awardhotspot, valuedealshopper

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

awardhotspot, valuedealshopper

#1 Příspěvek od vacicak »

ahoj ve firefoxu se me zacalo objevovat tohle svinstvo a eset na to jaksi nereaguje.
win7 a eset orig koupeno.



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by vacicak (administrator) on VACICE on 13-03-2014 20:31:49
Running from C:\Users\vacicak\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc.exe
(Elex do Brasil Participações Ltda) C:\Program Files (x86)\iSafe\iSafeSvc2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
() C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
() C:\Program Files (x86)\Pirrit\AutoUpdater.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(Razer USA Ltd.) C:\Program Files (x86)\n52te\razerhid.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
() C:\Program Files (x86)\n52te\razertra.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
() C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe
() C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\CPU_Ratio.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] - C:\Windows\system32\MBCfg64.dll [34432 2013-04-23] (Creative Technology Ltd.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [2916584 2010-08-12] (ESET)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Sound Blaster Cinema] - C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2012-11-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI)
HKLM-x32\...\Run: [Jomantha] - C:\Program Files (x86)\n52te\razerhid.exe [163840 2007-12-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [CommandCenter] - C:\Program Files (x86)\MSI\CommandCenter\StartCommandCenter.exe [809968 2013-10-15] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [37632 2014-02-16] (Overwolf LTD)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [NextLive] - C:\Windows\SysWOW64\rundll32.exe "C:\Users\vacicak\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {11111111-1111-1111-1111-110511111108} - No File
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: No Name - {d40c654d-7c51-4eb3-95b2-1e23905c2a2d} - No File
Toolbar: HKCU - No Name - {5054562D-5247-006A-76A7-7A786E7484D7} - No File
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.20913.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: Plus-HD-8.1 - C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com [2014-03-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-11-15]

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-25] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2013-10-15] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-17] (Intel Corporation)
R2 iSafeService; C:\Program Files (x86)\iSafe\iSafeSvc.exe [117928 2014-03-11] (Elex do Brasil Participações Ltda)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\CommandCenter\BIOSData\MSIBIOSDataService.exe [2100736 2013-09-11] (MSI)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\MSIClockService.exe [307200 2013-10-01] ()
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\MSICommService.exe [2114560 2013-09-12] ()
R3 MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe [4110336 2013-09-12] ()
R2 MSICTL_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe [1985536 2013-10-09] ()
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\MSIDDRService.exe [2224640 2013-09-11] ()
S3 MSISaveLoad_CC; C:\Program Files (x86)\MSI\CommandCenter\MSISaveLoadService.exe [3957248 2013-07-18] ()
S3 MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\MSISMBService.exe [177152 2013-09-11] ()
R3 MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe [503808 2013-09-12] ()
S3 MSIWMI_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIWMIService.exe [182272 2013-08-23] ()
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-02-16] (Overwolf LTD)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 PirritUpdater; C:\Program Files (x86)\Pirrit\AutoUpdater.exe [59904 2014-02-14] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-08] ()
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2013-04-30] ()
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()
S2 DefaultTabUpdate; "C:\Users\vacicak\AppData\Roaming\defaulttab\defaulttab\dtupdate.exe" [X]

==================== Drivers (Whitelisted) ====================

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-04-30] (Qualcomm Atheros, Inc.)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [171152 2010-07-29] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [33632 2010-07-29] (ESET)
R2 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2010-07-29] (ESET)
R3 JmtFltr; C:\Windows\System32\drivers\JmtFltr.sys [46464 2007-09-29] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-04-30] (Qualcomm Atheros, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 vhidmini; C:\Windows\System32\DRIVERS\vhidmini.sys [13952 2007-09-29] (Windows (R) Codename Longhorn DDK provider)
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 iSafeKrnl; \??\C:\Program Files (x86)\iSafe\iSafeKrnl.sys [X]
S1 iSafeNetFilter; \??\C:\Program Files (x86)\iSafe\iSafeNetFilter.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-13 20:31 - 2014-03-13 20:31 - 00017332 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 20:30 - 2014-03-13 20:31 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-13 20:12 - 2014-03-13 20:12 - 00007303 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:11 - 2014-03-13 20:11 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\isafe
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-12 15:06 - 2014-03-12 15:19 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:17 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:14 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-11 19:57 - 2014-03-11 20:08 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 19:56 - 2014-03-11 20:07 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 20:06 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 20:07 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 19:55 - 2014-03-11 20:04 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:31 - 2014-03-11 17:38 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:31 - 2014-03-11 17:37 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:32 - 2014-03-13 20:20 - 00000000 ____D () C:\Program Files (x86)\iSafe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\eCyber
2014-03-11 15:04 - 2014-03-11 15:14 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:03 - 2014-03-11 15:10 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-10 15:07 - 2014-03-10 15:11 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:01 - 2014-03-09 23:03 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:03 - 2014-03-08 23:07 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:07 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:35 - 2014-03-08 22:37 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 11:38 - 2014-03-08 11:44 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:37 - 2014-03-08 11:43 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:45 - 2014-03-11 15:42 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:54 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-22 08:53 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-22 08:53 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-22 08:53 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-22 08:53 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-22 08:53 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-02-22 08:24 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-22 08:24 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:21 - 2014-03-13 20:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\newnext.me
2014-02-18 15:21 - 2014-02-18 15:22 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-8.1
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\Documents\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\genienext
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\cache
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\.android
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 _____ () C:\Users\vacicak\daemonprocess.txt
