Zavirovany PC

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz

Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Odpovědět
Zpráva
Autor
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Zavirovany PC

#1 Příspěvek od Sukurij »

Dobrý den,
nějak mi rodina zavirovala PC. Prosím o kontrolu a případně pomoc. Předem děkuji

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 11.0.9600.17041
Run by Jirka at 20:08:22 on 2014-05-16
Microsoft Windows 7 Professional 6.1.7601.1.1250.420.1029.18.4095.2015 [GMT 2:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\PROGRAM FILES\MICROSOFT SECURITY CLIENT\MSMPENG.EXE
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\ARM\1.0\ARMSVC.EXE
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files (x86)\Surftastic\updateSurftastic.exe
C:\PROGRAM FILES (X86)\SURFTASTIC\BIN\UTILSURFTASTIC.EXE
C:\WINDOWS\SYSTEM32\TASKHOST.EXE
C:\Windows\system32\Dwm.exe
C:\WINDOWS\EXPLORER.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE
C:\PROGRAM FILES (X86)\WINDOWS SIDEBAR\SIDEBAR.EXE
D:\PROGRAM FILES (X86)\KIES\KIES.EXE
C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE
D:\PROGRAM FILES (X86)\KIES\KIESTRAYAGENT.EXE
D:\PROGRAM FILES (X86)\DAEMON TOOLS LITE\DTSHELLHLP.EXE
C:\PROGRAM FILES (X86)\SURFTASTIC\BIN\SURFTASTIC.PURBROWSE64.EXE
C:\WINDOWS\SYSTEM32\SEARCHINDEXER.EXE
C:\PROGRAM FILES (X86)\SURFTASTIC\BIN\SURFTASTIC.BROWSERADAPTER.EXE
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPNETWK.EXE
C:\PROGRAM FILES\MICROSOFT SECURITY CLIENT\NISSRV.EXE
C:\WINDOWS\SYSTEM32\TASKENG.EXE
C:\PROGRAM FILES (X86)\NERO\UPDATE\NASVC.EXE
C:\PROGRAMDATA\BATTLE.NET\AGENT\AGENT.2880\AGENT.EXE
C:\WINDOWS\SYSTEM32\TASKENG.EXE
C:\PROGRAM FILES\WINDOWS MEDIA PLAYER\WMPDMC.EXE
C:\PROGRAM FILES (X86)\WINDOWS MEDIA PLAYER\WMPLAYER.EXE
C:\PROGRAM FILES (X86)\DIABLO III\DIABLO III.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\WINDOWS\SYSTEM32\TASKHOST.EXE
C:\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\CHROME.EXE
C:\WINDOWS\SYSTEM32\SEARCHPROTOCOLHOST.EXE
C:\WINDOWS\SYSTEM32\SEARCHFILTERHOST.EXE
C:\WINDOWS\SYSTEM32\WBEM\WMIPRVSE.EXE
C:\WINDOWS\SYSTEM32\CSCRIPT.EXE
.
============== Pseudo HJT Report ===============
.
uSearch Page = www.bing.com
mWinlogon: Userinit = userinit.exe
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
uRun: [DAEMON Tools Lite] "D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
uRun: [Sidebar] C:\Program Files (x86)\Windows Sidebar\sidebar.exe /autoRun
uRun: [KiesPreload] D:\Program Files (x86)\Kies\Kies.exe /preload
uRun: [KiesAirMessage] D:\Program Files (x86)\Kies\KiesAirMessage.exe -startup
uRun: [] D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe
mRun: [GrooveMonitor] "C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe"
mRun: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
mRun: [KiesTrayAgent] D:\Program Files (x86)\Kies\KiesTrayAgent.exe
mRun: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
mPolicies-Explorer: NoActiveDesktop = dword:1
mPolicies-Explorer: NoActiveDesktopChanges = dword:1
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xportovat do aplikace Microsoft Excel - C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - C:\Program Files (x86)\Microsoft Office\Office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
TCP: NameServer = 37.44.16.254 37.44.17.254
TCP: Interfaces\{9E98D580-AB1F-4FD0-9AB5-353E9101719B} : NameServer = 192.168.1.1,8.8.8.8
TCP: Interfaces\{9E98D580-AB1F-4FD0-9AB5-353E9101719B} : DHCPNameServer = 37.44.16.254 37.44.17.254
