Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

awardhotspot, valuedealshopper

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

awardhotspot, valuedealshopper

#1 Příspěvek od vacicak »

ahoj ve firefoxu se me zacalo objevovat tohle svinstvo a eset na to jaksi nereaguje.
win7 a eset orig koupeno.



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by vacicak (administrator) on VACICE on 13-03-2014 20:31:49
Running from C:\Users\vacicak\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
() C:\Program Files (x86)\Pirrit\AutoUpdater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(Razer USA Ltd.) C:\Program Files (x86)\n52te\razerhid.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\n52te\razertra.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe
() C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\CPU_Ratio.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] - C:\Windows\system32\MBCfg64.dll [34432 2013-04-23] (Creative Technology Ltd.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [2916584 2010-08-12] (ESET)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Sound Blaster Cinema] - C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2012-11-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI)
HKLM-x32\...\Run: [Jomantha] - C:\Program Files (x86)\n52te\razerhid.exe [163840 2007-12-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [CommandCenter] - C:\Program Files (x86)\MSI\CommandCenter\StartCommandCenter.exe [809968 2013-10-15] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [37632 2014-02-16] (Overwolf LTD)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\vacicak\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {11111111-1111-1111-1111-110511111108} - No File
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - No File
Toolbar: HKCU - No Name - {5054562D-5247-006A-76A7-7A786E7484D7} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Plus-HD-8.1 - C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com [2014-03-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-11-15]

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-25] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2013-10-15] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-17] (Intel Corporation)
R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [117928 2014-03-11] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\CommandCenter\BIOSData\MSIBIOSDataService.exe [2100736 2013-09-11] (MSI)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\MSIClockService.exe [307200 2013-10-01] ()
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\MSICommService.exe [2114560 2013-09-12] ()
R3 MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe [4110336 2013-09-12] ()
R2 MSICTL_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe [1985536 2013-10-09] ()
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\MSIDDRService.exe [2224640 2013-09-11] ()
S3 MSISaveLoad_CC; C:\Program Files (x86)\MSI\CommandCenter\MSISaveLoadService.exe [3957248 2013-07-18] ()
S3 MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\MSISMBService.exe [177152 2013-09-11] ()
R3 MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe [503808 2013-09-12] ()
S3 MSIWMI_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIWMIService.exe [182272 2013-08-23] ()
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-02-16] (Overwolf LTD)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-14] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-08] ()
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2013-04-30] ()
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
S2 DefaultTabUpdate; "C:\Users\vacicak\AppData\Roaming\defaulttab\defaulttab\dtupdate.exe" [X]