2014-02-18 15:20 - 2014-02-18 15:21 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-02-18 15:19 - 2014-02-18 15:20 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 02:20 - 2014-02-06 13:16 - 23170048 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-02-13 02:20 - 2014-02-06 12:30 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-02-13 02:20 - 2014-02-06 12:30 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-02-13 02:20 - 2014-02-06 12:12 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-02-13 02:20 - 2014-02-06 12:07 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-02-13 02:20 - 2014-02-06 12:06 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-02-13 02:20 - 2014-02-06 11:57 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-02-13 02:20 - 2014-02-06 11:56 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-02-13 02:20 - 2014-02-06 11:52 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-02-13 02:20 - 2014-02-06 11:49 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-02-13 02:20 - 2014-02-06 11:48 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-02-13 02:20 - 2014-02-06 11:48 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-02-13 02:20 - 2014-02-06 11:38 - 17103872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-02-13 02:20 - 2014-02-06 11:32 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-02-13 02:20 - 2014-02-06 11:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-02-13 02:20 - 2014-02-06 11:17 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-02-13 02:20 - 2014-02-06 11:11 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-02-13 02:20 - 2014-02-06 11:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-02-13 02:20 - 2014-02-06 11:00 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-02-13 02:20 - 2014-02-06 10:57 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-02-13 02:20 - 2014-02-06 10:57 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-02-13 02:20 - 2014-02-06 10:52 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-02-13 02:20 - 2014-02-06 10:52 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-02-13 02:20 - 2014-02-06 10:50 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-02-13 02:20 - 2014-02-06 10:49 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-02-13 02:20 - 2014-02-06 10:47 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-02-13 02:20 - 2014-02-06 10:46 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-02-13 02:20 - 2014-02-06 10:25 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-02-13 02:20 - 2014-02-06 10:25 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-02-13 02:20 - 2014-02-06 10:24 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-02-13 02:20 - 2014-02-06 10:22 - 13051392 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-02-13 02:20 - 2014-02-06 10:13 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-02-13 02:20 - 2014-02-06 10:09 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-02-13 02:20 - 2014-02-06 10:03 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-02-13 02:20 - 2014-02-06 09:55 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-02-13 02:20 - 2014-02-06 09:41 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-02-13 02:20 - 2014-02-06 09:40 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-02-13 02:20 - 2014-02-06 09:36 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-02-13 02:20 - 2014-02-06 09:34 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-13 02:20 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 02:20 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 02:09 - 2014-01-05 13:50 - 00000000 ____D () C:\Users\vacicak\Desktop\LJTD
2014-02-12 13:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 13:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 13:27 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 13:27 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:27 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 13:27 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 13:27 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-13 20:31 - 2014-03-13 20:31 - 00017332 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 20:31 - 2014-03-13 20:30 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:29 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 20:29 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 20:27 - 2009-07-14 16:18 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-03-13 20:27 - 2009-07-14 16:18 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-03-13 20:27 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 20:22 - 2014-01-08 15:03 - 00000000 ____D () C:\ProgramData\Origin
2014-03-13 20:20 - 2014-03-11 15:32 - 00000000 ____D () C:\Program Files (x86)\iSafe
2014-03-13 20:20 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\newnext.me
2014-03-13 20:20 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Overwolf
2014-03-13 20:20 - 2013-11-15 19:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-13 20:20 - 2013-11-15 19:07 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-03-13 20:20 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 20:20 - 2009-07-14 05:51 - 00030708 _____ () C:\Windows\setupact.log
2014-03-13 20:19 - 2013-11-15 20:27 - 00186340 _____ () C:\Windows\PFRO.log
2014-03-13 20:19 - 2013-11-15 19:02 - 01675317 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:12 - 2014-03-13 20:12 - 00007303 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:11 - 2014-03-13 20:11 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\isafe
2014-03-13 20:10 - 2013-11-16 10:23 - 00000000 ____D () C:\Users\vacicak\AppData\Local\PMB Files
2014-03-13 20:10 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\TS3Client
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:09 - 2014-03-13 20:08 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 20:09 - 2013-11-15 19:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-13 18:39 - 2013-11-15 21:13 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-03-13 15:30 - 2013-11-16 10:23 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-13 15:25 - 2013-11-15 22:20 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-12 15:19 - 2014-03-12 15:06 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:17 - 2014-03-12 15:06 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:14 - 2014-03-12 15:06 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-12 01:09 - 2013-12-10 22:09 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 01:09 - 2013-11-15 19:47 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 20:08 - 2014-03-11 19:57 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 20:07 - 2014-03-11 19:56 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 20:07 - 2014-03-11 19:55 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 20:06 - 2014-03-11 19:56 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 20:04 - 2014-03-11 19:55 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:38 - 2014-03-11 17:31 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:37 - 2014-03-11 17:31 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:42 - 2014-03-07 22:45 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\eCyber
2014-03-11 15:14 - 2014-03-11 15:04 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:10 - 2014-03-11 15:03 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-11 00:47 - 2013-11-15 23:59 - 00001120 __RSH () C:\Users\vacicak\ntuser.pol
2014-03-11 00:47 - 2013-11-15 19:03 - 00000000 ____D () C:\Users\vacicak
2014-03-10 15:11 - 2014-03-10 15:07 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:03 - 2014-03-09 23:01 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:07 - 2014-03-08 23:03 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:07 - 2014-03-08 23:02 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:37 - 2014-03-08 22:35 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 17:19 - 2013-12-10 21:06 - 00000839 _____ () C:\Users\vacicak\Desktop\GamePark klient 2.lnk
2014-03-08 17:19 - 2013-11-22 22:24 - 00001853 _____ () C:\Users\Public\Desktop\3DMark 11.lnk
2014-03-08 17:19 - 2013-11-22 21:46 - 00000992 _____ () C:\Users\vacicak\Desktop\Core Temp.lnk
2014-03-08 17:19 - 2013-11-22 20:14 - 00000913 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-03-08 17:19 - 2013-11-15 22:20 - 00001011 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-08 17:15 - 2013-12-26 16:28 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-08 11:44 - 2014-03-08 11:38 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:43 - 2014-03-08 11:37 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-26 03:00 - 2013-11-15 19:21 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-25 20:52 - 2014-01-12 08:23 - 00000000 ____D () C:\Windows\Minidump
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:55 - 2013-11-15 19:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:22 - 2014-02-18 15:21 - 00000000 ____D () C:\Program Files (x86)\Plus-HD-8.1
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\Documents\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Mobogenie