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files (x86)\Google\Chrome\Application\34.0.1847.137\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
x64-mSearch Page = www.bing.com
x64-Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
x64-Run: [SpywareTerminatorShield] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
x64-Run: [SpywareTerminatorUpdater] C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
x64-Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - <orphaned>
x64-Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - <orphaned>
x64-SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;C:\Windows\System32\drivers\MpFilter.sys [2014-1-25 268512]
R1 {01531192-f7ef-415f-a549-cfdb11836731}w64;{01531192-f7ef-415f-a549-cfdb11836731}w64;C:\Windows\System32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys [2014-4-28 61120]
R2 AMD External Events Utility;AMD External Events Utility;C:\Windows\System32\atiesrxx.exe [2009-8-18 203264]
R2 NAUpdate;Nero Update;C:\Program Files (x86)\Nero\Update\NASvc.exe [2013-7-18 762192]
R2 NisDrv;Microsoft Network Inspection System;C:\Windows\System32\drivers\NisDrvWFP.sys [2013-9-27 133928]
R2 sp_rsdrv2;Spyware Terminator Driver Filter;C:\Windows\System32\drivers\stflt.sys [2014-3-17 51496]
R2 ST2012_Svc;Spyware Terminator 2012 Realtime Shield Service;C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [2014-3-17 1149104]
R2 Update Surftastic;Update Surftastic;C:\Program Files (x86)\Surftastic\updateSurftastic.exe [2014-3-13 317352]
R2 Util Surftastic;Util Surftastic;C:\Program Files (x86)\Surftastic\bin\utilSurftastic.exe [2014-3-14 317352]
R3 NisSrv;Kontrola sítě Microsoft;C:\Program Files\Microsoft Security Client\NisSrv.exe [2014-3-11 347872]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-9-12 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-9-12 124088]
S2 SkypeUpdate;Skype Updater;C:\Program Files (x86)\Skype\Updater\Updater.exe [2013-10-23 172192]
S3 dg_ssudbus;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.);C:\Windows\System32\drivers\ssudbus.sys [2014-3-18 108800]
S3 dmvsc;dmvsc;C:\Windows\System32\drivers\dmvsc.sys [2011-4-12 71168]
S3 IEEtwCollectorService;Internet Explorer ETW Collector Service;C:\Windows\System32\ieetwcollector.exe [2014-4-29 111616]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;C:\Windows\System32\drivers\rdpvideominiport.sys [2014-3-8 19456]
S3 ssudmdm;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.);C:\Windows\System32\drivers\ssudmdm.sys [2014-3-18 206080]
S3 ssudserd;SAMSUNG Mobile USB Diagnostic Serial Port(DEVGURU Ver.);C:\Windows\System32\drivers\ssudserd.sys [2014-3-18 206080]
S3 StorSvc;Služba úložiště;C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted [2012-1-12 27648]
S3 TsUsbFlt;TsUsbFlt;C:\Windows\System32\drivers\TsUsbFlt.sys [2014-3-8 56832]
S3 TsUsbGD;Remote Desktop Generic USB Device;C:\Windows\System32\drivers\TsUsbGD.sys [2014-3-8 30208]
S3 WatAdminSvc;Služba Technologie aktivace Windows;C:\Windows\System32\Wat\WatAdminSvc.exe [2014-3-8 1255736]
.
=============== File Associations ===============
.
ShellExec: SC2Editor.exe: open="D:/Games/StarCraft II/Support/SC2Editor.exe" "%1"
ShellExec: SC2Switcher.exe: open="D:/Games/StarCraft II/Support/SC2Switcher.exe" "%1"
.
=============== Created Last 30 ================
.
2014-05-15 22:13:32 1031560 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{26599AAB-EBEB-4EB5-9AFA-05E8141A70D8}\gapaengine.dll
2014-05-15 22:13:20 10651704 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{7974AADC-1F0A-406C-BBDF-DC1FF523624B}\mpengine.dll
2014-05-14 06:35:48 10651704 ----a-w- C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2014-05-14 01:02:55 2724864 ----a-w- C:\Windows\SysWow64\mshtml.tlb
