Preventivka

Zpráva

martas2 · #1 Příspěvek od **martas2** » 03 led 2014 19:59

Zdravím, zkoukněte mi prosím log:

Logfile of random's system information tool 1.09 (written by random/random)
Run by Martin at 2014-01-03 19:16:27
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 37 GB (10%) free of 357 GB
Total RAM: 4008 MB (60% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 19:16:36, on 3.1.2014
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.16428)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Garena Plus\ggdllhost.exe
C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
C:\Users\Martin\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Users\Martin\AppData\Local\VNT\vntldr.exe
C:\Windows\SysWOW64\jmdp\stij.exe
C:\Users\Martin\Downloads\RSIT.exe
C:\Program Files (x86)\trend micro\Martin.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mysearchresults.com/?c=3513&t=01
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: DefaultTabToolbarBHO - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O3 - Toolbar: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll
O4 - HKLM\..\Run: [NUSB3MON] "c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [VNT] C:\Program Files (x86)\VNT\vntldr.exe
O4 - HKLM\..\Run: [LogMeIn Hamachi Ui] "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
O4 - HKCU\..\Run: [ISUSPM Startup] C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [GarenaPlus] "C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe" -autolaunch
O4 - HKCU\..\Run: [cz.seznam.software.autoupdate] "C:\Users\Martin\AppData\Roaming\Seznam.cz\szninstall.exe" -c
O4 - HKCU\..\Run: [cz.seznam.software.szndesktop] "C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [Pando Media Booster] C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [Bloody2] "C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe" Minimum
O4 - HKCU\..\Run: [AppsHat] C:\Users\Martin\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe
O4 - Startup: GameRanger.lnk = Martin\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
O4 - Global Startup: DeskDrive.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\DeskDrive\DeskDrive.exe
O4 - Global Startup: Finderbar.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\Finderbar\Finderbar.exe
O4 - Global Startup: GamePark klient 2.lnk = C:\Program Files\GamePark2\gpcl.exe
O4 - Global Startup: Refresh.lnk = ?
O4 - Global Startup: RocketDock.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\RocketDock\RocketDock.exe
O4 - Global Startup: SkinPackMenu.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\SP.exe
O4 - Global Startup: SRS PC Sound.lnk = C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
O4 - Global Startup: UberIcon.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\UberIcon\UberIcon.exe
O4 - Global Startup: VirtuaWin.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\VirtuaWin\VirtuaWin.exe
O4 - Global Startup: Winroll.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\Winroll\winroll.exe
O4 - Global Startup: YzShadow.lnk = C:\Program Files (x86)\Mountain Lion Skin Pack\YzShadow\YzShadow.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~2\MICROS~4\Office12\EXCEL.EXE/3000
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O9 - Extra button: Visit AppsHat.com - {AAA38851-3CFF-475F-B5E0-720D3645E4A5} - C:\Program Files (x86)\Minibar\Minibar.dll
O9 - Extra button: Unibet - {6259D6DC-1D06-468B-9595-055B15025798} - C:\Microgaming\Poker\unibetpokerMPP\MPPoker.exe (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\Windows\SysWOW64\nvinit.dll
O22 - SharedTaskScheduler: Ave's 7StartButton Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - C:\Program Files (x86)\The Skins Factory\Hyperdesk\Common\AveStartButtonChangerInProc.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\windows\System32\alg.exe (file missing)
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files (x86)\PHotkey\ASLDRSrv.exe
O23 - Service: BlackfishSQL - CodeGear - C:\Program Files (x86)\Embarcadero\RAD Studio\7.0\bin\BSQLServer.exe
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: @%systemroot%\system32\CISVC.EXE,-1 (CISVC) - Unknown owner - C:\windows\system32\CISVC.EXE (file missing)
O23 - Service: @C:\windows\system32\CxAudMsg64.exe,-100 (CxAudMsg) - Unknown owner - C:\windows\system32\CxAudMsg64.exe (file missing)
O23 - Service: DefaultTabSearch - Unknown owner - C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe
O23 - Service: DefaultTabUpdate - Unknown owner - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\windows\system32\fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: GFNEX Service (GFNEXSrv) - Unknown owner - C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
O23 - Service: Hi-Rez Studios Authenticate and Update Service (HiPatchService) - Hi-Rez Studios - D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
O23 - Service: HyperDesk's Custom Theme Enabler (HyperDeskCustomThemeEnabler) - Unknown owner - C:\windows\Installer\MSIC019.tmp
O23 - Service: IBUpdaterService - Unknown owner - C:\windows\system32\dmwu.exe (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\windows\System32\msdtc.exe (file missing)
O23 - Service: @mqutil.dll,-6102 (MSMQ) - Unknown owner - C:\windows\system32\mqsvc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: PandoraService (PanService) - Pandora.TV - C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 14965 bytes

======Scheduled tasks folder======

C:\windows\tasks\Adobe Flash Player Updater.job
C:\windows\tasks\GoogleUpdateTaskMachineCore.job
C:\windows\tasks\GoogleUpdateTaskMachineUA.job

=========Mozilla firefox=========

ProfilePath - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default

prefs.js - "browser.search.useDBForOrder" - true

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 11.9.900.170 Plugin
"Path"=C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.21.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3508.1109]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@nullsoft.com/winampDetector;version=1]
"Description"=Winamp Detector
"Path"=C:\Program Files (x86)\Winamp Detect\npwachk.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@t.garena.com/garenatalk]
"Description"=Garena Talk Plugin
"Path"=C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@videolan.org/vlc,version=2.1.0]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

C:\Program Files (x86)\Mozilla Firefox\extensions\
{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}

C:\Program Files (x86)\Mozilla Firefox\plugins\
np-mswmp.dll
nppdf32.dll
nppluginrichmediaplayer.dll
WMP Firefox Plugin License.rtf
WMP Firefox Plugin RelNotes.txt

C:\Program Files (x86)\Mozilla Firefox\searchplugins\
babylon.xml

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\extensions\
ffxtlbr@babylon.com
{97A78363-B868-4B48-AC91-A783A31215AF}
{ea614400-e918-4741-9a97-7a972ff7c30b}
{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}

C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\searchplugins\
askcom.xml
conduit.xml
MyStart Search.xml
MyStart.xml
search-here.xml
sweetim.xml
Sweetpacks Search.xml

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{72853161-30C5-4D22-B7F9-0BBC1D38A37E}]
Groove GFS Browser Helper - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-04-04 462752]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}]
DefaultTab Browser Helper - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll [2013-12-13 471160]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21 439168]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96A25A24-2E87-4374-8A50-CC6F943FCE4D}]
Related Searches - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll [2013-12-13 398968]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}]
MinibarBHO - C:\Program Files (x86)\Minibar\Minibar.dll [2013-09-19 331264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}]
Skype Browser Helper - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2013-05-14 4531320]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-04-04 171424]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{96A25A24-2E87-4374-8A50-CC6F943FCE4D} - Related Searches - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll [2013-12-13 398968]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"NUSB3MON"=c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-04-27 113288]
"GrooveMonitor"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [2009-02-26 30040]
"ISUSScheduler"=C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [2004-06-16 81920]
"ApnTBMon"=C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [2013-11-08 1707472]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-04-04 958576]
"VNT"=C:\Program Files (x86)\VNT\vntldr.exe [2013-11-08 202192]
"LogMeIn Hamachi Ui"=C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [2013-11-29 3806544]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM Startup"=C:\PROGRA~2\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe [2004-06-16 221184]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2012-04-11 3672384]
"GarenaPlus"=C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [2013-12-13 9890608]
"cz.seznam.software.autoupdate"=C:\Users\Martin\AppData\Roaming\Seznam.cz\szninstall.exe [2012-09-13 1009288]
"cz.seznam.software.szndesktop"=C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [2013-01-22 92152]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2013-11-15 20588704]
"Pando Media Booster"=C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [2013-09-04 4287536]
"Bloody2"=C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe [2013-08-30 11895808]
"AppsHat"=C:\Users\Martin\AppData\Local\WebPlayer\AppsHat\WebPlayer.exe [2012-10-26 202752]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
DeskDrive.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\DeskDrive\DeskDrive.exe
Finderbar.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\Finderbar\Finderbar.exe
GamePark klient 2.lnk - C:\Program Files\GamePark2\gpcl.exe
Refresh.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\Tools\Refresh.cmd
RocketDock.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\RocketDock\RocketDock.exe
SkinPackMenu.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\SP.exe
SRS PC Sound.lnk - C:\Program Files (x86)\SRS Labs\SRS Control Panel\SRSPanel_64.exe
UberIcon.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\UberIcon\UberIcon.exe
VirtuaWin.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\VirtuaWin\VirtuaWin.exe
Winroll.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\Winroll\winroll.exe
YzShadow.lnk - C:\Program Files (x86)\Mountain Lion Skin Pack\YzShadow\YzShadow.exe

C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
GameRanger.lnk - C:\Users\Martin\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\SysWOW64\nvinit.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - C:\windows\SysWow64\webcheck.dll [2013-11-13 208384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\SharedTaskScheduler]
Ave's 7StartButton Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - C:\Program Files (x86)\The Skins Factory\Hyperdesk\Common\AveStartButtonChangerInProc.dll [2010-01-12 91136]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{B5A7F190-DDA6-4420-B3BA-52453494E6CD}"=C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26 2217832]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\Hamachi2Svc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDrives"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\SysWOW64\l3codeca.acm
"vidc.cvid"=iccvid.dll
"msacm.siren"=sirenacm.dll
"vidc.VP60"=vp6vfw.dll
"vidc.VP61"=vp6vfw.dll
"vidc.iv50"=ir50_32.dll
"msacm.iac2"=C:\windows\system32\iac25_32.ax
"VIDC.IV41"=IR41_32.AX
"VIDC.FPS1"=frapsvid.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv
"vidc.VP62"=vp6vfw.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.txt - open - C:\windows\NOTEPAD.EXE %1