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\genienext
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\AppData\Local\cache
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 ____D () C:\Users\vacicak\.android
2014-02-18 15:21 - 2014-02-18 15:21 - 00000000 _____ () C:\Users\vacicak\daemonprocess.txt
2014-02-18 15:21 - 2014-02-18 15:20 - 00000000 ____D () C:\Program Files (x86)\Mobogenie
2014-02-18 15:20 - 2014-02-18 15:19 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-18 15:20 - 2013-11-15 23:57 - 00001035 _____ () C:\Users\vacicak\Desktop\KMPlayer.lnk
2014-02-18 14:31 - 2013-11-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-02-17 14:33 - 2013-11-18 03:16 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-17 14:32 - 2013-11-15 19:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 14:52 - 2013-11-15 22:24 - 00000000 ____D () C:\Hry
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-02-13 02:25 - 2013-11-15 20:21 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-02-13 02:24 - 2013-11-15 20:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-02-13 02:23 - 2013-11-15 20:11 - 88567024 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\vacicak\AppData\Local\Temp\devcon64.exe
C:\Users\vacicak\AppData\Local\Temp\KMP_3.8.0.120.exe
C:\Users\vacicak\AppData\Local\Temp\nv3DVStreaming.dll
C:\Users\vacicak\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\vacicak\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\vacicak\AppData\Local\Temp\nvStInst.exe
C:\Users\vacicak\AppData\Local\Temp\_isB4EC.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 05:39




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:15.61 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive g: () (Fixed) (Total:931.41 GB) (Free:568.01 GB) NTFS

Available physical RAM: 5904.73 MB
Total physical RAM: 8136.01 MB
Percentage of memory in use: 27%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: B8D89003)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0C5B82A6)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 4.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 4.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\vacicak\Desktop" je 527 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition.rar
(7.81 KiB) Staženo 100 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

Re: awardhotspot, valuedealshopper

#3 Příspěvek od vacicak »

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.2 (02.20.2014:1)
OS: Windows 7 Professional x64
Ran by vacicak on źt 13.03.2014 at 20:42:57,21
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values




~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\vacicak\AppData\Roaming\isafe"
Failed to delete: [Folder] "C:\Program Files (x86)\isafe"



~~~ FireFox

Emptied folder: C:\Users\vacicak\AppData\Roaming\mozilla\firefox\profiles\okrz2lh8.default-1394548940897\minidumps [1 files]



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on źt 13.03.2014 at 20:44:23,09
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

Re: awardhotspot, valuedealshopper

#4 Příspěvek od vacicak »

# AdwCleaner v3.021 - Report created 13/03/2014 at 20:45:40
# Updated 10/03/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : vacicak - VACICE
# Running from : C:\Users\vacicak\Desktop\adwcleaner.exe
# Option : Clean

***** [ Services ] *****

[#] Service Deleted : DefaultTabUpdate
[#] Service Deleted : iSafeKrnl
[#] Service Deleted : iSafeNetFilter
[#] Service Deleted : iSafeService
[#] Service Deleted : PirritUpdater

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\uniblue
[!] Folder Deleted : C:\Program Files (x86)\iSafe
Folder Deleted : C:\Program Files (x86)\Mobogenie
Folder Deleted : C:\Program Files (x86)\Pirrit
Folder Deleted : C:\Program Files (x86)\Plus-HD-8.1
Folder Deleted : C:\Users\vacicak\AppData\Local\genienext
Folder Deleted : C:\Users\vacicak\AppData\Local\Mobogenie
Folder Deleted : C:\Users\vacicak\AppData\Local\Pirrit Suggestor
Folder Deleted : C:\Users\vacicak\AppData\Local\Temp\apn
Folder Deleted : C:\Users\vacicak\AppData\Roaming\eCyber
Folder Deleted : C:\Users\vacicak\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Pirrit
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Solvusoft
Folder Deleted : C:\Users\vacicak\Documents\Mobogenie
Folder Deleted : C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\8ef36653-7dcd-4c5f-81f5-7870fda4b7b7@67e486b0-922d-4a2d-9e3f-77394107f67c.com
File Deleted : C:\Windows\System32\roboot64.exe

***** [ Shortcuts ] *****


***** [ Registry ] *****

Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [NextLive]
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{FEB62B15-CC00-4736-AAEC-BA046C9DFF73}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D40C654D-7C51-4EB3-95B2-1E23905C2A2D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7F6AFBF1-E065-4627-A2FD-810366367D01}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4736d593-3374-4867-9707-30eb39a57ead}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f61b834c-85c4-45e9-8a64-66c97e7621d4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1F8EDE97-36D5-422A-B8F0-9406E2D87C60}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4736d593-3374-4867-9707-30eb39a57ead}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f61b834c-85c4-45e9-8a64-66c97e7621d4}
Key Deleted : HKCU\Software\AppDataLow\Software\Plus-HD-8.1
Key Deleted : HKLM\Software\caphyon
Key Deleted : HKLM\Software\Default Tab
Key Deleted : HKLM\Software\InstallIQ
Key Deleted : HKLM\Software\Pirrit
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\Software\Plus-HD-8.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Plus-HD-8.1
Key Deleted : [x64] HKLM\SOFTWARE\Pirrit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.16521


-\\ Mozilla Firefox v27.0.1 (cs)

[ File : C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js ]

Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationThankYouPage", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.InstallationTime", 1392733313);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108_dbWasSet_FF25_FIX", true[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.active", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbar", "NA");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.addressbarenhanced", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncdb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb.was_copied", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.asyncinternaldb_dbWasSet_FF25_FIX", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.backgroundver", 1);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.certdomaininstaller", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.changeprevious", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallationTime.value", "%221392733313%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%22%2C%22uz[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.description", "Turn YouTube videos to High Definition by default");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.domain", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.enablesearch", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.homepage", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.iframe", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%22A4CD2523D18B478A94FD2748EAA55[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%22%2C%[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001071%22%2C%22sub_id%22%3A%220%2[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%22A4CD2523D18B478A94FD[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_appVer.value", "41");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_lastVersion.value", "1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_meta.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.expiration", "Fri Mar 14 2014 02:12:45 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_nextCheck.value", "true");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_queue.value", "%7B%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.Resources_remote_resources.value", "%7B%22remoteId%22%3A0%7D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.__defualt_browser__.value", "%22ff%22");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%22A4CD2523[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssf[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_bundledWithHash.value", "null");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.expiration", "Fri Mar 14 2014 08:15:05 GMT+[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_last_executable_request.value", "%22hxxp%3A//data-cdn.mbamupdates.c[...]