2014-05-14 01:02:55 2724864 ----a-w- C:\Windows\System32\mshtml.tlb
2014-05-06 20:25:44 -------- d-s---w- C:\Windows\System32\CompatTel
2014-04-29 05:59:59 66048 ----a-w- C:\Windows\System32\iesetup.dll
2014-04-28 19:47:40 61120 ----a-w- C:\Windows\System32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys
2014-04-19 10:03:59 -------- d-----w- C:\Users\Jirka\AppData\Roaming\TS3Client
2014-04-19 10:03:51 -------- d-----w- C:\Program Files\TeamSpeak 3 Client
2014-04-19 09:20:45 34064 ----a-w- C:\Windows\SysWow64\lhacm.acm
2014-04-17 14:21:52 -------- d-----w- C:\Users\Jirka\AppData\Local\Adobe
.
==================== Find3M ====================
.
2014-05-09 06:14:03 477184 ----a-w- C:\Windows\System32\aepdu.dll
2014-05-09 06:11:23 424448 ----a-w- C:\Windows\System32\aeinv.dll
2014-04-12 02:34:44 95680 ----a-w- C:\Windows\System32\drivers\ksecdd.sys
2014-04-12 02:34:43 155072 ----a-w- C:\Windows\System32\drivers\ksecpkg.sys
2014-04-12 02:32:21 362496 ----a-w- C:\Windows\System32\wow64win.dll
2014-04-12 02:32:21 243712 ----a-w- C:\Windows\System32\wow64.dll
2014-04-12 02:32:21 13312 ----a-w- C:\Windows\System32\wow64cpu.dll
2014-04-12 02:32:20 215552 ----a-w- C:\Windows\System32\winsrv.dll
2014-04-12 02:32:08 29184 ----a-w- C:\Windows\System32\sspisrv.dll
2014-04-12 02:32:08 136192 ----a-w- C:\Windows\System32\sspicli.dll
2014-04-12 02:32:07 28160 ----a-w- C:\Windows\System32\secur32.dll
2014-04-12 02:32:04 307712 ----a-w- C:\Windows\System32\ncrypt.dll
2014-04-12 02:32:04 16384 ----a-w- C:\Windows\System32\ntvdm64.dll
2014-04-12 02:32:01 1461248 ----a-w- C:\Windows\System32\lsasrv.dll
2014-04-12 02:31:57 43520 ----a-w- C:\Windows\System32\csrsrv.dll
2014-04-12 02:31:56 463872 ----a-w- C:\Windows\System32\certcli.dll
2014-04-12 02:31:55 58368 ----a-w- C:\Windows\System32\appidapi.dll
2014-04-12 02:31:55 34304 ----a-w- C:\Windows\System32\appidsvc.dll
2014-04-12 02:31:44 112640 ----a-w- C:\Windows\System32\smss.exe
2014-04-12 02:31:33 31232 ----a-w- C:\Windows\System32\lsass.exe
2014-04-12 02:31:24 338432 ----a-w- C:\Windows\System32\conhost.exe
2014-04-12 02:31:21 64000 ----a-w- C:\Windows\System32\auditpol.exe
2014-04-12 02:31:21 17920 ----a-w- C:\Windows\System32\appidcertstorecheck.exe
2014-04-12 02:31:21 148480 ----a-w- C:\Windows\System32\appidpolicyconverter.exe
2014-04-12 02:30:01 60416 ----a-w- C:\Windows\System32\msobjs.dll
2014-04-12 02:29:56 145920 ----a-w- C:\Windows\System32\msaudite.dll
2014-04-12 02:06:49 22016 ----a-w- C:\Windows\SysWow64\secur32.dll
2014-04-12 02:06:46 220160 ----a-w- C:\Windows\SysWow64\ncrypt.dll
2014-04-12 02:06:46 14336 ----a-w- C:\Windows\SysWow64\ntvdm64.dll
2014-04-12 02:06:35 342528 ----a-w- C:\Windows\SysWow64\certcli.dll
2014-04-12 02:06:34 50688 ----a-w- C:\Windows\SysWow64\appidapi.dll
2014-04-12 02:06:34 44032 ----a-w- C:\Windows\apppatch\acwow64.dll
2014-04-12 02:06:23 25600 ----a-w- C:\Windows\SysWow64\setup16.exe
2014-04-12 02:06:05 50176 ----a-w- C:\Windows\SysWow64\auditpol.exe
2014-04-12 02:05:54 96768 ----a-w- C:\Windows\SysWow64\sspicli.dll
2014-04-12 02:05:54 5120 ----a-w- C:\Windows\SysWow64\wow32.dll
2014-04-12 02:04:51 60416 ----a-w- C:\Windows\SysWow64\msobjs.dll
2014-04-12 02:04:47 145920 ----a-w- C:\Windows\SysWow64\msaudite.dll
2014-04-12 01:34:45 61952 ----a-w- C:\Windows\System32\drivers\appid.sys
2014-04-12 01:03:16 7680 ----a-w- C:\Windows\SysWow64\instnm.exe
2014-04-12 01:03:15 2048 ----a-w- C:\Windows\SysWow64\user.exe
2014-04-12 01:00:50 6144 ---ha-w- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll
2014-04-12 01:00:50 4608 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll
2014-04-12 01:00:50 3584 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll
2014-04-12 01:00:50 3072 ---ha-w- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll
2014-04-05 08:12:51 414368 ----a-w- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
2014-03-31 20:46:48 130712 ----a-w- C:\Windows\SysWow64\MSSTDFMT.DLL
2014-03-31 20:46:48 1070232 ----a-w- C:\Windows\SysWow64\MSCOMCTL.OCX
2014-03-17 19:17:51 51496 ----a-w- C:\Windows\System32\drivers\stflt.sys
2014-03-11 07:52:30 133928 ----a-w- C:\Windows\System32\drivers\NisDrvWFP.sys
2014-03-08 13:54:46 381440 ----a-w- C:\Windows\System32\drivers\sptd.sys
2014-03-07 16:39:20 0 ----a-w- C:\Windows\ativpsrm.bin
2014-03-06 09:31:33 4096 ----a-w- C:\Windows\System32\ieetwcollectorres.dll
2014-03-06 08:57:34 548352 ----a-w- C:\Windows\System32\vbscript.dll
2014-03-06 08:57:20 48640 ----a-w- C:\Windows\System32\ieetwproxystub.dll
2014-03-06 08:29:40 139264 ----a-w- C:\Windows\System32\ieUnatt.exe
2014-03-06 08:29:14 111616 ----a-w- C:\Windows\System32\ieetwcollector.exe
2014-03-06 08:28:15 752640 ----a-w- C:\Windows\System32\jscript9diag.dll
2014-03-06 08:15:54 940032 ----a-w- C:\Windows\System32\MsSpellCheckingFacility.exe
2014-03-06 08:11:41 5784064 ----a-w- C:\Windows\System32\jscript9.dll
2014-03-06 08:02:34 61952 ----a-w- C:\Windows\SysWow64\iesetup.dll
2014-03-06 08:02:33 455168 ----a-w- C:\Windows\SysWow64\vbscript.dll
2014-03-06 08:01:01 51200 ----a-w- C:\Windows\SysWow64\ieetwproxystub.dll
2014-03-06 07:56:43 38400 ----a-w- C:\Windows\System32\JavaScriptCollectionAgent.dll
2014-03-06 07:46:36 4254720 ----a-w- C:\Windows\SysWow64\jscript9.dll
2014-03-06 07:38:13 112128 ----a-w- C:\Windows\SysWow64\ieUnatt.exe
2014-03-06 07:36:40 592896 ----a-w- C:\Windows\SysWow64\jscript9diag.dll
2014-03-06 07:13:43 32256 ----a-w- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll
2014-03-06 07:11:15 2043904 ----a-w- C:\Windows\System32\inetcpl.cpl
2014-03-06 06:40:39 1967104 ----a-w- C:\Windows\SysWow64\inetcpl.cpl
2014-03-06 06:22:40 2260480 ----a-w- C:\Windows\System32\wininet.dll
2014-03-06 05:41:49 1789440 ----a-w- C:\Windows\SysWow64\wininet.dll
2014-03-04 11:11:29 5553088 ----a-w- C:\Windows\System32\ntoskrnl.exe
2014-03-04 10:42:44 3974080 ----a-w- C:\Windows\SysWow64\ntkrnlpa.exe
2014-03-04 10:42:44 3918784 ----a-w- C:\Windows\SysWow64\ntoskrnl.exe
2014-03-04 10:39:39 38912 ----a-w- C:\Windows\SysWow64\wincredprovider.dll
2014-03-04 10:39:27 172032 ----a-w- C:\Windows\SysWow64\wdigest.dll
2014-03-04 10:39:25 65536 ----a-w- C:\Windows\SysWow64\TSpkg.dll
2014-03-04 10:39:22 247808 ----a-w- C:\Windows\SysWow64\schannel.dll
2014-03-04 10:39:17 260096 ----a-w- C:\Windows\SysWow64\msv1_0.dll
2014-03-04 10:39:13 551424 ----a-w- C:\Windows\SysWow64\kerberos.dll
2014-03-04 10:39:08 49152 ----a-w- C:\Windows\SysWow64\dpapiprovider.dll
2014-03-04 10:39:08 39424 ----a-w- C:\Windows\SysWow64\dimsroam.dll
2014-03-04 10:39:07 56320 ----a-w- C:\Windows\SysWow64\cngprovider.dll
2014-03-04 10:39:07 17408 ----a-w- C:\Windows\SysWow64\credssp.dll
2014-03-04 10:39:06 53248 ----a-w- C:\Windows\SysWow64\capiprovider.dll
2014-03-04 10:39:05 51200 ----a-w- C:\Windows\SysWow64\adprovider.dll
2014-03-04 10:38:24 275456 ----a-w- C:\Windows\SysWow64\KernelBase.dll
2014-03-04 09:44:03 722944 ----a-w- C:\Windows\System32\objsel.dll
2014-03-04 09:17:19 538112 ----a-w- C:\Windows\SysWow64\objsel.dll
.
============= FINISH: 20:09:44,62 ===============
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#2 Příspěvek od vyosek »

