 09:58 - 00000340 _____ C:\Windows\Tasks\HPCeeScheduleForzenda97.job
2013-11-02 23:45 - 2013-11-02 23:45 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2012
2013-11-02 23:45 - 2013-11-02 23:45 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2012
2013-11-02 17:47 - 2013-11-02 19:40 - 00000000 ____D C:\Users\zenda97\Red Dawn (2012) [1080p]
2013-11-02 16:34 - 2013-11-02 16:34 - 00047950 _____ C:\Users\zenda97\Downloads\java_cviceni_3.zip
2013-11-02 14:44 - 2013-11-02 15:41 - 522891873 _____ C:\Users\zenda97\Downloads\Microsoft-Office-2007CZ-+-full-key-plan-verze.rar
2013-11-02 11:48 - 2013-11-02 11:48 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-02 11:48 - 2013-11-02 11:48 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-02 11:48 - 2013-11-02 11:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-02 11:43 - 2013-11-02 11:43 - 13836984 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\mseinstall.exe
2013-11-02 10:54 - 2013-11-02 11:42 - 00000000 ____D C:\Users\zenda97\AppData\Local\Temporary Projects
2013-11-01 19:06 - 2013-11-01 19:06 - 00000000 ____D C:\Users\zenda97\Apocalypse.Now.1979.Redux.1080p.BluRay.x264.anoXmous
2013-11-01 17:51 - 2013-11-01 19:06 - 00000000 ____D C:\Users\zenda97\Crazy.Stupid.Love.DVDRip.XviD-TWiZTED
2013-11-01 17:49 - 2013-11-01 19:07 - 00000000 ____D C:\Users\zenda97\Silver Linings Playbook (2012) [1080p]
2013-10-30 20:15 - 2013-10-30 20:15 - 00311032 _____ (WinterSoft) C:\Users\zenda97\Downloads\http---209.0.146.17-10-graphics-movi...l_zombies1.wmv.exe
2013-10-29 21:15 - 2013-10-29 21:15 - 00100507 _____ C:\Users\zenda97\Downloads\5 - Podmínky.zip
2013-10-29 17:30 - 2013-10-29 17:30 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft Corporation
2013-10-28 17:17 - 2013-10-18 02:36 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-10-28 17:17 - 2013-10-18 02:36 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-10-28 17:16 - 2013-09-28 00:01 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2013-10-28 17:16 - 2013-09-28 00:01 - 00028960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2013-10-28 14:42 - 2013-10-28 14:42 - 00194033 _____ C:\Users\zenda97\Downloads\the-big-bang-theory-first-season_english-220662.rar
2013-10-28 13:41 - 2013-10-28 13:41 - 03252048 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\vcs_web.exe
2013-10-28 13:38 - 2013-10-28 13:38 - 01023872 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\winexpress_full.exe
2013-10-28 10:51 - 2013-11-03 09:47 - 00003496 _____ C:\Windows\System32\Tasks\gg_uac_daemon_zenda97
2013-10-26 19:18 - 2013-10-26 19:18 - 00050005 _____ C:\Users\zenda97\Downloads\the.lord.of.the.rings.the.fellowship.of.the.ring.(2001).cze.1cd.(4898710).zip
2013-10-26 19:02 - 2013-10-26 19:02 - 00049783 _____ C:\Users\zenda97\Downloads\the.lord.of.the.rings.the.fellowship.of.the.ring.(2001).cze.3cd.(3730134).zip
2013-10-26 18:55 - 2013-10-26 18:55 - 00016253 _____ C:\Users\zenda97\Downloads\game.of.thrones.(2011).cze.1cd.(4558819).zip
2013-10-26 18:53 - 2013-10-26 18:53 - 00010654 _____ C:\Users\zenda97\Downloads\game.of.thrones.(2011).cze.1cd.(4875424).zip
2013-10-26 16:14 - 2012-10-11 17:56 - 00001420 _____ C:\Windows\system32\Drivers\etc\hosts.20131026-171442.backup
2013-10-26 15:30 - 2013-10-26 15:30 - 00000236 _____ C:\Windows\wininit.ini
2013-10-26 12:21 - 2013-10-26 12:22 - 00073043 _____ C:\Users\zenda97\Downloads\the.internship.(2013).eng.1cd.(5218018).zip
2013-10-26 09:58 - 2013-10-28 12:37 - 00000000 ____D C:\Users\zenda97\The Internship (2013) [1080p]
2013-10-24 20:12 - 2013-10-24 20:19 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-24 20:12 - 2013-10-24 20:18 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-10-24 20:12 - 2013-10-24 20:12 - 00001264 _____ C:\Users\zenda97\Desktop\Spybot - Search & Destroy.lnk
2013-10-24 20:10 - 2013-10-24 20:10 - 16409960 ____R (Safer Networking Limited ) C:\Users\zenda97\spybotsd162-setup.exe
2013-10-24 16:56 - 2013-11-03 09:46 - 00006875 _____ C:\Windows\setupact.log
2013-10-24 16:56 - 2013-11-03 09:45 - 00002948 _____ C:\Windows\PFRO.log
2013-10-24 16:56 - 2013-10-24 16:56 - 00000000 _____ C:\Windows\setuperr.log
2013-10-23 20:47 - 2013-10-23 20:47 - 00023768 _____ C:\Users\zenda97\Downloads\game.of.thrones.valar.dohaeris.(2013).cze.1cd.(5084671).zip
2013-10-23 19:58 - 2013-10-23 19:59 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (3).exe
2013-10-23 19:16 - 2013-10-23 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (2).exe
2013-10-23 19:15 - 2013-10-23 19:15 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (1).exe
2013-10-23 17:05 - 2013-10-23 17:05 - 00000000 _____ C:\autoexec.bat
2013-10-23 17:04 - 2013-10-23 20:01 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-23 17:04 - 2013-10-23 17:04 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-23 17:03 - 2013-10-23 17:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer.exe
2013-10-22 19:25 - 2013-10-22 19:25 - 00000192 _____ C:\Users\zenda97\.packettracer
2013-10-22 19:25 - 2013-10-22 19:25 - 00000000 ____D C:\Users\zenda97\Cisco Packet Tracer 6.0.1
2013-10-22 17:51 - 2013-10-22 18:00 - 152545746 _____ (Cisco Systems, Inc. ) C:\Users\zenda97\Downloads\Cisco-Packet-Tracer-6.0.1-for-Windows-(with-tutorials).exe
2013-10-22 17:00 - 2013-10-22 17:00 - 00027177 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).eng.1cd.(3683255).zip
2013-10-22 16:56 - 2013-10-22 16:56 - 00027950 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).slo.1cd.(3706172).zip
2013-10-22 16:56 - 2013-10-22 16:56 - 00026021 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).eng.1cd.(3681802).zip
2013-10-22 16:48 - 2013-10-22 16:48 - 00025530 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).cze.1cd.(3735696).zip
2013-10-20 13:16 - 2013-10-20 13:16 - 00000000 ____D C:\Users\zenda97\The complete discography of Sabaton (2000-2012)
2013-10-19 14:54 - 2013-10-19 15:17 - 00000000 ____D C:\Users\zenda97\AppData\Local\Bitoon
2013-10-19 14:53 - 2013-10-19 14:54 - 00243680 _____ C:\Users\zenda97\Downloads\BasketDudes_installer.exe
2013-10-19 09:09 - 2013-10-26 19:01 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-10-19 09:09 - 2013-10-19 09:09 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\zenda97\Downloads\wt_launcher_1.0.1.278.exe
2013-10-19 09:09 - 2013-10-19 09:09 - 00001107 _____ C:\Users\Public\Desktop\WarThunder.lnk
2013-10-19 09:09 - 2013-10-19 09:09 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2013-10-18 18:34 - 2013-10-18 18:56 - 35258235 _____ C:\Users\zenda97\Downloads\MODs.pack.0.8.8_v5.zip
2013-10-18 18:24 - 2013-10-18 18:34 - 14941904 _____ C:\Users\zenda97\Downloads\Nepotvrzeno 134425.crdownload
2013-10-18 18:23 - 2013-10-18 18:23 - 00017338 _____ C:\Users\zenda97\Downloads\drive.(2011).eng.1cd.(4420106).zip
2013-10-18 16:06 - 2013-10-18 16:07 - 10271500 _____ C:\Users\zenda97\Downloads\xvm-5.0.0-test5.zip
2013-10-13 18:41 - 2013-10-13 18:41 - 00034537 _____ C:\Users\zenda97\Downloads\mud.(2012).eng.1cd.(5103090).zip
2013-10-13 18:40 - 2013-10-13 18:40 - 00045290 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.1cd.(5151684).zip
2013-10-13 18:40 - 2013-10-13 18:40 - 00044931 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.2cd.(5031412).zip
2013-10-13 18:38 - 2013-10-13 18:38 - 00043080 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.1cd.(5033609).zip
2013-10-12 14:17 - 2013-10-25 14:34 - 00000000 ____D C:\Users\zenda97\Desktop\Warcraft 3 Frozen Throne
2013-10-12 12:46 - 2013-10-12 12:47 - 00000000 ____D C:\Program Files\DirectX
2013-10-12 12:32 - 2013-10-12 12:34 - 100273008 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\directx_Jun2010_redist.exe
2013-10-11 20:34 - 2013-10-11 20:34 - 00002335 _____ C:\Users\zenda97\Desktop\Battlefield 2.lnk
2013-10-11 20:06 - 2013-10-28 20:06 - 00000000 ____D C:\Users\zenda97\Battlefield 2 multiplayer + singleplayer ^^nosTEAM^^
2013-10-11 17:11 - 2013-10-11 18:30 - 00000000 ____D C:\Program Files (x86)\TERA
2013-10-11 17:11 - 2013-10-11 17:11 - 00001050 _____ C:\Users\zenda97\Desktop\TERA.lnk
2013-10-11 17:10 - 2013-10-11 17:11 - 15366160 _____ (Gameforge Productions GmbH ) C:\Users\zenda97\Downloads\TERASetup.exe
2013-10-10 17:09 - 2013-10-20 18:06 - 00000000 ____D C:\Users\zenda97\The Road (2009)