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastDailyReport", "1394737965392");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.lastUpdate", "1394737965563");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.manifesturl", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.name", "Plus-HD-8.1");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.newtab", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.opensearch", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsurl", "hxxps://w9u6a2p6.ssl.hwcdn.net/plugin/apps/51108/plugins/094/ff/plugins.json");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.pluginsversion", 38);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.publisher", "Plus HD");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.searchstatus", 0);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.setnewtab", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.thankyou", "");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.updateinterval", 360);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.51108.ver", 41);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.FilesValidatorDueTime", "1394738024493");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.apps", "51108");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.bic", "144b69a56aee47b01880daf2ecb702ed");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.cid", 51108);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.firstrun", false);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.hadappinstalled", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.installationdate", 1394632972);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.modetype", "production");
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.reportInstall", true);
Line Deleted : user_pref("extensions.a8ef366537dcd4c5f81f57870fda4b7b767e486b0922d4a2d9e3f77394107f67ccom51108.statsDailyCounter", 3);

*************************

AdwCleaner[R0].txt - [18364 octets] - [13/03/2014 20:45:17]
AdwCleaner[S0].txt - [17525 octets] - [13/03/2014 20:45:40]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [17586 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#5 Příspěvek od vyosek »

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

Re: awardhotspot, valuedealshopper

#6 Příspěvek od vacicak »

Zoek.exe v5.0.0.0 Updated 07-March-2014
Tool run by vacicak on źt 13.03.2014 at 21:19:39,75.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\vacicak\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.3.2014 21:20:03 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully
HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511111108} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{5054562D-5247-006A-76A7-7A786E7484D7} deleted successfully

==== Deleting Services ======================


==== FireFox Fix ======================

Deleted from C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js:

Added to C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

==== Deleting Files \ Folders ======================

C:\Users\vacicak\daemonprocess.txt deleted
C:\Users\vacicak\.android deleted
C:\PROGRA~2\iSafe deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\vacicak\AppData\Local\cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YAC deleted
C:\windows\SysNative\tasks\DTReg deleted
C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\jetpack deleted

==== Firefox Extensions ======================

ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
- League of Legends Events - %ProfilePath%\extensions\jid0-8tN1572BjKN38NbylynGgV1L2AU@jetpack.xpi

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
95812430959AE88CDD0301AB3A71913B - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE11SR"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

Nothing found to reset

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\iSafe deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\vacicak\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

C:\Users\vacicak\AppData\Local\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=26 folders=41 14189848 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\vacicak\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\vacicak\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on źt 13.03.2014 at 21:27:53,58 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#7 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

Re: awardhotspot, valuedealshopper

#8 Příspěvek od vacicak »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-03-2014
Ran by vacicak (administrator) on VACICE on 13-03-2014 21:42:33
Running from C:\Users\vacicak\Desktop
Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe
() C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
(PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
() C:\Program Files (x86)\WinRST\WinRST.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(ESET) C:\Program Files\ESET\ESET Smart Security\egui.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Overwolf LTD) C:\Program Files (x86)\Overwolf\Overwolf.exe
(Allstar Group, s.r.o.) C:\Program Files\GamePark2\gpcl.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(MSI) C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe
(Razer USA Ltd.) C:\Program Files (x86)\n52te\razerhid.exe
() C:\Program Files (x86)\n52te\razertra.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Overwolf LTD) C:\Program Files (x86)\Common Files\Overwolf\OverwolfHelper64.exe
() C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe
() C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe
(MSI CO.,LTD.) C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\CPU_Ratio.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe
(forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7188552 2013-05-27] (Realtek Semiconductor)
HKLM\...\Run: [MBCfg64] - C:\Windows\system32\MBCfg64.dll [34432 2013-04-23] (Creative Technology Ltd.)
HKLM\...\Run: [Launch LCore] - C:\Program Files\Logitech Gaming Software\LCore.exe [8290584 2013-08-01] (Logitech Inc.)
HKLM\...\Run: [egui] - C:\Program Files\ESET\ESET Smart Security\egui.exe [2916584 2010-08-12] (ESET)
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKLM-x32\...\Run: [Sound Blaster Cinema] - C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2012-11-29] (Creative Technology Ltd)
HKLM-x32\...\Run: [USB3MON] - C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-04-26] (Intel Corporation)
HKLM-x32\...\Run: [Super-Charger] - C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [506864 2013-03-08] (MSI)
HKLM-x32\...\Run: [Jomantha] - C:\Program Files (x86)\n52te\razerhid.exe [163840 2007-12-12] (Razer USA Ltd.)
HKLM-x32\...\Run: [CommandCenter] - C:\Program Files (x86)\MSI\CommandCenter\StartCommandCenter.exe [809968 2013-10-15] ()
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [Overwolf] - C:\Program Files (x86)\Overwolf\Overwolf.exe [37632 2014-02-16] (Overwolf LTD)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Winsock: Catalog9 01 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 02 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 03 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 04 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9 15 C:\Windows\SysWOW64\BfLLR.dll [196096] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 01 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 02 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 03 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 04 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Winsock: Catalog9-x64 15 %SYSTEMROOT%\system32\BfLLR.dll [216064] (Bigfoot Networks, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF ProfilePath: C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_12_0_0_77.dll ()
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_12_0_0_77.dll ()
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 - C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 - C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=3.5.29 - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin - C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\jyxo-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF Extension: League of Legends Events - C:\Users\vacicak\AppData\Roaming\Mozilla\Firefox\Profiles\okrz2lh8.default-1394548940897\Extensions\jid0-8tN1572BjKN38NbylynGgV1L2AU@jetpack.xpi [2014-03-13]
FF HKLM-x32\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird [2013-11-15]

==================== Services (Whitelisted) =================

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [49152 2014-01-25] ()
S3 EhttpSrv; C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe [42360 2010-08-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET Smart Security\x86\ekrn.exe [810144 2010-08-12] (ESET)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [520416 2013-10-15] (Futuremark)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [820184 2013-02-13] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-05-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-05-17] (Intel Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [418376 2013-04-04] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [701512 2013-04-04] (Malwarebytes Corporation)
S3 MSIBIOSData_CC; C:\Program Files (x86)\MSI\CommandCenter\BIOSData\MSIBIOSDataService.exe [2100736 2013-09-11] (MSI)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\MSIClockService.exe [307200 2013-10-01] ()
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\MSICommService.exe [2114560 2013-09-12] ()
R3 MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\MSICPUService.exe [4110336 2013-09-12] ()
R2 MSICTL_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIControlService.exe [1985536 2013-10-09] ()
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\MSIDDRService.exe [2224640 2013-09-11] ()
S3 MSISaveLoad_CC; C:\Program Files (x86)\MSI\CommandCenter\MSISaveLoadService.exe [3957248 2013-07-18] ()
S3 MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\MSISMBService.exe [177152 2013-09-11] ()
R3 MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\MSISuperIOService.exe [503808 2013-09-12] ()
S3 MSIWMI_CC; C:\Program Files (x86)\MSI\CommandCenter\MSIWMIService.exe [182272 2013-08-23] ()
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [161264 2013-02-20] (MSI)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-01-21] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [16939296 2014-01-21] (NVIDIA Corporation)
S3 OverwolfUpdaterService; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [98560 2014-02-16] (Overwolf LTD)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-01-08] ()
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [490496 2013-04-30] ()
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

==================== Drivers (Whitelisted) ====================

R1 BfLwf; C:\Windows\System32\DRIVERS\bflwfx64.sys [66928 2013-04-30] (Qualcomm Atheros, Inc.)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [168544 2010-07-29] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [141264 2010-07-29] (ESET)
R2 epfw; C:\Windows\System32\DRIVERS\epfw.sys [171152 2010-07-29] (ESET)
R3 Epfwndis; C:\Windows\System32\DRIVERS\Epfwndis.sys [33632 2010-07-29] (ESET)
R2 epfwwfp; C:\Windows\System32\DRIVERS\epfwwfp.sys [50624 2010-07-29] (ESET)
R3 JmtFltr; C:\Windows\System32\drivers\JmtFltr.sys [46464 2007-09-29] ()
R3 Ke2200; C:\Windows\System32\DRIVERS\e22w7x64.sys [165824 2013-04-30] (Qualcomm Atheros, Inc.)