======List of files/folders created in the last 1 month======

2014-01-02 22:42:18 ----D---- C:\Program Files (x86)\Vstep
2013-12-31 13:35:49 ----D---- C:\windows\SysWOW64\jmdp
2013-12-31 10:53:05 ----A---- C:\windows\SysWOW64\shoFE6F.tmp
2013-12-29 21:24:36 ----D---- C:\Program Files (x86)\LogMeIn Hamachi
2013-12-29 16:23:00 ----D---- C:\Program Files (x86)\Games
2013-12-29 00:53:21 ----A---- C:\windows\SysWOW64\shoB9DC.tmp
2013-12-26 14:42:29 ----D---- C:\Users\Martin\AppData\Roaming\FileZilla
2013-12-26 14:42:18 ----D---- C:\Program Files (x86)\FileZilla FTP Client
2013-12-25 00:40:05 ----D---- C:\Program Files (x86)\osu!
2013-12-22 22:04:51 ----D---- C:\Program Files (x86)\Total War ROME II
2013-12-21 14:23:49 ----A---- C:\windows\SysWOW64\sho5AAA.tmp
2013-12-20 17:40:07 ----D---- C:\Users\Martin\AppData\Roaming\SpaceEngineers
2013-12-15 00:27:27 ----D---- C:\Program Files (x86)\Mozilla Firefox
2013-12-12 22:09:08 ----A---- C:\windows\SysWOW64\wmploc.DLL
2013-12-12 22:09:08 ----A---- C:\windows\SysWOW64\wmp.dll
2013-12-12 22:07:52 ----A---- C:\windows\SysWOW64\jsproxy.dll
2013-12-12 22:07:52 ----A---- C:\windows\SysWOW64\ieui.dll
2013-12-12 22:07:51 ----A---- C:\windows\SysWOW64\jscript9diag.dll
2013-12-12 22:07:50 ----A---- C:\windows\SysWOW64\wininet.dll
2013-12-12 22:07:50 ----A---- C:\windows\SysWOW64\urlmon.dll
2013-12-12 22:07:50 ----A---- C:\windows\SysWOW64\iertutil.dll
2013-12-12 22:07:50 ----A---- C:\windows\SysWOW64\ieapfltr.dll
2013-12-12 22:07:48 ----A---- C:\windows\SysWOW64\mshtml.dll
2013-12-12 22:07:48 ----A---- C:\windows\SysWOW64\ieframe.dll
2013-12-12 22:07:47 ----A---- C:\windows\SysWOW64\jscript9.dll
2013-12-12 20:24:41 ----A---- C:\windows\SysWOW64\tzres.dll
2013-12-12 20:24:35 ----A---- C:\windows\SysWOW64\msieftp.dll
2013-12-12 20:24:34 ----A---- C:\windows\SysWOW64\WMPhoto.dll
2013-12-12 20:24:34 ----A---- C:\windows\SysWOW64\imagehlp.dll
2013-12-12 20:24:22 ----A---- C:\windows\SysWOW64\wscript.exe
2013-12-12 20:24:22 ----A---- C:\windows\SysWOW64\scrrun.dll
2013-12-12 20:24:22 ----A---- C:\windows\SysWOW64\cscript.exe
2013-12-09 07:24:19 ----D---- C:\Users\Martin\AppData\Roaming\.mono
2013-12-08 22:54:32 ----A---- C:\windows\SysWOW64\sho5147.tmp
2013-12-05 21:42:09 ----A---- C:\windows\SysWOW64\sho50D4.tmp

======List of files/folders modified in the last 1 month======

2014-01-03 19:16:36 ----D---- C:\windows\Prefetch
2014-01-03 19:16:32 ----D---- C:\Program Files (x86)\trend micro
2014-01-03 19:16:19 ----D---- C:\Users\Martin\AppData\Roaming\Skype
2014-01-03 19:16:05 ----D---- C:\Users\Martin\AppData\Roaming\vlc
2014-01-03 18:50:40 ----D---- C:\windows\temp
2014-01-03 18:48:03 ----D---- C:\windows\system32
2014-01-03 18:48:03 ----D---- C:\windows\inf
2014-01-03 18:45:33 ----D---- C:\Program Files (x86)\Steam
2014-01-03 17:29:42 ----D---- C:\Users\Martin\AppData\Roaming\Seznam.cz
2014-01-03 17:28:53 ----D---- C:\Users\Martin\AppData\Roaming\GarenaPlus
2014-01-03 17:28:53 ----D---- C:\ProgramData\GarenaMessenger
2014-01-03 17:28:04 ----A---- C:\windows\SysWOW64\log.txt
2014-01-03 17:22:49 ----D---- C:\Users\Martin\AppData\Roaming\uTorrent
2014-01-02 23:15:39 ----D---- C:\Program Files (x86)\Garena Plus
2014-01-02 22:42:18 ----RD---- C:\Program Files (x86)
2014-01-02 21:52:26 ----D---- C:\ProgramData\PMB Files
2014-01-02 21:02:38 ----D---- C:\Users\Martin\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2014-01-02 19:36:04 ----D---- C:\Program Files (x86)\Electronic Arts
2014-01-02 16:07:04 ----D---- C:\Windows
2014-01-02 16:07:02 ----D---- C:\windows\Logs
2014-01-01 19:52:47 ----SHD---- C:\windows\Installer
2014-01-01 19:38:07 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-01-01 19:29:05 ----D---- C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2014-01-01 18:59:07 ----D---- C:\Users\Martin\AppData\Roaming\GameRanger
2014-01-01 13:22:38 ----D---- C:\Users\Martin\AppData\Roaming\codeblocks
2014-01-01 13:07:29 ----D---- C:\Users\Martin\AppData\Roaming\TS3Client
2014-01-01 12:18:30 ----D---- C:\Program Files (x86)\DefaultTab
2013-12-31 22:14:06 ----D---- C:\Users\Martin\AppData\Roaming\Winamp
2013-12-31 13:35:49 ----D---- C:\windows\SysWOW64
2013-12-31 11:21:45 ----D---- C:\windows\SysWOW64\WNLT
2013-12-31 11:21:45 ----D---- C:\windows\SysWOW64\ARFC
2013-12-29 21:24:42 ----D---- C:\Config.Msi
2013-12-29 20:37:04 ----D---- C:\Program Files (x86)\Common Files\Adobe
2013-12-29 20:37:02 ----D---- C:\ProgramData\Adobe
2013-12-29 20:35:20 ----D---- C:\Program Files (x86)\Adobe
2013-12-29 20:31:26 ----RD---- C:\Program Files
2013-12-29 20:04:45 ----D---- C:\windows\Panther
2013-12-29 20:04:32 ----D---- C:\windows\debug
2013-12-29 17:27:55 ----A---- C:\windows\SysWOW64\PnkBstrB.exe
2013-12-27 19:52:06 ----D---- C:\ProgramData\TrackMania
2013-12-24 10:26:16 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-24 10:26:16 ----D---- C:\Program Files (x86)\Common Files\Blizzard Entertainment
2013-12-23 10:48:03 ----D---- C:\Users\Martin\AppData\Roaming\The Creative Assembly
2013-12-21 22:26:08 ----D---- C:\Users\Martin\AppData\Roaming\BSplayer
2013-12-20 12:23:15 ----D---- C:\Program Files (x86)\Common Files\Steam
2013-12-20 06:24:00 ----D---- C:\ProgramData\Skype
2013-12-20 06:23:58 ----RD---- C:\Program Files (x86)\Skype
2013-12-15 21:24:12 ----D---- C:\windows\rescache
2013-12-13 06:37:55 ----D---- C:\windows\winsxs
2013-12-13 06:35:01 ----D---- C:\Program Files (x86)\Windows Media Player
2013-12-13 06:35:00 ----D---- C:\Program Files (x86)\Internet Explorer
2013-12-13 06:34:59 ----D---- C:\windows\SysWOW64\cs-CZ
2013-12-12 22:08:55 ----D---- C:\ProgramData\Microsoft Help
2013-12-11 17:58:49 ----A---- C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-09 19:13:16 ----D---- C:\Users\Martin\AppData\Roaming\SoftGrid Client

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iaStor;Intel AHCI Controller; C:\windows\system32\DRIVERS\iaStor.sys []
R0 MpFilter;Microsoft Malware Protection Driver; C:\windows\system32\DRIVERS\MpFilter.sys []
R0 nvpciflt;nvpciflt; C:\windows\system32\DRIVERS\nvpciflt.sys []
R0 rdyboost;ReadyBoost; C:\windows\System32\drivers\rdyboost.sys []
R0 sptd;sptd; C:\windows\System32\Drivers\sptd.sys []
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\windows\system32\DRIVERS\dtsoftbus01.sys []
R1 vwififlt;Virtual WiFi Filter Driver; C:\windows\system32\DRIVERS\vwififlt.sys []
R2 atksgt;atksgt; C:\windows\system32\DRIVERS\atksgt.sys []
R2 lirsgt;lirsgt; C:\windows\system32\DRIVERS\lirsgt.sys []
R2 NisDrv;Microsoft Network Inspection System; C:\windows\system32\DRIVERS\NisDrvWFP.sys []
R2 PEGAGFN;PEGAGFN; \??\C:\Program Files (x86)\PHotkey\PEGAGFN.sys [2010-12-10 14344]
R3 acpials;ALS Sensor Filter; C:\windows\system32\DRIVERS\acpials.sys []
R3 athr;Atheros – ovladač pro zařízení pro rozšiřitelnou bezdrátovou síť LAN; C:\windows\system32\DRIVERS\athrx.sys []
R3 CnxtHdAudService;Conexant UAA Function Driver for High Definition Audio Service; C:\windows\system32\drivers\CHDRT64.sys []
R3 fspad_wlh64;Finger Sensing Pad Driver for Windows 2000/XP/Vista/Win7_wlh64; C:\windows\system32\DRIVERS\fspad_wlh64.sys []
R3 hamachi;Hamachi Network Interface; C:\windows\system32\DRIVERS\hamachi.sys []
R3 igfx;igfx; C:\windows\system32\DRIVERS\igdkmd64.sys []
R3 IntcDAud;Intel(R) Display Audio; C:\windows\system32\DRIVERS\IntcDAud.sys []
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller; C:\windows\system32\DRIVERS\L1C62x64.sys []
R3 MEIx64;Intel(R) Management Engine Interface; C:\windows\system32\DRIVERS\HECIx64.sys []
R3 MQAC;@mqutil.dll,-6101; C:\windows\system32\drivers\mqac.sys []
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\windows\system32\DRIVERS\nusb3hub.sys []
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\windows\system32\DRIVERS\nusb3xhc.sys []
R3 Sftfs;Sftfs; C:\windows\system32\DRIVERS\Sftfslh.sys []
R3 Sftplay;Sftplay; C:\windows\system32\DRIVERS\Sftplaylh.sys []
R3 Sftredir;Sftredir; C:\windows\system32\DRIVERS\Sftredirlh.sys []
R3 Sftvol;Sftvol; C:\windows\system32\DRIVERS\Sftvollh.sys []
S3 ALSysIO;ALSysIO; \??\C:\Users\Martin\AppData\Local\Temp\ALSysIO64.sys []
S3 AmUStor;AM USB Stroage Driver; C:\windows\system32\drivers\AmUStor.SYS []
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\windows\system32\DRIVERS\bridge.sys []
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\windows\system32\DRIVERS\bridge.sys []
S3 catchme;catchme; \??\C:\ComboFix\catchme.sys []
S3 EagleX64;EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys []
S3 FARMNTIO;FARMNTIO; \??\c:\windows\system32\drivers\farmntio.sys []
S3 GGSAFERDriver;GGSAFER Driver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys []
S3 MGHwCtrl;MGHwCtrl; \??\C:\Program Files\MSI\MSI Software Install\MGHwCtrl.sys []
S3 pciide;pciide; C:\windows\system32\drivers\pciide.sys []
S3 TsUsbFlt;TsUsbFlt; C:\windows\system32\drivers\tsusbflt.sys []
S3 TsUsbGD;Remote Desktop Generic USB Device; C:\windows\system32\drivers\TsUsbGD.sys []
S3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys []
S3 usbscan;Ovladač skeneru USB; C:\windows\system32\DRIVERS\usbscan.sys []