==================== Drivers (Whitelisted) ====================

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-04-30] (Qualcomm Atheros, Inc.)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [171152 2010-07-29] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [33632 2010-07-29] (ESET)
R2 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2010-07-29] (ESET)
R3 JmtFltr; C:\Windows\System32\drivers\JmtFltr.sys [46464 2007-09-29] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-04-30] (Qualcomm Atheros, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 vhidmini; C:\Windows\System32\DRIVERS\vhidmini.sys [13952 2007-09-29] (Windows (R) Codename Longhorn DDK provider)
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [X]
S1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-13 20:31 - 2014-03-13 20:31 - 00017332 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 20:30 - 2014-03-13 20:31 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-13 20:12 - 2014-03-13 20:12 - 00007303 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:11 - 2014-03-13 20:11 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\isafe
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-12 15:06 - 2014-03-12 15:19 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:17 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:14 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-11 19:57 - 2014-03-11 20:08 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 19:56 - 2014-03-11 20:07 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 20:06 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 20:07 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 19:55 - 2014-03-11 20:04 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:31 - 2014-03-11 17:38 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:31 - 2014-03-11 17:37 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:32 - 2014-03-13 20:20 - 00000000 ____D () C:\Program Files (x86)\iSafe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\eCyber
2014-03-11 15:04 - 2014-03-11 15:14 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:03 - 2014-03-11 15:10 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-10 15:07 - 2014-03-10 15:11 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:01 - 2014-03-09 23:03 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:03 - 2014-03-08 23:07 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:07 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:35 - 2014-03-08 22:37 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 11:38 - 2014-03-08 11:44 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:37 - 2014-03-08 11:43 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:45 - 2014-03-11 15:42 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:54 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-22 08:53 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-22 08:53 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-22 08:53 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-22 08:53 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-22 08:53 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-02-22 08:24 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-22 08:24 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:21 - 2014-03-13 20:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\newnext.me
2014-02-18 15:21 - 2014-02-18 15:22 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-8.1
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\Documents\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\genienext
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\cache
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\.android
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 _____ () C:\Users\vacicak\daemonprocess.txt
2014-02-18 15:20 - 2014-02-18 15:21 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-02-18 15:19 - 2014-02-18 15:20 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 02:20 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 02:20 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 02:20 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 02:20 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 02:20 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 02:20 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 02:20 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 02:20 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 02:20 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 02:20 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 02:20 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 02:20 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 02:20 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 02:20 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 02:20 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 02:20 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 02:20 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 02:20 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 02:20 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 02:20 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 02:20 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 02:20 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 02:20 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 02:20 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 02:20 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 02:20 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 02:20 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 02:20 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 02:20 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 02:20 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 02:20 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 02:20 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 02:20 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 02:20 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 02:20 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 02:20 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 02:20 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 02:20 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 02:20 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 02:20 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 02:20 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 02:09 - 2014-01-05 13:50 - 00000000 ____D () C:\Users\vacicak\Desktop\LJTD