2013-10-09 20:25 - 2013-09-23 00:28 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2013-10-09 20:25 - 2013-09-23 00:28 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 14335488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 13761024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 02876928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 02048512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2013-10-09 20:25 - 2013-09-23 00:27 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2013-10-09 20:25 - 2013-09-22 23:55 - 02241024 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2013-10-09 20:25 - 2013-09-22 23:55 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2013-10-09 20:25 - 2013-09-22 23:55 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2013-10-09 20:25 - 2013-09-22 23:54 - 19252224 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 15404544 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 02647552 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2013-10-09 20:25 - 2013-09-22 23:54 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2013-10-09 20:25 - 2013-09-21 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2013-10-09 20:25 - 2013-09-21 04:30 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2013-10-09 20:25 - 2013-09-21 03:48 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2013-10-09 20:25 - 2013-09-21 03:39 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2013-10-09 19:30 - 2013-09-14 02:10 - 00497152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2013-10-09 19:30 - 2013-09-08 03:30 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2013-10-09 19:30 - 2013-09-08 03:27 - 00327168 _____ (Microsoft Corporation) C:\Windows\system32\mswsock.dll
2013-10-09 19:30 - 2013-09-08 03:03 - 00231424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswsock.dll
2013-10-09 19:30 - 2013-09-04 13:12 - 00343040 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbhub.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00325120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbport.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00099840 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbccgp.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00052736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbehci.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbuhci.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00025600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbohci.sys
2013-10-09 19:30 - 2013-09-04 13:11 - 00007808 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbd.sys
2013-10-09 19:30 - 2013-08-29 03:17 - 05549504 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2013-10-09 19:30 - 2013-08-29 03:16 - 01732032 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2013-10-09 19:30 - 2013-08-29 03:16 - 00859648 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2013-10-09 19:30 - 2013-08-29 03:16 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2013-10-09 19:30 - 2013-08-29 03:13 - 00878080 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2013-10-09 19:30 - 2013-08-29 02:51 - 03969472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2013-10-09 19:30 - 2013-08-29 02:51 - 03914176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2013-10-09 19:30 - 2013-08-29 02:50 - 01292192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2013-10-09 19:30 - 2013-08-29 02:50 - 00619520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2013-10-09 19:30 - 2013-08-29 02:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2013-10-09 19:30 - 2013-08-29 02:48 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2013-10-09 19:30 - 2013-08-29 01:49 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2013-10-09 19:30 - 2013-08-29 01:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2013-10-09 19:30 - 2013-08-29 01:49 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2013-10-09 19:30 - 2013-08-29 01:49 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2013-10-09 19:30 - 2013-08-28 02:21 - 03155968 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2013-10-09 19:30 - 2013-08-28 02:12 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\scavengeui.dll
2013-10-09 19:30 - 2013-08-01 13:09 - 00983488 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2013-10-09 19:30 - 2013-07-20 11:33 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:30 - 2013-07-20 11:33 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2013-10-09 19:30 - 2013-07-12 11:41 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbcir.sys
2013-10-09 19:30 - 2013-07-12 11:40 - 00109824 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBAUDIO.sys
2013-10-09 19:30 - 2013-07-04 13:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\WebClnt.dll
2013-10-09 19:30 - 2013-07-04 13:50 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2013-10-09 19:30 - 2013-07-04 13:50 - 00102400 _____ (Microsoft Corporation) C:\Windows\system32\davclnt.dll
2013-10-09 19:30 - 2013-07-04 12:57 - 00205824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebClnt.dll
2013-10-09 19:30 - 2013-07-04 12:51 - 00081920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\davclnt.dll
2013-10-09 19:30 - 2013-07-04 12:50 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2013-10-09 19:30 - 2013-07-04 11:11 - 00140800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys
2013-10-09 19:30 - 2013-07-03 05:40 - 00042496 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\usbscan.sys
2013-10-09 19:30 - 2013-07-03 05:05 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidclass.sys
2013-10-09 19:30 - 2013-07-03 05:05 - 00032896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2013-10-09 19:30 - 2013-06-25 23:55 - 00785624 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Wdf01000.sys
2013-10-09 19:30 - 2013-06-06 06:50 - 00041472 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2013-10-09 19:30 - 2013-06-06 06:49 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2013-10-09 19:30 - 2013-06-06 06:49 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2013-10-09 19:30 - 2013-06-06 06:47 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2013-10-09 19:30 - 2013-06-06 05:57 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2013-10-09 19:30 - 2013-06-06 05:51 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2013-10-09 19:30 - 2013-06-06 05:50 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2013-10-09 19:30 - 2013-06-06 04:30 - 00368128 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2013-10-09 19:30 - 2013-06-06 04:01 - 00295424 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2013-10-09 19:30 - 2013-06-06 04:01 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2013-10-06 10:22 - 2013-11-03 09:49 - 00000000 ____D C:\Program Files (x86)\Steam
2013-10-06 10:22 - 2013-10-06 10:22 - 00000919 _____ C:\Users\Public\Desktop\Steam.lnk
2013-10-06 10:21 - 2013-10-06 10:21 - 01669632 _____ C:\Users\zenda97\Downloads\SteamInstall.msi
2013-10-06 10:16 - 2013-10-06 10:19 - 07268352 _____ C:\Users\zenda97\Downloads\Sniper-Elite-v2-Coop-Crack-+-Multiplayer.iso
2013-10-06 09:19 - 2013-10-06 09:19 - 00002227 _____ C:\Users\Public\Desktop\Sniper Elite V2.lnk
2013-10-06 09:16 - 2013-10-06 09:16 - 00000000 ____D C:\Program Files (x86)\Rebellion
2013-10-05 16:54 - 2013-10-19 09:46 - 00000000 ____D C:\Users\zenda97\Documents\Mount&Blade Warband Characters
2013-10-05 16:51 - 2013-10-05 16:51 - 00017799 _____ C:\Users\zenda97\Downloads\Mount-and-Blade-Warband---čeština.rar
2013-10-05 16:50 - 2013-10-05 16:50 - 00000000 _____ C:\Users\zenda97\regbcm
2013-10-05 16:49 - 2013-10-05 16:50 - 04616178 _____ ( ) C:\Users\zenda97\Downloads\mount-and-blade-warband-cestina.exe
2013-10-05 16:45 - 2013-10-05 16:48 - 00000000 ____D C:\Users\zenda97\Documents\Mount&Blade Warband Savegames
2013-10-05 16:41 - 2013-10-05 16:41 - 00001100 _____ C:\Users\zenda97\Desktop\Mount&Blade Warband.lnk
2013-10-05 16:41 - 2013-10-05 16:41 - 00001100 _____ C:\Users\UpdatusUser\Desktop\Mount&Blade Warband.lnk
2013-10-05 16:41 - 2013-10-05 16:41 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mount&Blade Warband
2013-10-05 16:40 - 2013-10-05 16:55 - 00000000 ____D C:\Program Files (x86)\Mount&Blade Warband
2013-10-05 11:23 - 2013-10-05 11:23 - 00000000 ____D C:\Users\zenda97\Mount.and.Blade.Warband-SKIDROW
2013-10-04 18:54 - 2013-10-04 18:54 - 02015168 _____ C:\Users\zenda97\Downloads\medieval-2-total-war-100%-cestina.zip
2013-10-04 18:47 - 2013-10-04 18:47 - 00002124 _____ C:\Users\Public\Desktop\Medieval II Total War.lnk
2013-10-04 14:23 - 2013-10-04 14:25 - 00000000 ____D C:\Users\zenda97\Medieval.2.Total.War-RELOADED