R3 LGSHidFilt; C:\Windows\System32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech Inc.)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25928 2013-04-04] (Malwarebytes Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
S3 NTIOLib_MSIClock_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSICOMM_CC; C:\Program Files (x86)\MSI\CommandCenter\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSICPU_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\CommandCenter\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
S3 NTIOLib_MSIFrequency_CC; C:\Program Files (x86)\MSI\CommandCenter\ClockGen\CPU_Frequency\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
R3 NTIOLib_MSIRatio_CC; C:\Program Files (x86)\MSI\CommandCenter\CPU\CPU_Ratio\NTIOLib_X64.sys [13368 2012-11-20] (MSI)
S3 NTIOLib_MSISMB_CC; C:\Program Files (x86)\MSI\CommandCenter\SMBus\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 NTIOLib_MSISuperIO_CC; C:\Program Files (x86)\MSI\CommandCenter\SuperIO\NTIOLib_X64.sys [13368 2012-11-19] (MSI)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)
R3 vhidmini; C:\Windows\System32\DRIVERS\vhidmini.sys [13952 2007-09-29] (Windows (R) Codename Longhorn DDK provider)
S3 GPUZ; \??\C:\Windows\TEMP\GPUZ.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-03-13 21:42 - 2014-03-13 21:42 - 00016780 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:45 - 2014-03-13 20:45 - 00000000 ____D () C:\AdwCleaner
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 21:42 - 00000000 ____D () C:\FRST
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:15 - 2013-04-04 14:50 - 00025928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 20:08 - 2014-03-01 07:05 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-13 20:08 - 2014-03-01 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-13 20:08 - 2014-03-01 06:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-13 20:08 - 2014-03-01 05:58 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-13 20:08 - 2014-03-01 05:52 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-13 20:08 - 2014-03-01 05:51 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-13 20:08 - 2014-03-01 05:42 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-13 20:08 - 2014-03-01 05:40 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-13 20:08 - 2014-03-01 05:37 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-13 20:08 - 2014-03-01 05:33 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-13 20:08 - 2014-03-01 05:33 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-13 20:08 - 2014-03-01 05:32 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-13 20:08 - 2014-03-01 05:30 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-13 20:08 - 2014-03-01 05:23 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-13 20:08 - 2014-03-01 05:17 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-13 20:08 - 2014-03-01 05:11 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-13 20:08 - 2014-03-01 05:02 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-13 20:08 - 2014-03-01 04:54 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-13 20:08 - 2014-03-01 04:52 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-13 20:08 - 2014-03-01 04:51 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-13 20:08 - 2014-03-01 04:47 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-13 20:08 - 2014-03-01 04:43 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-13 20:08 - 2014-03-01 04:43 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-13 20:08 - 2014-03-01 04:42 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-13 20:08 - 2014-03-01 04:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-13 20:08 - 2014-03-01 04:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-13 20:08 - 2014-03-01 04:37 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-13 20:08 - 2014-03-01 04:35 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-13 20:08 - 2014-03-01 04:18 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-13 20:08 - 2014-03-01 04:16 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-13 20:08 - 2014-03-01 04:14 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-13 20:08 - 2014-03-01 04:10 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-13 20:08 - 2014-03-01 04:03 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-13 20:08 - 2014-03-01 04:00 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-13 20:08 - 2014-03-01 03:57 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-13 20:08 - 2014-03-01 03:38 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-13 20:08 - 2014-03-01 03:32 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-13 20:08 - 2014-03-01 03:27 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-13 20:08 - 2014-03-01 03:25 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-13 20:08 - 2014-03-01 03:25 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-03-13 20:07 - 2014-02-07 02:23 - 03156480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-03-13 20:06 - 2014-02-04 03:32 - 01424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2014-03-13 20:06 - 2014-02-04 03:32 - 00624128 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-03-13 20:06 - 2014-02-04 03:04 - 01230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2014-03-13 20:06 - 2014-02-04 03:04 - 00509440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-03-13 20:06 - 2014-01-29 03:32 - 00484864 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2014-03-13 20:06 - 2014-01-29 03:06 - 00381440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2014-03-13 20:06 - 2014-01-28 03:32 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-12 15:06 - 2014-03-12 15:19 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:17 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:06 - 2014-03-12 15:14 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-11 19:57 - 2014-03-11 20:08 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 19:56 - 2014-03-11 20:07 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 20:06 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 20:07 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 19:55 - 2014-03-11 20:04 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:31 - 2014-03-11 17:38 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:31 - 2014-03-11 17:37 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:04 - 2014-03-11 15:14 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:03 - 2014-03-11 15:10 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-10 15:07 - 2014-03-10 15:11 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:01 - 2014-03-09 23:03 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:03 - 2014-03-08 23:07 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:07 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:35 - 2014-03-08 22:37 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 11:38 - 2014-03-08 11:44 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:37 - 2014-03-08 11:43 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:45 - 2014-03-11 15:42 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:54 - 2014-02-08 17:18 - 00599840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-02-22 08:53 - 2014-02-08 19:34 - 31432480 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 25256224 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 23683360 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17715784 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 12324640 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-02-22 08:53 - 2014-02-08 19:34 - 11636176 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 11589272 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09728064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 09690424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 03142432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02956576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02782496 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 02410784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01885472 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433489.