2014-02-12 13:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 13:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 13:27 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 13:27 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:27 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 13:27 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 13:27 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-13 20:31 - 2014-03-13 20:31 - 00017332 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 20:31 - 2014-03-13 20:30 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:29 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 20:29 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 20:27 - 2009-07-14 16:18 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-03-13 20:27 - 2009-07-14 16:18 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-03-13 20:27 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 20:22 - 2014-01-08 15:03 - 00000000 ____D () C:\ProgramData\Origin
2014-03-13 20:20 - 2014-03-11 15:32 - 00000000 ____D () C:\Program Files (x86)\iSafe
2014-03-13 20:20 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\newnext.me
2014-03-13 20:20 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Overwolf
2014-03-13 20:20 - 2013-11-15 19:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-13 20:20 - 2013-11-15 19:07 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-03-13 20:20 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 20:20 - 2009-07-14 05:51 - 00030708 _____ () C:\Windows\setupact.log
2014-03-13 20:19 - 2013-11-15 20:27 - 00186340 _____ () C:\Windows\PFRO.log
2014-03-13 20:19 - 2013-11-15 19:02 - 01675317 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:12 - 2014-03-13 20:12 - 00007303 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:11 - 2014-03-13 20:11 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\isafe
2014-03-13 20:10 - 2013-11-16 10:23 - 00000000 ____D () C:\Users\vacicak\AppData\Local\PMB Files
2014-03-13 20:10 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\TS3Client
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:09 - 2014-03-13 20:08 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 20:09 - 2013-11-15 19:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-13 18:39 - 2013-11-15 21:13 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-03-13 15:30 - 2013-11-16 10:23 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-13 15:25 - 2013-11-15 22:20 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-12 15:19 - 2014-03-12 15:06 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:17 - 2014-03-12 15:06 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:14 - 2014-03-12 15:06 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-12 01:09 - 2013-12-10 22:09 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 01:09 - 2013-11-15 19:47 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 20:08 - 2014-03-11 19:57 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 20:07 - 2014-03-11 19:56 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 20:07 - 2014-03-11 19:55 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 20:06 - 2014-03-11 19:56 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 20:04 - 2014-03-11 19:55 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:38 - 2014-03-11 17:31 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:37 - 2014-03-11 17:31 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:42 - 2014-03-07 22:45 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\eCyber
2014-03-11 15:14 - 2014-03-11 15:04 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:10 - 2014-03-11 15:03 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-11 00:47 - 2013-11-15 23:59 - 00001120 __RSH () C:\Users\vacicak\ntuser.pol
2014-03-11 00:47 - 2013-11-15 19:03 - 00000000 ____D () C:\Users\vacicak
2014-03-10 15:11 - 2014-03-10 15:07 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:03 - 2014-03-09 23:01 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:07 - 2014-03-08 23:03 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:07 - 2014-03-08 23:02 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:37 - 2014-03-08 22:35 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 17:19 - 2013-12-10 21:06 - 00000839 _____ () C:\Users\vacicak\Desktop\GamePark klient 2.lnk
2014-03-08 17:19 - 2013-11-22 22:24 - 00001853 _____ () C:\Users\Public\Desktop\3DMark 11.lnk
2014-03-08 17:19 - 2013-11-22 21:46 - 00000992 _____ () C:\Users\vacicak\Desktop\Core Temp.lnk
2014-03-08 17:19 - 2013-11-22 20:14 - 00000913 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-03-08 17:19 - 2013-11-15 22:20 - 00001011 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-08 17:15 - 2013-12-26 16:28 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-08 11:44 - 2014-03-08 11:38 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:43 - 2014-03-08 11:37 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-26 03:00 - 2013-11-15 19:21 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-25 20:52 - 2014-01-12 08:23 - 00000000 ____D () C:\Windows\Minidump
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:55 - 2013-11-15 19:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:22 - 2014-02-18 15:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-8.1
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\Documents\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\genienext
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\cache
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\.android
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 _____ () C:\Users\vacicak\daemonprocess.txt
2014-02-18 15:21 - 2014-02-18 15:20 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-02-18 15:20 - 2014-02-18 15:19 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-18 15:20 - 2013-11-15 23:57 - 00001035 _____ () C:\Users\vacicak\Desktop\KMPlayer.lnk
2014-02-18 14:31 - 2013-11-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-02-17 14:33 - 2013-11-18 03:16 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-17 14:32 - 2013-11-15 19:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 14:52 - 2013-11-15 22:24 - 00000000 ____D () C:\Hry
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-13 02:25 - 2013-11-15 20:21 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-13 02:24 - 2013-11-15 20:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 02:23 - 2013-11-15 20:11 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\vacicak\AppData\Local\Temp\devcon64.exe
C:\Users\vacicak\AppData\Local\Temp\KMP_3.8.0.120.exe
C:\Users\vacicak\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\vacicak\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\vacicak\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\vacicak\AppData\Local\Temp\nvStInst.exe
C:\Users\vacicak\AppData\Local\Temp\_isB4EC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 05:39