==================== One Month Modified Files and Folders =======

2013-11-03 11:12 - 2011-11-20 13:51 - 00000000 ____D C:\Users\zenda97\AppData\Local\PMB Files
2013-11-03 11:10 - 2013-11-03 11:10 - 00000000 ____D C:\FRST
2013-11-03 11:09 - 2013-11-03 11:09 - 00112128 _____ (forum.viry.cz) C:\Users\zenda97\Desktop\FRSTLauncher.exe
2013-11-03 11:08 - 2013-11-03 11:08 - 01957098 _____ (Farbar) C:\Users\zenda97\Desktop\FRST64.exe
2013-11-03 11:03 - 2013-05-11 13:41 - 00000970 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA.job
2013-11-03 11:03 - 2011-11-12 13:13 - 01788914 _____ C:\Windows\WindowsUpdate.log
2013-11-03 11:01 - 2012-04-22 06:44 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2013-11-03 10:58 - 2013-05-02 22:37 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-11-03 10:49 - 2011-11-12 13:33 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Skype
2013-11-03 10:34 - 2013-11-03 10:34 - 00048492 _____ C:\Users\zenda97\Downloads\java_cviceni_4.zip
2013-11-03 10:33 - 2013-03-09 11:22 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Dropbox
2013-11-03 10:09 - 2013-01-11 18:29 - 00000000 ____D C:\Program Files\NetBeans 7.2.1
2013-11-03 09:58 - 2013-11-03 09:58 - 00003198 _____ C:\Windows\System32\Tasks\HPCeeScheduleForzenda97
2013-11-03 09:58 - 2013-11-03 09:58 - 00000340 _____ C:\Windows\Tasks\HPCeeScheduleForzenda97.job
2013-11-03 09:58 - 2011-11-20 12:34 - 00000000 _____ C:\Windows\system32\HP_ActiveX_Patch_NOT_DETECTED.txt
2013-11-03 09:58 - 2011-11-13 09:18 - 00000052 _____ C:\Windows\SysWOW64\DOErrors.log
2013-11-03 09:58 - 2011-11-12 13:14 - 00000000 ____D C:\Users\zenda97
2013-11-03 09:56 - 2011-11-13 09:10 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\HpUpdate
2013-11-03 09:56 - 2011-11-13 09:10 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\HP Support Assistant
2013-11-03 09:55 - 2009-07-14 05:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-11-03 09:55 - 2009-07-14 05:45 - 00024608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-11-03 09:51 - 2011-11-14 16:08 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\GarenaPlus
2013-11-03 09:51 - 2011-11-14 16:08 - 00000000 ____D C:\ProgramData\GarenaMessenger
2013-11-03 09:49 - 2013-10-06 10:22 - 00000000 ____D C:\Program Files (x86)\Steam
2013-11-03 09:49 - 2013-02-02 15:43 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-11-03 09:49 - 2011-11-12 13:32 - 00000000 ____D C:\ProgramData\Skype
2013-11-03 09:48 - 2011-10-17 17:44 - 00000000 ____D C:\ProgramData\PDFC
2013-11-03 09:47 - 2013-10-28 10:51 - 00003496 _____ C:\Windows\System32\Tasks\gg_uac_daemon_zenda97
2013-11-03 09:47 - 2013-05-02 22:37 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-11-03 09:47 - 2013-03-09 11:28 - 00000000 ___RD C:\Users\zenda97\Dropbox
2013-11-03 09:47 - 2012-03-14 12:33 - 00000000 ____D C:\Users\zenda97\AppData\Local\LogMeIn Hamachi
2013-11-03 09:46 - 2013-10-24 16:56 - 00006875 _____ C:\Windows\setupact.log
2013-11-03 09:46 - 2011-10-17 17:50 - 00000000 ____D C:\ProgramData\truesuite
2013-11-03 09:46 - 2011-10-17 17:29 - 00000000 ____D C:\ProgramData\NVIDIA
2013-11-03 09:46 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-11-03 09:45 - 2013-10-24 16:56 - 00002948 _____ C:\Windows\PFRO.log
2013-11-03 09:45 - 2011-12-27 11:35 - 00000000 ____D C:\ProgramData\AVAST Software
2013-11-02 23:46 - 2013-09-17 16:02 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-11-02 23:45 - 2013-11-02 23:45 - 00000000 ____D C:\Users\Default\Documents\Visual Studio 2012
2013-11-02 23:45 - 2013-11-02 23:45 - 00000000 ____D C:\Users\Default User\Documents\Visual Studio 2012
2013-11-02 23:45 - 2013-06-30 13:01 - 00000000 ____D C:\ProgramData\Package Cache
2013-11-02 23:06 - 2012-10-20 23:00 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\vlc
2013-11-02 21:45 - 2011-11-15 15:49 - 00000000 ____D C:\Program Files (x86)\Warcraft3 TFT
2013-11-02 21:45 - 2011-11-14 16:09 - 00045270 _____ C:\Users\zenda97\AppData\Roaming\room_v3.dat
2013-11-02 21:35 - 2011-11-12 13:21 - 00003986 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{9B3740CC-97A6-45D7-9DEF-66C14909EE98}
2013-11-02 20:02 - 2012-04-07 22:59 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\uTorrent
2013-11-02 19:59 - 2012-11-27 20:03 - 00000000 ____D C:\Program Files (x86)\Garena Plus
2013-11-02 19:40 - 2013-11-02 17:47 - 00000000 ____D C:\Users\zenda97\Red Dawn (2012) [1080p]
2013-11-02 17:03 - 2013-05-11 13:41 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core.job
2013-11-02 16:34 - 2013-11-02 16:34 - 00047950 _____ C:\Users\zenda97\Downloads\java_cviceni_3.zip
2013-11-02 15:41 - 2013-11-02 14:44 - 522891873 _____ C:\Users\zenda97\Downloads\Microsoft-Office-2007CZ-+-full-key-plan-verze.rar
2013-11-02 11:48 - 2013-11-02 11:48 - 00001912 _____ C:\Windows\epplauncher.mif
2013-11-02 11:48 - 2013-11-02 11:48 - 00000000 ____D C:\Program Files\Microsoft Security Client
2013-11-02 11:48 - 2013-11-02 11:48 - 00000000 ____D C:\Program Files (x86)\Microsoft Security Client
2013-11-02 11:43 - 2013-11-02 11:43 - 13836984 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\mseinstall.exe
2013-11-02 11:42 - 2013-11-02 10:54 - 00000000 ____D C:\Users\zenda97\AppData\Local\Temporary Projects
2013-11-01 19:07 - 2013-11-01 17:49 - 00000000 ____D C:\Users\zenda97\Silver Linings Playbook (2012) [1080p]
2013-11-01 19:06 - 2013-11-01 19:06 - 00000000 ____D C:\Users\zenda97\Apocalypse.Now.1979.Redux.1080p.BluRay.x264.anoXmous
2013-11-01 19:06 - 2013-11-01 17:51 - 00000000 ____D C:\Users\zenda97\Crazy.Stupid.Love.DVDRip.XviD-TWiZTED
2013-10-31 18:52 - 2011-10-17 17:13 - 00761592 _____ C:\Windows\system32\perfh005.dat
2013-10-31 18:52 - 2011-10-17 17:13 - 00179000 _____ C:\Windows\system32\perfc005.dat
2013-10-31 18:52 - 2009-07-14 06:13 - 01842156 _____ C:\Windows\system32\PerfStringBackup.INI
2013-10-30 20:15 - 2013-10-30 20:15 - 00311032 _____ (WinterSoft) C:\Users\zenda97\Downloads\http---209.0.146.17-10-graphics-movi...l_zombies1.wmv.exe
2013-10-30 19:51 - 2013-01-21 16:30 - 00000000 ____D C:\Users\zenda97\Desktop\vsechno mozné
2013-10-29 21:15 - 2013-10-29 21:15 - 00100507 _____ C:\Users\zenda97\Downloads\5 - Podmínky.zip
2013-10-29 17:30 - 2013-10-29 17:30 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft Corporation
2013-10-28 20:06 - 2013-10-11 20:06 - 00000000 ____D C:\Users\zenda97\Battlefield 2 multiplayer + singleplayer ^^nosTEAM^^
2013-10-28 17:17 - 2011-10-17 17:29 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2013-10-28 17:17 - 2011-10-17 17:28 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2013-10-28 17:17 - 2011-10-17 17:28 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2013-10-28 14:42 - 2013-10-28 14:42 - 00194033 _____ C:\Users\zenda97\Downloads\the-big-bang-theory-first-season_english-220662.rar
2013-10-28 14:41 - 2012-01-25 19:58 - 00000000 ____D C:\Users\zenda97\Desktop\Filmy
2013-10-28 14:40 - 2013-03-19 19:18 - 00041984 ___SH C:\Users\zenda97\Thumbs.db
2013-10-28 14:06 - 2011-11-24 19:57 - 00000000 ____D C:\Users\zenda97\Documents\Visual Studio 2010
2013-10-28 13:46 - 2011-11-24 19:56 - 00000000 ____D C:\Program Files (x86)\Microsoft Visual Studio 10.0
2013-10-28 13:41 - 2013-10-28 13:41 - 03252048 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\vcs_web.exe
2013-10-28 13:38 - 2013-10-28 13:38 - 01023872 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\winexpress_full.exe
2013-10-28 12:37 - 2013-10-26 09:58 - 00000000 ____D C:\Users\zenda97\The Internship (2013) [1080p]
2013-10-26 19:18 - 2013-10-26 19:18 - 00050005 _____ C:\Users\zenda97\Downloads\the.lord.of.the.rings.the.fellowship.of.the.ring.(2001).cze.1cd.(4898710).zip
2013-10-26 19:02 - 2013-10-26 19:02 - 00049783 _____ C:\Users\zenda97\Downloads\the.lord.of.the.rings.the.fellowship.of.the.ring.(2001).cze.3cd.(3730134).zip
2013-10-26 19:01 - 2013-10-19 09:09 - 00000000 ____D C:\Program Files (x86)\WarThunder
2013-10-26 18:55 - 2013-10-26 18:55 - 00016253 _____ C:\Users\zenda97\Downloads\game.of.thrones.(2011).cze.1cd.(4558819).zip
2013-10-26 18:53 - 2013-10-26 18:53 - 00010654 _____ C:\Users\zenda97\Downloads\game.of.thrones.(2011).cze.1cd.(4875424).zip
2013-10-26 15:30 - 2013-10-26 15:30 - 00000236 _____ C:\Windows\wininit.ini
2013-10-26 15:30 - 2012-05-28 17:56 - 00000000 ____D C:\Program Files\Web Assistant
2013-10-26 12:22 - 2013-10-26 12:21 - 00073043 _____ C:\Users\zenda97\Downloads\the.internship.(2013).eng.1cd.(5218018).zip
2013-10-26 09:58 - 2013-06-03 16:05 - 00000099 ____H C:\Users\zenda97\Desktop\DontSleep.ini
2013-10-25 16:11 - 2011-11-17 10:39 - 00000000 ____D C:\Users\zenda97\AppData\Local\CrashDumps
2013-10-25 14:34 - 2013-10-12 14:17 - 00000000 ____D C:\Users\zenda97\Desktop\Warcraft 3 Frozen Throne