Zdravim :)

:arrow: Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
  • Ulozte nejlepe na plochu
  • Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
  • Probehne vytvoreni zalohy a nasledne prohledavani
  • Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
:arrow: Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
  • Ulozte nejlepe na plochu
  • Ukoncete vsechny programy
  • Kliknete na Scan a nasledne Clean
  • Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#3 Příspěvek od Sukurij »

Při stahován Junkware Removal Tool mi zamrzne celý PC :/ , tedy jsem udelal ten AdwCleaner a z něho log:

# AdwCleaner v3.208 - Report created 16/05/2014 at 20:39:47
# Updated 11/05/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Jirka - JIRKA-PC
# Running from : C:\Users\Jirka\Downloads\adwcleaner_3.208.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Program Files (x86)\Surftastic
Folder Deleted : C:\Users\Jirka\AppData\Local\Conduit
Folder Deleted : C:\Users\Jirka\AppData\Local\GCC
Folder Deleted : C:\Users\Jirka\AppData\Local\Mobogenie
Folder Deleted : C:\Users\Jirka\AppData\Local\NativeMessaging
Folder Deleted : C:\Users\Jirka\AppData\Local\Temp\NativeMessaging
Folder Deleted : C:\Users\Jirka\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Jirka\AppData\Roaming\Oxy
Folder Deleted : C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Oxy
Folder Deleted : C:\Users\Jirka\Documents\Mobogenie
File Deleted : C:\END
File Deleted : C:\Users\Jirka\daemonprocess.txt
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\user data\default\local storage\hxxp_pricegong.conduitapps.com_0.localstorage
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\user data\default\local storage\hxxp_pricegong.conduitapps.com_0.localstorage-journal
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage
File Deleted : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_storage.conduit.com_0.localstorage-journal

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\AppID\secman.DLL
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager
Key Deleted : HKLM\SOFTWARE\Classes\secman.OutlookSecurityManager.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{4D076AB4-7562-427A-B5D2-BD96E19DEE56}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{826D7151-8D99-434B-8540-082B8C2AE556}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{11549FE4-7C5A-4C17-9FC3-56FC5162A994}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8EEE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66EEF543-A9AC-4A9D-AA3C-1ED148AC8FFE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\Escolade
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17041


-\\ Google Chrome v34.0.1847.137

[ File : C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www.mvanek.cz/babylon5/wiki3/index.php? ... earchTerms}
Deleted [Search Provider] : hxxp://search.sweetim.com/search.asp?src=6&q={searchTerms}&barid={9B5ECA77-F79B-11E2-B084-000272B1B273}&crg=3.1010000.10039&st=23&ptr=100

*************************

AdwCleaner[R0].txt - [4311 octets] - [16/05/2014 20:38:49]
AdwCleaner[S0].txt - [4217 octets] - [16/05/2014 20:39:47]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4277 octets] ##########
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#4 Příspěvek od vyosek »

:arrow: Ou Kej, aspon neco zabralo :) JRT neni bezpodminecne nutny...

:arrow: Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
  • Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
  • Do okna vlozte skript nize

  • Kód: Vybrat vše

    autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;
  • Nasledne kliknete na Run Script
  • PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#5 Příspěvek od Sukurij »

Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Jirka on p  16.05.2014 at 20:55:43,14.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Jirka\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

16.5.2014 20:57:23 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handle within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Util Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Util Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Util Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Util Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Update Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Update Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Eventlog\Application\Update Surftastic deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Update Surftastic deleted successfully

==== Deleting Files \ Folders ======================

C:\Users\Jirka\.android deleted
C:\PROGRA~2\MyFree Codec deleted
C:\Users\Jirka\AppData\Local\CRE deleted
C:\Users\Jirka\AppData\Local\cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyFree Codec deleted
C:\windows\SysNative\tasks\Oxy deleted

==== Chrome Look ======================


==== Chrome Fix ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_facebook.conduitapps.com_0.localstorage deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_facebook.conduitapps.com_0.localstorage-journal deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_youtube.conduitapps.com_0.localstorage deleted successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_youtube.conduitapps.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{6A1806CD-94D4-4689-BA73-E35EA1EA9990}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchT ... {startPage}"