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:15.61 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive g: () (Fixed) (Total:931.41 GB) (Free:568.01 GB) NTFS

Available physical RAM: 5904.73 MB
Total physical RAM: 8136.01 MB
Percentage of memory in use: 27%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: B8D89003)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0C5B82A6)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 4.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 4.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\vacicak\Desktop" je 527 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(7.81 KiB) Staženo 48 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

Re: awardhotspot, valuedealshopper

#3 Příspěvek od vacicak »

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x64
Ran by vacicak on źt 13.03.2014 at 20:42:57,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\vacicak\AppData\Roaming\isafe"
Failed to delete: [Folder] "C:\Program Files (x86)\isafe"



~~~ FireFox

Emptied folder: C:\Users\vacicak\AppData\Roaming\mozilla\firefox\profiles\okrz2lh8.default-1394548940897\minidumps [1 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 13.03.2014 at 20:44:23,09
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

Re: awardhotspot, valuedealshopper

#4 Příspěvek od vacicak »

# AdwCleaner v3.021 - Report created 13/03/2014 at 20:45:40
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : vacicak - VACICE
# Running from : C:\Users\vacicak\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : iSafeKrnl
[#] Service Deleted : iSafeNetFilter
[#] Service Deleted : iSafeService
[#] Service Deleted : PirritUpdater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\uniblue
[!] Folder Deleted : C:\Program Files (x86)\iSafe
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\Plus-HD-8.1
Folder Deleted : C:\Users\vacicak\AppData\Local\genienext
Folder Deleted : C:\Users\vacicak\AppData\Local\Mobogenie
Folder Deleted : C:\Users\vacicak\AppData\Local\Pirrit Suggestor
Folder Deleted : C:\Users\vacicak\AppData\Local\Temp\apn
Folder Deleted : C:\Users\vacicak\AppData\Roaming\eCyber
Folder Deleted : C:\Users\vacicak\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\vacicak\Documents\Mobogenie
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com
File Deleted : C:\Windows\System32\roboot64.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4736d593-3374-4867-9707-30eb39a57ead}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f61b834c-85c4-45e9-8a64-66c97e7621d4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4736d593-3374-4867-9707-30eb39a57ead}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f61b834c-85c4-45e9-8a64-66c97e7621d4}
Key Deleted : HKCU\Software\AppDataLow\Software\Plus-HD-8.1
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Plus-HD-8.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-8.1
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js ]

Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationThankYouPage", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationTime", 1392733313);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet_FF25_FIX", true[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.active", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbar", "NA");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbarenhanced", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.backgroundver", 1);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.certdomaininstaller", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.changeprevious", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.value", "%221392733313%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.description", "Turn YouTube videos to High Definition by default");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.domain", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.enablesearch", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.homepage", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.iframe", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22A4CD2523D18B478A94FD2748EAA55[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%22%2C%[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%2[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22A4CD2523D18B478A94FD[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.value", "41");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.value", "1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.expiration", "Fri Mar 14 2014 02:12:45 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.value", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.value", "%22ff%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22A4CD2523[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.value", "null");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.expiration", "Fri Mar 14 2014 08:15:05 GMT+[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//data-cdn.mbamupdates.c[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastDailyReport", "1394737965392");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastUpdate", "1394737965563");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.manifesturl", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.name", "Plus-HD-8.1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.newtab", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.opensearch", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/51108/plugins/094/ff/plugins.json");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsversion", 38);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.publisher", "Plus HD");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.searchstatus", 0);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.setnewtab", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.thankyou", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.updateinterval", 360);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.ver", 41);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.FilesValidatorDueTime", "1394738024493");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.apps", "51108");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.bic", "144b69a56aee47b01880daf2ecb702ed");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.cid", 51108);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.firstrun", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.hadappinstalled", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.installationdate", 1394632972);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.modetype", "production");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.reportInstall", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.statsDailyCounter", 3);

*************************

AdwCleaner[R0].txt - [18364 octets] - [13/03/2014 20:45:17]
AdwCleaner[S0].txt - [17525 octets] - [13/03/2014 20:45:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17586 octets] ##########
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#5 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

Re: awardhotspot, valuedealshopper

#6 Příspěvek od vacicak »

