Nežádoucí reklamy
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Nežádoucí reklamy
dobrý den,Mám problém při kliknutí na jakíkoliv odkaz na webu se mi otevře požadovaná stránka ,ale zároveň nechtěná reklama v novém okně zde je můj log:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by User (administrator) on USER-PC on 11-03-2014 18:45:03
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Cerberus, LLC) C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
() C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe
() C:\Program Files (x86)\Pirrit\AutoUpdater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe
() C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritDesktop.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SDP] - C:\Users\User\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
AppInit_DLLs-x32: c:\progra~2\sshelp~1\psupport.dll => C:\Program Files (x86)\ss helper\psupport.dll [857600 2013-10-06] ()
AppInit_DLLs-x32: c:\progra~2\skhelp~1\psupport.dll => C:\Program Files (x86)\SK Helper\psupport.dll [857600 2013-10-06] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=http://127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08} URL = http://search.seznam.cz/?q={searchTerms ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (Search Results LLC.)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: IEExtension.Extension - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [xz123@ya456.com] - C:\Program Files (x86)\BetterSurf\ff
FF HKLM-x32\...\Firefox\Extensions: [12x3q@3244516.com] - C:\Program Files (x86)\Better-Surf\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF Extension: Webexp Enhanced - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF Extension: No Name - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF Extension: Media Player - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff [2014-01-29]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
R2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
R2 DefaultTabUpdate; C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2014-02-23] ()
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
U2 PirritDesktop; C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe [52568 2014-02-20] ()
R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-20] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 Update LemurLeap; C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe [112416 2014-03-11] ()
R2 Util LemurLeap; C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe [112416 2014-03-11] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:52 - 2014-03-11 18:45 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 18:28 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 14:21 - 2014-03-07 14:25 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 18:45 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 18:40 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 18:37 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 18:37 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 18:28 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 18:02 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 17:58 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 17:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 17:56 - 2013-10-12 22:15 - 00000352 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-11 17:56 - 2013-09-20 15:19 - 01061361 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 13:30 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 13:30 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 13:28 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 13:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 13:24 - 2009-07-14 05:51 - 00059627 _____ () C:\Windows\setupact.log
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 20:20 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:51 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-10 07:38 - 2010-11-21 04:47 - 00025980 _____ () C:\Windows\PFRO.log
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:53 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:28 - 2013-12-07 13:22 - 00000000 ____D () C:\ProgramData\surrf AAnd keeePP
2014-03-08 14:28 - 2013-11-23 10:03 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-03-08 14:28 - 2013-11-23 10:02 - 00000000 ____D () C:\ProgramData\surf anndd akeep
2014-03-08 14:24 - 2013-11-23 10:03 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 14:16 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\surrf AAnd keeePP
2014-03-08 14:16 - 2013-11-23 10:02 - 00000000 ____D () C:\Program Files (x86)\surf anndd akeep
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 11:23 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2014-01-10 19:39 - 00000000 ____D () C:\Program Files (x86)\VideoPlayerV3
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Users\User\AppData\Local\SwvUpdater
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Program Files (x86)\LemurLeap
2014-03-07 15:15 - 2013-10-12 10:30 - 00000000 ____D () C:\Program Files (x86)\ss helper
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:25 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:24 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-10 18:04 - 2014-01-03 07:59 - 00430080 _____ (Farbar) C:\Windows\mod_frst.exe
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstall.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.52 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5988.62 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 26%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\User\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2937 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by User (administrator) on USER-PC on 11-03-2014 18:45:03
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Cerberus, LLC) C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
() C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe
() C:\Program Files (x86)\Pirrit\AutoUpdater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Remote\Server\SRService.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Splashtop Inc.) C:\Program Files (x86)\Splashtop\Splashtop Software Updater\SSUService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe
() C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
() C:\Users\User\AppData\Local\PirritSuggestor\PirritDesktop.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Microsoft Corporation) C:\Program Files (x86)\Internet Explorer\IELowutil.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcfgex.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SDP] - C:\Users\User\AppData\Local\FilesFrog Update Checker\update_checker.exe [201808 2013-01-31] (Somoto)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
AppInit_DLLs-x32: c:\progra~2\sshelp~1\psupport.dll => C:\Program Files (x86)\ss helper\psupport.dll [857600 2013-10-06] ()
AppInit_DLLs-x32: c:\progra~2\skhelp~1\psupport.dll => C:\Program Files (x86)\SK Helper\psupport.dll [857600 2013-10-06] ()
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: http=http://127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_m ... 1381611427
URLSearchHook: HKCU - UsProvider Class - {539F76FD-084E-4858-86D5-62F02F54AE86} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKLM-x32 - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source= ... earchTerms}
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08} URL = http://search.seznam.cz/?q={searchTerms ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho.dll No File
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: DefaultTab Browser Helper - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.dll (Search Results LLC.)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MinibarBHO - {AA74D58F-ACD0-450D-A85E-6C04B171C044} - C:\Program Files (x86)\Minibar\Minibar.dll (KangoExtensions)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: IEExtension.Extension - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - C:\Windows\SysWOW64\mscoree.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [xz123@ya456.com] - C:\Program Files (x86)\BetterSurf\ff
FF HKLM-x32\...\Firefox\Extensions: [12x3q@3244516.com] - C:\Program Files (x86)\Better-Surf\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@bettersurfplus.com] - C:\Program Files (x86)\BetterSurf\BetterSurfPlus\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF Extension: Webexp Enhanced - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff [2013-12-20]
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF Extension: No Name - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff [2014-01-10]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF Extension: Media Player - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff [2014-01-29]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
R2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
R2 DefaultTabUpdate; C:\Users\User\AppData\Roaming\DefaultTab\DefaultTab\DTUpdate.exe [107520 2014-02-23] ()
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
U2 PirritDesktop; C:\Users\User\AppData\Local\PirritSuggestor\PirritService.exe [52568 2014-02-20] ()
R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-20] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 Update LemurLeap; C:\Program Files (x86)\LemurLeap\updateLemurLeap.exe [112416 2014-03-11] ()
R2 Util LemurLeap; C:\Program Files (x86)\LemurLeap\bin\utilLemurLeap.exe [112416 2014-03-11] ()
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:52 - 2014-03-11 18:45 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 18:28 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 14:21 - 2014-03-07 14:25 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 18:45 - 2014-03-11 18:45 - 00025622 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 18:45 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 18:40 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 18:37 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 18:37 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 18:28 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 18:02 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 17:58 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 17:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 17:56 - 2013-10-12 22:15 - 00000352 _____ () C:\Windows\Tasks\AmiUpdXp.job
2014-03-11 17:56 - 2013-09-20 15:19 - 01061361 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:37 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 13:30 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 13:30 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 13:28 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 13:24 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 13:24 - 2009-07-14 05:51 - 00059627 _____ () C:\Windows\setupact.log
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 20:20 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-10 18:53 - 2014-03-10 18:53 - 00073945 _____ () C:\Users\User\Desktop\FRST2.txt
2014-03-10 18:51 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-10 07:38 - 2010-11-21 04:47 - 00025980 _____ () C:\Windows\PFRO.log
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:53 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:28 - 2013-12-07 13:22 - 00000000 ____D () C:\ProgramData\surrf AAnd keeePP
2014-03-08 14:28 - 2013-11-23 10:03 - 00000000 ____D () C:\ProgramData\YoutubeAdblocker
2014-03-08 14:28 - 2013-11-23 10:02 - 00000000 ____D () C:\ProgramData\surf anndd akeep
2014-03-08 14:24 - 2013-11-23 10:03 - 00000000 ____D () C:\Program Files (x86)\YoutubeAdblocker
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 14:16 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\surrf AAnd keeePP
2014-03-08 14:16 - 2013-11-23 10:02 - 00000000 ____D () C:\Program Files (x86)\surf anndd akeep
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 11:23 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\newnext.me
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2014-01-10 19:39 - 00000000 ____D () C:\Program Files (x86)\VideoPlayerV3
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Users\User\AppData\Local\SwvUpdater
2014-03-07 15:15 - 2013-10-12 22:15 - 00000000 ____D () C:\Program Files (x86)\LemurLeap
2014-03-07 15:15 - 2013-10-12 10:30 - 00000000 ____D () C:\Program Files (x86)\ss helper
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:25 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\Mobogenie
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\Documents\Mobogenie
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-07 14:17 - 2014-03-07 14:17 - 00000000 ____D () C:\Users\User\AppData\Roaming\OpenCandy
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:24 - 2014-02-23 16:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\systweak
2014-02-23 16:23 - 2014-02-23 16:23 - 00000000 ____D () C:\Users\User\AppData\Local\WebPlayer
2014-02-23 16:20 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\PirritSuggestor
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Pirrit
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\Pirrit
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\DefaultTab
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-10 18:04 - 2014-01-03 07:59 - 00430080 _____ (Farbar) C:\Windows\mod_frst.exe
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstall.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.52 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5988.62 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 26%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\AmiUpdXp.job => C:\Users\User\AppData\Local\SwvUpdater\Updater.exe <==== ATTENTION
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2937 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Naposledy upravil(a) cernohous13 dne 11 Bře 2014 18:39, celkem upraveno 1 x.