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-09-05 65640]
R2 APNMCP;Ask Update Service; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [2013-11-08 166352]
R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\windows\system32\svchost.exe [2009-07-14 20992]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [2010-12-10 104968]
R2 BlackfishSQL;BlackfishSQL; C:\Program Files (x86)\Embarcadero\RAD Studio\7.0\bin\BSQLServer.exe [2009-11-18 65536]
R2 Bonjour Service;##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762##; C:\Program Files (x86)\Bonjour\mDNSResponder.exe [2006-02-28 229376]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\windows\system32\CISVC.EXE []
R2 cvhsvc;Client Virtualization Handler; C:\Program Files (x86)\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE [2013-04-22 822504]
R2 CxAudMsg;@C:\windows\system32\CxAudMsg64.exe,-100; C:\windows\system32\CxAudMsg64.exe []
R2 DefaultTabUpdate;DefaultTabUpdate; C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [2013-08-21 107520]
R2 GFNEXSrv;GFNEX Service; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [2010-12-10 159752]
R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine; C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe [2013-11-29 2210640]
R2 HiPatchService;Hi-Rez Studios Authenticate and Update Service; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [2013-10-25 9216]
R2 HyperDeskCustomThemeEnabler;HyperDesk's Custom Theme Enabler; C:\windows\Installer\MSIC019.tmp [2013-07-04 86016]
R2 IBUpdaterService;IBUpdaterService; C:\windows\system32\dmwu.exe []
R2 iprip;@%Systemroot%\system32\iprip.dll,-200; C:\windows\System32\svchost.exe [2009-07-14 20992]
R2 LMIGuardianSvc;LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [2013-10-11 377104]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2010-10-05 325656]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2013-10-23 23808]
R2 MSMQ;@mqutil.dll,-6102; C:\windows\system32\mqsvc.exe []
R2 nvsvc;NVIDIA Display Driver Service; C:\windows\system32\nvvsvc.exe []
R2 PanService;PandoraService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [2013-07-08 1922600]
R2 PnkBstrA;PnkBstrA; C:\windows\system32\PnkBstrA.exe [2012-05-18 76888]
R2 PnkBstrB;PnkBstrB; C:\windows\system32\PnkBstrB.exe [2013-12-29 214520]
R2 sftlist;Application Virtualization Client; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe [2013-06-26 523944]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\windows\System32\tcpsvcs.exe [2009-07-14 9216]
R2 SNMP;@%SystemRoot%\system32\snmp.exe,-3; C:\windows\System32\snmp.exe [2010-11-21 47616]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2010-10-05 2655768]
R2 W3SVC;@%windir%\system32\inetsrv\iisres.dll,-30003; C:\windows\system32\svchost.exe [2009-07-14 20992]
R3 NisSrv;@C:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2013-10-23 348376]
R3 sftvsa;Application Virtualization Service Agent; C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe [2013-06-26 207528]
R3 WAS;@%windir%\system32\inetsrv\iisres.dll,-30001; C:\windows\system32\svchost.exe [2009-07-14 20992]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
S2 DefaultTabSearch;DefaultTabSearch; C:\Program Files (x86)\DefaultTab\DefaultTabSearch.exe [2013-12-20 574464]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-23 116648]
S2 nvUpdatusService;NVIDIA Update Service Daemon; C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [2012-12-03 1259880]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-09-05 171680]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2013-12-11 257416]
S3 aspnet_state;Stavová služba ASP.NET; C:\windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2010-03-18 44376]
S3 FLEXnet Licensing Service;FLEXnet Licensing Service; C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [2013-11-29 654848]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-11-23 116648]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [2004-10-22 73728]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\windows\system32\IEEtwCollector.exe /V []
S3 Microsoft Office Groove Audit Service;Microsoft Office Groove Audit Service; C:\Program Files (x86)\Microsoft Office\Office12\GrooveAuditService.exe [2009-02-26 64856]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2013-12-15 118680]
S3 odserv;Microsoft Office Diagnostics Service; C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE [2011-07-20 440696]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2013-12-11 569768]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\windows\system32\Wat\WatAdminSvc.exe []
S4 NetMsmqActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetPipeActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 NetTcpActivator;@C:\windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\windows\System32\tlntsvr.exe []

-----------------EOF-----------------

Děkuji

#2 Příspěvek od **vyosek** » 03 led 2014 20:38

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

martas2 · #3 Příspěvek od **martas2** » 04 led 2014 15:19

JRT

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.0.9 (01.01.2014:1)
OS: Windows 7 Home Premium x64
Ran by Martin on so 04.01.2014 at 15:03:08,22
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{BDB69379-802F-4EAF-B541-F8DE92DD98DB}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\escort.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\1clickdownload
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\im
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\iminstaller
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\smarttweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\sweetim
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\wnlt
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduit
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\conduitsearchscopes
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\smartbar
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\InternetRegistry\REGISTRY\USER\S-1-5-21-705687782-3761009054-3559831724-1001\Software\sweetim
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\systweak
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\prod.cap
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab chrome
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\wnlt
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{fb697452-8ca4-46b4-98b1-165c922a2ef3}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\babylon
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\conduit
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\apnstub_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\au__rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\au__rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\mybabylontb_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\mybabylontb_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\sweetim_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\sweetim_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\sweetpacksupdatemanager_rasapi32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\sweetpacksupdatemanager_rasmancs
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\AskSLib_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\TaskScheduler_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_commandos-behind-enemy-lines_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_commandos-behind-enemy-lines_RASMANCS
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_directx_RASAPI32
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Tracing\SoftonicDownloader_for_directx_RASMANCS
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7183970F-0A43-442B-AB7B-485E17F8EE33}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{7A978C84-809E-491F-A309-9DF42067E287}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{87D5AE6A-1998-4E46-81AC-70E9952A3934}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C04B7D22-5AEC-4561-8F49-27F6269208F6}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Successfully deleted: [Registry Key] "hkey_current_user\software\askpartnernetwork"

~~~ Files

Successfully deleted: [File] "C:\Users\Martin\appdata\locallow\SkwConfig.bin"
Successfully deleted: [File] "C:\end"
Failed to delete: [File] "C:\windows\system32\dmwu.exe"
Failed to delete: [File] "C:\windows\system32\ImHttpComm.dll"
Successfully deleted: [File] C:\windows\syswow64\sho186E.tmp
Successfully deleted: [File] C:\windows\syswow64\sho2A36.tmp
Successfully deleted: [File] C:\windows\syswow64\sho42BC.tmp
Successfully deleted: [File] C:\windows\syswow64\sho4B2.tmp
Successfully deleted: [File] C:\windows\syswow64\sho50D4.tmp
Successfully deleted: [File] C:\windows\syswow64\sho513B.tmp
Successfully deleted: [File] C:\windows\syswow64\sho5147.tmp
Successfully deleted: [File] C:\windows\syswow64\sho514B.tmp
Successfully deleted: [File] C:\windows\syswow64\sho5AAA.tmp
Successfully deleted: [File] C:\windows\syswow64\sho5B58.tmp
Successfully deleted: [File] C:\windows\syswow64\sho67A7.tmp
Successfully deleted: [File] C:\windows\syswow64\sho6F3F.tmp
Successfully deleted: [File] C:\windows\syswow64\sho7AC4.tmp
Successfully deleted: [File] C:\windows\syswow64\sho8352.tmp
Successfully deleted: [File] C:\windows\syswow64\sho85FF.tmp
Successfully deleted: [File] C:\windows\syswow64\sho89C5.tmp
Successfully deleted: [File] C:\windows\syswow64\sho8C21.tmp
Successfully deleted: [File] C:\windows\syswow64\shoA843.tmp
Successfully deleted: [File] C:\windows\syswow64\shoAA0.tmp
Successfully deleted: [File] C:\windows\syswow64\shoB4D7.tmp
Successfully deleted: [File] C:\windows\syswow64\shoB540.tmp
Successfully deleted: [File] C:\windows\syswow64\shoB9DC.tmp
Successfully deleted: [File] C:\windows\syswow64\shoC301.tmp
Successfully deleted: [File] C:\windows\syswow64\shoD89C.tmp
Successfully deleted: [File] C:\windows\syswow64\shoDA7.tmp
Successfully deleted: [File] C:\windows\syswow64\shoE827.tmp
Successfully deleted: [File] C:\windows\syswow64\shoF0D4.tmp
Successfully deleted: [File] C:\windows\syswow64\shoFAB0.tmp
Successfully deleted: [File] C:\windows\syswow64\shoFE6F.tmp

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\ProgramData\babylon"
Successfully deleted: [Folder] "C:\ProgramData\premium"
Successfully deleted: [Folder] "C:\ProgramData\sweetim"
Successfully deleted: [Folder] "C:\ProgramData\trymedia"
Successfully deleted: [Folder] "C:\Users\Martin\AppData\Roaming\babylon"
Successfully deleted: [Folder] "C:\Users\Martin\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\Martin\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\local\apn"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\local\appshat mobile apps"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\local\conduit"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\locallow\conduit"
Successfully deleted: [Folder] "C:\Users\Martin\appdata\locallow\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\conduit"
Successfully deleted: [Folder] "C:\Program Files (x86)\defaulttab"
Successfully deleted: [Folder] "C:\Program Files (x86)\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\mypc backup"
Successfully deleted: [Folder] "C:\Users\Martin\AppData\Roaming\microsoft\windows\start menu\programs\smarttweak software"
Successfully deleted: [Folder] "C:\windows\syswow64\arfc"
Failed to delete: [Folder] "C:\windows\syswow64\jmdp"
Successfully deleted: [Folder] "C:\windows\syswow64\wnlt"
Failed to delete: [Folder] "C:\windows\system32\ljkb"
Successfully deleted: [Empty Folder] C:\Users\Martin\appdata\local\{E5CA06B9-AD27-4E86-9F05-BE3212FA9D92}
Successfully deleted: [Folder] "C:\ProgramData\ask"
Successfully deleted: [Folder] "C:\ProgramData\AskPartnerNetwork"
Successfully deleted: [Folder] "C:\Program Files (x86)\askpartnernetwork"

~~~ FireFox

Successfully deleted: [File] C:\user.js
Successfully deleted: [File] "C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml"
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\user.js
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\extensions\addon@defaulttab.com.xpi
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\extensions\{eee6c361-6118-11dc-9c72-001320c79847}.xpi
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\searchplugins\askcom.xml
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\searchplugins\conduit.xml
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\searchplugins\mystart search.xml
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\searchplugins\search-here.xml
Successfully deleted: [File] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\searchplugins\sweetim.xml
Successfully deleted: [Folder] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\extensions\ffxtlbr@babylon.com
Successfully deleted: [Folder] C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\extensions\{97a78363-b868-4b48-ac91-a783a31215af}
Successfully deleted the following from C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\prefs.js