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by vacicak on źt 13.03.2014 at 21:19:39,75.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\vacicak\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.3.2014 21:20:03 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully
HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js:

Added to C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\Users\vacicak\daemonprocess.txt deleted
C:\Users\vacicak\.android deleted
C:\PROGRA~2\iSafe deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\vacicak\AppData\Local\cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC deleted
C:\windows\SysNative\tasks\DTReg deleted
C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\jetpack deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
- League of Legends Events - %ProfilePath%\extensions\jid0-8tN1572BjKN38NbylynGgV1L2AU@jetpack.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\vacicak\AppData\Local\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=26 folders=41 14189848 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\vacicak\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\vacicak\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 13.03.2014 at 21:27:53,58 ======================
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#7 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

Re: awardhotspot, valuedealshopper

#8 Příspěvek od vacicak »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by vacicak (administrator) on VACICE on 13-03-2014 21:42:33
Running from C:\Users\vacicak\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Allstar Group, s.r.o.) C:\Program Files\GamePark2\gpcl.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(Razer USA Ltd.) C:\Program Files (x86)\n52te\razerhid.exe
() C:\Program Files (x86)\n52te\razertra.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
() C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe
() C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\CPU_Ratio.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] - C:\Windows\system32\MBCfg64.dll [34432 2013-04-23] (Creative Technology Ltd.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [2916584 2010-08-12] (ESET)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Sound Blaster Cinema] - C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2012-11-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI)
HKLM-x32\...\Run: [Jomantha] - C:\Program Files (x86)\n52te\razerhid.exe [163840 2007-12-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [CommandCenter] - C:\Program Files (x86)\MSI\CommandCenter\StartCommandCenter.exe [809968 2013-10-15] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [37632 2014-02-16] (Overwolf LTD)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: League of Legends Events - C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\jid0-8tN1572BjKN38NbylynGgV1L2AU@jetpack.xpi [2014-03-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-11-15]

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-25] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2013-10-15] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\CommandCenter\BIOSData\MSIBIOSDataService.exe [2100736 2013-09-11] (MSI)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\MSIClockService.exe [307200 2013-10-01] ()
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\MSICommService.exe [2114560 2013-09-12] ()
R3 MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe [4110336 2013-09-12] ()
R2 MSICTL_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe [1985536 2013-10-09] ()
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\MSIDDRService.exe [2224640 2013-09-11] ()
S3 MSISaveLoad_CC; C:\Program Files (x86)\MSI\CommandCenter\MSISaveLoadService.exe [3957248 2013-07-18] ()
S3 MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\MSISMBService.exe [177152 2013-09-11] ()
R3 MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe [503808 2013-09-12] ()
S3 MSIWMI_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIWMIService.exe [182272 2013-08-23] ()
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-02-16] (Overwolf LTD)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-08] ()
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2013-04-30] ()
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

==================== Drivers (Whitelisted) ====================

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-04-30] (Qualcomm Atheros, Inc.)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [171152 2010-07-29] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [33632 2010-07-29] (ESET)
R2 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2010-07-29] (ESET)
R3 JmtFltr; C:\Windows\System32\drivers\JmtFltr.sys [46464 2007-09-29] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-04-30] (Qualcomm Atheros, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 vhidmini; C:\Windows\System32\DRIVERS\vhidmini.sys [13952 2007-09-29] (Windows (R) Codename Longhorn DDK provider)
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-13 21:42 - 2014-03-13 21:42 - 00016780 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:45 - 2014-03-13 20:45 - 00000000 ____D () C:\AdwCleaner
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 21:42 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 20:08 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 20:08 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 20:08 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 20:08 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 20:08 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 20:08 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 20:08 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 20:08 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 20:08 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 20:08 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 20:08 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 20:08 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 20:08 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 20:08 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 20:08 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 20:08 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 20:08 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 20:08 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 20:08 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 20:08 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 20:08 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 20:08 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 20:08 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 20:08 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 20:08 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 20:08 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 20:08 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 20:08 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 20:08 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 20:08 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 20:08 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 20:08 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 