Důvod: Nedávej logy do [code]
Důvod: Nedávej logy do [code]
Re: Nežádoucí reklamy
Zdravim a pekny den preji
Kdyz si krmite PC crackama a podobnyma dobrotama, tak neni divu ze tam mate tolik bordelu
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
- Probehne vytvoreni zalohy a nasledne prohledavani
- Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: Nežádoucí reklamy
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by User on Łt 11.03.2014 at 18:57:03,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\somoto
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\qvo6software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\filesfrog update checker
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
~~~ Files
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\splashtop"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\appshat mobile apps"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\splashtop"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\User\appdata\locallow\minibar"
Failed to delete: [Folder] "C:\Program Files (x86)\lemurleap"
Successfully deleted: [Folder] "C:\Program Files (x86)\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\splashtop"
Successfully deleted: [Folder] "C:\Program Files (x86)\videoplayerv3"
Successfully deleted: [Folder] "C:\Program Files (x86)\webexpenhancedv1"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 11.03.2014 at 19:13:19,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Home Premium x64
Ran by User on Łt 11.03.2014 at 18:57:03,02
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\\Start Page
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL
Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowser.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\defaulttabbho.defaulttabbrowseractivex.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{38495740-0035-4471-851E-F5BBB86AB085}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\AppID\defaulttabbho.dll
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{E2343056-CC08-46AC-B898-BFC7ACF4E755}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\bi
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\default tab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\somoto
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\systweak
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\defaulttab
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\sprotector
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\default tab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\qvo6software
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\updater.amiupd.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\defaulttab
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\filesfrog update checker
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{99c91fc5-db5b-4aa0-bb70-5d89c5a4df96}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sp global
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Wow6432Node\sprotector
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220422722220}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0047220.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550455725520}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660466726620}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440444724420}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{4D2C9113-AEE8-4BF3-B9FE-4D07C6FC8B08}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
~~~ Files
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Internet Explorer.lnk
Successfully disinfected: [Shortcut] C:\Users\User\AppData\Roaming\microsoft\windows\start menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\splashtop"
Successfully deleted: [Folder] "C:\ProgramData\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\defaulttab"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\systweak"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\appshat mobile apps"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\filesfrog update checker"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\minibar"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\splashtop"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\swvupdater"
Successfully deleted: [Folder] "C:\Users\User\appdata\local\webplayer"
Successfully deleted: [Folder] "C:\Users\User\appdata\locallow\minibar"
Failed to delete: [Folder] "C:\Program Files (x86)\lemurleap"
Successfully deleted: [Folder] "C:\Program Files (x86)\minibar"
Successfully deleted: [Folder] "C:\Program Files (x86)\splashtop"
Successfully deleted: [Folder] "C:\Program Files (x86)\videoplayerv3"
Successfully deleted: [Folder] "C:\Program Files (x86)\webexpenhancedv1"
Successfully deleted: [Folder] "C:\Program Files (x86)\youtubeadblocker"
Successfully deleted: [Folder] "C:\Users\User\AppData\Roaming\microsoft\windows\start menu\programs\filesfrog update checker"
Successfully deleted: [Folder] "C:\Windows\syswow64\ai_recyclebin"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on Łt 11.03.2014 at 19:13:19,84
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Re: Nežádoucí reklamy
Poprosim o AdwCleaner, dal jste bohuzel dva logy z JRT
Re: Nežádoucí reklamy
ok počkejte chvilku.
Re: Nežádoucí reklamy
Jasny, v pohode 
Re: Nežádoucí reklamy
Zde je log:
# AdwCleaner v3.021 - Report created 11/03/2014 at 19:38:59
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : User - USER-PC
# Running from : C:\Users\User\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : PirritDesktop
[#] Service Deleted : PirritUpdater
[#] Service Deleted : splashtopremoteservice
[#] Service Deleted : SSUService
[#] Service Deleted : Update LemurLeap
[#] Service Deleted : Util LemurLeap
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\ProgramData\DownloAd KKeeper
Folder Deleted : C:\ProgramData\surf anndd akeep
Folder Deleted : C:\ProgramData\surrf AAnd keeePP
Folder Deleted : C:\ProgramData\Weekappo
Folder Deleted : C:\Program Files (x86)\LemurLeap
Folder Deleted : C:\Program Files (x86)\MediaPlayerV1
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\ss helper
Folder Deleted : C:\Program Files (x86)\surf anndd akeep
Folder Deleted : C:\Program Files (x86)\surrf AAnd keeePP
Folder Deleted : C:\Users\User\AppData\Local\Mobogenie
Folder Deleted : C:\Users\User\AppData\Local\PirritSuggestor
Folder Deleted : C:\Users\User\AppData\Local\Temp\eIntaller
Folder Deleted : C:\Users\User\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\User\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\User\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\User\Documents\Mobogenie
File Deleted : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions\suggestor@suggestor.pirrit.com.xpi
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\User\AppData\Local\Temp\Uninstall.exe
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@bettersurfplus.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_ba96f9e6
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_eea72b4f
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\caphyon
Key Deleted : HKCU\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKLM\Software\OptimizerPro
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sshelp~1\psupport.dll
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\skhelp~1\psupport.dll
Key Deleted : HKLM\Software\Classes\Installer\Features\49AE5C7BA69B5F14EB59527DB8846687
Key Deleted : HKLM\Software\Classes\Installer\Products\49AE5C7BA69B5F14EB59527DB8846687
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16518
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v
*************************
AdwCleaner[R0].txt - [8544 octets] - [11/03/2014 19:38:31]
AdwCleaner[S0].txt - [8201 octets] - [11/03/2014 19:38:59]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8261 octets] ##########
Ale mám problém nefunguje mi prohlížení stránek jinak jsem připojen do sítě ,ale nejde to pomozte.
# AdwCleaner v3.021 - Report created 11/03/2014 at 19:38:59
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : User - USER-PC
# Running from : C:\Users\User\Desktop\adwcleaner.exe
# Option : Clean
***** [ Services ] *****
[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : PirritDesktop
[#] Service Deleted : PirritUpdater
[#] Service Deleted : splashtopremoteservice
[#] Service Deleted : SSUService
[#] Service Deleted : Update LemurLeap
[#] Service Deleted : Util LemurLeap
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\QuickSet
Folder Deleted : C:\ProgramData\DownloAd KKeeper
Folder Deleted : C:\ProgramData\surf anndd akeep
Folder Deleted : C:\ProgramData\surrf AAnd keeePP
Folder Deleted : C:\ProgramData\Weekappo
Folder Deleted : C:\Program Files (x86)\LemurLeap
Folder Deleted : C:\Program Files (x86)\MediaPlayerV1
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\ss helper
Folder Deleted : C:\Program Files (x86)\surf anndd akeep
Folder Deleted : C:\Program Files (x86)\surrf AAnd keeePP
Folder Deleted : C:\Users\User\AppData\Local\Mobogenie
Folder Deleted : C:\Users\User\AppData\Local\PirritSuggestor
Folder Deleted : C:\Users\User\AppData\Local\Temp\eIntaller
Folder Deleted : C:\Users\User\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\User\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\User\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\User\Documents\Mobogenie
File Deleted : C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\extensions\Extensions\suggestor@suggestor.pirrit.com.xpi
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\User\AppData\Local\Temp\Uninstall.exe
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat\Uninstall.lnk
***** [ Registry ] *****
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [12x3q@3244516.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [ext@bettersurfplus.com]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [xz123@ya456.com]
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\poheodfamflhhhdcmjfeggbgigeefaco
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Mobogenie.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_ba96f9e6
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_eea72b4f
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{0A18A436-2A7A-49F3-A488-30538A2F6323}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{007EFBDF-8A5D-4930-97CC-A4B437CBA777}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{539F76FD-084E-4858-86D5-62F02F54AE86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{60EACC1A-33FA-443D-9846-17B28E2C9BDB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{DCABB943-792E-44C4-9029-ECBEE6265AF9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F13D3582-1359-4F8F-9A48-EF3AE9F5701C}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AA74D58F-ACD0-450D-A85E-6C04B171C044}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{AAA38851-3CFF-475F-B5E0-720D3645E4A5}
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks [{539F76FD-084E-4858-86D5-62F02F54AE86}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{31E3BC75-2A09-4CFF-9C92-8D0ED8D1DC0F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C66F0B7A-BD67-4982-AF71-C6CA6E7F016F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{EAF749DC-CD87-4B04-B22A-D4AC3FBCB2BC}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\caphyon
Key Deleted : HKCU\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Webplayer
Key Deleted : HKCU\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
Key Deleted : HKLM\Software\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Key Deleted : HKLM\Software\{6791A2F3-FC80-475C-A002-C014AF797E9C}
Key Deleted : HKLM\Software\BetterSurf
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Minibar
Key Deleted : HKLM\Software\OptimizerPro
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Splashtop Inc.