user_pref("CT1750559.FF19Solved", "true");
user_pref("CT1750559.UserID", "UN25576023778262223");
user_pref("CT1750559.browser.search.defaultthis.engineName", "true");
user_pref("CT1750559.fullUserID", "UN25576023778262223.IN.20131010164810");
user_pref("CT1750559.installDate", "10/10/2013 16:48:13");
user_pref("CT1750559.installSessionId", "a8394aaf-3ebc-49e3-83ec-56ae0e96c439");
user_pref("CT1750559.installSp", "FALSE");
user_pref("CT1750559.installUsage", "10/10/2013 16:58:37");
user_pref("CT1750559.installUsageEarly", "10/10/2013 16:58:37");
user_pref("CT1750559.installerVersion", "1.7.1.7");
user_pref("CT1750559.keyword", "true");
user_pref("CT1750559.originalSearchAddressUrl", "");
user_pref("CT1750559.originalSearchEngine", "");
user_pref("CT1750559.originalSearchEngineName", "Ask.com");
user_pref("CT1750559.searchRevert", "false");
user_pref("CT1750559.searchUserMode", "1");
user_pref("CT1750559.versionFromInstaller", "10.20.1.8");
user_pref("CT1750559.xpeMode", "0");
user_pref("Smartbar.SearchFromAddressBarSavedUrl", "");
user_pref("browser.babylon.HPOnNewTab", "search.babylon.com");
user_pref("browser.search.defaultthis.engineName", "BS Player ControlBar Customized Web Search");
user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&CUI=UN25576023778262223&UM=1&SearchSource=3&q={searchTerms}");
user_pref("extensions.BabylonToolbar.admin", false);
user_pref("extensions.BabylonToolbar.aflt", "babsst");
user_pref("extensions.BabylonToolbar.babExt", "");
user_pref("extensions.BabylonToolbar.babTrack", "affID=112465");
user_pref("extensions.BabylonToolbar.bbDpng", 6);
user_pref("extensions.BabylonToolbar.dfltSrch", false);
user_pref("extensions.BabylonToolbar.hmpg", false);
user_pref("extensions.BabylonToolbar.id", "92af73430000000000003860779acf28");
user_pref("extensions.BabylonToolbar.instlDay", "15497");
user_pref("extensions.BabylonToolbar.instlRef", "sst");
user_pref("extensions.BabylonToolbar.lastDP", 6);
user_pref("extensions.BabylonToolbar.lastVrsnTs", "1.5.3.1719:06:19");
user_pref("extensions.BabylonToolbar.mntrFFxVrsn", "13.0");
user_pref("extensions.BabylonToolbar.newTab", true);
user_pref("extensions.BabylonToolbar.newTabUrl", "hxxp://search.babylon.com/?babsrc=NT_bb");
user_pref("extensions.BabylonToolbar.noFFXTlbr", false);
user_pref("extensions.BabylonToolbar.prdct", "BabylonToolbar");
user_pref("extensions.BabylonToolbar.propectorlck", 77563711);
user_pref("extensions.BabylonToolbar.prtkDS", 1);
user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
user_pref("extensions.BabylonToolbar.prtnrId", "babylon");
user_pref("extensions.BabylonToolbar.ptch_0717", true);
user_pref("extensions.BabylonToolbar.smplGrp", "none");
user_pref("extensions.BabylonToolbar.srcExt", "ss");
user_pref("extensions.BabylonToolbar.tlbrId", "base");
user_pref("extensions.BabylonToolbar.vrsn", "1.5.3.17");
user_pref("extensions.BabylonToolbar.vrsnTs", "1.5.3.1719:06:19");
user_pref("extensions.BabylonToolbar.vrsni", "1.5.3.17");
user_pref("extensions.BabylonToolbar_i.newTab", true);
user_pref("extensions.BabylonToolbar_i.newTabUrl", "hxxp://search.babylon.com/?affID=112465&babsrc=NT_ss&mntrId=92af73430000000000003860779acf28");
user_pref("extensions.asktb.ff-original-keyword-url", "hxxp://search.babylon.com/?affID=112465&babsrc=KW_ss&mntrId=92af73430000000000003860779acf28&q=");
user_pref("extensions.defaulttab.installdate", 1383770552);
user_pref("extensions.defaulttab.useNewTabWhiteList", false);
user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\",\"icon\":\"hxxp://www.b
user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxwG8F/BuooQAQscXj0cOIC8nANU
user_pref("smartbar.addressBarOwnerCTID", "CT1750559");
user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=2&CUI=UN25576023778262223&UM=1&q=");
user_pref("smartbar.defaultSearchOwnerCTID", "CT1750559");
user_pref("smartbar.machineId", "KYLHLKBH9EYGJSXYAIBZSKIPJUQQBWAWARUIPPRYATGR8HRSL3UG7AVMMZHDYWATCP5I14ZNJIW9HGQJXEDFCG");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "Google");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "hxxps://www.google.cz/");
user_pref("sweetim.toolbar.urls.homepage", "hxxp://home.sweetim.com/?crg=3.1010000.10012&barid={77629BD1-361C-11E2-9A15-3860779ACF28}");
user_pref("browser.search.defaultenginename", "BS Player ControlBar Customized Web Search");
Emptied folder: C:\Users\Martin\AppData\Roaming\mozilla\firefox\profiles\4mg03gti.default\minidumps [38 files]

~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions\jcdgjdiieiljkfkdcloehkohchhpekkn
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Google\Chrome\Extensions\kdidombaedgpfiiedeimiebkmbilgmlc

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 04.01.2014 at 15:05:16,13
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

martas2 · #4 Příspěvek od **martas2** » 04 led 2014 15:20

# AdwCleaner v3.016 - Report created 04/01/2014 at 15:10:19
# Updated 23/12/2013 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Martin - MARTIN-MSI
# Running from : C:\Users\Martin\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : APNMCP
[#] Service Deleted : DefaultTabSearch
[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : IBUpdaterService

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\NCH Software
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\otshot
Folder Deleted : C:\windows\SysWOW64\jmdp
Folder Deleted : C:\windows\System32\ljkb
Folder Deleted : C:\Users\Martin\AppData\Local\Temp\apn
Folder Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\CT1750559
Folder Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\Extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
File Deleted : C:\windows\System32\dmwu.exe
File Deleted : C:\windows\System32\ImhxxpComm.dll
File Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\defaulttab.config
File Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\searchplugins\MyStart.xml
File Deleted : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\searchplugins\Sweetpacks Search.xml
File Deleted : C:\windows\System32\Tasks\NCH Software

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\ogccgbmabaphcakpiclgcnmcnimhokcj
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [AppsHat]
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\BingBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D3D233D5-9F6D-436C-B6C7-E63F77503B30}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D7E97865-918F-41E4-9CD0-25AB1C574CE8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{11BF46C6-B3DE-48BD-BF70-3AD85CAB80B6}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D7E97865-918F-41E4-9CD0-25AB1C574CE8}]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\NCH Software
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKLM\Software\AskPartnerNetwork
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\DefaultTab
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKLM\Software\NCH Software
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\Software\Classes\Installer\Features\254796BF4AC84B64891B61C529A2E23F
Key Deleted : HKLM\Software\Classes\Installer\Products\254796BF4AC84B64891B61C529A2E23F

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16428

-\\ Mozilla Firefox v24.0 (cs)

[ File : C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\prefs.js ]

Line Deleted : user_pref("browser.search.defaultengine", "Ask.com");
Line Deleted : user_pref("browser.search.order.1", "Ask.com");
Line Deleted : user_pref("extensions.kango.storage.m2_k1", "0");
Line Deleted : user_pref("extensions.kango.storage.m2_k2", "0");
Line Deleted : user_pref("extensions.kango.storage.m2_k3", "1386073677944");
Line Deleted : user_pref("extensions.kango.storage.m2_k4", "0");
Line Deleted : user_pref("extensions.kango.storage.m2_k5", "1387063651077");
Line Deleted : user_pref("extensions.kango.storage.minibar.config", "{\"name\":\"Apps Hat\",\"description\":\"Apps Hat\",\"button\":{\"tooltip\":\"Visit AppsHat.com\",\"icon\":\"hxxp://www.bigspeedpro.com/button/%af[...]
Line Deleted : user_pref("extensions.kango.storage.nero_options", "\"{\\\"m1\\\":{\\\"ads\\\":{\\\"n1\\\":{\\\"url\\\":\\\"//ulayout.com/nero/hatter/google_post_results_728x90.html?aff_slug=appshat\\\",\\\"width\\\"[...]
Line Deleted : user_pref("extensions.kango.storage.ui.button.iconCache", "\"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABMAAAATCAYAAAByUDbMAAADlElEQVQ4jb3S3U9adxwG8F/BuooQAQscXj0cOIC8nANUPYjoHDClvqAoZ04gpqsZKmrUV[...]

-\\ Google Chrome v31.0.1650.63

[ File : C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted : homepage

*************************

AdwCleaner[R0].txt - [7930 octets] - [04/01/2014 15:08:15]
AdwCleaner[S0].txt - [7878 octets] - [04/01/2014 15:10:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [7938 octets] ##########

#5 Příspěvek od **vyosek** » 04 led 2014 23:51

Poprosim o log z FRSTLauncheru http://forum.viry.cz/viewtopic.php?f=30&t=133101

martas2 · #6 Příspěvek od **martas2** » 05 led 2014 10:58

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-01-2014
Ran by Martin (administrator) on MARTIN-MSI on 05-01-2014 10:55:13
Running from C:\Users\Martin\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\system32\audiodg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
() C:\Windows\Installer\MSIC019.tmp
() C:\Program Files (x86)\PHotkey\AsLdrSrv.exe
() C:\Program Files (x86)\PHotkey\GFNEXSrv.exe
(CodeGear) C:\Program Files (x86)\Embarcadero\RAD Studio\7.0\bin\BSQLServer.exe
(Apple Computer, Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Windows\system32\CISVC.EXE
(Conexant Systems Inc.) C:\Windows\system32\CxAudMsg64.exe
(Hi-Rez Studios) D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\system32\mqsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corporation) C:\Windows\system32\TCPSVCS.EXE
(Microsoft Corporation) C:\Windows\system32\snmp.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Alcor Micro Corp.) C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Sentelic Corporation) C:\Program Files\FSP\FspUip.exe
(Intel Corporation) C:\Windows\system32\hkcmd.exe
(Intel Corporation) C:\Windows\system32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
() C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Program Files (x86)\PHotkey\PHotkey.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt.exe
() C:\Program Files (x86)\PHotkey\MsgTranAgt64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\PHotkey\PVDesktop.exe
() C:\Program Files (x86)\PHotkey\PVDAgent.exe
(Pegatron Corporation) C:\Program Files (x86)\PHotkey\MsOsd.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(InstallShield Software Corporation) C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe
(SRS Labs, Inc.) C:\Program Files\SRS Labs\SRS Control Panel\SRSPanel_64.exe
(APN LLC.) C:\Users\Martin\AppData\Local\VNT\vntldr.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\SysWOW64\PING.EXE

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AmIcoSinglun64] - C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-22] (Alcor Micro Corp.)
HKLM\...\Run: [fspuip] - C:\Program Files\FSP\FspUip.exe [4055552 2010-11-08] (Sentelic Corporation)
HKLM\...\Run: [SmartAudio] - C:\Program Files\CONEXANT\SAII\SAIICpl.exe [316032 2010-12-14] (Conexant systems, Inc.)
HKLM\...\Run: [MSC] - C:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-04-27] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [VNT] - C:\Program Files (x86)\VNT\vntldr.exe [202192 2013-11-08] (APN LLC.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKCU\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9890608 2013-12-13] ()
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Martin\AppData\Roaming\Seznam.cz\szninstall.exe [1009288 2012-09-13] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92152 2013-01-22] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20588704 2013-11-15] (Skype Technologies S.A.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536 2013-09-04] ()
HKCU\...\Run: [Bloody2] - C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe [11895808 2013-08-30] ()
AppInit_DLLs: C:\Windows\system32\nvinitx.dll [245432 2012-12-03] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll [201136 2012-12-03] (NVIDIA Corporation)
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk
ShortcutTarget: GameRanger.lnk -> C:\Users\Martin\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM-x32 - Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 78.110.208.34 78.110.208.38

FireFox:
========
FF ProfilePath: C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default
FF Plugin: @adobe.com/FlashPlayer - C:\windows\system32\Macromed\Flash\NPSWF64_11_9_900_170.dll ()
FF Plugin: @java.com/DTPlugin,version=10.5.1 - C:\windows\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.5.1 - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_170.dll ()
FF Plugin-x32: @java.com/JavaPlugin,version=10.21.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 - C:\Program Files (x86)\Winamp Detect\npwachk.dll (Nullsoft, Inc.)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.0 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Martin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Martin\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Seznam lištička - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\Extensions\{ea614400-e918-4741-9a97-7a972ff7c30b}
FF Extension: User Agent Switcher - C:\Users\Martin\AppData\Roaming\Mozilla\Firefox\Profiles\4mg03gti.default\Extensions\{e968fc70-8f95-4ab9-9e79-304de2a71ee1}.xpi
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird

Chrome:
=======
CHR HomePage: hxxp://www.google.com
CHR RestoreOnStartup: "hxxp://google.com/"
CHR Extension: (AdBlock) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.6.16_0
CHR Extension: (Google Wallet) - C:\Users\Martin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.6.0_0
CHR HKLM-x32\...\Chrome\Extension: [aaaaipkbmjkakicapiinmamgjlkaeehh] - C:\ProgramData\AskPartnerNetwork\Toolbar\KMPV7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Martin\AppData\Local\Temp\ccex.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

==================== Services (Whitelisted) =================

R2 ASLDRService; C:\Program Files (x86)\PHotkey\ASLDRSrv.exe [104968 2010-12-10] ()
R2 BlackfishSQL; C:\Program Files (x86)\Embarcadero\RAD Studio\7.0\bin\BSQLServer.exe [65536 2009-11-18] (CodeGear)
R2 GFNEXSrv; C:\Program Files (x86)\PHotkey\GFNEXSrv.exe [159752 2010-12-10] ()
R2 HiPatchService; D:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2013-10-25] (Hi-Rez Studios)
R2 HyperDeskCustomThemeEnabler; C:\windows\Installer\MSIC019.tmp [86016 2013-07-04] ()
R2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377104 2013-10-11] (LogMeIn, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-14] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 PnkBstrA; C:\windows\SysWow64\PnkBstrA.exe [76888 2012-05-18] ()
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-21] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWow64\snmp.exe [47616 2010-11-21] (Microsoft Corporation)
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-21] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2012-05-10] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2012-05-26] (DT Soft Ltd)
S3 FARMNTIO; c:\windows\system32\drivers\farmntio.sys [24664 2011-04-18] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2012-05-10] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-14] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R2 PEGAGFN; C:\Program Files (x86)\PHotkey\PEGAGFN.sys [14344 2010-12-10] (PEGATRON)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [560184 2012-10-17] (Duplex Secure Ltd.)
U3 ah75mxji; C:\Windows\System32\Drivers\ah75mxji.sys [0 ] (Advanced Micro Devices)
S3 ALSysIO; \??\C:\Users\Martin\AppData\Local\Temp\ALSysIO64.sys [x]
U5 AppMgmt; C:\Windows\system32\svchost.exe [27136 2009-07-14] (Microsoft Corporation)
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [x]
S3 MGHwCtrl; \??\C:\Program Files\MSI\MSI Software Install\MGHwCtrl.sys [x]
S3 TuneUpUtilitiesDrv; \??\C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys [x]
S3 X6va014; \??\C:\windows\SysWOW64\Drivers\X6va014 [x]
S3 X6va015; \??\C:\windows\SysWOW64\Drivers\X6va015 [x]

==================== NetSvcs (Whitelisted) ===================

==================== One Month Created Files and Folders ========

2014-01-05 10:55 - 2014-01-05 10:56 - 00018670 _____ C:\Users\Martin\Desktop\FRST.txt
2014-01-05 10:53 - 2014-01-05 10:53 - 00029696 _____ C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-01-05 10:53 - 2014-01-05 10:53 - 00015327 _____ C:\Users\Martin\Desktop\LM.bat
2014-01-05 10:51 - 2014-01-05 10:51 - 01931368 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Downloads\FRSTLauncher.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-05 10:50 - 2014-01-05 10:51 - 01931368 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-01-04 23:07 - 2014-01-04 23:50 - 00000000 ____D C:\Users\Martin\Downloads\Insomnia (2002)
2014-01-04 23:07 - 2014-01-04 23:36 - 788186196 ____R C:\Users\Martin\Desktop\Insomnia.2002.720p.BluRay.x264.YIFY.mp4
2014-01-04 22:54 - 2014-01-04 22:54 - 00000017 _____ C:\windows\SysWOW64\shortcut_ex.dat
2014-01-04 22:27 - 2014-01-04 23:50 - 2003040851 ____R C:\Users\Martin\Desktop\Marvel's Thor：The Dark World.2013.DVDScr.x264.2Audio-SmY.mkv
2014-01-04 22:27 - 2014-01-04 23:50 - 00000000 ____D C:\Users\Martin\Downloads\Thor The Dark World 2013 DVDScr x264 2Audio-SmY
2014-01-04 21:45 - 2014-01-04 21:45 - 00011999 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E12(0000229597).zip
2014-01-04 20:37 - 2014-01-04 20:58 - 310986752 _____ C:\Users\Martin\Downloads\Beelzebub---19[Kageinbou].avi
2014-01-04 20:30 - 2014-01-04 18:45 - 335124480 _____ C:\Users\Martin\Desktop\Beelzebub---18[Kageinbou].avi
2014-01-04 18:58 - 2014-01-04 18:58 - 00011788 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E11(0000228743).zip
2014-01-04 18:39 - 2014-01-04 18:58 - 00000000 ____D C:\Users\Martin\Downloads\The Big Bang Theory S07E11 HDTV x264-LOL[ettv]
2014-01-04 18:35 - 2014-01-04 18:35 - 00014219 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E10(0000228308).zip
2014-01-04 18:24 - 2014-01-04 18:45 - 335124480 _____ C:\Users\Martin\Downloads\Beelzebub---18[Kageinbou].avi
2014-01-04 15:21 - 2014-01-04 15:45 - 334467072 _____ C:\Users\Martin\Downloads\Beelzebub---17[Kageinbou].avi
2014-01-04 15:08 - 2014-01-04 15:10 - 00000000 ____D C:\AdwCleaner
2014-01-04 15:05 - 2014-01-04 15:05 - 00019424 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Downloads\adwcleaner.exe
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-04 14:45 - 2014-01-04 14:45 - 00000000 ____D C:\windows\ERUNT
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-04 13:58 - 2014-01-04 14:16 - 321032192 _____ C:\Users\Martin\Downloads\Beelzebub---16[Kageinbou].avi
2014-01-04 13:18 - 2014-01-04 13:35 - 307988480 _____ C:\Users\Martin\Downloads\Beelzebub---15[Kageinbou] (1).avi
2014-01-04 10:24 - 2014-01-04 10:37 - 217491204 _____ C:\Users\Martin\Downloads\Beelzebub---15[Kageinbou].avi
2014-01-03 20:42 - 2014-01-03 20:43 - 00028904 _____ C:\Users\Martin\Downloads\[Brook s.r.o] Beelzebub - 14 (1).ass
2014-01-03 18:47 - 2014-01-03 18:48 - 00781383 _____ C:\Users\Martin\Downloads\RSIT.exe
2014-01-03 18:43 - 2014-01-03 18:43 - 00028904 _____ C:\Users\Martin\Downloads\[Brook s.r.o] Beelzebub - 14.ass
2014-01-03 18:06 - 2014-01-03 18:08 - 05657405 _____ C:\Users\Martin\Downloads\[HorribleSubs]-Beelzebub---15-[720p].mkv
2014-01-03 17:37 - 2014-01-03 17:37 - 00012011 _____ C:\Users\Martin\Downloads\BBTS07E07.rar
2014-01-03 17:32 - 2014-01-03 17:32 - 00012228 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E07(0000226895).zip
2014-01-03 14:10 - 2014-01-03 14:21 - 57248527 _____ C:\Users\Martin\Downloads\[HorribleSubs]-Beelzebub---14-[720p].mkv
2014-01-02 22:42 - 2014-01-02 22:42 - 00001159 _____ C:\Users\Public\Desktop\Ship Simulator 2008.lnk
2014-01-02 22:42 - 2014-01-02 22:42 - 00000000 ____D C:\Program Files (x86)\Vstep
2014-01-02 21:58 - 2014-01-02 22:29 - 678880721 ____R C:\Users\Martin\Desktop\Shipsim2008.exe
2014-01-02 19:48 - 2014-01-02 19:48 - 00017321 _____ C:\Users\Martin\Downloads\Shanghai-noon(0000000914).zip
2014-01-02 19:46 - 2014-01-03 14:25 - 00000000 ____D C:\Users\Martin\Downloads\The.Big.Bang.Theory.S07E07.The.Proton.Displacement.1080p.WEB-DL.DD5.1.H.264 [PublicHD]
2014-01-02 19:40 - 2014-01-02 19:40 - 00002355 _____ C:\Users\Public\Desktop\The Battle for Middle-earth (tm) II.lnk
2014-01-02 16:07 - 2014-01-02 19:40 - 00027656 _____ C:\windows\DirectX.log
2014-01-02 13:57 - 2014-01-02 13:57 - 00000572 _____ C:\windows\PFRO.log
2014-01-01 20:17 - 2014-01-01 20:17 - 00002165 _____ C:\Users\Martin\Desktop\Play Left4dead 2 2013.lnk
2014-01-01 19:02 - 2014-01-01 21:26 - 1658341376 ____R C:\Users\Martin\Desktop\rld-bme2.iso
2014-01-01 18:59 - 2014-01-01 18:59 - 00001085 _____ C:\Users\Martin\Desktop\GameRanger.lnk
2014-01-01 18:59 - 2014-01-01 18:59 - 00001071 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
2014-01-01 00:48 - 2014-01-01 16:04 - 885413305 ____R C:\Users\Martin\Desktop\[ www.UsaBit.com ] - playnow-Go.for.it.1983 720p x264-1.mp4
2013-12-31 10:54 - 2014-01-05 10:44 - 00001596 _____ C:\windows\DtcInstall.log
2013-12-30 21:38 - 2014-01-05 10:44 - 00000706 _____ C:\windows\setupact.log
2013-12-30 21:38 - 2013-12-30 21:38 - 00000000 _____ C:\windows\setuperr.log
2013-12-29 21:24 - 2014-01-05 10:47 - 00000000 ____D C:\Users\Martin\AppData\Local\LogMeIn Hamachi
2013-12-29 21:24 - 2013-12-29 21:24 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-29 20:03 - 2013-12-29 20:03 - 00000586 _____ C:\Users\Martin\Documents\cc_20131229_200303.reg
2013-12-29 20:02 - 2013-12-29 20:02 - 00030870 _____ C:\Users\Martin\Documents\cc_20131229_200247.reg
2013-12-29 16:36 - 2013-12-29 16:36 - 00001123 _____ C:\Users\Public\Desktop\Portal 2.lnk
2013-12-29 16:23 - 2013-12-29 16:23 - 00000000 ____D C:\Program Files (x86)\Games
2013-12-27 16:43 - 2013-12-27 16:43 - 00008195 _____ C:\Users\Martin\AppData\Local\recently-used.xbel
2013-12-26 15:07 - 2013-12-26 15:07 - 00000219 _____ C:\Users\Martin\Desktop\Left 4 Dead 2.url
2013-12-26 14:42 - 2013-12-29 20:05 - 00000000 ____D C:\Users\Martin\AppData\Roaming\FileZilla
2013-12-26 14:42 - 2013-12-26 14:42 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2013-12-26 14:42 - 2013-12-26 14:42 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-12-25 00:40 - 2013-12-25 00:53 - 00000000 ____D C:\Program Files (x86)\osu!
2013-12-25 00:40 - 2013-12-25 00:40 - 00000895 _____ C:\Users\Public\Desktop\osu!.lnk
2013-12-23 11:01 - 2013-12-23 19:17 - 00000000 ____D C:\Users\Martin\Desktop\Total.War.Rome.2.Crack.Only-RELOADED
2013-12-22 22:36 - 2013-12-22 22:36 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk
2013-12-22 22:04 - 2013-12-23 19:17 - 00000000 ____D C:\Program Files (x86)\Total War ROME II
2013-12-22 11:08 - 2013-12-22 15:04 - 1580511232 ____R C:\Users\Martin\Desktop\rld-twrome2.iso
2013-12-20 17:40 - 2013-12-20 17:42 - 00000000 ____D C:\Users\Martin\AppData\Roaming\SpaceEngineers
2013-12-15 00:27 - 2013-12-15 00:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-12 22:09 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\windows\system32\wmp.dll
2013-12-12 22:09 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\windows\system32\wmploc.DLL
2013-12-12 22:09 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmploc.DLL
2013-12-12 22:09 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\windows\SysWOW64\wmp.dll
2013-12-12 22:07 - 2013-11-26 12:54 - 23183360 _____ (Microsoft Corporation) C:\windows\system32\mshtml.dll
2013-12-12 22:07 - 2013-11-26 11:19 - 02724864 _____ (Microsoft Corporation) C:\windows\system32\mshtml.tlb
2013-12-12 22:07 - 2013-11-26 11:18 - 00004096 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollectorres.dll
2013-12-12 22:07 - 2013-11-26 11:11 - 17112576 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.dll
2013-12-12 22:07 - 2013-11-26 10:48 - 00066048 _____ (Microsoft Corporation) C:\windows\system32\iesetup.dll
2013-12-12 22:07 - 2013-11-26 10:46 - 00048640 _____ (Microsoft Corporation) C:\windows\system32\ieetwproxystub.dll
2013-12-12 22:07 - 2013-11-26 10:41 - 02764288 _____ (Microsoft Corporation) C:\windows\system32\iertutil.dll
2013-12-12 22:07 - 2013-11-26 10:29 - 00053760 _____ (Microsoft Corporation) C:\windows\system32\jsproxy.dll
2013-12-12 22:07 - 2013-11-26 10:27 - 00033792 _____ (Microsoft Corporation) C:\windows\system32\iernonce.dll
2013-12-12 22:07 - 2013-11-26 10:23 - 02724864 _____ (Microsoft Corporation) C:\windows\SysWOW64\mshtml.tlb
2013-12-12 22:07 - 2013-11-26 10:21 - 00574976 _____ (Microsoft Corporation) C:\windows\system32\ieui.dll
2013-12-12 22:07 - 2013-11-26 10:18 - 00139264 _____ (Microsoft Corporation) C:\windows\system32\ieUnatt.exe
2013-12-12 22:07 - 2013-11-26 10:18 - 00111616 _____ (Microsoft Corporation) C:\windows\system32\ieetwcollector.exe
2013-12-12 22:07 - 2013-11-26 10:16 - 00708608 _____ (Microsoft Corporation) C:\windows\system32\jscript9diag.dll
2013-12-12 22:07 - 2013-11-26 09:57 - 00218624 _____ (Microsoft Corporation) C:\windows\system32\ie4uinit.exe
2013-12-12 22:07 - 2013-11-26 09:38 - 02166784 _____ (Microsoft Corporation) C:\windows\SysWOW64\iertutil.dll
2013-12-12 22:07 - 2013-11-26 09:38 - 00043008 _____ (Microsoft Corporation) C:\windows\SysWOW64\jsproxy.dll
2013-12-12 22:07 - 2013-11-26 09:35 - 05769216 _____ (Microsoft Corporation) C:\windows\system32\jscript9.dll
2013-12-12 22:07 - 2013-11-26 09:32 - 00440832 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieui.dll
2013-12-12 22:07 - 2013-11-26 09:28 - 00553472 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9diag.dll
2013-12-12 22:07 - 2013-11-26 09:16 - 04243968 _____ (Microsoft Corporation) C:\windows\SysWOW64\jscript9.dll
2013-12-12 22:07 - 2013-11-26 09:02 - 01995264 _____ (Microsoft Corporation) C:\windows\system32\inetcpl.cpl
2013-12-12 22:07 - 2013-11-26 08:48 - 12996608 _____ (Microsoft Corporation) C:\windows\system32\ieframe.dll
2013-12-12 22:07 - 2013-11-26 08:32 - 01928192 _____ (Microsoft Corporation) C:\windows\SysWOW64\inetcpl.cpl
2013-12-12 22:07 - 2013-11-26 08:26 - 11221504 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieframe.dll
2013-12-12 22:07 - 2013-11-26 08:07 - 02334208 _____ (Microsoft Corporation) C:\windows\system32\wininet.dll
2013-12-12 22:07 - 2013-11-26 07:40 - 01395200 _____ (Microsoft Corporation) C:\windows\system32\urlmon.dll
2013-12-12 22:07 - 2013-11-26 07:34 - 00817664 _____ (Microsoft Corporation) C:\windows\system32\ieapfltr.dll
2013-12-12 22:07 - 2013-11-26 07:34 - 00703488 _____ (Microsoft Corporation) C:\windows\SysWOW64\ieapfltr.dll
2013-12-12 22:07 - 2013-11-26 07:33 - 01820160 _____ (Microsoft Corporation) C:\windows\SysWOW64\wininet.dll
2013-12-12 22:07 - 2013-11-26 07:27 - 01157632 _____ (Microsoft Corporation) C:\windows\SysWOW64\urlmon.dll
2013-12-12 20:24 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\windows\SysWOW64\WMPhoto.dll
2013-12-12 20:24 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\windows\system32\WMPhoto.dll
2013-12-12 20:24 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\windows\system32\tzres.dll
2013-12-12 20:24 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\windows\SysWOW64\tzres.dll
2013-12-12 20:24 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\windows\system32\msieftp.dll
2013-12-12 20:24 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\windows\SysWOW64\msieftp.dll
2013-12-12 20:24 - 2013-10-30 02:24 - 03155968 _____ (Microsoft Corporation) C:\windows\system32\win32k.sys
2013-12-12 20:24 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\windows\system32\imagehlp.dll
2013-12-12 20:24 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\windows\SysWOW64\imagehlp.dll
2013-12-12 20:24 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\windows\system32\wshom.ocx
2013-12-12 20:24 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\windows\system32\scrrun.dll
2013-12-12 20:24 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\windows\SysWOW64\wshom.ocx
2013-12-12 20:24 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\windows\SysWOW64\scrrun.dll
2013-12-12 20:24 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\windows\system32\wscript.exe
2013-12-12 20:24 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\windows\system32\cscript.exe
2013-12-12 20:24 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\windows\SysWOW64\wscript.exe
2013-12-12 20:24 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\windows\SysWOW64\cscript.exe
2013-12-12 20:24 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\windows\system32\Drivers\drmk.sys
2013-12-12 20:24 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\windows\system32\Drivers\portcls.sys
2013-12-12 20:13 - 2014-01-05 10:46 - 00003496 _____ C:\windows\System32\Tasks\gg_uac_daemon_Martin
2013-12-09 15:30 - 2013-12-09 15:31 - 00003218 _____ C:\windows\System32\Tasks\{420E98A7-FA9A-4DB4-88BA-BA9237F412F7}
2013-12-09 07:24 - 2013-12-09 07:24 - 00000000 ____D C:\Users\Martin\AppData\Roaming\.mono