20:08 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 20:08 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 20:08 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 20:08 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 20:08 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 20:08 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 20:08 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 20:08 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 20:07 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 20:06 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 20:06 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 20:06 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 20:06 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 20:06 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 20:06 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 20:06 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-12 15:06 - 2014-03-12 15:19 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:17 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:14 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-11 19:57 - 2014-03-11 20:08 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 19:56 - 2014-03-11 20:07 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 20:06 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 20:07 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 19:55 - 2014-03-11 20:04 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:31 - 2014-03-11 17:38 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:31 - 2014-03-11 17:37 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:04 - 2014-03-11 15:14 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:03 - 2014-03-11 15:10 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-10 15:07 - 2014-03-10 15:11 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:01 - 2014-03-09 23:03 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:03 - 2014-03-08 23:07 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:07 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:35 - 2014-03-08 22:37 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 11:38 - 2014-03-08 11:44 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:37 - 2014-03-08 11:43 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:45 - 2014-03-11 15:42 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:54 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-22 08:53 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-22 08:53 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-22 08:53 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-22 08:53 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-22 08:53 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-02-22 08:24 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-22 08:24 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:19 - 2014-02-18 15:20 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 02:20 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 02:20 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 02:09 - 2014-01-05 13:50 - 00000000 ____D () C:\Users\vacicak\Desktop\LJTD
2014-02-12 13:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 13:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 13:27 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 13:27 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:27 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 13:27 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 13:27 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-13 21:42 - 2014-03-13 21:42 - 00016780 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 21:42 - 2014-03-13 20:30 - 00000000 ____D () C:\FRST
2014-03-13 21:36 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 21:36 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 21:35 - 2014-01-08 15:03 - 00000000 ____D () C:\ProgramData\Origin
2014-03-13 21:34 - 2009-07-14 16:18 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-03-13 21:34 - 2009-07-14 16:18 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-03-13 21:34 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:33 - 2013-11-15 19:02 - 01755220 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 21:27 - 2014-03-13 21:19 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:27 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Overwolf
2014-03-13 21:27 - 2013-11-15 20:27 - 00187188 _____ () C:\Windows\PFRO.log
2014-03-13 21:27 - 2013-11-15 19:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-13 21:27 - 2013-11-15 19:07 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-03-13 21:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 21:27 - 2009-07-14 05:51 - 00031212 _____ () C:\Windows\setupact.log
2014-03-13 21:23 - 2014-03-13 21:19 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:23 - 2013-11-15 19:03 - 00000000 ____D () C:\Users\vacicak
2014-03-13 21:20 - 2013-11-16 10:23 - 00000000 ____D () C:\Users\vacicak\AppData\Local\PMB Files
2014-03-13 21:20 - 2013-11-16 10:23 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-13 21:20 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\TS3Client
2014-03-13 21:19 - 2014-03-13 21:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:18 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 21:09 - 2013-11-15 19:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 20:45 - 2014-03-13 20:45 - 00000000 ____D () C:\AdwCleaner
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:41 - 2013-11-21 14:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 20:41 - 2013-11-21 14:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 20:41 - 2009-07-14 05:45 - 00350296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:40 - 2013-11-15 20:21 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-13 20:39 - 2013-11-15 20:11 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 20:39 - 2013-11-15 20:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:09 - 2014-03-13 20:08 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-13 18:39 - 2013-11-15 21:13 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-03-13 15:25 - 2013-11-15 22:20 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-12 15:19 - 2014-03-12 15:06 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:17 - 2014-03-12 15:06 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:14 - 2014-03-12 15:06 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-12 01:09 - 2013-12-10 22:09 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 01:09 - 2013-11-15 19:47 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 20:08 - 2014-03-11 19:57 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 20:07 - 2014-03-11 19:56 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 20:07 - 2014-03-11 19:55 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 20:06 - 2014-03-11 19:56 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 20:04 - 2014-03-11 19:55 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:38 - 2014-03-11 17:31 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:37 - 2014-03-11 17:31 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:42 - 2014-03-07 22:45 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:14 - 2014-03-11 15:04 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:10 - 2014-03-11 15:03 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-11 00:47 - 2013-11-15 23:59 - 00001120 __RSH () C:\Users\vacicak\ntuser.pol