==== Reset Google Chrome ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Jirka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=174 folders=27 14429238 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Jirka\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Jirka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== EOF on p  16.05.2014 at 21:07:14,80 ======================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#6 Příspěvek od vyosek »

Poprosim o FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#7 Příspěvek od Sukurij »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-05-2014
Ran by Jirka (administrator) on JIRKA-PC on 16-05-2014 21:23:48
Running from C:\Users\Jirka\Downloads
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Czech
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe
(Crawler.com) C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe
(Microsoft Corporation) C:\Program Files (x86)\Windows Sidebar\sidebar.exe
(Samsung) D:\Program Files (x86)\Kies\Kies.exe
(Samsung Electronics Co., Ltd.) D:\Program Files (x86)\Kies\KiesTrayAgent.exe
(Disc Soft Ltd) D:\Program Files (x86)\DAEMON Tools Lite\DTShellHlp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => D:\Program Files (x86)\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesPreload] => D:\Program Files (x86)\Kies\Kies.exe [1564992 2014-02-14] (Samsung)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesAirMessage] => D:\Program Files (x86)\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [] => D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)

==================== Internet (Whitelisted) ====================

SearchScopes: HKCU - DefaultScope {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = http://www.google.com/search?q={searchT ... {startPage}
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 37.44.16.254 37.44.17.254
Tcpip\..\Interfaces\{9E98D580-AB1F-4FD0-9AB5-353E9101719B}: [NameServer]192.168.1.1,8.8.8.8

FireFox:
========
FF Plugin: @microsoft.com/GENUINE - disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM - C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

Chrome:
=======
CHR Extension: (Dokumenty Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-08]
CHR Extension: (Disk Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-08]
CHR Extension: (YouTube) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-08]
CHR Extension: (Peněženka Google) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-08]
CHR Extension: (Gmail) - C:\Users\Jirka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-08]

==================== Services (Whitelisted) =================

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 ST2012_Svc; C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe [1149104 2013-04-03] (Crawler.com)

==================== Drivers (Whitelisted) ====================

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [8192 2005-03-29] ()
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2014-03-08] (Duplex Secure Ltd.)
R2 sp_rsdrv2; C:\Windows\System32\DRIVERS\stflt.sys [51496 2014-03-17] (Windows (R) Win 7 DDK provider)
S3 ssudserd; C:\Windows\System32\DRIVERS\ssudserd.sys [206080 2014-01-23] (DEVGURU Co., LTD.(www.devguru.co.kr))
R1 {01531192-f7ef-415f-a549-cfdb11836731}w64; C:\Windows\System32\drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys [61120 2014-04-24] (StdLib)
U3 anm1l2dg; C:\Windows\System32\Drivers\anm1l2dg.sys [0 ] (Advanced Micro Devices)