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00892192 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00875296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00863520 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00844576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00832424 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00483104 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00408352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00378656 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00353504 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00333600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00305600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00174296 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2014-02-22 08:53 - 2014-02-08 19:34 - 00148528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2014-02-22 08:53 - 2013-11-28 14:38 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-02-22 08:53 - 2013-11-28 14:38 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-02-22 08:53 - 2013-11-22 09:36 - 01515296 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-02-22 08:24 - 2013-12-27 19:42 - 00039200 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-02-22 08:24 - 2013-12-27 19:42 - 00033056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:19 - 2014-02-18 15:20 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-13 02:20 - 2013-12-21 10:53 - 00548864 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-02-13 02:20 - 2013-12-21 09:56 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-02-13 02:09 - 2014-01-05 13:50 - 00000000 ____D () C:\Users\vacicak\Desktop\LJTD
2014-02-12 13:27 - 2014-01-01 00:05 - 00420008 _____ () C:\Windows\SysWOW64\locale.nls
2014-02-12 13:27 - 2014-01-01 00:04 - 00420008 _____ () C:\Windows\system32\locale.nls
2014-02-12 13:27 - 2013-12-25 00:09 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-02-12 13:27 - 2013-12-24 23:48 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-02-12 13:27 - 2013-12-06 03:02 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00488448 _____ (Microsoft Corporation) C:\Windows\system32\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00485888 _____ (Microsoft Corporation) C:\Windows\system32\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:27 - 00123392 _____ (Microsoft Corporation) C:\Windows\system32\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:26 - 00528384 _____ (Microsoft Corporation) C:\Windows\system32\msdrm.dll
2014-02-12 13:27 - 2013-12-04 03:16 - 00658432 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00626176 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00553984 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 03:16 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-12-04 03:03 - 00428032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00423936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp_isv.dll
2014-02-12 13:27 - 2013-12-04 03:03 - 00087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secproc_ssp.dll
2014-02-12 13:27 - 2013-12-04 03:02 - 00390144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdrm.dll
2014-02-12 13:27 - 2013-12-04 02:54 - 00594944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_isv.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00572416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00510976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp.exe
2014-02-12 13:27 - 2013-12-04 02:54 - 00508928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RMActivate_ssp_isv.exe
2014-02-12 13:27 - 2013-11-26 09:16 - 03419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2014-02-12 13:27 - 2013-11-22 23:48 - 03928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll

==================== One Month Modified Files and Folders =======

2014-03-13 21:42 - 2014-03-13 21:42 - 00016780 _____ () C:\Users\vacicak\Desktop\FRST.txt
2014-03-13 21:42 - 2014-03-13 20:30 - 00000000 ____D () C:\FRST
2014-03-13 21:36 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-03-13 21:36 - 2009-07-14 05:45 - 00013648 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-03-13 21:35 - 2014-01-08 15:03 - 00000000 ____D () C:\ProgramData\Origin
2014-03-13 21:34 - 2009-07-14 16:18 - 00670658 _____ () C:\Windows\system32\perfh005.dat
2014-03-13 21:34 - 2009-07-14 16:18 - 00142270 _____ () C:\Windows\system32\perfc005.dat
2014-03-13 21:34 - 2009-07-14 06:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-03-13 21:33 - 2013-11-15 19:02 - 01755220 _____ () C:\Windows\WindowsUpdate.log
2014-03-13 21:27 - 2014-03-13 21:19 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:27 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Local\Overwolf
2014-03-13 21:27 - 2013-11-15 20:27 - 00187188 _____ () C:\Windows\PFRO.log
2014-03-13 21:27 - 2013-11-15 19:20 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-03-13 21:27 - 2013-11-15 19:07 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-03-13 21:27 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-03-13 21:27 - 2009-07-14 05:51 - 00031212 _____ () C:\Windows\setupact.log
2014-03-13 21:23 - 2014-03-13 21:19 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:23 - 2013-11-15 19:03 - 00000000 ____D () C:\Users\vacicak
2014-03-13 21:20 - 2013-11-16 10:23 - 00000000 ____D () C:\Users\vacicak\AppData\Local\PMB Files
2014-03-13 21:20 - 2013-11-16 10:23 - 00000000 ____D () C:\ProgramData\PMB Files
2014-03-13 21:20 - 2013-11-15 22:20 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\TS3Client
2014-03-13 21:19 - 2014-03-13 21:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:18 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 21:09 - 2013-11-15 19:47 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-03-13 20:45 - 2014-03-13 20:45 - 00000000 ____D () C:\AdwCleaner
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:41 - 2013-11-21 14:33 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-03-13 20:41 - 2013-11-21 14:33 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-03-13 20:41 - 2009-07-14 05:45 - 00350296 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:40 - 2013-11-15 20:21 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-03-13 20:39 - 2013-11-15 20:11 - 90015360 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-03-13 20:39 - 2013-11-15 20:11 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:29 - 2014-03-13 20:29 - 02157056 _____ (Farbar) C:\Users\vacicak\Desktop\FRST64.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 00001109 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Users\vacicak\AppData\Roaming\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-03-13 20:15 - 2014-03-13 20:15 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes' Anti-Malware
2014-03-13 20:09 - 2014-03-13 20:09 - 00000000 ____D () C:\Windows\ERUNT
2014-03-13 20:09 - 2014-03-13 20:08 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION.srt
2014-03-13 18:39 - 2014-03-13 18:39 - 00045150 _____ () C:\Users\vacicak\Downloads\The.Following.S02E08.720p.HDTV.X264-DIMENSION(1).srt
2014-03-13 18:39 - 2013-11-15 21:13 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-03-13 15:25 - 2013-11-15 22:20 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-03-12 15:19 - 2014-03-12 15:06 - 736531852 _____ () C:\Users\vacicak\Downloads\btaw_siri_kl020314_480p_2000.mp4
2014-03-12 15:17 - 2014-03-12 15:06 - 570581753 _____ () C:\Users\vacicak\Downloads\cfnm_ariella_jynx_vl072513_480p_2000.mp4