==================== One Month Modified Files and Folders =======

2014-01-05 10:56 - 2014-01-05 10:55 - 00018670 _____ C:\Users\Martin\Desktop\FRST.txt
2014-01-05 10:56 - 2011-12-25 14:10 - 00000000 ____D C:\Users\Martin\AppData\Local\PMB Files
2014-01-05 10:56 - 2011-10-24 19:43 - 01064624 _____ C:\windows\WindowsUpdate.log
2014-01-05 10:53 - 2014-01-05 10:53 - 00029696 _____ C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-01-05 10:53 - 2014-01-05 10:53 - 00015327 _____ C:\Users\Martin\Desktop\LM.bat
2014-01-05 10:52 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-01-05 10:52 - 2009-07-14 05:45 - 00024608 ____H C:\windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-01-05 10:51 - 2014-01-05 10:51 - 01931368 _____ (Farbar) C:\Users\Martin\Desktop\FRST64.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Downloads\FRSTLauncher.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-05 10:51 - 2014-01-05 10:50 - 01931368 _____ (Farbar) C:\Users\Martin\Downloads\FRST64.exe
2014-01-05 10:51 - 2013-02-24 18:42 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Seznam.cz
2014-01-05 10:50 - 2011-12-24 18:53 - 00000000 ____D C:\Users\Martin\AppData\Roaming\GarenaPlus
2014-01-05 10:50 - 2011-12-24 18:52 - 00000000 ____D C:\ProgramData\GarenaMessenger
2014-01-05 10:47 - 2013-12-29 21:24 - 00000000 ____D C:\Users\Martin\AppData\Local\LogMeIn Hamachi
2014-01-05 10:47 - 2011-12-24 21:23 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Skype
2014-01-05 10:46 - 2013-12-12 20:13 - 00003496 _____ C:\windows\System32\Tasks\gg_uac_daemon_Martin
2014-01-05 10:46 - 2013-07-15 19:42 - 00000948 _____ C:\windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-01-05 10:44 - 2013-12-31 10:54 - 00001596 _____ C:\windows\DtcInstall.log
2014-01-05 10:44 - 2013-12-30 21:38 - 00000706 _____ C:\windows\setupact.log
2014-01-05 10:44 - 2009-07-14 06:08 - 00000006 ____H C:\windows\Tasks\SA.DAT
2014-01-04 23:58 - 2012-03-30 06:35 - 00000914 _____ C:\windows\Tasks\Adobe Flash Player Updater.job
2014-01-04 23:50 - 2014-01-04 23:07 - 00000000 ____D C:\Users\Martin\Downloads\Insomnia (2002)
2014-01-04 23:50 - 2014-01-04 22:27 - 2003040851 ____R C:\Users\Martin\Desktop\Marvel's Thor：The Dark World.2013.DVDScr.x264.2Audio-SmY.mkv
2014-01-04 23:50 - 2014-01-04 22:27 - 00000000 ____D C:\Users\Martin\Downloads\Thor The Dark World 2013 DVDScr x264 2Audio-SmY
2014-01-04 23:50 - 2012-01-11 16:35 - 00000000 ____D C:\Users\Martin\AppData\Roaming\uTorrent
2014-01-04 23:44 - 2013-07-15 19:42 - 00000952 _____ C:\windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-01-04 23:36 - 2014-01-04 23:07 - 788186196 ____R C:\Users\Martin\Desktop\Insomnia.2002.720p.BluRay.x264.YIFY.mp4
2014-01-04 23:14 - 2009-07-14 04:20 - 00000000 ____D C:\windows\system32\NDF
2014-01-04 22:54 - 2014-01-04 22:54 - 00000017 _____ C:\windows\SysWOW64\shortcut_ex.dat
2014-01-04 22:49 - 2011-10-24 20:16 - 00704824 _____ C:\windows\system32\perfh005.dat
2014-01-04 22:49 - 2011-10-24 20:16 - 00153976 _____ C:\windows\system32\perfc005.dat
2014-01-04 22:49 - 2009-07-14 06:13 - 01678854 _____ C:\windows\system32\PerfStringBackup.INI
2014-01-04 22:18 - 2012-02-05 10:55 - 00000000 ____D C:\Program Files (x86)\Steam
2014-01-04 22:08 - 2013-03-14 17:33 - 00000000 ____D C:\Users\Martin\AppData\Roaming\vlc
2014-01-04 21:45 - 2014-01-04 21:45 - 00011999 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E12(0000229597).zip
2014-01-04 20:58 - 2014-01-04 20:37 - 310986752 _____ C:\Users\Martin\Downloads\Beelzebub---19[Kageinbou].avi
2014-01-04 20:32 - 2011-12-25 13:12 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.xtr
2014-01-04 20:32 - 2011-12-25 13:12 - 00281768 _____ C:\windows\SysWOW64\PnkBstrB.exe
2014-01-04 20:31 - 2011-12-25 13:12 - 00271200 _____ C:\windows\SysWOW64\PnkBstrB.ex0
2014-01-04 18:58 - 2014-01-04 18:58 - 00011788 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E11(0000228743).zip
2014-01-04 18:58 - 2014-01-04 18:39 - 00000000 ____D C:\Users\Martin\Downloads\The Big Bang Theory S07E11 HDTV x264-LOL[ettv]
2014-01-04 18:45 - 2014-01-04 20:30 - 335124480 _____ C:\Users\Martin\Desktop\Beelzebub---18[Kageinbou].avi
2014-01-04 18:45 - 2014-01-04 18:24 - 335124480 _____ C:\Users\Martin\Downloads\Beelzebub---18[Kageinbou].avi
2014-01-04 18:35 - 2014-01-04 18:35 - 00014219 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E10(0000228308).zip
2014-01-04 16:51 - 2011-12-25 23:33 - 00000000 ____D C:\Users\Martin\AppData\Local\CrashDumps
2014-01-04 15:45 - 2014-01-04 15:21 - 334467072 _____ C:\Users\Martin\Downloads\Beelzebub---17[Kageinbou].avi
2014-01-04 15:10 - 2014-01-04 15:08 - 00000000 ____D C:\AdwCleaner
2014-01-04 15:10 - 2013-10-06 10:13 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-01-04 15:05 - 2014-01-04 15:05 - 00019424 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Downloads\adwcleaner.exe
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Desktop\adwcleaner.exe
2014-01-04 14:45 - 2014-01-04 14:45 - 00000000 ____D C:\windows\ERUNT
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-04 14:16 - 2014-01-04 13:58 - 321032192 _____ C:\Users\Martin\Downloads\Beelzebub---16[Kageinbou].avi
2014-01-04 13:35 - 2014-01-04 13:18 - 307988480 _____ C:\Users\Martin\Downloads\Beelzebub---15[Kageinbou] (1).avi
2014-01-04 10:37 - 2014-01-04 10:24 - 217491204 _____ C:\Users\Martin\Downloads\Beelzebub---15[Kageinbou].avi
2014-01-03 20:43 - 2014-01-03 20:42 - 00028904 _____ C:\Users\Martin\Downloads\[Brook s.r.o] Beelzebub - 14 (1).ass
2014-01-03 20:02 - 2013-11-10 18:51 - 00000000 ____D C:\Users\Martin\AppData\Roaming\openvr
2014-01-03 19:16 - 2013-05-28 20:28 - 00000000 ____D C:\Program Files (x86)\trend micro
2014-01-03 18:48 - 2014-01-03 18:47 - 00781383 _____ C:\Users\Martin\Downloads\RSIT.exe
2014-01-03 18:43 - 2014-01-03 18:43 - 00028904 _____ C:\Users\Martin\Downloads\[Brook s.r.o] Beelzebub - 14.ass
2014-01-03 18:08 - 2014-01-03 18:06 - 05657405 _____ C:\Users\Martin\Downloads\[HorribleSubs]-Beelzebub---15-[720p].mkv
2014-01-03 17:37 - 2014-01-03 17:37 - 00012011 _____ C:\Users\Martin\Downloads\BBTS07E07.rar
2014-01-03 17:32 - 2014-01-03 17:32 - 00012228 _____ C:\Users\Martin\Downloads\The-Big-Bang-Theory-S07E07(0000226895).zip
2014-01-03 14:25 - 2014-01-02 19:46 - 00000000 ____D C:\Users\Martin\Downloads\The.Big.Bang.Theory.S07E07.The.Proton.Displacement.1080p.WEB-DL.DD5.1.H.264 [PublicHD]
2014-01-03 14:21 - 2014-01-03 14:10 - 57248527 _____ C:\Users\Martin\Downloads\[HorribleSubs]-Beelzebub---14-[720p].mkv
2014-01-02 23:15 - 2011-12-24 18:53 - 00000000 ____D C:\Program Files (x86)\Garena Plus
2014-01-02 22:42 - 2014-01-02 22:42 - 00001159 _____ C:\Users\Public\Desktop\Ship Simulator 2008.lnk
2014-01-02 22:42 - 2014-01-02 22:42 - 00000000 ____D C:\Program Files (x86)\Vstep
2014-01-02 22:29 - 2014-01-02 21:58 - 678880721 ____R C:\Users\Martin\Desktop\Shipsim2008.exe
2014-01-02 22:26 - 2011-12-24 19:11 - 00000000 ____D C:\Users\Martin\Desktop\Games
2014-01-02 21:52 - 2011-12-25 14:10 - 00000000 ____D C:\ProgramData\PMB Files
2014-01-02 21:02 - 2011-12-24 19:12 - 00000000 ____D C:\Users\Martin\AppData\Roaming\My Battle for Middle-earth(tm) II Files