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\AppsHat Mobile Apps
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B7C5EA94-B96A-41F5-BE95-25D78B486678}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IM
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Splashtop Software Updater
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\sshelp~1\psupport.dll
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - c:\progra~2\skhelp~1\psupport.dll
Key Deleted : HKLM\Software\Classes\Installer\Features\49AE5C7BA69B5F14EB59527DB8846687
Key Deleted : HKLM\Software\Classes\Installer\Products\49AE5C7BA69B5F14EB59527DB8846687
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.16518
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v
*************************
AdwCleaner[R0].txt - [8544 octets] - [11/03/2014 19:38:31]
AdwCleaner[S0].txt - [8201 octets] - [11/03/2014 19:38:59]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [8261 octets] ##########
Ale mám problém nefunguje mi prohlížení stránek jinak jsem připojen do sítě ,ale nejde to pomozte.
Re: Nežádoucí reklamy
V jakem prohlizeci pise tu chybu proxy??
Re: Nežádoucí reklamy
v prohlizeci explorer a maxthon a také safari
Re: Nežádoucí reklamy
Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100 a mrknem na to
Vetsinou ale nekde v nastaveni prohlizece (Safari a i urcite Maxthon) bude neco jako nastaveni pripojeni\site a tam bude at se pouziva proxy - to zruste..V IE to odstrelim pres skript nasledne pro FRST
Vetsinou ale nekde v nastaveni prohlizece (Safari a i urcite Maxthon) bude neco jako nastaveni pripojeni\site a tam bude at se pouziva proxy - to zruste..V IE to odstrelim pres skript nasledne pro FRST
Re: Nežádoucí reklamy
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-03-2014 02
Ran by User (administrator) on USER-PC on 11-03-2014 20:48:43
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\RazerCore.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rstrui.exe
(Microsoft Corporation) C:\Windows\system32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:39 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:52 - 2014-03-11 20:48 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 19:38 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 20:48 - 2014-03-11 18:45 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 20:48 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 20:47 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 20:13 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 19:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 19:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:49 - 2013-09-20 15:19 - 01075129 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 19:47 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 19:46 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 19:46 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 19:44 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 19:44 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 19:42 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 19:40 - 2010-11-21 04:47 - 00026508 _____ () C:\Windows\PFRO.log
2014-03-11 19:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 19:40 - 2009-07-14 05:51 - 00059683 _____ () C:\Windows\setupact.log
2014-03-11 19:39 - 2014-03-11 20:01 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:39 - 2014-03-11 19:38 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:39 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:38 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 19:38 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-11 19:38 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:29 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 19:13 - 2013-09-20 15:17 - 00001397 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.18 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5210.35 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 36%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2940 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by User (administrator) on USER-PC on 11-03-2014 20:48:43
Running from C:\Users\User\Desktop
Windows 7 Home Premium Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgcsrva.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe
(Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
() C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\RazerCore.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
(Razer Inc.) C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgui.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2014\avgemca.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CEPServiceManager4\CEPServiceManager.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(AVG) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Microsoft Corporation) c:\Program Files\Microsoft Security Client\NisSrv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Maxthon International ltd.) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Microsoft Corporation) C:\Windows\system32\rstrui.exe
(Microsoft Corporation) C:\Windows\system32\wbengine.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7191768 2013-09-20] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM\...\Run: [MSC] - c:\Program Files\Microsoft Security Client\msseces.exe [1266912 2013-10-23] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [BlueStacks Agent] - C:\Program Files (x86)\BlueStacks\HD-Agent.exe [601928 2013-07-17] (BlueStack Systems, Inc.)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [amd_dc_opt] - C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKLM-x32\...\Run: [AVG_UI] - C:\Program Files (x86)\AVG\AVG2014\avgui.exe [4962320 2014-01-22] (AVG Technologies CZ, s.r.o.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [SkyDrive] - C:\Users\User\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe [257224 2014-02-20] (Microsoft Corporation)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9899312 2014-02-26] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Razer Comms] - C:\Program Files (x86)\Razer\Core\RazerCore.exe [1095872 2014-02-21] (Razer, Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [LaunchList] - C:\Program Files (x86)\Pinnacle\Studio 11\LaunchList2.exe [145496 2007-03-21] (Pinnacle Systems)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
==================== Internet (Whitelisted) ====================
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/?clid=12
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
SearchScopes: HKCU - {2EED5DA2-6707-4DBF-9F44-BBD6343AF172} URL = http://tv.seznam.cz/hledej?w={searchTer ... kSearch_12
SearchScopes: HKCU - {385EE8C5-F39C-4058-969F-AA5B366D7571} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {43519FB8-AFB0-4AD2-BDE4-CD499E938D21} URL = http://slovnik.seznam.cz/?q={searchTerm ... kSearch_12
SearchScopes: HKCU - {9B7A4287-B515-4154-8580-8D16F553A642} URL = http://www.firmy.cz/?q={searchTerms}&so ... kSearch_12
SearchScopes: HKCU - {9E9628B9-3F5D-4014-B0C5-3B062DEE1FBC} URL = http://www.mapy.cz/?query={searchTerms} ... kSearch_12
SearchScopes: HKCU - {B6B8BE8E-C601-4BD2-96BD-F08AF2A103B6} URL = http://www.novinky.cz/hledej?w={searchT ... kSearch_12
SearchScopes: HKCU - {B9BDBC2D-B72E-4FBB-9FEF-C76A01634756} URL = http://www.zbozi.cz/?q={searchTerms}&r= ... kSearch_12
SearchScopes: HKCU - {C6B65BBC-A9DE-44EC-A0EA-720A51577DCC} URL = http://encyklopedie.seznam.cz/search?q= ... kSearch_12
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: MSS+ Identifier - {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - C:\Program Files\McAfee Security Scan\3.8.141\McAfeeMSS_IE.dll (McAfee, Inc.)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_70.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_70.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @mcafee.com/McAfeeMssPlugin - C:\Program Files\McAfee Security Scan\3.8.141\npMcAfeeMss.dll (McAfee, Inc.)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3508.0205 - C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @videolan.org/vlc,version=2.0.6 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
==================== Services (Whitelisted) =================
R2 avgfws; C:\Program Files (x86)\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2014\avgidsagent.exe [3788816 2014-01-22] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [393032 2013-07-17] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [384840 2013-07-17] (BlueStack Systems, Inc.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1363616 2014-01-03] (Microsoft Corporation)
S3 c2wts; C:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [15768 2010-02-03] (Microsoft Corporation)
S2 Cerberus FTP Server; C:\Program Files (x86)\Cerberus LLC\Cerberus FTP Server\CerberusGUI.exe [9662216 2014-01-13] (Cerberus, LLC)
S3 fussvc; C:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.141\McCHSvc.exe [289256 2014-01-16] (McAfee, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2013-10-23] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [348376 2013-10-23] (Microsoft Corporation)
S2 PCLEPCI; C:\Windows\SysWOW64\drivers\pclepci.sys [14165 2005-02-09] (Pinnacle Systems GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2013-11-26] ()
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2013-12-14] ()
S2 RzMaelstromVADStreamingService; C:\ProgramData\Razer\Synapse\Devices\Razer Surround\Driver\RzMaelstromVADStreamingService.exe [4263936 2013-11-21] (A-Volute)
R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-02-21] (Razer, Inc.)
S3 Te.Service; C:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [2102072 2013-12-18] (AVG)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [42808 2013-12-18] (AVG)
S3 VsEtwService120; C:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-04] (Microsoft Corporation)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
==================== Drivers (Whitelisted) ====================
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [150808 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [57144 2013-09-26] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [243480 2013-11-25] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [196376 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [212280 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [294712 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123704 2013-10-01] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31544 2013-09-10] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [251192 2013-08-01] (AVG Technologies CZ, s.r.o.)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [70984 2013-07-17] (BlueStack Systems)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-25] (Disc Soft Ltd)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [248240 2013-09-27] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [134944 2013-09-27] (Microsoft Corporation)
R3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-02-21] (Razer, Inc.)
R0 RzFilter; C:\Windows\System32\drivers\RzFilter.sys [74432 2014-02-21] (Razer, Inc.)