2013-10-24 20:19 - 2013-10-24 20:12 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy
2013-10-24 20:18 - 2013-10-24 20:12 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy
2013-10-24 20:12 - 2013-10-24 20:12 - 00001264 _____ C:\Users\zenda97\Desktop\Spybot - Search & Destroy.lnk
2013-10-24 20:10 - 2013-10-24 20:10 - 16409960 ____R (Safer Networking Limited ) C:\Users\zenda97\spybotsd162-setup.exe
2013-10-24 19:21 - 2012-10-21 10:34 - 00000000 ____D C:\Program Files (x86)\SpeedFan
2013-10-24 16:56 - 2013-10-24 16:56 - 00000000 _____ C:\Windows\setuperr.log
2013-10-23 20:47 - 2013-10-23 20:47 - 00023768 _____ C:\Users\zenda97\Downloads\game.of.thrones.valar.dohaeris.(2013).cze.1cd.(5084671).zip
2013-10-23 20:11 - 2013-09-19 19:09 - 00000000 ____D C:\Program Files\IDT
2013-10-23 20:01 - 2013-10-23 17:04 - 00000000 ____D C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
2013-10-23 19:59 - 2013-10-23 19:58 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (3).exe
2013-10-23 19:16 - 2013-10-23 19:16 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (2).exe
2013-10-23 19:15 - 2013-10-23 19:15 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer (1).exe
2013-10-23 18:59 - 2011-12-12 19:56 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\TS3Client
2013-10-23 18:59 - 2011-11-29 21:04 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\DAEMON Tools Lite
2013-10-23 18:59 - 2011-02-11 18:00 - 00000000 ____D C:\Windows\Panther
2013-10-23 17:05 - 2013-10-23 17:05 - 00000000 _____ C:\autoexec.bat
2013-10-23 17:04 - 2013-10-23 17:04 - 00000000 ____D C:\Program Files\Enigma Software Group
2013-10-23 17:03 - 2013-10-23 17:03 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\zenda97\Downloads\SpyHunter-Installer.exe
2013-10-22 19:25 - 2013-10-22 19:25 - 00000192 _____ C:\Users\zenda97\.packettracer
2013-10-22 19:25 - 2013-10-22 19:25 - 00000000 ____D C:\Users\zenda97\Cisco Packet Tracer 6.0.1
2013-10-22 18:00 - 2013-10-22 17:51 - 152545746 _____ (Cisco Systems, Inc. ) C:\Users\zenda97\Downloads\Cisco-Packet-Tracer-6.0.1-for-Windows-(with-tutorials).exe
2013-10-22 17:00 - 2013-10-22 17:00 - 00027177 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).eng.1cd.(3683255).zip
2013-10-22 16:56 - 2013-10-22 16:56 - 00027950 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).slo.1cd.(3706172).zip
2013-10-22 16:56 - 2013-10-22 16:56 - 00026021 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).eng.1cd.(3681802).zip
2013-10-22 16:48 - 2013-10-22 16:48 - 00025530 _____ C:\Users\zenda97\Downloads\a.single.man.(2009).cze.1cd.(3735696).zip
2013-10-20 18:06 - 2013-10-10 17:09 - 00000000 ____D C:\Users\zenda97\The Road (2009)
2013-10-20 14:56 - 2012-07-28 10:29 - 00000305 _____ C:\Windows\WINCMD.INI
2013-10-20 13:16 - 2013-10-20 13:16 - 00000000 ____D C:\Users\zenda97\The complete discography of Sabaton (2000-2012)
2013-10-19 15:17 - 2013-10-19 14:54 - 00000000 ____D C:\Users\zenda97\AppData\Local\Bitoon
2013-10-19 14:54 - 2013-10-19 14:53 - 00243680 _____ C:\Users\zenda97\Downloads\BasketDudes_installer.exe
2013-10-19 09:46 - 2013-10-05 16:54 - 00000000 ____D C:\Users\zenda97\Documents\Mount&Blade Warband Characters
2013-10-19 09:09 - 2013-10-19 09:09 - 04208536 _____ (2013 Gaijin Entertainment Corporation ) C:\Users\zenda97\Downloads\wt_launcher_1.0.1.278.exe
2013-10-19 09:09 - 2013-10-19 09:09 - 00001107 _____ C:\Users\Public\Desktop\WarThunder.lnk
2013-10-19 09:09 - 2013-10-19 09:09 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WarThunder
2013-10-18 18:56 - 2013-10-18 18:34 - 35258235 _____ C:\Users\zenda97\Downloads\MODs.pack.0.8.8_v5.zip
2013-10-18 18:34 - 2013-10-18 18:24 - 14941904 _____ C:\Users\zenda97\Downloads\Nepotvrzeno 134425.crdownload
2013-10-18 18:23 - 2013-10-18 18:23 - 00017338 _____ C:\Users\zenda97\Downloads\drive.(2011).eng.1cd.(4420106).zip
2013-10-18 16:07 - 2013-10-18 16:06 - 10271500 _____ C:\Users\zenda97\Downloads\xvm-5.0.0-test5.zip
2013-10-18 02:36 - 2013-10-28 17:17 - 01063200 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2013-10-18 02:36 - 2013-10-28 17:17 - 00955168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2013-10-15 20:57 - 2012-01-16 19:55 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\SoftGrid Client
2013-10-13 18:41 - 2013-10-13 18:41 - 00034537 _____ C:\Users\zenda97\Downloads\mud.(2012).eng.1cd.(5103090).zip
2013-10-13 18:40 - 2013-10-13 18:40 - 00045290 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.1cd.(5151684).zip
2013-10-13 18:40 - 2013-10-13 18:40 - 00044931 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.2cd.(5031412).zip
2013-10-13 18:38 - 2013-10-13 18:38 - 00043080 _____ C:\Users\zenda97\Downloads\the.place.beyond.the.pines.(2012).eng.1cd.(5033609).zip
2013-10-12 15:58 - 2011-11-12 13:26 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA
2013-10-12 15:58 - 2011-11-12 13:26 - 00003552 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core
2013-10-12 13:01 - 2013-08-11 19:38 - 00000051 _____ C:\Users\zenda97\Desktop\Nový textový dokument (4).TXT
2013-10-12 12:47 - 2013-10-12 12:46 - 00000000 ____D C:\Program Files\DirectX
2013-10-12 12:34 - 2013-10-12 12:32 - 100273008 _____ (Microsoft Corporation) C:\Users\zenda97\Downloads\directx_Jun2010_redist.exe
2013-10-11 21:02 - 2012-04-22 06:44 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-10-11 21:02 - 2012-04-22 06:44 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2013-10-11 21:02 - 2011-10-17 17:40 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-10-11 20:34 - 2013-10-11 20:34 - 00002335 _____ C:\Users\zenda97\Desktop\Battlefield 2.lnk
2013-10-11 18:30 - 2013-10-11 17:11 - 00000000 ____D C:\Program Files (x86)\TERA
2013-10-11 17:11 - 2013-10-11 17:11 - 00001050 _____ C:\Users\zenda97\Desktop\TERA.lnk
2013-10-11 17:11 - 2013-10-11 17:10 - 15366160 _____ (Gameforge Productions GmbH ) C:\Users\zenda97\Downloads\TERASetup.exe
2013-10-11 15:07 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2013-10-10 16:33 - 2012-12-08 11:33 - 00003222 _____ C:\Windows\System32\Tasks\HPCeeScheduleForZENDA97-HP$
2013-10-10 16:33 - 2012-12-08 11:33 - 00000346 _____ C:\Windows\Tasks\HPCeeScheduleForZENDA97-HP$.job
2013-10-10 16:28 - 2009-07-14 05:45 - 04995688 _____ C:\Windows\system32\FNTCACHE.DAT
2013-10-09 20:27 - 2011-02-11 18:15 - 01791348 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2013-10-09 14:53 - 2012-07-09 11:22 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-10-09 14:53 - 2012-07-09 11:22 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-10-08 17:47 - 2012-05-25 13:12 - 00110592 ___SH C:\Users\zenda97\Desktop\Thumbs.db
2013-10-06 10:22 - 2013-10-06 10:22 - 00000919 _____ C:\Users\Public\Desktop\Steam.lnk
2013-10-06 10:21 - 2013-10-06 10:21 - 01669632 _____ C:\Users\zenda97\Downloads\SteamInstall.msi
2013-10-06 10:19 - 2013-10-06 10:16 - 07268352 _____ C:\Users\zenda97\Downloads\Sniper-Elite-v2-Coop-Crack-+-Multiplayer.iso
2013-10-06 10:10 - 2012-09-28 08:38 - 00000000 ____D C:\Users\zenda97\AppData\Local\SKIDROW
2013-10-06 09:19 - 2013-10-06 09:19 - 00002227 _____ C:\Users\Public\Desktop\Sniper Elite V2.lnk
2013-10-06 09:16 - 2013-10-06 09:16 - 00000000 ____D C:\Program Files (x86)\Rebellion
2013-10-05 16:55 - 2013-10-05 16:40 - 00000000 ____D C:\Program Files (x86)\Mount&Blade Warband
2013-10-05 16:51 - 2013-10-05 16:51 - 00017799 _____ C:\Users\zenda97\Downloads\Mount-and-Blade-Warband---čeština.rar
2013-10-05 16:50 - 2013-10-05 16:50 - 00000000 _____ C:\Users\zenda97\regbcm
2013-10-05 16:50 - 2013-10-05 16:49 - 04616178 _____ ( ) C:\Users\zenda97\Downloads\mount-and-blade-warband-cestina.exe
2013-10-05 16:48 - 2013-10-05 16:45 - 00000000 ____D C:\Users\zenda97\Documents\Mount&Blade Warband Savegames
2013-10-05 16:43 - 2012-07-13 07:57 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Mount&Blade Warband
2013-10-05 16:41 - 2013-10-05 16:41 - 00001100 _____ C:\Users\zenda97\Desktop\Mount&Blade Warband.lnk
2013-10-05 16:41 - 2013-10-05 16:41 - 00001100 _____ C:\Users\UpdatusUser\Desktop\Mount&Blade Warband.lnk
2013-10-05 16:41 - 2013-10-05 16:41 - 00000000 ____D C:\Users\zenda97\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mount&Blade Warband
2013-10-05 11:23 - 2013-10-05 11:23 - 00000000 ____D C:\Users\zenda97\Mount.and.Blade.Warband-SKIDROW
2013-10-04 18:54 - 2013-10-04 18:54 - 02015168 _____ C:\Users\zenda97\Downloads\medieval-2-total-war-100%-cestina.zip
2013-10-04 18:47 - 2013-10-04 18:47 - 00002124 _____ C:\Users\Public\Desktop\Medieval II Total War.lnk
2013-10-04 18:41 - 2011-10-17 17:34 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-10-04 14:25 - 2013-10-04 14:23 - 00000000 ____D C:\Users\zenda97\Medieval.2.Total.War-RELOADED