2014-01-02 19:48 - 2014-01-02 19:48 - 00017321 _____ C:\Users\Martin\Downloads\Shanghai-noon(0000000914).zip
2014-01-02 19:40 - 2014-01-02 19:40 - 00002355 _____ C:\Users\Public\Desktop\The Battle for Middle-earth (tm) II.lnk
2014-01-02 19:40 - 2014-01-02 16:07 - 00027656 _____ C:\windows\DirectX.log
2014-01-02 19:36 - 2012-01-18 19:23 - 00000000 ____D C:\Program Files (x86)\Electronic Arts
2014-01-02 13:57 - 2014-01-02 13:57 - 00000572 _____ C:\windows\PFRO.log
2014-01-01 21:26 - 2014-01-01 19:02 - 1658341376 ____R C:\Users\Martin\Desktop\rld-bme2.iso
2014-01-01 20:17 - 2014-01-01 20:17 - 00002165 _____ C:\Users\Martin\Desktop\Play Left4dead 2 2013.lnk
2014-01-01 19:38 - 2011-05-17 18:20 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2014-01-01 19:29 - 2012-01-06 20:06 - 00000000 ____D C:\Users\Martin\AppData\Roaming\DAEMON Tools Lite
2014-01-01 18:59 - 2014-01-01 18:59 - 00001085 _____ C:\Users\Martin\Desktop\GameRanger.lnk
2014-01-01 18:59 - 2014-01-01 18:59 - 00001071 _____ C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GameRanger.lnk
2014-01-01 18:59 - 2013-04-12 12:16 - 00000000 ____D C:\Users\Martin\AppData\Roaming\GameRanger
2014-01-01 18:59 - 2011-12-24 18:06 - 00000000 ___RD C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-01-01 16:04 - 2014-01-01 00:48 - 885413305 ____R C:\Users\Martin\Desktop\[ www.UsaBit.com ] - playnow-Go.for.it.1983 720p x264-1.mp4
2014-01-01 14:40 - 2013-11-08 18:02 - 00000000 ___RD C:\Users\Martin\Desktop\project kaktus
2014-01-01 13:22 - 2012-10-02 16:01 - 00000000 ____D C:\Users\Martin\AppData\Roaming\codeblocks
2014-01-01 13:07 - 2012-05-15 18:23 - 00000000 ____D C:\Users\Martin\AppData\Roaming\TS3Client
2014-01-01 13:04 - 2012-05-15 18:23 - 00000000 ____D C:\Program Files\TeamSpeak 3 Client
2013-12-31 22:14 - 2013-10-27 20:39 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Winamp
2013-12-30 21:38 - 2013-12-30 21:38 - 00000000 _____ C:\windows\setuperr.log
2013-12-29 21:24 - 2013-12-29 21:24 - 00000000 ____D C:\Program Files (x86)\LogMeIn Hamachi
2013-12-29 20:37 - 2011-12-24 18:02 - 00000000 ____D C:\ProgramData\Adobe
2013-12-29 20:35 - 2013-08-12 08:12 - 00000000 ____D C:\Program Files (x86)\Adobe
2013-12-29 20:33 - 2013-11-08 21:39 - 00000000 ____D C:\Program Files\Common Files\Adobe
2013-12-29 20:05 - 2013-12-26 14:42 - 00000000 ____D C:\Users\Martin\AppData\Roaming\FileZilla
2013-12-29 20:04 - 2011-05-16 21:33 - 00000000 ____D C:\windows\Panther
2013-12-29 20:03 - 2013-12-29 20:03 - 00000586 _____ C:\Users\Martin\Documents\cc_20131229_200303.reg
2013-12-29 20:02 - 2013-12-29 20:02 - 00030870 _____ C:\Users\Martin\Documents\cc_20131229_200247.reg
2013-12-29 16:36 - 2013-12-29 16:36 - 00001123 _____ C:\Users\Public\Desktop\Portal 2.lnk
2013-12-29 16:23 - 2013-12-29 16:23 - 00000000 ____D C:\Program Files (x86)\Games
2013-12-28 12:14 - 2011-12-25 14:34 - 00045270 _____ C:\Users\Martin\AppData\Roaming\room_v3.dat
2013-12-27 19:56 - 2012-04-19 14:33 - 00000000 ____D C:\Users\Martin\Documents\TrackMania
2013-12-27 19:52 - 2012-04-19 14:33 - 00000000 ____D C:\ProgramData\TrackMania
2013-12-27 16:43 - 2013-12-27 16:43 - 00008195 _____ C:\Users\Martin\AppData\Local\recently-used.xbel
2013-12-27 16:43 - 2013-11-19 18:59 - 00000000 ____D C:\Users\Martin\AppData\Local\gtk-2.0
2013-12-27 16:43 - 2013-07-27 11:58 - 00000000 ____D C:\Users\Martin\.gimp-2.8
2013-12-26 15:07 - 2013-12-26 15:07 - 00000219 _____ C:\Users\Martin\Desktop\Left 4 Dead 2.url
2013-12-26 15:07 - 2012-04-19 11:26 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2013-12-26 14:42 - 2013-12-26 14:42 - 00000000 ____D C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2013-12-26 14:42 - 2013-12-26 14:42 - 00000000 ____D C:\Program Files (x86)\FileZilla FTP Client
2013-12-25 09:03 - 2011-06-11 01:15 - 00829264 _____ (Microsoft Corporation) C:\windows\system32\msvcr100.dll
2013-12-25 09:03 - 2011-06-11 01:15 - 00608080 _____ (Microsoft Corporation) C:\windows\system32\msvcp100.dll
2013-12-25 00:53 - 2013-12-25 00:40 - 00000000 ____D C:\Program Files (x86)\osu!
2013-12-25 00:40 - 2013-12-25 00:40 - 00000895 _____ C:\Users\Public\Desktop\osu!.lnk
2013-12-24 10:26 - 2012-04-26 10:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-12-23 22:44 - 2012-01-04 16:38 - 00007626 _____ C:\Users\Martin\AppData\Local\resmon.resmoncfg
2013-12-23 19:17 - 2013-12-23 11:01 - 00000000 ____D C:\Users\Martin\Desktop\Total.War.Rome.2.Crack.Only-RELOADED
2013-12-23 19:17 - 2013-12-22 22:04 - 00000000 ____D C:\Program Files (x86)\Total War ROME II
2013-12-22 22:36 - 2013-12-22 22:36 - 00000836 _____ C:\Users\Public\Desktop\Total War ROME II.lnk
2013-12-22 22:11 - 2013-10-30 21:06 - 00000000 ____D C:\Users\Martin\Desktop\Pink Floyd 1979 The Wall 2011 Remastered 320 Kbps
2013-12-22 21:50 - 2013-06-23 16:43 - 00000000 ____D C:\Program Files\CPUID
2013-12-22 15:04 - 2013-12-22 11:08 - 1580511232 ____R C:\Users\Martin\Desktop\rld-twrome2.iso
2013-12-22 11:14 - 2012-03-08 16:40 - 00000000 ____D C:\Users\Martin\AppData\Local\Mozilla
2013-12-21 22:26 - 2011-12-24 20:41 - 00000000 ____D C:\Users\Martin\AppData\Roaming\BSplayer
2013-12-20 17:42 - 2013-12-20 17:40 - 00000000 ____D C:\Users\Martin\AppData\Roaming\SpaceEngineers
2013-12-20 06:24 - 2011-12-24 21:23 - 00000000 ____D C:\ProgramData\Skype
2013-12-20 06:23 - 2012-11-22 15:20 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-12-15 21:24 - 2009-07-14 04:20 - 00000000 ____D C:\windows\rescache
2013-12-15 12:45 - 2009-07-14 06:08 - 00032522 _____ C:\windows\Tasks\SCHEDLGU.TXT
2013-12-15 01:00 - 2013-07-28 21:42 - 00000000 ____D C:\windows\system32\MRT
2013-12-15 00:58 - 2011-12-25 11:14 - 90708896 _____ (Microsoft Corporation) C:\windows\system32\MRT.exe
2013-12-15 00:27 - 2013-12-15 00:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-12-13 06:42 - 2013-08-21 17:57 - 00000270 __RSH C:\Users\Martin\ntuser.pol
2013-12-13 06:42 - 2011-12-24 17:55 - 00000000 ____D C:\Users\Martin
2013-12-13 06:42 - 2009-07-14 06:09 - 00000000 ____D C:\windows\System32\Tasks\WPD
2013-12-13 06:37 - 2009-07-14 05:45 - 05240968 _____ C:\windows\system32\FNTCACHE.DAT
2013-12-12 22:08 - 2012-01-14 17:13 - 00000000 ____D C:\ProgramData\Microsoft Help
2013-12-11 17:58 - 2012-03-30 06:35 - 00692616 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerApp.exe
2013-12-11 17:58 - 2012-03-30 06:35 - 00003852 _____ C:\windows\System32\Tasks\Adobe Flash Player Updater
2013-12-11 17:58 - 2012-03-08 16:47 - 00071048 _____ (Adobe Systems Incorporated) C:\windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-12-11 16:39 - 2012-11-23 06:27 - 00003948 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineUA
2013-12-11 16:39 - 2012-11-23 06:27 - 00003696 _____ C:\windows\System32\Tasks\GoogleUpdateTaskMachineCore
2013-12-09 19:13 - 2011-12-24 22:20 - 00000000 ____D C:\Users\Martin\AppData\Roaming\SoftGrid Client
2013-12-09 15:31 - 2013-12-09 15:30 - 00003218 _____ C:\windows\System32\Tasks\{420E98A7-FA9A-4DB4-88BA-BA9237F412F7}
2013-12-09 07:24 - 2013-12-09 07:24 - 00000000 ____D C:\Users\Martin\AppData\Roaming\.mono
2013-12-08 22:52 - 2013-12-04 19:21 - 00074928 _____ C:\Users\Martin\Desktop\aj american food.pptx