R3 RZMAELSTROMVADService; C:\Windows\System32\drivers\RzMaelstromVAD.sys [40696 2013-11-21] (Windows (R) Win 7 DDK provider)
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [14112 2013-12-16] (TuneUp Software)
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
==================== NetSvcs (Whitelisted) ===================
==================== One Month Created Files and Folders ========
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:39 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:52 - 2014-03-11 20:48 - 00000000 ____D () C:\FRST
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-09 14:02 - 2014-03-09 17:51 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-08 20:43 - 2014-03-10 20:20 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:42 - 2014-03-08 20:43 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 19:39 - 2014-03-08 19:40 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 18:29 - 2014-03-08 19:40 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:05 - 2014-03-08 18:08 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 17:33 - 2014-03-08 17:40 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 15:08 - 2014-03-09 21:46 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-08 13:45 - 2013-12-18 09:38 - 00042808 _____ (AVG) C:\Windows\system32\uxtuneup.dll
2014-03-08 13:45 - 2013-12-18 09:38 - 00035640 _____ (AVG) C:\Windows\SysWOW64\uxtuneup.dll
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:56 - 2013-12-18 09:38 - 00040248 _____ (AVG) C:\Windows\system32\TURegOpt.exe
2014-03-08 10:56 - 2013-12-18 09:38 - 00029496 _____ (AVG) C:\Windows\system32\authuitu.dll
2014-03-08 10:56 - 2013-12-18 09:38 - 00025400 _____ (AVG) C:\Windows\SysWOW64\authuitu.dll
2014-03-08 10:53 - 2014-03-08 10:58 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:52 - 2014-03-08 11:26 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2014-03-08 10:49 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:43 - 2014-03-08 10:55 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:39 - 2014-03-08 15:08 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 01:52 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-08 01:52 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-08 01:52 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-08 01:52 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-08 01:52 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-08 01:52 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-08 01:52 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-08 01:52 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-08 01:52 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-08 01:52 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-08 01:52 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-08 01:52 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-08 01:52 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-08 01:52 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-08 01:52 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-08 01:52 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-08 01:52 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-08 01:52 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-08 01:52 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-08 01:52 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-08 01:52 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-08 01:52 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-08 01:52 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-08 01:52 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-08 01:52 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-08 01:52 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-08 01:52 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-08 01:52 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-08 01:52 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 17:44 - 2014-03-11 19:38 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:54 - 2014-03-07 16:57 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 14:21 - 2014-03-07 14:23 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-04 20:46 - 2014-03-05 21:41 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-02 14:29 - 2014-03-04 21:36 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 22:18 - 2014-03-08 20:25 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-02-28 23:58 - 2014-03-07 15:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:37 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-23 16:19 - 2014-03-07 15:15 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-03-11 17:56 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 17:49 - 2014-02-22 18:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-20 20:51 - 2014-02-20 20:52 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 17:08 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-20 17:08 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-20 17:08 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-20 17:08 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 14:57 - 2014-02-20 20:19 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 17:20 - 2014-02-19 17:24 - 00001070 _____ () C:\Windows\DXError.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-16 20:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-16 20:26 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-16 20:26 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-16 20:26 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-16 20:26 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-16 20:26 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-16 20:26 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-16 20:26 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-16 11:23 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-16 11:23 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-16 01:59 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-16 00:20 - 1997-11-19 14:49 - 00303616 _____ (InstallShield Software Corporation) C:\Windows\IsUninst.exe
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:03 - 2014-02-15 16:08 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:10 - 2014-03-01 17:18 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-02-15 13:09 - 2014-03-08 11:28 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-02-15 13:08 - 2014-02-15 13:09 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:08 - 2014-02-15 13:09 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:04 - 2014-02-15 00:39 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:53 - 2014-02-15 13:17 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
==================== One Month Modified Files and Folders =======
2014-03-11 20:48 - 2014-03-11 18:45 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-11 20:48 - 2014-03-10 18:52 - 00000000 ____D () C:\FRST
2014-03-11 20:47 - 2013-09-24 17:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-03-11 20:13 - 2013-10-12 22:09 - 00000000 ____D () C:\ProgramData\MFAData
2014-03-11 19:57 - 2013-10-05 20:27 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-11 19:57 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:52 - 2009-07-14 05:45 - 00021888 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-11 19:49 - 2013-09-20 15:19 - 01075129 _____ () C:\Windows\WindowsUpdate.log
2014-03-11 19:47 - 2013-09-24 17:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\BitTorrent
2014-03-11 19:46 - 2013-12-15 19:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\GarenaPlus
2014-03-11 19:46 - 2013-12-15 19:36 - 00000000 ____D () C:\ProgramData\GarenaMessenger
2014-03-11 19:44 - 2014-01-28 19:24 - 00000000 ____D () C:\Users\User\AppData\Local\LogMeIn Hamachi
2014-03-11 19:44 - 2013-12-19 19:10 - 00034816 _____ () C:\Users\User\AppData\Roaming\RZR_002041fc499a854bb154b21e9c8b.db
2014-03-11 19:42 - 2013-09-24 08:01 - 00000000 ___RD () C:\Users\User\SkyDrive
2014-03-11 19:40 - 2010-11-21 04:47 - 00026508 _____ () C:\Windows\PFRO.log
2014-03-11 19:40 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-11 19:40 - 2009-07-14 05:51 - 00059683 _____ () C:\Windows\setupact.log
2014-03-11 19:39 - 2014-03-11 20:01 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:39 - 2014-03-11 19:38 - 00000000 ____D () C:\AdwCleaner
2014-03-11 19:39 - 2013-10-05 17:20 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AppsHat
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:38 - 2014-03-07 17:44 - 00000000 ____D () C:\Users\User\AppData\Local\PMB Files
2014-03-11 19:38 - 2014-01-29 20:59 - 00000000 ____D () C:\Users\User\Desktop\plugins
2014-03-11 19:38 - 2013-09-24 17:55 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:29 - 2013-12-20 20:12 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 19:13 - 2013-09-20 15:17 - 00001397 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:54 - 2014-03-11 18:54 - 00000000 ____D () C:\Windows\ERUNT
2014-03-11 17:56 - 2014-02-23 16:15 - 00000270 __RSH () C:\Users\User\ntuser.pol
2014-03-11 13:31 - 2013-10-05 23:20 - 00003962 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{A0A3F7D7-E0AC-45E0-BF4B-327E17DF0507}