Files to move or delete:
====================
C:\Users\zenda97\spybotsd162-setup.exe

Some content of TEMP:
====================
C:\Users\zenda97\AppData\Local\Temp\huzn2pql.dll
C:\Users\zenda97\AppData\Local\Temp\sfamcc00001.dll
C:\Users\zenda97\AppData\Local\Temp\SHSetup.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: (OS) (Fixed) (Total:937.82 GB) (Free:366.16 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:13.48 GB) (Free:1.66 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive l: () (Fixed) (Total:7.98 GB) (Free:7.9 GB) NTFS
Drive m: (Volnej disk) (Fixed) (Total:93.44 GB) (Free:93.23 GB) NTFS
Drive n: (OS) (Fixed) (Total:139.04 GB) (Free:64.97 GB) NTFS
Drive o: () (Removable) (Total:7.52 GB) (Free:6.83 GB) FAT32

Available physical RAM: 5339.37 MB
Total physical RAM: 8172.32 MB
Percentage of memory in use: 34%

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\HPCeeScheduleForZENDA97-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
Task: C:\Windows\Tasks\HPCeeScheduleForzenda97.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 28_09_2013 (06)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\zenda97\Desktop" je 290420 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^GamersFirst LIVE!.lnk
C:\PROGRA~2\GAMERS~1\LIVE\Live.exe [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000001

==================== End Of Log ==============================

#4 Příspěvek od **Rudy** » 03 lis 2013 11:42

Otevřte poznámkový blok a zkopírujte do něj:

Start
MountPoints2: J - J:\autorun.exe
MountPoints2: {ef9aa2d9-1a9a-11e1-af30-3860773d7974} - J:\Setup.exe
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [msplxxfsSrv] - C:\Windows\inf\msplxxfs.vbe [1558 2013-08-27] ()
c:\Windows\inf\msplxxfs.vbe
AppInit_DLLs: [0 ] ()
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... 2&tsp=5012
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = ֔
탶仍耀֔
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {AC326112-8DD0-4E29-91F3-BEF66D520648} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... -keywords={searchTerms}
SearchScopes: HKCU - {8172f457-818d-46db-941f-2bbe53e156af} URL = http://dts.search-results.com/sr?src=ie ... =1&sr=0&q={searchTerms}
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - !{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - !{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - No File
Toolbar: HKLM - No Name - !{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No File
Toolbar: HKLM - No Name - !{687578b9-7132-4a7a-80e4-30ee31099e03} - No File
Toolbar: HKLM - No Name - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No File
Toolbar: HKLM - No Name - !{91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM - No Name - !{D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF ProfilePath: C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF user.js: detected! => C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
FF DefaultSearchEngine: WebSearch
FF Homepage: hxxp://websearch.pu-results.info/?pid=7 ... g=EN&cc=CZ
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @gamersfirst.com/LiveLauncher - C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\info@bflix.info
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Yandex.Bar - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\yasearch@yandex.ru
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\info@bflix.info
FF HKLM-x32\...\Firefox\Extensions: [t68-6k6@qubxeeeauaeu.co.uk] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF HKLM-x32\...\Firefox\Extensions: [paoie_i@zbr-gwjlkjwqtpft.net] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
CHR HKLM-x32\...\Chrome\Extension: [bmbpbcpokffodhpcdjaoopolhdlbconi] - C:\Users\zenda97\AppData\Local\Temp\tbch.crx
CHR HKLM-x32\...\Chrome\Extension: [fgnippahjheicjenccifemomfgjofdhp] - C:\ProgramData\TheBflix\fgnippahjheicjenccifemomfgjofdhp.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [jpgfhihjicjofdejkbjgnjlaglaciobe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\zenda97\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
S3 Maplom; No ImagePath
S3 MaplomL; No ImagePath
C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
End

Uložte na plochu jako fixlist.txt. Pak znovu spusťte FRST a klikněte na >Fix<. Zkopírujte sem pak log, který se na závěr vytvoří.

zenisek2 · #5 Příspěvek od **zenisek2** » 03 lis 2013 12:20

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 31-10-2013
Ran by zenda97 at 2013-11-03 12:19:37 Run:1
Running from C:\Users\zenda97\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
MountPoints2: J - J:\autorun.exe
MountPoints2: {ef9aa2d9-1a9a-11e1-af30-3860773d7974} - J:\Setup.exe
HKLM-x32\...\Run: [] - [x]
HKLM-x32\...\Run: [msplxxfsSrv] - C:\Windows\inf\msplxxfs.vbe [1558 2013-08-27] ()
c:\Windows\inf\msplxxfs.vbe
AppInit_DLLs: [0 ] ()
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www2.delta-search.com/?babsrc=HP ... 2&tsp=5012
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.bing.com?pc=HPDTDF
HKCU\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = ?
????
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKLM - {AC326112-8DD0-4E29-91F3-BEF66D520648} URL = http://www.amazon.co.uk/s/ref=azs_osd_i ... -keywords={searchTerms}
SearchScopes: HKCU - {8172f457-818d-46db-941f-2bbe53e156af} URL = http://dts.search-results.com/sr?src=ie ... =1&sr=0&q={searchTerms}
BHO-x32: No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - !{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - !{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} - No File
Toolbar: HKLM - No Name - !{5e5ab302-7f65-44cd-8211-c1d4caaccea3} - No File
Toolbar: HKLM - No Name - !{687578b9-7132-4a7a-80e4-30ee31099e03} - No File
Toolbar: HKLM - No Name - !{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No File
Toolbar: HKLM - No Name - !{91397D20-1446-11D4-8AF4-0040CA1127B6} - No File
Toolbar: HKLM - No Name - !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
Toolbar: HKLM - No Name - !{D4027C7F-154A-4066-A1AD-4243D8127440} - No File
Toolbar: HKLM - No Name - !{F9639E4A-801B-4843-AEE3-03D9DA199E77} - No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
FF ProfilePath: C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default
FF user.js: detected! => C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js
FF DefaultSearchEngine: WebSearch
FF Homepage: hxxp://websearch.pu-results.info/?pid=7 ... g=EN&cc=CZ
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.user_pref("browser.search.order.1,S", "WebSearch");: user_pref("browser.search.order.1,S", "WebSearch");
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @gamersfirst.com/LiveLauncher - C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll No File
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\info@bflix.info
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: No Name - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Yandex.Bar - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\yasearch@yandex.ru
FF Extension: TheBflix - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\info@bflix.info
FF HKLM-x32\...\Firefox\Extensions: [t68-6k6@qubxeeeauaeu.co.uk] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF Extension: Barowssei2savE - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk
FF HKLM-x32\...\Firefox\Extensions: [paoie_i@zbr-gwjlkjwqtpft.net] - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
FF Extension: Saeayruch-NewTabo - C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net
CHR HKLM-x32\...\Chrome\Extension: [bmbpbcpokffodhpcdjaoopolhdlbconi] - C:\Users\zenda97\AppData\Local\Temp\tbch.crx
CHR HKLM-x32\...\Chrome\Extension: [fgnippahjheicjenccifemomfgjofdhp] - C:\ProgramData\TheBflix\fgnippahjheicjenccifemomfgjofdhp.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx
CHR HKLM-x32\...\Chrome\Extension: [jpgfhihjicjofdejkbjgnjlaglaciobe] - C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx
CHR HKLM-x32\...\Chrome\Extension: [pacgpkgadgmibnhpdidcnfafllnmeomc] - C:\Users\zenda97\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx
S3 Maplom; No ImagePath
S3 MaplomL; No ImagePath
C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA.job => C:\Users\zenda97\AppData\Local\Google\Update\GoogleUpdate.exe
End
*****************