2014-03-12 15:14 - 2014-03-12 15:06 - 397318366 _____ () C:\Users\vacicak\Downloads\bgb_erica_fontes_kl012914_480p_2000.mp4
2014-03-12 01:09 - 2013-12-10 22:09 - 05777288 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00692616 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-03-12 01:09 - 2013-11-15 19:47 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-03-12 01:09 - 2013-11-15 19:47 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-03-11 20:08 - 2014-03-11 19:57 - 367525437 _____ () C:\Users\vacicak\Downloads\star-crossed.s01e04.hdtv.x264-2hd.mp4
2014-03-11 20:07 - 2014-03-11 19:56 - 290668989 _____ () C:\Users\vacicak\Downloads\The-Following-S02E08-HDTV-x264-LOL.mp4
2014-03-11 20:07 - 2014-03-11 19:55 - 407988207 _____ () C:\Users\vacicak\Downloads\the.walking.dead.s04e13.hdtv.x264-2hd.mp4
2014-03-11 20:06 - 2014-03-11 19:56 - 288367091 _____ () C:\Users\vacicak\Downloads\Intelligence-US-S01E10-HDTV-x264-LOL.mp4
2014-03-11 20:04 - 2014-03-11 19:55 - 327193918 _____ () C:\Users\vacicak\Downloads\Once-Upon-a-Time-S03E12-HDTV-x264-LOL.mp4
2014-03-11 19:56 - 2014-03-11 19:56 - 00056299 _____ () C:\Users\vacicak\Downloads\Intelligence.US.S01E10.HDTV.x264-LOL.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00044169 _____ () C:\Users\vacicak\Downloads\once.upon.a.time.s03e12.hdtv.x264-lol.srt
2014-03-11 19:55 - 2014-03-11 19:55 - 00023490 _____ () C:\Users\vacicak\Downloads\The.Walking.Dead.S04E13.HDTV.x264-2HD.srt
2014-03-11 17:38 - 2014-03-11 17:31 - 466880020 _____ () C:\Users\vacicak\Downloads\The.Musketeers.S01E07.HDTV.XviD-FUM.avi
2014-03-11 17:37 - 2014-03-11 17:31 - 473628598 _____ () C:\Users\vacicak\Downloads\Black.sails.s01e07.hdtv.x264-killers.mp4
2014-03-11 17:31 - 2014-03-11 17:31 - 00053765 _____ () C:\Users\vacicak\Downloads\Black.Sails.S01E07.HDTV.x264-KILLERS.srt
2014-03-11 17:31 - 2014-03-11 17:31 - 00052423 _____ () C:\Users\vacicak\Downloads\the.musketeers.s01e07.hdtv.x264-fov.srt
2014-03-11 15:42 - 2014-03-07 22:45 - 00000000 ____D () C:\Users\vacicak\Desktop\Původní data aplikace Firefox
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-03-11 15:32 - 2014-03-11 15:32 - 00000000 ____D () C:\Windows\system32\log
2014-03-11 15:14 - 2014-03-11 15:04 - 682132729 _____ () C:\Users\vacicak\Downloads\bzv_tiffany_tyler_432p_2200.wmv
2014-03-11 15:10 - 2014-03-11 15:03 - 499736398 _____ () C:\Users\vacicak\Downloads\btis_sarah_jessie_bb011114_480p_2000.mp4
2014-03-11 00:47 - 2013-11-15 23:59 - 00001120 __RSH () C:\Users\vacicak\ntuser.pol
2014-03-10 15:11 - 2014-03-10 15:07 - 490705106 _____ () C:\Users\vacicak\Downloads\mgb_syren_de_mer_bb012914_480p_2000.mp4
2014-03-09 23:03 - 2014-03-09 23:01 - 314451055 _____ () C:\Users\vacicak\Downloads\Bitten.s01e09.hdtv.x264-killers.mp4
2014-03-08 23:07 - 2014-03-08 23:03 - 283711349 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.mp4
2014-03-08 23:07 - 2014-03-08 23:02 - 374748227 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.mp4
2014-03-08 23:03 - 2014-03-08 23:03 - 00049272 _____ () C:\Users\vacicak\Downloads\Grimm.S03E14.HDTV.x264-LOL.srt
2014-03-08 23:02 - 2014-03-08 23:02 - 00029308 _____ () C:\Users\vacicak\Downloads\Vikings.S02E02.HDTV.x264-EXCELLENCE.srt
2014-03-08 22:37 - 2014-03-08 22:35 - 285655266 _____ () C:\Users\vacicak\Downloads\Suits.S03E11.HDTV.x264-EXCELLENCE.[VTV].mp4
2014-03-08 22:35 - 2014-03-08 22:35 - 00028448 _____ () C:\Users\vacicak\Downloads\suits.buried.secrets.(2014).cze.1cd.(5573315).zip
2014-03-08 17:19 - 2013-12-10 21:06 - 00000839 _____ () C:\Users\vacicak\Desktop\GamePark klient 2.lnk
2014-03-08 17:19 - 2013-11-22 22:24 - 00001853 _____ () C:\Users\Public\Desktop\3DMark 11.lnk
2014-03-08 17:19 - 2013-11-22 21:46 - 00000992 _____ () C:\Users\vacicak\Desktop\Core Temp.lnk
2014-03-08 17:19 - 2013-11-22 20:14 - 00000913 _____ () C:\Users\Public\Desktop\CPUID CPU-Z.lnk
2014-03-08 17:19 - 2013-11-15 22:20 - 00001011 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-03-08 17:15 - 2013-12-26 16:28 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-03-08 11:44 - 2014-03-08 11:38 - 539607188 _____ () C:\Users\vacicak\Downloads\plib_chanel_preston_bb052213_480p_2000.mp4
2014-03-08 11:43 - 2014-03-08 11:37 - 415775797 _____ () C:\Users\vacicak\Downloads\tlib_stevie_shae_kl012814_v2_480p_2000.mp4
2014-03-07 22:34 - 2014-03-07 22:34 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-03-07 22:31 - 2014-03-07 22:31 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-03-01 07:05 - 2014-03-13 20:08 - 23133696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-03-01 06:17 - 2014-03-13 20:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-03-01 06:16 - 2014-03-13 20:08 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-03-01 05:58 - 2014-03-13 20:08 - 02765824 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-03-01 05:52 - 2014-03-13 20:08 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-03-01 05:51 - 2014-03-13 20:08 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-03-01 05:42 - 2014-03-13 20:08 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-03-01 05:40 - 2014-03-13 20:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-03-01 05:37 - 2014-03-13 20:08 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-03-01 05:33 - 2014-03-13 20:08 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-03-01 05:33 - 2014-03-13 20:08 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-03-01 05:32 - 2014-03-13 20:08 - 00708608 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-03-01 05:30 - 2014-03-13 20:08 - 17074688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-03-01 05:23 - 2014-03-13 20:08 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-03-01 05:17 - 2014-03-13 20:08 - 00218624 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-03-01 05:11 - 2014-03-13 20:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-03-01 05:02 - 2014-03-13 20:08 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-03-01 04:54 - 2014-03-13 20:08 - 05768704 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-03-01 04:52 - 2014-03-13 20:08 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-03-01 04:51 - 2014-03-13 20:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-03-01 04:47 - 2014-03-13 20:08 - 02168320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-03-01 04:43 - 2014-03-13 20:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-03-01 04:43 - 2014-03-13 20:08 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-03-01 04:42 - 2014-03-13 20:08 - 00627200 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-03-01 04:40 - 2014-03-13 20:08 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-03-01 04:38 - 2014-03-13 20:08 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-03-01 04:37 - 2014-03-13 20:08 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-03-01 04:35 - 2014-03-13 20:08 - 02041856 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-03-01 04:18 - 2014-03-13 20:08 - 13051904 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-03-01 04:16 - 2014-03-13 20:08 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-03-01 04:14 - 2014-03-13 20:08 - 04244480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-03-01 04:10 - 2014-03-13 20:08 - 02334208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-03-01 04:03 - 2014-03-13 20:08 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-03-01 04:00 - 2014-03-13 20:08 - 01964032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-03-01 03:57 - 2014-03-13 20:08 - 11266048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-03-01 03:38 - 2014-03-13 20:08 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-03-01 03:32 - 2014-03-13 20:08 - 01820160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-03-01 03:27 - 2014-03-13 20:08 - 01156096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-03-01 03:25 - 2014-03-13 20:08 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-03-01 03:25 - 2014-03-13 20:08 - 00703488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-02-26 03:00 - 2013-11-15 19:21 - 01563000 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-02-25 20:52 - 2014-02-25 20:52 - 00293040 _____ () C:\Windows\Minidump\022514-4321-01.dmp