2014-03-11 07:48 - 2013-09-26 16:28 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-03-10 20:20 - 2014-03-08 20:43 - 00000000 ____D () C:\Users\User\Documents\OpenTTD
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-03-10 18:47 - 2014-03-10 18:47 - 02157056 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-03-10 07:53 - 2013-10-12 13:37 - 00003572 _____ () C:\Windows\System32\Tasks\Maxthon Update
2014-03-10 07:44 - 2009-07-14 05:45 - 05066112 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-09 21:46 - 2014-03-08 15:08 - 00000000 _____ () C:\Users\User\Documents\Datový Sejf.avgfv
2014-03-09 18:33 - 2014-03-09 18:33 - 05258132 _____ () C:\Users\User\Desktop\Slindington Transport, 9. říj 1952.sav
2014-03-09 17:51 - 2014-03-09 14:02 - 05950440 _____ () C:\Users\User\Desktop\Tenfingbridge Transport, 10. čer 1951.sav
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Tunngle
2014-03-09 17:33 - 2013-11-26 18:58 - 00000000 ____D () C:\ProgramData\Tunngle
2014-03-09 15:18 - 2013-09-20 15:17 - 00000000 ____D () C:\Users\User\AppData\Local\VirtualStore
2014-03-09 15:04 - 2014-03-09 15:04 - 00002762 _____ () C:\Windows\System32\Tasks\TuneUpUtilities_Task_BkGndMaintenance2013
2014-03-08 20:50 - 2014-02-03 23:01 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-03-08 20:43 - 2014-03-08 20:43 - 00000796 _____ () C:\Users\Public\Desktop\OpenTTD.lnk
2014-03-08 20:43 - 2014-03-08 20:42 - 00000000 ____D () C:\Program Files\OpenTTD
2014-03-08 20:25 - 2014-03-01 22:18 - 00000222 _____ () C:\Users\User\Desktop\AirMech.url
2014-03-08 19:40 - 2014-03-08 19:39 - 12150875 _____ () C:\Users\User\Desktop\Save3.sav
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Downloads\SimCity-DRMLESS-Beta
2014-03-08 19:40 - 2014-03-08 18:29 - 00000000 ____D () C:\Users\User\Documents\SimCity-DRMLESS-Beta-1.0
2014-03-08 18:10 - 2014-03-08 18:10 - 00000000 ____D () C:\Users\User\Downloads\SC4 Deluxe + Crack + Serial
2014-03-08 18:08 - 2014-03-08 18:05 - 00000000 ____D () C:\Users\User\Documents\SimCity 4
2014-03-08 18:04 - 2014-03-08 18:04 - 00000000 ____D () C:\Program Files (x86)\Maxis
2014-03-08 18:04 - 2013-10-21 15:07 - 00001189 _____ () C:\Windows\eReg.dat
2014-03-08 17:40 - 2014-03-08 17:33 - 1060819923 ____R () C:\Users\User\Downloads\SimCity 4 Deluxe - By Galao66.rar
2014-03-08 17:32 - 2013-12-19 15:02 - 00045270 _____ () C:\Users\User\AppData\Roaming\room_v3.dat
2014-03-08 16:59 - 2013-12-13 22:48 - 00000000 ____D () C:\Program Files (x86)\Warcraft III
2014-03-08 16:37 - 2013-12-15 19:37 - 00000000 ____D () C:\Program Files (x86)\Garena Plus
2014-03-08 15:08 - 2014-03-08 10:39 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2014
2014-03-08 14:28 - 2013-12-29 21:08 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\Standart
2014-03-08 14:20 - 2013-09-20 15:48 - 00091152 _____ () C:\Users\User\AppData\Local\GDIPFONTCACHEV1.DAT
2014-03-08 11:30 - 2013-12-26 01:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BIAS
2014-03-08 11:29 - 2014-03-08 11:29 - 00003704 _____ () C:\Windows\System32\Tasks\Java Update Scheduler
2014-03-08 11:29 - 2014-03-08 11:29 - 00003694 _____ () C:\Windows\System32\Tasks\Program k provádění aktualizací online Adobe
2014-03-08 11:28 - 2014-02-15 13:09 - 00000000 ____D () C:\Program Files (x86)\DP1815
2014-03-08 11:26 - 2014-03-08 10:52 - 00000000 __SHD () C:\ProgramData\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-03-08 11:26 - 2014-01-30 15:28 - 00000000 ____D () C:\Users\User\Desktop\Vše
2014-03-08 11:26 - 2013-11-16 22:40 - 00000000 ____D () C:\Users\User\AppData\Local\Downloaded Installations
2014-03-08 10:58 - 2014-03-08 10:53 - 00000000 ____D () C:\ProgramData\AVG
2014-03-08 10:56 - 2014-03-08 10:56 - 00002221 _____ () C:\Users\Public\Desktop\AVG PC TuneUp 2014.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00002207 _____ () C:\Users\Public\Desktop\AVG údržba 1 kliknutím.lnk
2014-03-08 10:56 - 2014-03-08 10:56 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG
2014-03-08 10:55 - 2014-03-08 10:43 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-03-08 10:49 - 2014-03-08 10:44 - 00000000 ____D () C:\ProgramData\AVG2014
2014-03-08 10:45 - 2014-03-08 10:45 - 00000977 _____ () C:\Users\Public\Desktop\AVG 2014.lnk
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\TuneUp Software
2014-03-08 10:45 - 2014-03-08 10:45 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2014
2014-03-08 10:44 - 2013-10-12 22:14 - 00000000 ___HD () C:\$AVG
2014-03-08 01:55 - 2013-09-24 08:09 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-08 01:53 - 2013-09-24 08:09 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-08 00:05 - 2013-09-28 12:46 - 00000132 _____ () C:\Users\User\AppData\Roaming\Formát PNG Adobe CC – předvolby
2014-03-07 23:09 - 2014-03-07 23:09 - 00000000 ____D () C:\Users\User\AppData\Local\Run_or_dead__
2014-03-07 22:53 - 2014-01-29 22:04 - 00000000 ___RD () C:\Users\User\Desktop\developer files
2014-03-07 22:47 - 2013-09-24 19:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2014-03-07 22:34 - 2014-02-05 22:35 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-03-07 21:37 - 2013-10-05 19:38 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-07 18:27 - 2014-03-07 18:27 - 00000000 ____D () C:\Users\User\Documents\Banished
2014-03-07 18:18 - 2014-03-07 18:18 - 00001562 _____ () C:\Users\User\Desktop\Banished.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00001507 _____ () C:\Users\User\Desktop\Cat-A-Cat GAMES.lnk
2014-03-07 18:18 - 2014-03-07 18:18 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Banished 1.0
2014-03-07 18:18 - 2013-12-31 12:52 - 00000000 ____D () C:\Games
2014-03-07 18:14 - 2013-09-24 07:31 - 00000000 ____D () C:\Users\User\Documents\Euro Truck Simulator 2
2014-03-07 17:00 - 2013-10-05 20:27 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-07 17:00 - 2013-10-05 20:27 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-07 17:00 - 2013-10-05 20:27 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-07 16:57 - 2014-03-07 16:57 - 00000000 ____D () C:\Program Files\McAfee Security Scan
2014-03-07 16:57 - 2014-03-07 16:54 - 00001931 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2014-03-07 16:54 - 2014-03-07 16:54 - 00000000 ____D () C:\ProgramData\McAfee Security Scan
2014-03-07 16:50 - 2013-11-16 22:35 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2014-03-07 15:32 - 2014-03-07 15:32 - 00001250 _____ () C:\Users\Public\Desktop\Razer Comms.lnk
2014-03-07 15:32 - 2013-12-19 18:55 - 00000000 ____D () C:\Windows\Razer Core
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files\IIS Express
2014-03-07 15:17 - 2014-01-29 15:55 - 00000000 ____D () C:\Program Files (x86)\IIS Express
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-03-07 15:16 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-03-07 15:15 - 2014-03-07 14:18 - 00000000 ____D () C:\Program Files (x86)\Opera Next
2014-03-07 15:15 - 2014-02-28 23:58 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MAXON
2014-03-07 15:15 - 2014-02-23 16:19 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-03-07 15:15 - 2014-01-30 16:14 - 00000000 ____D () C:\Program Files (x86)\SystemRequirementsLab
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files\IIS
2014-03-07 15:15 - 2014-01-29 15:54 - 00000000 ____D () C:\Program Files (x86)\IIS
2014-03-07 15:15 - 2014-01-29 15:36 - 00000000 ____D () C:\Program Files (x86)\HTML Help Workshop
2014-03-07 15:15 - 2014-01-25 00:08 - 00000000 ____D () C:\Program Files (x86)\Install Creator Pro
2014-03-07 15:15 - 2013-12-26 01:16 - 00000000 ____D () C:\Program Files (x86)\BIAS
2014-03-07 15:15 - 2013-12-07 13:22 - 00000000 ____D () C:\Program Files (x86)\SK Helper
2014-03-07 15:15 - 2013-12-03 21:08 - 00000000 ____D () C:\Program Files (x86)\LS
2014-03-07 15:15 - 2013-11-08 16:59 - 00000000 ____D () C:\ComplexWebServer
2014-03-07 15:15 - 2013-09-25 16:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-03-07 15:15 - 2013-09-25 15:31 - 00000000 ____D () C:\Program Files (x86)\Seznam.cz
2014-03-07 15:15 - 2013-09-25 15:30 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2014-03-07 15:15 - 2013-09-24 17:55 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-03-07 15:15 - 2013-09-24 17:50 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\registration
2014-03-07 15:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\AppCompat
2014-03-07 15:14 - 2013-10-18 13:23 - 00000000 ____D () C:\Users\User\AppData\Roaming\Maxthon3
2014-03-07 15:14 - 2013-09-24 17:50 - 00000000 ____D () C:\ProgramData\Skype
2014-03-07 15:13 - 2013-10-12 13:37 - 00000000 ____D () C:\Program Files (x86)\Maxthon
2014-03-07 14:23 - 2014-03-07 14:21 - 00000000 ____D () C:\Users\User\AppData\Local\cache
2014-03-07 14:21 - 2014-03-07 14:21 - 00000000 _____ () C:\Users\User\daemonprocess.txt
2014-03-07 14:18 - 2014-03-07 14:18 - 00000000 ____D () C:\Users\User\AppData\Local\Opera Software
2014-03-05 21:41 - 2014-03-04 20:46 - 00000000 ____D () C:\Users\User\Desktop\tex
2014-03-04 21:36 - 2014-03-02 14:29 - 01500540 _____ () C:\Users\User\Desktop\Bez názvu 1.c4d
2014-03-04 18:44 - 2014-03-04 18:44 - 00000000 ____D () C:\Users\User\AppData\Local\Skype
2014-03-02 19:49 - 2014-03-02 19:49 - 00192242 _____ () C:\Users\User\Documents\Tanzánie.pptx