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\J => Key deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ef9aa2d9-1a9a-11e1-af30-3860773d7974} => Key deleted successfully.
HKCR\CLSID\{ef9aa2d9-1a9a-11e1-af30-3860773d7974} => Key not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\msplxxfsSrv => Value deleted successfully.
c:\Windows\inf\msplxxfs.vbe => Moved successfully.
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows\\AppInit_DLLs => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Secondary Start Pages => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{AC326112-8DD0-4E29-91F3-BEF66D520648} => Key deleted successfully.
HKCR\CLSID\{AC326112-8DD0-4E29-91F3-BEF66D520648} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{8172f457-818d-46db-941f-2bbe53e156af} => Key deleted successfully.
HKCR\CLSID\{8172f457-818d-46db-941f-2bbe53e156af} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Value deleted successfully.
HKCR\CLSID\!{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} => Value deleted successfully.
HKCR\CLSID\!{37D48D9C-3F7E-412F-B5BF-611BE7CCFCA1} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{5e5ab302-7f65-44cd-8211-c1d4caaccea3} => Value deleted successfully.
HKCR\CLSID\!{5e5ab302-7f65-44cd-8211-c1d4caaccea3} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{687578b9-7132-4a7a-80e4-30ee31099e03} => Value deleted successfully.
HKCR\CLSID\!{687578b9-7132-4a7a-80e4-30ee31099e03} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} => Value deleted successfully.
HKCR\CLSID\!{8E5E2654-AD2D-48bf-AC2D-D17F00898D06} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{91397D20-1446-11D4-8AF4-0040CA1127B6} => Value deleted successfully.
HKCR\CLSID\!{91397D20-1446-11D4-8AF4-0040CA1127B6} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Value deleted successfully.
HKCR\CLSID\!{98889811-442D-49dd-99D7-DC866BE87DBC} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{D4027C7F-154A-4066-A1AD-4243D8127440} => Value deleted successfully.
HKCR\CLSID\!{D4027C7F-154A-4066-A1AD-4243D8127440} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\!{F9639E4A-801B-4843-AEE3-03D9DA199E77} => Value deleted successfully.
HKCR\CLSID\!{F9639E4A-801B-4843-AEE3-03D9DA199E77} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
c:\Windows\inf\msplxxfs.vbe => Should not be moved.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\user.js => Moved successfully.
Firefox DefaultSearchEngine deleted successfully.
Firefox homepage deleted successfully.
Firefox SearchEngineOrder.1 deleted successfully.
HKLM\Software\MozillaPlugins\FF Plugin: @microsoft.com/GENUINE - disabled No File => Key not found.
"FF Plugin: @microsoft.com/GENUINE - disabled No File" => not found.
HKLM\Software\Wow6432Node\MozillaPlugins\@gamersfirst.com/LiveLauncher => Key deleted successfully.
C:\Program Files (x86)\GamersFirst\LIVE!\nplivelauncher.dll not found.
HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc => Key deleted successfully.
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll not found.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\ffxtlbr@babylon.com => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\info@bflix.info => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\paoie_i@zbr-gwjlkjwqtpft.net => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\staged => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\t68-6k6@qubxeeeauaeu.co.uk => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\Extensions\yasearch@yandex.ru => Moved successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\info@bflix.info not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\t68-6k6@qubxeeeauaeu.co.uk => Value deleted successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\t68-6k6@qubxeeeauaeu.co.uk not found.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\paoie_i@zbr-gwjlkjwqtpft.net => Value deleted successfully.
C:\Users\zenda97\AppData\Roaming\Mozilla\Firefox\Profiles\nahd6ha2.default\extensions\paoie_i@zbr-gwjlkjwqtpft.net not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bmbpbcpokffodhpcdjaoopolhdlbconi => Key deleted successfully.
"C:\Users\zenda97\AppData\Local\Temp\tbch.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\fgnippahjheicjenccifemomfgjofdhp => Key deleted successfully.
"C:\ProgramData\TheBflix\fgnippahjheicjenccifemomfgjofdhp.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj => Key deleted successfully.
"C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj => Key not found.
"C:\Program Files (x86)\Common Files\Spigot\GC\errorassistant_1.1.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\jpgfhihjicjofdejkbjgnjlaglaciobe => Key deleted successfully.
C:\Program Files (x86)\HP SimplePass 2011\tschrome.crx => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk => Key deleted successfully.
"C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.3.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pacgpkgadgmibnhpdidcnfafllnmeomc => Key deleted successfully.
C:\Users\zenda97\AppData\Local\CRE\pacgpkgadgmibnhpdidcnfafllnmeomc.crx => Moved successfully.
Maplom => Service deleted successfully.
MaplomL => Service deleted successfully.
C:\Windows\86CA3695A4124BAE92B649A60C2AC663.TMP => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1364532545-3669659909-2754750392-1000UA.job => Moved successfully.

==== End of Fixlog ====

#6 Příspěvek od **Rudy** » 03 lis 2013 16:51

Smazáno. Nastala nějaká změna?

zenisek2 · #7 Příspěvek od **zenisek2** » 03 lis 2013 17:55

Ne, problém stále přetrvává.

#8 Příspěvek od **Rudy** » 03 lis 2013 19:01

Dejte log ComboFix:

Stahnete a ulozte nejlepe na plochu ComboFix: http://download.bleepingcomputer.com/sUBs/ComboFix.exe

pote spustte aplikaci pod uctem s administratorskym opravnenim

hned po startu se zobrazi obrazovka s licencnimi podminkami, pokracujte kliknutim na tlacitko Ano.

v klidu si postavte na kafe (cela akce trva cca. 5-10 minut, nekdy i dele - dle toho, o jak rychly stroj se

jedna a kolika soubory se skener bude muset prodirat), behem skenu se nepokousejte spoustet zadne jine

aplikace ani nic jineho

behem skenovani nepropadejte panice, vas stroj muze byt restartovan (predevsim pri prvni aplikaci skeneru)

upozorneni: pokud pouzivate antispyware s rezidentnim stitem, prepnete jeho rezidentni stit do Install Mode,

pripadne jej po dobu skenu uplne deaktivujte, protoze dochazi pri skenu a vymazu pripadneho malware k

nezadoucim kolizim s rezidentem antispyware.

zenisek2 · #9 Příspěvek od **zenisek2** » 03 lis 2013 20:03

Je to pryč takže paráda. Jsem vám neskonale vděčnej

. Díky moc za pomoc.

#10 Příspěvek od **Rudy** » 03 lis 2013 20:06

To jsem rád, ale chtěl bych vidět log. Možná bude třeba ještě neco dočistit.

saagaa · #11 Příspěvek od **saagaa** » 19 zář 2014 09:23

Dobrý den, mam stejný problém co popisoval předchůdce přede mnou, spustil jsem combofix a zde je výsledek:

ComboFix 14-09-18.01 - Saagaa 19.09.2014 10:12:29.1.4 - x64
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.420.1029.18.8158.5897 [GMT 2:00]
Spuštěný z: c:\users\Saagaa\Desktop\ComboFix.exe
AV: Microsoft Security Essentials *Disabled/Updated* {4F35CFC4-45A3-FC37-EF17-759A02E39AB1}
SP: Microsoft Security Essentials *Disabled/Updated* {F4542E20-6399-F3B9-D5A7-4EE87964D00C}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Ostatní výmazy )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\install.exe
c:\windows\wininit.ini
.
.
((((((((((((((((((((((((( Soubory vytvořené od 2014-08-19 do 2014-09-19 )))))))))))))))))))))))))))))))
.
.
2014-09-19 08:15 . 2014-09-19 08:15 -------- d-----w- c:\users\Default\AppData\Local\temp
2014-09-18 16:55 . 2014-09-09 02:05 11578928 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{E32390E8-8A2F-4B3D-A19B-7971F518249E}\mpengine.dll
2014-09-17 17:49 . 2014-09-18 17:29 -------- d-----w- C:\AdwCleaner
2014-09-17 15:58 . 2014-09-17 15:58 1188440 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\{DD295CEE-95EC-495F-806C-2D26249F4174}\gapaengine.dll
2014-09-17 15:58 . 2014-09-09 02:05 11578928 ----a-w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-09-11 14:35 . 2014-06-27 02:08 2777088 ----a-w- c:\windows\system32\msmpeg2vdec.dll
2014-09-11 14:35 . 2014-06-27 01:45 2285056 ----a-w- c:\windows\SysWow64\msmpeg2vdec.dll
2014-09-11 11:13 . 2014-08-01 11:53 1031168 ----a-w- c:\windows\system32\TSWorkspace.dll
2014-09-11 11:13 . 2014-08-01 11:35 793600 ----a-w- c:\windows\SysWow64\TSWorkspace.dll
2014-09-11 11:13 . 2014-06-24 03:29 2565120 ----a-w- c:\windows\system32\d3d10warp.dll
2014-09-11 11:13 . 2014-06-24 02:59 1987584 ----a-w- c:\windows\SysWow64\d3d10warp.dll
2014-09-11 11:13 . 2014-07-07 02:06 728064 ----a-w- c:\windows\system32\kerberos.dll
2014-09-11 11:13 . 2014-07-07 02:06 1460736 ----a-w- c:\windows\system32\lsasrv.dll
2014-09-11 11:13 . 2014-07-07 01:40 22016 ----a-w- c:\windows\SysWow64\secur32.dll
2014-09-11 11:13 . 2014-07-07 01:40 550912 ----a-w- c:\windows\SysWow64\kerberos.dll
2014-09-11 11:13 . 2014-07-07 01:39 96768 ----a-w- c:\windows\SysWow64\sspicli.dll
2014-09-11 11:13 . 2014-09-05 02:10 578048 ----a-w- c:\windows\system32\aepdu.dll
2014-09-11 11:13 . 2014-09-05 02:05 424448 ----a-w- c:\windows\system32\aeinv.dll
2014-09-09 05:32 . 2014-09-09 05:32 -------- d-----w- c:\users\Default\AppData\Roaming\Garmin
2014-09-09 05:21 . 2014-09-09 05:21 -------- d-----w- c:\program files (x86)\Common Files\Skype
2014-09-06 09:13 . 2014-03-09 21:48 171160 ----a-w- c:\windows\system32\infocardapi.dll
2014-09-06 09:13 . 2014-03-09 21:48 1389208 ----a-w- c:\windows\system32\icardagt.exe
2014-09-06 09:13 . 2014-03-09 21:47 99480 ----a-w- c:\windows\SysWow64\infocardapi.dll
2014-09-06 09:13 . 2014-03-09 21:47 619672 ----a-w- c:\windows\SysWow64\icardagt.exe
2014-09-06 09:13 . 2014-06-30 22:24 8856 ----a-w- c:\windows\system32\icardres.dll
2014-09-06 09:13 . 2014-06-30 22:14 8856 ----a-w- c:\windows\SysWow64\icardres.dll
2014-09-06 09:13 . 2014-06-06 06:16 35480 ----a-w- c:\windows\SysWow64\TsWpfWrp.exe
2014-09-06 09:13 . 2014-06-06 06:12 35480 ----a-w- c:\windows\system32\TsWpfWrp.exe
2014-09-06 07:45 . 2014-07-16 03:23 2048 ----a-w- c:\windows\system32\tzres.dll
2014-09-06 07:45 . 2014-07-16 02:46 2048 ----a-w- c:\windows\SysWow64\tzres.dll
2014-09-06 07:45 . 2014-06-03 10:02 3241984 ----a-w- c:\windows\system32\msi.dll
2014-09-06 07:45 . 2014-06-03 10:02 112064 ----a-w- c:\windows\system32\consent.exe
2014-09-06 07:45 . 2014-06-03 10:02 504320 ----a-w- c:\windows\system32\msihnd.dll
2014-09-06 07:45 . 2014-06-03 10:02 1941504 ----a-w- c:\windows\system32\authui.dll
2014-09-06 07:45 . 2014-06-03 09:29 337408 ----a-w- c:\windows\SysWow64\msihnd.dll
2014-09-06 07:45 . 2014-06-03 09:29 2363392 ----a-w- c:\windows\SysWow64\msi.dll
2014-09-06 07:45 . 2014-06-03 09:29 1805824 ----a-w- c:\windows\SysWow64\authui.dll
2014-09-06 07:45 . 2014-06-16 02:10 985536 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2014-09-06 07:45 . 2014-06-25 02:05 14175744 ----a-w- c:\windows\system32\shell32.dll
2014-09-06 07:41 . 2014-08-23 02:07 404480 ----a-w- c:\windows\system32\gdi32.dll
2014-09-06 07:41 . 2014-08-23 01:45 311808 ----a-w- c:\windows\SysWow64\gdi32.dll
2014-09-06 07:41 . 2014-08-23 00:59 3163648 ----a-w- c:\windows\system32\win32k.sys
2014-09-06 07:41 . 2014-07-14 02:02 1216000 ----a-w- c:\windows\system32\rpcrt4.dll
2014-09-06 07:41 . 2014-07-14 01:40 664064 ----a-w- c:\windows\SysWow64\rpcrt4.dll
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M výpis ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2014-09-19 07:59 . 2014-06-06 16:35 163504 ----a-w- c:\programdata\Microsoft\Windows\Sqm\Manifest\Sqm10145.bin
2014-09-17 17:53 . 2012-10-05 12:44 71344 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
2014-09-17 17:53 . 2012-10-05 12:44 701104 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe
2014-09-17 16:33 . 2012-10-05 16:16 215416 ----a-w- c:\windows\SysWow64\PnkBstrB.exe
2014-09-12 13:13 . 2012-10-05 16:16 215416 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0
2014-09-11 14:36 . 2012-10-06 21:35 101694776 ----a-w- c:\windows\system32\MRT.exe
2014-08-14 09:30 . 2012-11-30 18:24 1169712 ------w- c:\programdata\Microsoft\Microsoft Antimalware\Definition Updates\NISBackup\gapaengine.dll
2014-08-09 05:54 . 2014-08-09 05:54 98216 ----a-w- c:\windows\SysWow64\WindowsAccessBridge-32.dll
2014-07-25 13:50 . 2014-06-05 05:16 1291280 ----a-w- c:\windows\SysWow64\nvspbridge.dll
2014-07-25 13:50 . 2013-11-28 15:49 1126480 ----a-w- c:\windows\SysWow64\nvspcap.dll
2014-07-25 13:50 . 2014-06-05 05:16 1715224 ----a-w- c:\windows\system32\nvspbridge64.dll
2014-07-25 13:50 . 2013-11-28 15:49 1283136 ----a-w- c:\windows\system32\nvspcap64.dll
2014-07-25 00:35 . 2014-07-25 00:35 875688 ----a-w- c:\windows\SysWow64\msvcr120_clr0400.dll
2014-07-24 21:47 . 2014-07-24 21:47 869544 ----a-w- c:\windows\system32\msvcr120_clr0400.dll
2014-07-17 16:05 . 2014-07-17 16:05 269008 ----a-w- c:\windows\system32\drivers\MpFilter.sys
2014-07-17 16:05 . 2010-10-24 19:25 125584 ----a-w- c:\windows\system32\drivers\NisDrvWFP.sys
2014-07-02 20:48 . 2014-07-31 16:49 944928 ----a-w- c:\windows\system32\NvIFR64.dll
2014-07-02 20:48 . 2014-07-31 16:49 907096 ----a-w- c:\windows\SysWow64\NvIFR.dll
2014-07-02 20:48 . 2014-07-31 16:49 903624 ----a-w- c:\windows\system32\NvFBC64.dll
2014-07-02 20:48 . 2014-07-31 16:49 869152 ----a-w- c:\windows\SysWow64\NvFBC.dll
2014-07-02 20:48 . 2014-07-31 16:49 846832 ----a-w- c:\windows\SysWow64\nvumdshim.dll
2014-07-02 20:48 . 2014-07-31 16:49 4247000 ----a-w- c:\windows\system32\nvcuvid.dll
2014-07-02 20:48 . 2014-07-31 16:49 3989960 ----a-w- c:\windows\SysWow64\nvcuvid.dll
2014-07-02 20:48 . 2014-07-31 16:49 354016 ----a-w- c:\windows\system32\nvoglshim64.dll
2014-07-02 20:48 . 2014-07-31 16:49 31512520 ----a-w- c:\windows\system32\nvoglv64.dll
2014-07-02 20:48 . 2014-07-31 16:49 305600 ----a-w- c:\windows\SysWow64\nvoglshim32.dll
2014-07-02 20:48 . 2014-07-31 16:49 24196896 ----a-w- c:\windows\SysWow64\nvoglv32.dll
2014-07-02 20:48 . 2014-07-31 16:49 1890080 ----a-w- c:\windows\system32\nvdispco6434052.dll
2014-07-02 20:48 . 2014-07-31 16:49 17555104 ----a-w- c:\windows\system32\nvd3dumx.dll
2014-07-02 20:48 . 2014-07-31 16:49 166568 ----a-w- c:\windows\system32\nvinitx.dll
2014-07-02 20:48 . 2014-07-31 16:49 1539928 ----a-w- c:\windows\system32\nvdispgenco6434052.dll
2014-07-02 20:48 . 2014-07-31 16:49 146480 ----a-w- c:\windows\SysWow64\nvinit.dll
2014-07-02 20:48 . 2014-07-31 16:49 13922752 ----a-w- c:\windows\system32\nvopencl.dll
2014-07-02 20:48 . 2014-07-31 16:49 13835208 ----a-w- c:\windows\system32\nvcuda.dll
2014-07-02 20:48 . 2014-07-31 16:49 12866008 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2014-07-02 20:48 . 2014-07-31 16:49 11283344 ----a-w- c:\windows\SysWow64\nvopencl.dll
2014-07-02 20:48 . 2014-07-31 16:49 11222048 ----a-w- c:\windows\SysWow64\nvcuda.dll
2014-07-02 20:48 . 2014-07-31 16:49 22994208 ----a-w- c:\windows\system32\nvcompiler.dll
2014-07-02 20:48 . 2014-07-31 16:49 15294296 ----a-w- c:\windows\SysWow64\nvcompiler.dll
2014-07-02 20:48 . 2014-02-21 17:54 16122344 ----a-w- c:\windows\SysWow64\nvwgf2um.dll
2014-07-02 20:48 . 2013-02-25 22:32 2814656 ----a-w- c:\windows\SysWow64\nvapi.dll
2014-07-02 20:48 . 2013-02-25 22:32 14498552 ----a-w- c:\windows\SysWow64\nvd3dum.dll
2014-07-02 20:48 . 2013-02-25 22:32 3196816 ----a-w- c:\windows\system32\nvapi64.dll
2014-07-02 20:48 . 2013-02-25 22:32 965312 ----a-w- c:\windows\system32\nvumdshimx.dll
2014-07-02 20:48 . 2013-02-25 22:32 18626304 ----a-w- c:\windows\system32\nvwgf2umx.dll