2014-02-25 20:52 - 2014-01-12 08:23 - 00000000 ____D () C:\Windows\Minidump
2014-02-22 08:55 - 2014-02-22 08:55 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-02-22 08:55 - 2013-11-15 19:20 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
2014-02-18 15:20 - 2014-02-18 15:19 - 32246216 _____ (PandoraTV) C:\Users\vacicak\Desktop\KMPlayer_3-8-0-120.exe
2014-02-18 15:20 - 2013-11-15 23:57 - 00001035 _____ () C:\Users\vacicak\Desktop\KMPlayer.lnk
2014-02-18 14:31 - 2013-11-15 22:21 - 00000000 ____D () C:\Program Files (x86)\Overwolf
2014-02-17 14:33 - 2013-11-18 03:16 - 00000000 ____D () C:\ProgramData\Overwolf
2014-02-17 14:32 - 2013-11-15 19:33 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-02-15 14:52 - 2013-11-15 22:24 - 00000000 ____D () C:\Hry
2014-02-14 19:35 - 2014-02-14 19:35 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-02-14 08:12 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-03-10 05:39




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.69 GB) (Free:15.76 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive f: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive g: () (Fixed) (Total:931.41 GB) (Free:568.01 GB) NTFS

Available physical RAM: 6120.53 MB
Total physical RAM: 8136.01 MB
Percentage of memory in use: 24%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 112 GB) (Disk ID: B8D89003)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 932 GB) (Disk ID: 0C5B82A6)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: ESET Smart Security 4.2 (Enabled - Up to date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AS: ESET Smart Security 4.2 (Enabled - Up to date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET personal firewall (Enabled) {4FE52EC8-CB26-1113-0EFE-8842E2773BAA}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\vacicak\Desktop" je 530 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Přílohy
Addition2.rar
(7.38 KiB) Staženo 102 x
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#9 Příspěvek od vyosek »

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
KU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
C:\Program Files (x86)\WinRST
C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
vacicak
Návštěvník
Návštěvník
Příspěvky: 17
Registrován: 13 Bře 2014 20:19

Re: awardhotspot, valuedealshopper

#10 Příspěvek od vacicak »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 13-03-2014
Ran by vacicak at 2014-03-14 14:34:07 Run:1
Running from C:\Users\vacicak\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [NvBackend] - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-01-21] (NVIDIA Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [301568 2013-11-16] (Microsoft Corporation)
KU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Run: [EADM] - G:\Origin\Origin.exe [3588952 2014-03-11] (Electronic Arts)
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}

R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
R2 WinRST; C:\Program Files (x86)\WinRST\WinRST.exe [59904 2014-02-26] ()

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

2014-03-13 21:24 - 2014-03-13 21:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-03-13 21:19 - 2014-03-13 21:27 - 00007708 _____ () C:\zoek-results.log
2014-03-13 21:19 - 2014-03-13 21:23 - 00000000 ____D () C:\zoek_backup
2014-03-13 21:18 - 2014-03-13 21:19 - 01285120 _____ () C:\Users\vacicak\Desktop\zoek.exe
2014-03-13 20:44 - 2014-03-13 20:44 - 00000939 _____ () C:\Users\vacicak\Desktop\JRT.txt
2014-03-13 20:40 - 2014-03-13 20:40 - 01949184 _____ () C:\Users\vacicak\Desktop\adwcleaner.exe
2014-03-13 20:38 - 2014-03-13 20:38 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT(1).exe
2014-03-13 20:34 - 2014-03-13 20:34 - 00007999 _____ () C:\Users\vacicak\Desktop\Addition.rar
2014-03-13 20:30 - 2014-03-13 20:30 - 00112640 _____ (forum.viry.cz) C:\Users\vacicak\Desktop\FRSTLauncher.exe
2014-03-13 20:15 - 2014-03-13 20:15 - 10285040 _____ (Malwarebytes Corporation ) C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe
2014-03-13 20:08 - 2014-03-13 20:09 - 01037734 _____ (Thisisu) C:\Users\vacicak\Downloads\JRT.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 10170096 _____ (Elex do Brasil Participa??es Ltda) C:\Users\vacicak\Downloads\yet_another_cleaner.exe
2014-03-11 15:32 - 2014-03-11 15:32 - 00001780 _____ () C:\Users\Public\Desktop\YAC.lnk
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Users\vacicak\AppData\Local\WinRST
2014-02-21 19:00 - 2014-02-21 19:00 - 00000000 ____D () C:\Program Files (x86)\WinRST
C:\Program Files (x86)\WinRST
C:\Program Files (x86)\PANDORA.TV

Hosts:
CMD: shutdown /r /f /t 2

End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\NvBackend => Value deleted successfully.
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce\\SPReview => Value deleted successfully.
HKU\S-1-5-21-721652108-3216979840-2912525628-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoLowDiskSpaceChecks => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value deleted successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key deleted successfully.
HKCR\CLSID\{6A1806CD-94D4-4689-BA73-E35EA1EA9990} => Key not found.
PanService => Service stopped successfully.
PanService => Service deleted successfully.
WinRST => Unable to stop service
WinRST => Service deleted successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\vacicak\Desktop\zoek.exe => Moved successfully.
C:\Users\vacicak\Desktop\JRT.txt => Moved successfully.
C:\Users\vacicak\Desktop\adwcleaner.exe => Moved successfully.
C:\Users\vacicak\Downloads\JRT(1).exe => Moved successfully.
C:\Users\vacicak\Desktop\Addition.rar => Moved successfully.
C:\Users\vacicak\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\vacicak\Downloads\mbam-setup-1.75.0.1300.exe => Moved successfully.
C:\Users\vacicak\Downloads\JRT.exe => Moved successfully.
C:\Users\vacicak\Downloads\yet_another_cleaner.exe => Moved successfully.
C:\Users\Public\Desktop\YAC.lnk => Moved successfully.
C:\Users\vacicak\AppData\Local\WinRST => Moved successfully.
C:\Program Files (x86)\WinRST => Moved successfully.
"C:\Program Files (x86)\WinRST" => File/Directory not found.
C:\Program Files (x86)\PANDORA.TV => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

========= shutdown /r /f /t 2 =========


========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: awardhotspot, valuedealshopper

#11 Příspěvek od vyosek »

Tak jeste uklidime :James008:

:arrow: T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
  • Stahnete a spustte
  • Pro potvrzeni volby mackejte A, Enter
  • Po pouziti utilitu smazte
  • Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
:arrow: OTC http://oldtimer.geekstogo.com/OTC.exe
  • Stahnete a spustte
  • Kliknete na CleanUp a potvrdte YES
  • Program uklidi a restartuje PC

:arrow: TFC http://oldtimer.geekstogo.com/TFC.exe
  • Stahnete a spustte
  • Kliknete na Start a potvrdte OK
  • Program uklidi a restartuje pc
  • Po pouziti utilitu smazte
:arrow: Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
  • Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
Panel registry
  • dejte Hledej problémy
  • nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
  • postup opakujte dokud nebude bez problemu - vetsinou cca 3x
Panel nástroje
  • Zde muzete odinstalovat nepotrebne programy
CCleaner doporucuji pouzivat cca jednou za tyden

:arrow: A pokud nejsou problemy ci dotazy, je to z me strany vse :|
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“