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-05-16 21:23 - 2014-05-16 21:23 - 00008229 _____ () C:\Users\Jirka\Downloads\FRST.txt
2014-05-16 21:23 - 2014-05-16 21:23 - 00000000 ____D () C:\FRST
2014-05-16 21:21 - 2014-05-16 21:21 - 02067456 _____ (Farbar) C:\Users\Jirka\Downloads\FRST64.exe
2014-05-16 21:05 - 2014-05-16 20:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-16 20:57 - 2014-05-16 21:07 - 00006622 _____ () C:\zoek-results.log
2014-05-16 20:51 - 2014-05-16 21:04 - 00000000 ____D () C:\zoek_backup
2014-05-16 20:50 - 2014-05-16 20:50 - 01285120 _____ () C:\Users\Jirka\Downloads\zoek.exe
2014-05-16 20:43 - 2014-05-16 20:47 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 906309.crdownload
2014-05-16 20:39 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-05-16 20:38 - 2014-05-16 20:40 - 00000000 ____D () C:\AdwCleaner
2014-05-16 20:38 - 2014-05-16 20:38 - 01325827 _____ () C:\Users\Jirka\Downloads\adwcleaner_3.208.exe
2014-05-16 20:30 - 2014-05-16 20:30 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 606375.crdownload
2014-05-16 20:25 - 2014-05-16 20:25 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 819382.crdownload
2014-05-16 20:10 - 2014-05-16 20:10 - 00006699 _____ () C:\Users\Jirka\Desktop\attach.txt
2014-05-16 20:10 - 2014-05-16 20:09 - 00016910 _____ () C:\Users\Jirka\Desktop\dds.txt
2014-05-16 20:07 - 2014-05-16 20:07 - 00688992 ____R (Swearware) C:\Users\Jirka\Downloads\dds.exe
2014-05-16 11:17 - 2014-05-16 12:44 - 1499898906 _____ () C:\Users\Jirka\Downloads\Královna-prokletých-2002.mkv
2014-05-15 23:19 - 2014-05-16 00:00 - 364900352 _____ () C:\Users\Jirka\Downloads\The-Originals-1x22-CZ-titulky.avi
2014-05-15 13:39 - 2014-05-15 14:18 - 364834816 _____ () C:\Users\Jirka\Downloads\The-Originals-1x21-CZ-titulky (1).avi
2014-05-14 19:41 - 2014-05-14 19:41 - 00017578 _____ () C:\Users\Jirka\Downloads\[CzT]Twilight_saga_Rozbresk_2_cast_The_Twilight_Saga_Breaking_Dawn_Part_Two_CZ_2012_ (1).torrent
2014-05-14 19:40 - 2014-05-14 19:40 - 00017578 _____ () C:\Users\Jirka\Downloads\[CzT]Twilight_saga_Rozbresk_2_cast_The_Twilight_Saga_Breaking_Dawn_Part_Two_CZ_2012_.torrent
2014-05-14 11:08 - 2014-05-14 12:53 - 974730307 _____ () C:\Users\Jirka\Downloads\Samec-(2009)-CZ.avi
2014-05-14 03:02 - 2014-05-06 06:40 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-14 03:02 - 2014-05-06 06:17 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-14 03:02 - 2014-05-06 05:25 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-14 03:02 - 2014-05-06 05:07 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-14 03:02 - 2014-05-06 05:00 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-14 03:02 - 2014-05-06 04:10 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-14 01:49 - 2014-05-09 08:14 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-14 01:49 - 2014-05-09 08:11 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-14 01:49 - 2014-04-12 04:34 - 00155072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2014-05-14 01:49 - 2014-04-12 04:34 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2014-05-14 01:49 - 2014-04-12 04:32 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 01164800 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00307712 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2014-05-14 01:49 - 2014-04-12 04:32 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2014-05-14 01:49 - 2014-04-12 04:31 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-05-14 01:49 - 2014-04-12 04:31 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2014-05-14 01:49 - 2014-04-12 04:31 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2014-05-14 01:49 - 2014-04-12 04:31 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2014-05-14 01:49 - 2014-04-12 04:31 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2014-05-14 01:49 - 2014-04-12 04:31 - 00058368 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2014-05-14 01:49 - 2014-04-12 04:31 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2014-05-14 01:49 - 2014-04-12 04:31 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2014-05-14 01:49 - 2014-04-12 04:31 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2014-05-14 01:49 - 2014-04-12 04:31 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2014-05-14 01:49 - 2014-04-12 04:30 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2014-05-14 01:49 - 2014-04-12 04:29 - 00145920 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00685056 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:28 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:06 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-05-14 01:49 - 2014-04-12 04:06 - 00220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2014-05-14 01:49 - 2014-04-12 04:06 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2014-05-14 01:49 - 2014-04-12 04:06 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2014-05-14 01:49 - 2014-04-12 04:06 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2014-05-14 01:49 - 2014-04-12 04:06 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-05-14 01:49 - 2014-04-12 04:06 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2014-05-14 01:49 - 2014-04-12 04:05 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2014-05-14 01:49 - 2014-04-12 04:05 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-05-14 01:49 - 2014-04-12 04:05 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2014-05-14 01:49 - 2014-04-12 04:04 - 00145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2014-05-14 01:49 - 2014-04-12 04:04 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00685056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 04:03 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 03:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2014-05-14 01:49 - 2014-04-12 03:03 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2014-05-14 01:49 - 2014-04-12 03:03 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2014-05-14 01:49 - 2014-04-12 03:00 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 03:00 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 03:00 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2014-05-14 01:49 - 2014-04-12 03:00 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2014-05-14 01:49 - 2014-03-25 04:34 - 14179328 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-05-14 01:49 - 2014-03-25 04:18 - 12877312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-05-14 01:49 - 2014-03-04 13:11 - 05553088 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2014-05-14 01:49 - 2014-03-04 13:08 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00455680 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-05-14 01:49 - 2014-03-04 13:08 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00315904 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\cngprovider.