2014-07-02 20:48 . 2012-10-05 12:38 75040 ----a-w- c:\windows\system32\OpenCL.dll
2014-07-02 20:48 . 2012-10-05 12:38 61912 ----a-w- c:\windows\SysWow64\OpenCL.dll
2014-07-02 18:55 . 2012-10-05 12:38 6783776 ----a-w- c:\windows\system32\nvcpl.dll
2014-07-02 18:55 . 2012-10-05 12:38 3522392 ----a-w- c:\windows\system32\nvsvc64.dll
2014-07-02 18:55 . 2012-11-19 11:57 2559960 ----a-w- c:\windows\system32\nvsvcr.dll
2014-07-02 18:55 . 2012-10-05 12:38 935368 ----a-w- c:\windows\system32\nvvsvc.exe
2014-07-02 18:55 . 2012-10-05 12:38 62808 ----a-w- c:\windows\system32\nvshext.dll
2014-07-02 18:55 . 2012-10-05 12:38 386520 ----a-w- c:\windows\system32\nvmctray.dll
2014-07-02 17:44 . 2014-07-31 16:52 609240 ----a-w- c:\windows\SysWow64\nvStreaming.exe
2014-07-02 10:14 . 2012-10-05 12:38 3826628 ----a-w- c:\windows\system32\nvcoproc.bin
2014-06-29 19:22 . 2014-06-29 19:22 76152 ----a-w- c:\windows\system32\PnkBstrA.exe
.
.
(((((((((((((((((((((((((((((((((( Spouštěcí body v registru )))))))))))))))))))))))))))))))))))))))))))))
.
.
*Poznámka* prázdné záznamy a legitimní výchozí údaje nejsou zobrazeny.
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"="c:\program files (x86)\DAEMON Tools Lite\DTLite.exe" [2012-08-28 3671904]
"Steam"="c:\program files (x86)\Steam\Steam.exe" [2014-08-28 1939136]
"Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2014-07-24 21645408]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"USB3MON"="c:\program files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe" [2012-01-26 291608]
"Media Codec Update Service"="c:\program files (x86)\Essentials Codec Pack\update.exe" [2007-04-08 303104]
"Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2014-08-21 959176]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2014-07-25 256896]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"GarminExpressTrayApp"="c:\program files (x86)\Garmin\Express Tray\ExpressTray.exe" [2014-08-07 688984]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]
@="Service"
.
R1 VD_FileDisk;VD_FileDisk; [x]
R2 {1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC};Power Control [2011/12/31 23:50];c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl;c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl [x]
R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x]
R3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudbus.sys;c:\windows\SYSNATIVE\DRIVERS\ssudbus.sys [x]
R3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys;c:\windows\SYSNATIVE\drivers\dmvsc.sys [x]
R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys;c:\windows\SYSNATIVE\DRIVERS\ggflt.sys [x]
R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x]
R3 NisDrv;Microsoft Network Inspection System;c:\windows\system32\DRIVERS\NisDrvWFP.sys;c:\windows\SYSNATIVE\DRIVERS\NisDrvWFP.sys [x]
R3 NisSrv;Microsoft Network Inspection;c:\program files\Microsoft Security Client\NisSrv.exe;c:\program files\Microsoft Security Client\NisSrv.exe [x]
R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x]
R3 Rockusb;Driver for Rockusb Device;c:\windows\system32\DRIVERS\rockusb.sys;c:\windows\SYSNATIVE\DRIVERS\rockusb.sys [x]
R3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);c:\windows\system32\DRIVERS\ssudmdm.sys;c:\windows\SYSNATIVE\DRIVERS\ssudmdm.sys [x]
R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys;c:\windows\SYSNATIVE\drivers\synth3dvsc.sys [x]
R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x]
R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x]
R3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys;c:\windows\SYSNATIVE\drivers\tsusbhub.sys [x]
R3 VGPU;VGPU;c:\windows\system32\drivers\rdvgkmd.sys;c:\windows\SYSNATIVE\drivers\rdvgkmd.sys [x]
R3 WatAdminSvc;Služba Technologie aktivace Windows;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hcs.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hcs.sys [x]
S2 Garmin Core Update Service;Garmin Core Update Service;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe;c:\program files (x86)\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe [x]
S2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\Intel\iCLS Client\HeciServer.exe;c:\program files\Intel\iCLS Client\HeciServer.exe [x]
S2 Intel(R) PROSet Monitoring Service;Intel(R) PROSet Monitoring Service;c:\windows\system32\IProsetMonitor.exe;c:\windows\SYSNATIVE\IProsetMonitor.exe [x]
S2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x]
S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x]
S2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe;c:\program files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [x]
S3 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\DRIVERS\dtsoftbus01.sys;c:\windows\SYSNATIVE\DRIVERS\dtsoftbus01.sys [x]
S3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3hub.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3hub.sys [x]
S3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0;c:\windows\system32\DRIVERS\iusb3xhc.sys;c:\windows\SYSNATIVE\DRIVERS\iusb3xhc.sys [x]
S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
.
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2011-12-13 13374568]
"Windows Mobile Device Center"="c:\windows\WindowsMobile\wmdc.exe" [2007-05-31 660360]
"ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2014-07-25 1283136]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-07-25 2403104]
"MSC"="c:\program files\Microsoft Security Client\msseces.exe" [2014-08-22 1331288]
.
------- Doplňkový sken -------
.
uLocal Page = c:\windows\system32\blank.htm
uStart Page = hxxp://www.seznam.cz/
mLocal Page = c:\windows\SysWOW64\blank.htm
IE: E&xportovat do aplikace Microsoft Excel - c:\progra~2\MICROS~1\Office12\EXCEL.EXE/3000
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
Trusted Zone: mojebanka.cz\etrading
Trusted Zone: mojebanka.cz\www
TCP: DhcpNameServer = 217.11.224.1 217.11.224.2 8.8.8.8 217.11.231.168
FF - ProfilePath - c:\users\Saagaa\AppData\Roaming\Mozilla\Firefox\Profiles\ui7x34z0.default\
FF - prefs.js: browser.startup.homepage - www.seznam.cz
.
- - - - NEPLATNÉ POLOŽKY ODSTRANĚNÉ Z REGISTRU - - - -
.
HKLM_Wow6432Node-ActiveSetup-{2D46B6DC-2207-486B-B523-A557E6D54B47} - start
HKLM-Run-Nvtmru - c:\program files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe
AddRemove-Uplay - c:\program files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe
AddRemove-{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1 - c:\program files (x86)\HD2 Toolkit\unins000.exe
AddRemove-{980A182F-E0A2-4A40-94C1-AE0C1235902E} - c:\program files (x86)\Pando Networks\Media Booster\uninst.exe
.
.
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\{1BA31E5A-C098-42d8-8F88-3C9F78A2FDDC}]
"ImagePath"="\??\c:\program files (x86)\CyberLink\PowerDVD10\NavFilter\000.fcl"
.
--------------------- ZAMKNUTÉ KLÍČE V REGISTRU ---------------------
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_4_402_278_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Shockwave Flash Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
@="0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
@="ShockwaveFlash.ShockwaveFlash.11"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="ShockwaveFlash.ShockwaveFlash"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
@Denied: (A 2) (Everyone)
@="Macromedia Flash Factory Object"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx"
"ThreadingModel"="Apartment"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
@="FlashFactory.FlashFactory.1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
@="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_4_402_278.ocx, 1"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
@="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
@="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
@="FlashFactory.FlashFactory"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows CE Services]
"SymbolicLinkValue"=hex(6):5c,00,72,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,4f,00,46,00,\
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Celkový čas: 2014-09-19 10:17:03
ComboFix-quarantined-files.txt 2014-09-19 08:17
.
Před spuštěním: Volných bajtů: 35 643 703 296
Po spuštění: Volných bajtů: 35 268 476 928
.
- - End Of File - - 77BB0F195B1DD6D323943F1669719497
A36C5E4F47E84449FF07ED3517B43A31

jen je tu problém, že se stále objevují podtržená slova a k nim odkaz.......co s tím??

#12 Příspěvek od **Rudy** » 19 zář 2014 17:19

2saagaa: založte si, prosím, vlastní topic. Děkujeme.

VIRY.CZ

Vyskakující adware

Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware

Re: Vyskakující adware