2014-03-01 23:41 - 2014-03-01 23:41 - 00000000 ____D () C:\Users\User\AppData\Roaming\Carbon
2014-03-01 17:29 - 2013-09-24 17:58 - 00000000 ____D () C:\Riot Games
2014-03-01 17:18 - 2014-02-15 13:10 - 00000000 ____D () C:\Users\User\AppData\Local\WeatherAlerts
2014-03-01 17:18 - 2013-09-20 15:17 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-03-01 17:07 - 2014-01-29 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-02-28 23:58 - 2014-02-28 23:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\MAXON
2014-02-28 23:47 - 2014-02-28 23:47 - 00000000 ____D () C:\Program Files\MAXON
2014-02-28 23:38 - 2014-02-28 23:38 - 00000000 ____D () C:\WMSDK
2014-02-28 23:35 - 2014-02-28 23:35 - 00000000 ____D () C:\ProgramData\Windows Genuine Advantage
2014-02-28 18:13 - 2013-09-20 15:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-02-27 19:39 - 2014-02-27 19:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewV1
2014-02-27 19:39 - 2014-01-29 19:39 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-02-27 19:39 - 2013-12-10 19:39 - 00000453 _____ () C:\extensions.ini
2014-02-27 18:50 - 2011-04-12 09:34 - 00668542 _____ () C:\Windows\system32\perfh005.dat
2014-02-27 18:50 - 2011-04-12 09:34 - 00141202 _____ () C:\Windows\system32\perfc005.dat
2014-02-27 18:50 - 2009-07-14 06:13 - 01583226 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-02-27 14:07 - 2014-02-27 14:07 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-02-25 21:38 - 2014-02-25 21:38 - 00000000 ____D () C:\fede8b43a70c0dffd376da24caffbf
2014-02-24 21:01 - 2014-02-24 21:01 - 00000000 ____D () C:\d024da1c05f09b3396
2014-02-24 16:15 - 2014-02-24 16:15 - 00003786 _____ () C:\Windows\System32\Tasks\DTReg
2014-02-24 14:39 - 2014-02-24 14:39 - 00000000 ____D () C:\Program Files (x86)\MediaViewerV1
2014-02-24 14:06 - 2014-01-02 15:13 - 00001052 _____ () C:\Windows\system32\TeamViewer9_Hooks.log
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mozilla
2014-02-23 16:19 - 2014-02-23 16:19 - 00000000 ____D () C:\Users\User\AppData\Local\WinRST
2014-02-23 16:18 - 2014-02-23 16:18 - 00054593 _____ () C:\Users\User\Desktop\File.rar
2014-02-23 16:16 - 2014-02-23 16:16 - 00048167 _____ () C:\ProgramData\1393168552.bdinstall.bin
2014-02-23 16:15 - 2014-02-23 16:15 - 00000000 ____D () C:\Users\User\AppData\Roaming\QuickScan
2014-02-22 23:52 - 2014-02-22 23:52 - 00000222 _____ () C:\Users\User\Desktop\RaceRoom Racing Experience.url
2014-02-22 18:07 - 2014-02-22 17:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\mctitanpokemine3
2014-02-22 17:50 - 2014-02-22 17:50 - 00001955 _____ () C:\Users\Public\Desktop\McTitan Pokemine 3.0.lnk
2014-02-22 02:08 - 2014-02-22 02:08 - 00000000 ____D () C:\1aa0586418afa6d1cd4c15
2014-02-22 02:07 - 2013-09-26 17:27 - 00000000 ____D () C:\Users\User\AppData\Roaming\TS3Client
2014-02-21 23:12 - 2014-02-21 23:12 - 00000220 _____ () C:\Users\User\Desktop\Source Filmmaker.url
2014-02-21 07:04 - 2013-12-19 18:56 - 00129472 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzDxgk.sys
2014-02-21 07:04 - 2013-12-19 18:56 - 00074432 _____ (Razer, Inc.) C:\Windows\system32\Drivers\RzFilter.sys
2014-02-20 20:52 - 2014-02-20 20:51 - 00000000 ____D () C:\b0caddc6b64a35433e
2014-02-20 20:19 - 2014-02-20 14:57 - 00000000 ____D () C:\Program Files (x86)\Saints Row IV
2014-02-20 17:09 - 2014-02-20 17:09 - 00000000 ____D () C:\63af9ea49bbaa01c1c4de859
2014-02-20 15:13 - 2014-02-20 15:13 - 00000842 _____ () C:\Users\Public\Desktop\Saints Row IV.lnk
2014-02-20 15:10 - 2014-02-20 15:10 - 00000572 _____ () C:\Users\Public\Desktop\Fraps.lnk
2014-02-20 15:10 - 2013-10-19 21:25 - 00000000 ____D () C:\Fraps
2014-02-20 14:02 - 2014-02-20 14:02 - 00002180 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2014-02-19 19:15 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-19 17:24 - 2014-02-19 17:20 - 00001070 _____ () C:\Windows\DXError.log
2014-02-19 17:24 - 2013-09-27 22:37 - 00525206 _____ () C:\Windows\DirectX.log
2014-02-18 19:25 - 2014-02-18 19:25 - 00000901 _____ () C:\Users\User\AppData\Local\_settings.ini
2014-02-16 20:28 - 2013-09-20 15:39 - 01557696 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-16 00:23 - 2014-02-16 00:23 - 00001220 _____ () C:\Users\Public\Desktop\Cerberus FTP Server.lnk
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\ProgramData\Cerberus LLC
2014-02-16 00:23 - 2014-02-16 00:23 - 00000000 ____D () C:\Program Files (x86)\Cerberus LLC
2014-02-16 00:21 - 2014-02-16 00:21 - 00000000 ____D () C:\Users\User\AppData\Roaming\Cerberus LLC
2014-02-16 00:20 - 2014-02-16 00:20 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-02-15 16:08 - 2014-02-15 16:08 - 00000000 ____D () C:\Users\User\AppData\Local\CrashRpt
2014-02-15 16:08 - 2014-02-15 16:03 - 00000000 ____D () C:\Program Files (x86)\Mafia 2 Multiplayer
2014-02-15 16:03 - 2014-02-15 16:03 - 00001064 _____ () C:\Users\Public\Desktop\Mafia 2 Multiplayer.lnk
2014-02-15 15:13 - 2014-02-15 15:13 - 00002105 _____ () C:\Users\Public\Desktop\Mafia II.lnk
2014-02-15 15:06 - 2014-02-15 15:06 - 00000000 ____D () C:\Program Files (x86)\2K Games
2014-02-15 13:17 - 2014-02-09 00:53 - 00001070 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-02-15 13:16 - 2013-12-07 19:19 - 00000000 ____D () C:\Windows\Minidump
2014-02-15 13:09 - 2014-02-15 13:08 - 00000419 _____ () C:\Users\User\AppData\Roaming\apachesrvin.vbs
2014-02-15 13:09 - 2014-02-15 13:08 - 00000094 _____ () C:\Users\User\AppData\Roaming\die.bat
2014-02-15 12:29 - 2014-02-15 12:29 - 00000000 ____D () C:\Users\User\AppData\Roaming\steamvr
2014-02-15 00:45 - 2014-02-15 00:45 - 00000000 ____D () C:\Users\User\AppData\Local\GameMaker_Player
2014-02-15 00:44 - 2014-02-15 00:44 - 00000000 ____D () C:\Users\Public\Documents\The Witcher
2014-02-15 00:39 - 2014-02-15 00:04 - 00228127 _____ () C:\Windows\SysWOW64\KSP.log
2014-02-15 00:03 - 2014-02-15 00:03 - 00000000 ____D () C:\Users\User\AppData\Roaming\.mono
2014-02-14 18:34 - 2014-02-14 18:34 - 00000219 _____ () C:\Users\User\Desktop\Team Fortress 2.url
2014-02-14 18:27 - 2014-01-29 17:55 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2014-02-12 15:51 - 2014-01-26 15:34 - 00000000 ____D () C:\Users\User\Documents\GTA San Andreas
2014-02-12 14:31 - 2014-02-12 14:31 - 00000000 ____D () C:\ProgramData\Ashampoo
2014-02-09 00:52 - 2014-01-29 16:22 - 00000000 ____D () C:\Users\User\Documents\Visual Studio 2013
2014-02-09 00:49 - 2014-02-08 18:16 - 00000000 ____D () C:\Users\User\Documents\Gta Server
Files to move or delete:
====================
C:\Users\User\Network_Meter_Data.js
Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
==================== Bamital & volsnap Check =================
C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit
LastRegBack: 2014-03-11 08:32
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: () (Fixed) (Total:931.41 GB) (Free:593.18 GB) NTFS
Drive e: (SC4DELUXE_DVD) (CDROM) (Total:1.19 GB) (Free:0 GB) CDFS
Available physical RAM: 5210.35 MB
Total physical RAM: 8173.97 MB
Percentage of memory in use: 36%
==================== MBR and Partition Table ==================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 32DFF9E8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931 GB) - (Type=07 NTFS)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
==================== Security Center ==================
AV: AVG Internet Security 2014 (Disabled - Up to date) {0E9420C4-06B3-7FA0-3AB1-6E49CB52ECD9}
AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: AVG Internet Security 2014 (Disabled - Up to date) {B5F5C120-2089-702E-0001-553BB0D5A664}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
FW: AVG Internet Security 2014 (Enabled) {36AFA1E1-4CDC-7EF8-11EE-C77C3581ABA2}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\User\Desktop" je 2940 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Re: Nežádoucí reklamy
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] - [X] HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.) HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] () HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] () HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] () HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.) HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat () GroupPolicy: Group Policy on Chrome detected <======= ATTENTION ProxyEnable: Internet Explorer proxy is enabled. ProxyServer: 127.0.0.1:9880 SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia) FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23] FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23] FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24] FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27] DisableService: c2cautoupdatesvc S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X] S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X] S3 xhunter1; \??