Files to move or delete:
====================
C:\Users\Martin\DSETUP.dll
C:\Users\Martin\dsetup32.dll
C:\Users\Martin\DXSETUP.exe

Some content of TEMP:
====================
C:\Users\Martin\AppData\Local\Temp\AutoRun.exe
C:\Users\Martin\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Martin\AppData\Local\Temp\eauninstall.exe
C:\Users\Martin\AppData\Local\Temp\Quarantine.exe
C:\Users\Martin\AppData\Local\Temp\The Battle for Middle-earth II_uninst.exe

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

LastRegBack: 2013-12-30 01:02

==================== End Of Log ============================

#7 Příspěvek od **vyosek** » 05 led 2014 22:03

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKCU\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9890608 2013-12-13] ()
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Martin\AppData\Roaming\Seznam.cz\szninstall.exe [1009288 2012-09-13] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92152 2013-01-22] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20588704 2013-11-15] (Skype Technologies S.A.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536 2013-09-04] ()
HKCU\...\Run: [Bloody2] - C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe [11895808 2013-08-30] ()
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
BHO-x32: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
Toolbar: HKLM-x32 - Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CHR HKLM-x32\...\Chrome\Extension: [aaaaipkbmjkakicapiinmamgjlkaeehh] - C:\ProgramData\AskPartnerNetwork\Toolbar\KMPV7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Martin\AppData\Local\Temp\ccex.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
S3 ALSysIO; \??\C:\Users\Martin\AppData\Local\Temp\ALSysIO64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 X6va014; \??\C:\windows\SysWOW64\Drivers\X6va014 [x]
S3 X6va015; \??\C:\windows\SysWOW64\Drivers\X6va015 [x]

2014-01-05 10:53 - 2014-01-05 10:53 - 00029696 _____ C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-01-05 10:53 - 2014-01-05 10:53 - 00015327 _____ C:\Users\Martin\Desktop\LM.bat
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Downloads\FRSTLauncher.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-04 15:05 - 2014-01-04 15:05 - 00019424 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Downloads\adwcleaner.exe
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Desktop\adwcleaner.exe
C:\Users\Martin\DSETUP.dll
C:\Users\Martin\dsetup32.dll
C:\Users\Martin\DXSETUP.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

martas2 · #8 Příspěvek od **martas2** » 06 led 2014 14:48

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 05-01-2014
Ran by Martin at 2014-01-06 14:37:58 Run:1
Running from C:\Users\Martin\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [ISUSScheduler] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\issch.exe [81920 2004-06-16] (InstallShield Software Corporation)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3806544 2013-11-29] (LogMeIn Inc.)
HKCU\...\Run: [ISUSPM Startup] - C:\Program Files (x86)\Common Files\InstallShield\UpdateService\ISUSPM.exe [221184 2004-06-16] (InstallShield Software Corporation)
HKCU\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3672384 2012-04-11] (DT Soft Ltd)
HKCU\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9890608 2013-12-13] ()
HKCU\...\Run: [cz.seznam.software.autoupdate] - C:\Users\Martin\AppData\Roaming\Seznam.cz\szninstall.exe [1009288 2012-09-13] ()
HKCU\...\Run: [cz.seznam.software.szndesktop] - C:\Users\Martin\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92152 2013-01-22] ()
HKCU\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20588704 2013-11-15] (Skype Technologies S.A.)
HKCU\...\Run: [Pando Media Booster] - C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [4287536 2013-09-04] ()
HKCU\...\Run: [Bloody2] - C:\Program Files (x86)\Bloody4\Bloody4\Bloody4.exe [11895808 2013-08-30] ()
Startup: C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dl ... r=iesearch
BHO-x32: Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
Toolbar: HKLM-x32 - Related Searches - {96A25A24-2E87-4374-8A50-CC6F943FCE4D} - C:\Users\Martin\AppData\Roaming\DefaultTab\DefaultTab\Apps\RelatedLinksBHO.dll No File
Toolbar: HKCU - No Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No File
Toolbar: HKCU - No Name - {BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} - No File

FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()

CHR HKLM-x32\...\Chrome\Extension: [aaaaipkbmjkakicapiinmamgjlkaeehh] - C:\ProgramData\AskPartnerNetwork\Toolbar\KMPV7\CRX\ToolbarCR.crx
CHR HKLM-x32\...\Chrome\Extension: [bejbohlohkkgompgecdcbbglkpjfjgdj] - C:\Users\Martin\AppData\Local\Temp\ccex.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
S3 ALSysIO; \??\C:\Users\Martin\AppData\Local\Temp\ALSysIO64.sys [x]
S3 catchme; \??\C:\ComboFix\catchme.sys [x]
S3 EagleX64; \??\C:\windows\system32\drivers\EagleX64.sys [x]
S3 X6va014; \??\C:\windows\SysWOW64\Drivers\X6va014 [x]
S3 X6va015; \??\C:\windows\SysWOW64\Drivers\X6va015 [x]

2014-01-05 10:53 - 2014-01-05 10:53 - 00029696 _____ C:\Users\Martin\AppData\Local\MSGBOX.EXE
2014-01-05 10:53 - 2014-01-05 10:53 - 00015327 _____ C:\Users\Martin\Desktop\LM.bat
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Downloads\FRSTLauncher.exe
2014-01-05 10:51 - 2014-01-05 10:51 - 00112640 _____ (forum.viry.cz) C:\Users\Martin\Desktop\FRSTLauncher.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Downloads\JRT.exe
2014-01-04 14:44 - 2014-01-04 14:44 - 01036305 _____ (Thisisu) C:\Users\Martin\Desktop\JRT.exe
2014-01-04 15:05 - 2014-01-04 15:05 - 00019424 _____ C:\Users\Martin\Desktop\JRT.txt
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Downloads\adwcleaner.exe
2014-01-04 14:55 - 2014-01-04 14:55 - 01233962 _____ C:\Users\Martin\Desktop\adwcleaner.exe
C:\Users\Martin\DSETUP.dll
C:\Users\Martin\dsetup32.dll
C:\Users\Martin\DXSETUP.exe

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ISUSScheduler => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\ISUSPM Startup => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\GarenaPlus => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.autoupdate => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\cz.seznam.software.szndesktop => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Pando Media Booster => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\\Bloody2 => Value deleted successfully.
C:\Users\Martin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk => Moved successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Key deleted successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{96A25A24-2E87-4374-8A50-CC6F943FCE4D} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Value deleted successfully.
HKCR\CLSID\{7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} => Value deleted successfully.
HKCR\CLSID\{BF7380FA-E3B4-4DB2-AF3E-9D8783A45BFC} => Key not found.
HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc => Key deleted successfully.
C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll => Moved successfully.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\aaaaipkbmjkakicapiinmamgjlkaeehh => Key deleted successfully.
"C:\ProgramData\AskPartnerNetwork\Toolbar\KMPV7\CRX\ToolbarCR.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\bejbohlohkkgompgecdcbbglkpjfjgdj => Key deleted successfully.
"C:\Users\Martin\AppData\Local\Temp\ccex.crx" => File/Directory not found.
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl => Key deleted successfully.
C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx => Moved successfully.
PanService => Service deleted successfully.
ALSysIO => Service deleted successfully.
catchme => Service deleted successfully.
EagleX64 => Service deleted successfully.
X6va014 => Service deleted successfully.
X6va015 => Service deleted successfully.
"C:\Users\Martin\AppData\Local\MSGBOX.EXE" => File/Directory not found.
C:\Users\Martin\Desktop\LM.bat => Moved successfully.
C:\Users\Martin\Downloads\FRSTLauncher.exe => Moved successfully.
"C:\Users\Martin\Desktop\FRSTLauncher.exe" => File/Directory not found.
C:\Users\Martin\Downloads\JRT.exe => Moved successfully.
C:\Users\Martin\Desktop\JRT.exe => Moved successfully.
C:\Users\Martin\Desktop\JRT.txt => Moved successfully.
C:\Users\Martin\Downloads\adwcleaner.exe => Moved successfully.
C:\Users\Martin\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\Martin\DSETUP.dll => Moved successfully.
C:\Users\Martin\dsetup32.dll => Moved successfully.
C:\Users\Martin\DXSETUP.exe => Moved successfully.
C:\windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========

========= End of CMD: =========

The system needs a manual reboot.

==== End of Fixlog ====

#9 Příspěvek od **vyosek** » 06 led 2014 19:01

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

martas2 · #10 Příspěvek od **martas2** » 06 led 2014 19:40

Vše dokonáno, díky za tvůj čas

#11 Příspěvek od **vyosek** » 06 led 2014 23:24

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Preventivka

Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka

Re: Preventivka