2014-03-10 15:11 - 2014-03-10 15:07 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:03 - 2014-03-09 23:01 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:07 - 2014-03-08 23:03 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:07 - 2014-03-08 23:02 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:37 - 2014-03-08 22:35 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 17:19 - 2013-12-10 21:06 - 00000839 _____ () C:\Users\vacicak\Desktop\GamePark klient 2.lnk
2014-03-08 17:19 - 2013-11-22 22:24 - 00001853 _____ () C:\Users\Public\Desktop\3DMark 11.lnk
2014-03-08 17:19 - 2013-11-22 21:46 - 00000992 _____ () C:\Users\vacicak\Desktop\Core Temp.lnk
2014-03-08 17:19 - 2013-11-22 20:14 - 00000913 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-03-08 17:19 - 2013-11-15 22:20 - 00001011 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-08 17:15 - 2013-12-26 16:28 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-08 11:44 - 2014-03-08 11:38 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:43 - 2014-03-08 11:37 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-01 07:05 - 2014-03-13 20:08 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 20:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 20:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 20:08 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 20:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 20:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 20:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 20:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 20:08 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 20:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 20:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 20:08 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 20:08 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 20:08 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 20:08 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 20:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 20:08 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 20:08 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 20:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 20:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 20:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 20:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 20:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 20:08 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 20:08 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 20:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 20:08 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 20:08 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 20:08 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 20:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 20:08 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 20:08 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 20:08 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 20:08 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 20:08 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 20:08 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 20:08 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 20:08 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 20:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 20:08 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-26 03:00 - 2013-11-15 19:21 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-25 20:52 - 2014-01-12 08:23 - 00000000 ____D () C:\Windows\Minidump
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:55 - 2013-11-15 19:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:20 - 2014-02-18 15:19 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-18 15:20 - 2013-11-15 23:57 - 00001035 _____ () C:\Users\vacicak\Desktop\KMPlayer.lnk
2014-02-18 14:31 - 2013-11-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-02-17 14:33 - 2013-11-18 03:16 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-17 14:32 - 2013-11-15 19:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 14:52 - 2013-11-15 22:24 - 00000000 ____D () C:\Hry
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 05:39




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:15.76 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive g: () (Fixed) (Total:931.41 GB) (Free:568.01 GB) NTFS

Available physical RAM: 6120.53 MB
Total physical RAM: 8136.01 MB
Percentage of memory in use: 24%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: B8D89003)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0C5B82A6)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 4.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 4.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\vacicak\Desktop" je 530 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition2.rar
(7.38 KiB) Staženo 49 x
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#9 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
KU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
C:\Program Files (x86)\WinRST
C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 bře 2014 20:19

Re: awardhotspot, valuedealshopper

#10 Příspěvek od vacicak »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by vacicak at 2014-03-14 14:34:07 Run:1
Running from C:\Users\vacicak\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
KU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
C:\Program Files (x86)\WinRST
C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => Value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SPReview => Value deleted successfully.
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
PanService => Service stopped successfully.
PanService => Service deleted successfully.
WinRST => Unable to stop service
WinRST => Service deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\vacicak\Desktop\zoek.exe => Moved successfully.
C:\Users\vacicak\Desktop\JRT.txt => Moved successfully.
C:\Users\vacicak\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\vacicak\Downloads\JRT(1).exe => Moved successfully.
C:\Users\vacicak\Desktop\Addition.rar => Moved successfully.
C:\Users\vacicak\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe => Moved successfully.
C:\Users\vacicak\Downloads\JRT.exe => Moved successfully.
C:\Users\vacicak\Downloads\yet_another_cleaner.exe => Moved successfully.
C:\Users\Public\Desktop\YAC.lnk => Moved successfully.
C:\Users\vacicak\AppData\Local\WinRST => Moved successfully.
C:\Program Files (x86)\WinRST => Moved successfully.
"C:\Program Files (x86)\WinRST" => File/Directory not found.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog ====
Nahoru
Uživatelský avatar
vyosek
VIP
VIP
Příspěvky: 56373
Registrován: 07 lis 2006 15:24
Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#11 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“