\C:\Windows\xhunter1.sys [X C:\Program Files (x86)\MediaViewV1 C:\Program Files (x86)\WebexpEnhancedV1 C:\Program Files (x86)\VideoPlayerV3 C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat C:\Users\User\AppData\Roaming\Standart C:\Users\User\LOCALS~1\Temp\msoavy.cmd 2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt 2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log 2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log 2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe 2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt 2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe 2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt 2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe C:\Users\User\Network_Meter_Data.js C:\Users\User\AppData\Local\Temp\.dud.exe C:\Users\User\AppData\Local\Temp\00036bcc.exe C:\Users\User\AppData\Local\Temp\011853a0.exe C:\Users\User\AppData\Local\Temp\014c1f87.exe C:\Users\User\AppData\Local\Temp\17131017.exe C:\Users\User\AppData\Local\Temp\6_Offer_4.exe C:\Users\User\AppData\Local\Temp\7za.exe C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll C:\Users\User\AppData\Local\Temp\aa2.exe C:\Users\User\AppData\Local\Temp\ampn.exe C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe C:\Users\User\AppData\Local\Temp\appshat-distribution.exe C:\Users\User\AppData\Local\Temp\AutoRun.exe C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll C:\Users\User\AppData\Local\Temp\bdfilters.dll C:\Users\User\AppData\Local\Temp\binkw32.dll C:\Users\User\AppData\Local\Temp\ChangeIcon.exe C:\Users\User\AppData\Local\Temp\clicky22.exe C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe C:\Users\User\AppData\Local\Temp\d2l_Install.exe C:\Users\User\AppData\Local\Temp\DownloadManager.exe C:\Users\User\AppData\Local\Temp\DSETUP.dll C:\Users\User\AppData\Local\Temp\dsetup32.dll C:\Users\User\AppData\Local\Temp\DXSETUP.exe C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll C:\Users\User\AppData\Local\Temp\i4jdel0.exe C:\Users\User\AppData\Local\Temp\installerdll.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll C:\Users\User\AppData\Local\Temp\jdlr.exe C:\Users\User\AppData\Local\Temp\jv3.exe C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe C:\Users\User\AppData\Local\Temp\nsisos.dll C:\Users\User\AppData\Local\Temp\ose00000.exe C:\Users\User\AppData\Local\Temp\Quarantine.exe C:\Users\User\AppData\Local\Temp\sonarinst.exe C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe C:\Users\User\AppData\Local\Temp\xmlUpdater.exe C:\Users\User\AppData\Local\Temp\_is334E.exe C:\Users\User\AppData\Local\Temp\_is4FB8.exe C:\Users\User\AppData\Local\Temp\_is672A.exe C:\Users\User\AppData\Local\Temp\_is8B7B.exe C:\Users\User\AppData\Local\Temp\_is8BED.exe C:\Users\User\AppData\Local\Temp\_is94AD.exe C:\Users\User\AppData\Local\Temp\_isD52.exe C:\Users\User\AppData\Local\Temp\_isD94C.exe C:\Users\User\AppData\Local\Temp\_isEB28.exe C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe AlternateDataStreams: C:\ProgramData\TEMP:373E1720 Hosts: CMD: shutdown /r /f /t 2 End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Re: Nežádoucí reklamy
Mockrát děkuji,Podařilo se při kliknutí se neotevírá reklama a web už jde pro jisotu zde je ten log:
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-03-2014 02
Ran by User at 2014-03-11 21:09:28 Run:2
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
DisableService: c2cautoupdatesvc
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X
C:\Program Files (x86)\MediaViewV1
C:\Program Files (x86)\WebexpEnhancedV1
C:\Program Files (x86)\VideoPlayerV3
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat
C:\Users\User\AppData\Roaming\Standart
C:\Users\User\LOCALS~1\Temp\msoavy.cmd
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
C:\Users\User\Network_Meter_Data.js
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
Hosts:
CMD: shutdown /r /f /t 2
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Razer Synapse => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam Postak => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key not found.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key not found.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions => Moved successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@WebexpEnhancedV1alpha184.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta660.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaPlayerV1alpha739.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewerV1alpha220.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewV1alpha2874.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff => Moved successfully.
c2cautoupdatesvc service was disabled
EagleX64 => Service deleted successfully.
GGSAFERDriver => Service deleted successfully.
xhunter1 => Service deleted successfully.
C:\Program Files (x86)\MediaViewV1 => Moved successfully.
"C:\Program Files (x86)\WebexpEnhancedV1" => File/Directory not found.
"C:\Program Files (x86)\VideoPlayerV3" => File/Directory not found.
"C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat" => File/Directory not found.
C:\Users\User\AppData\Roaming\Standart => Moved successfully.
"C:\Users\User\LOCALS~1\Temp\msoavy.cmd" => File/Directory not found.
C:\Users\User\Documents\AdwCleaner[S0].txt => Moved successfully.
C:\Users\User\Desktop\17127421420654988065.log => Moved successfully.
C:\Users\User\Desktop\12009461836511986565.log => Moved successfully.
C:\Users\User\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\User\Desktop\JRT.txt => Moved successfully.
C:\Users\User\Desktop\JRT.exe => Moved successfully.
"C:\Users\User\Desktop\FRST.txt" => File/Directory not found.
C:\Users\User\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\User\Network_Meter_Data.js => Moved successfully.
C:\Users\User\AppData\Local\Temp\.dud.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\00036bcc.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\011853a0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\014c1f87.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\17131017.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\7za.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\aa2.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\ampn.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\bdfilters.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\binkw32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\clicky22.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\d2l_Install.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DownloadManager.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DSETUP.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\dsetup32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\DXSETUP.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\installerdll.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jdlr.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\jv3.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\nsisos.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sonarinst.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is334E.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is4FB8.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is672A.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8B7B.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8BED.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is94AD.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD52.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD94C.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isEB28.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
========= shutdown /r /f /t 2 =========
========= End of CMD: =========
The system needed a reboot.
==== End of Fixlog ====
Kdyby to zase dělalo později se ozvu
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 09-03-2014 02
Ran by User at 2014-03-11 21:09:28 Run:2
Running from C:\Users\User\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] - C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] - [X]
HKLM-x32\...\Run: [Razer Synapse] - C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [442712 2013-11-17] (Razer Inc.)
HKLM-x32\...\Run: [seznam-listicka-distribuce] - C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3814736 2014-02-26] (LogMeIn Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Skype] - C:\Program Files (x86)\Skype\Phone\Skype.exe [20584608 2013-11-14] (Skype Technologies S.A.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [DAEMON Tools Lite] - C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673184 2013-07-03] (Disc Soft Ltd)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Windows Update] - C:\Users\User\AppData\Roaming\Standart\loader.exe [46080 2013-12-29] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [Seznam Postak] - C:\Users\User\AppData\Local\Seznam.cz\bin\postak.exe [491040 2012-01-10] ()
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\Run: [BitTorrent] - C:\Users\User\AppData\Roaming\BitTorrent\BitTorrent.exe [900696 2014-02-06] (BitTorrent Inc.)
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\CurrentVersion\Windows: [Load] C:\Users\User\LOCALS~1\Temp\msoavy.cmd <===== ATTENTION
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {249fd6c5-9d53-11e3-959e-8c89a56e8e7d} - G:\setup.exe
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\...\MountPoints2: {fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} - E:\autorun.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat ()
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
ProxyEnable: Internet Explorer proxy is enabled.
ProxyServer: 127.0.0.1:9880
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO: DP1815 - {11111111-1111-1111-1111-110411721120} - C:\Program Files (x86)\DP1815\DP1815-bho64.dll (mrlmedia)
FF Extension: No Name - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions [2014-02-23]
FF Extension: Pirrit Suggestor - C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi [2014-02-23]
FF HKLM-x32\...\Firefox\Extensions: [ext@WebexpEnhancedV1alpha184.net] - C:\Program Files (x86)\WebexpEnhancedV1\WebexpEnhancedV1alpha184\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@VideoPlayerV3beta660.net] - C:\Program Files (x86)\VideoPlayerV3\VideoPlayerV3beta660\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaPlayerV1alpha739.net] - C:\Program Files (x86)\MediaPlayerV1\MediaPlayerV1alpha739\ff
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewerV1alpha220.net] - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff
FF Extension: Media Viewer - C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff [2014-02-24]
FF HKLM-x32\...\Firefox\Extensions: [ext@MediaViewV1alpha2874.net] - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff
FF Extension: Media View - C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff [2014-02-27]
DisableService: c2cautoupdatesvc
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X
C:\Program Files (x86)\MediaViewV1
C:\Program Files (x86)\WebexpEnhancedV1
C:\Program Files (x86)\VideoPlayerV3
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat
C:\Users\User\AppData\Roaming\Standart
C:\Users\User\LOCALS~1\Temp\msoavy.cmd
2014-03-11 20:01 - 2014-03-11 19:39 - 00008401 _____ () C:\Users\User\Documents\AdwCleaner[S0].txt
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\17127421420654988065.log
2014-03-11 19:38 - 2014-03-11 19:38 - 00000088 _____ () C:\Users\User\Desktop\12009461836511986565.log
2014-03-11 19:34 - 2014-03-11 19:34 - 01949184 _____ () C:\Users\User\Desktop\adwcleaner.exe
2014-03-11 19:13 - 2014-03-11 19:13 - 00010655 _____ () C:\Users\User\Desktop\JRT.txt
2014-03-11 18:54 - 2014-03-11 18:54 - 01037734 _____ (Thisisu) C:\Users\User\Desktop\JRT.exe
2014-03-11 18:45 - 2014-03-11 20:48 - 00020359 _____ () C:\Users\User\Desktop\FRST.txt
2014-03-10 18:50 - 2014-03-10 18:50 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
C:\Users\User\Network_Meter_Data.js
C:\Users\User\AppData\Local\Temp\.dud.exe
C:\Users\User\AppData\Local\Temp\00036bcc.exe
C:\Users\User\AppData\Local\Temp\011853a0.exe
C:\Users\User\AppData\Local\Temp\014c1f87.exe
C:\Users\User\AppData\Local\Temp\17131017.exe
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe
C:\Users\User\AppData\Local\Temp\7za.exe
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll
C:\Users\User\AppData\Local\Temp\aa2.exe
C:\Users\User\AppData\Local\Temp\ampn.exe
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe
C:\Users\User\AppData\Local\Temp\AutoRun.exe
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\User\AppData\Local\Temp\bdfilters.dll
C:\Users\User\AppData\Local\Temp\binkw32.dll
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe
C:\Users\User\AppData\Local\Temp\clicky22.exe
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe
C:\Users\User\AppData\Local\Temp\d2l_Install.exe
C:\Users\User\AppData\Local\Temp\DownloadManager.exe
C:\Users\User\AppData\Local\Temp\DSETUP.dll
C:\Users\User\AppData\Local\Temp\dsetup32.dll
C:\Users\User\AppData\Local\Temp\DXSETUP.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll
C:\Users\User\AppData\Local\Temp\i4jdel0.exe
C:\Users\User\AppData\Local\Temp\installerdll.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll
C:\Users\User\AppData\Local\Temp\jdlr.exe
C:\Users\User\AppData\Local\Temp\jv3.exe
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe
C:\Users\User\AppData\Local\Temp\nsisos.dll
C:\Users\User\AppData\Local\Temp\ose00000.exe
C:\Users\User\AppData\Local\Temp\Quarantine.exe
C:\Users\User\AppData\Local\Temp\sonarinst.exe
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe
C:\Users\User\AppData\Local\Temp\_is334E.exe
C:\Users\User\AppData\Local\Temp\_is4FB8.exe
C:\Users\User\AppData\Local\Temp\_is672A.exe
C:\Users\User\AppData\Local\Temp\_is8B7B.exe
C:\Users\User\AppData\Local\Temp\_is8BED.exe
C:\Users\User\AppData\Local\Temp\_is94AD.exe
C:\Users\User\AppData\Local\Temp\_isD52.exe
C:\Users\User\AppData\Local\Temp\_isD94C.exe
C:\Users\User\AppData\Local\Temp\_isEB28.exe
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
Hosts:
CMD: shutdown /r /f /t 2
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Razer Synapse => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\seznam-listicka-distribuce => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Windows Update => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\Seznam Postak => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows\CurrentVersion\Run\\BitTorrent => Value deleted successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\Software\Microsoft\Windows NT\CurrentVersion\Windows\\Load => Value was restored successfully.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{249fd6c5-9d53-11e3-959e-8c89a56e8e7d} => Key not found.
HKU\S-1-5-21-2293678021-1201089659-2009807990-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key deleted successfully.
HKCR\CLSID\{fa9b4f4a-25d9-11e3-b41e-8c89a56e8e7d} => Key not found.
C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat => Moved successfully.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => Value deleted successfully.
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => Value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110411721120} => Key deleted successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\extensions => Moved successfully.
C:\Users\User\AppData\Roaming\Mozilla\Firefox\profiles\extensions\suggestor@suggestor.pirrit.com.xpi => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@WebexpEnhancedV1alpha184.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@VideoPlayerV3beta660.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaPlayerV1alpha739.net => Value deleted successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewerV1alpha220.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewerV1\MediaViewerV1alpha220\ff => Moved successfully.
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\ext@MediaViewV1alpha2874.net => Value deleted successfully.
C:\Program Files (x86)\MediaViewV1\MediaViewV1alpha2874\ff => Moved successfully.
c2cautoupdatesvc service was disabled
EagleX64 => Service deleted successfully.
GGSAFERDriver => Service deleted successfully.
xhunter1 => Service deleted successfully.
C:\Program Files (x86)\MediaViewV1 => Moved successfully.
"C:\Program Files (x86)\WebexpEnhancedV1" => File/Directory not found.
"C:\Program Files (x86)\VideoPlayerV3" => File/Directory not found.
"C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\winlogon.bat" => File/Directory not found.
C:\Users\User\AppData\Roaming\Standart => Moved successfully.
"C:\Users\User\LOCALS~1\Temp\msoavy.cmd" => File/Directory not found.
C:\Users\User\Documents\AdwCleaner[S0].txt => Moved successfully.
C:\Users\User\Desktop\17127421420654988065.log => Moved successfully.
C:\Users\User\Desktop\12009461836511986565.log => Moved successfully.
C:\Users\User\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\User\Desktop\JRT.txt => Moved successfully.
C:\Users\User\Desktop\JRT.exe => Moved successfully.
"C:\Users\User\Desktop\FRST.txt" => File/Directory not found.
C:\Users\User\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\User\Network_Meter_Data.js => Moved successfully.
C:\Users\User\AppData\Local\Temp\.dud.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\00036bcc.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\011853a0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\014c1f87.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\17131017.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\6_Offer_4.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\7za.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\856fe1e32f3385d047477c46d0d8bc40.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\aa2.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\ampn.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Antivirus_Free_Edition_x64.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\appshat-distribution.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\bdfilters.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\binkw32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ChangeIcon.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\clicky22.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Creative Cloud Helper.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\CreativeCloudSet-Up.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\d2l_Install.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DownloadManager.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\DSETUP.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\dsetup32.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\DXSETUP.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\GLF86E9.tmp.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\i4jdel0.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\installerdll.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.2-R1.0-b2879jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-3-g530fcb7-b2982jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.2-b2974jnks.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jansi-32-git-MCPC-Plus-jenkins-MCPC-Plus-160.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\jdlr.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\jv3.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Launcher__3098_il2417868.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LemurLeapSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_setup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\LiveSupport_update.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\MediaPlayer__3936_il15104.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Mobogenie_Setup_2.1.37_506.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\mpam-f2d8a2c9.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\nsisos.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sonarinst.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\SRLDetectionLibrary772568750619590218.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\swt-win32-3349.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\Tsu4DFAA1DC.dll => Moved successfully.
C:\Users\User\AppData\Local\Temp\ubiDA4C.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\Uninstaller-3200.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\UpdateCheckerSetup.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\utt7C7B.tmp.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\vlc-2.1.3-win32.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\xmlUpdater.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is334E.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is4FB8.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is672A.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8B7B.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is8BED.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_is94AD.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD52.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isD94C.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\_isEB28.exe => Moved successfully.
C:\Users\User\AppData\Local\Temp\{E638ABC1-0067-474b-A379-87CFE81E7848}.exe => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\ProgramData\TEMP => ":373E1720" ADS removed successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
========= shutdown /r /f /t 2 =========
========= End of CMD: =========
The system needed a reboot.
==== End of Fixlog ====
Kdyby to zase dělalo později se ozvu
Re: Nežádoucí reklamy
Tak jeste uklidime
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy



Přispějete na provoz fóra?