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\capiprovider.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\adprovider.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\dpapiprovider.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00046592 _____ (Microsoft Corporation) C:\Windows\system32\dimsroam.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\wincredprovider.dll
2014-05-14 01:49 - 2014-03-04 13:08 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-05-14 01:49 - 2014-03-04 12:42 - 03974080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2014-05-14 01:49 - 2014-03-04 12:42 - 03918784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2014-05-14 01:49 - 2014-03-04 12:39 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00247808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00056320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cngprovider.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\capiprovider.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adprovider.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00049152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpapiprovider.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dimsroam.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00038912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wincredprovider.dll
2014-05-14 01:49 - 2014-03-04 12:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-05-14 01:49 - 2014-03-04 11:44 - 00722944 _____ (Microsoft Corporation) C:\Windows\system32\objsel.dll
2014-05-14 01:49 - 2014-03-04 11:17 - 00538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\objsel.dll
2014-05-12 20:10 - 2014-05-12 20:10 - 00044051 _____ () C:\Users\Jirka\Downloads\[CzT]Prolhane_krasky_Pretty_Little_Liars_3_serie_CZ_.torrent
2014-05-12 20:10 - 2014-05-12 20:10 - 00044050 _____ () C:\Users\Jirka\Downloads\[CzT]Prolhane_krasky_Pretty_Little_Liars_3_serie_CZ_ (1).torrent
2014-05-12 12:20 - 2014-05-12 13:43 - 768739080 _____ () C:\Users\Jirka\Downloads\Twilight-saga-4.Rozbřesk-1část-cz-dubing-100%.avi
2014-05-10 18:24 - 2014-05-10 19:04 - 363821056 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x21-CZ-titulky.avi
2014-05-09 11:32 - 2014-05-09 11:32 - 00077221 _____ () C:\Users\Jirka\Downloads\[CzT]Prava_krev_True_Blood_1_5_serie.torrent
2014-05-08 20:21 - 2014-05-08 21:02 - 364834816 _____ () C:\Users\Jirka\Downloads\The-Originals-1x21-CZ-titulky.avi
2014-05-08 13:18 - 2014-05-08 17:02 - 2085030597 _____ () C:\Users\Jirka\Downloads\Twilight-saga-3.Zatmeni-cz-dubing-100%.avi
2014-05-08 11:23 - 2014-05-08 12:50 - 807249396 _____ () C:\Users\Jirka\Downloads\Twilight-saga-2---Novy-mesic.avi
2014-05-08 08:46 - 2014-05-08 10:05 - 733812736 _____ () C:\Users\Jirka\Downloads\Twilight-saga-1.Stmivani-cz-dubing-100%.avi
2014-05-07 14:38 - 2014-05-07 14:38 - 00236952 _____ () C:\Users\Jirka\Downloads\FLVPlayerSetup-N4PGq1hdi.exe
2014-05-06 22:25 - 2014-05-14 04:53 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-06 16:17 - 2014-05-06 16:17 - 00019551 _____ () C:\Users\Jirka\Downloads\[CzT]Borek_Stavitel_Bob_the_Builder_1_serie_2001_TvRip_.torrent
2014-05-06 16:17 - 2014-05-06 16:17 - 00013365 _____ () C:\Users\Jirka\Downloads\[CzT]Alvin_a_Chipmunkove_1_2_3_2007_2011_.torrent
2014-05-04 22:02 - 2014-05-04 22:35 - 311168708 _____ () C:\Users\Jirka\Downloads\The-Originals-1x20-CZ-titulky.avi
2014-05-04 16:31 - 2014-05-04 16:31 - 00114176 _____ () C:\Users\Jirka\Downloads\winbox.exe
2014-05-01 16:02 - 2014-05-16 16:02 - 00003506 _____ () C:\Windows\System32\Tasks\Windows Updater
2014-04-29 08:00 - 2014-03-06 11:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-29 08:00 - 2014-03-06 10:57 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-29 08:00 - 2014-03-06 10:40 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-29 08:00 - 2014-03-06 10:39 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-29 08:00 - 2014-03-06 10:32 - 00574976 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-29 08:00 - 2014-03-06 10:28 - 00752640 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-29 08:00 - 2014-03-06 10:09 - 00453120 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-29 08:00 - 2014-03-06 10:03 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-29 08:00 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-04-29 08:00 - 2014-03-06 09:56 - 00038400 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-29 08:00 - 2014-03-06 09:48 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-29 08:00 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-04-29 08:00 - 2014-03-06 09:42 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-29 08:00 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-04-29 08:00 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-04-29 08:00 - 2014-03-06 09:21 - 00628736 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-29 08:00 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-04-29 08:00 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-04-29 08:00 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-04-29 07:59 - 2014-03-06 10:59 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-29 07:59 - 2014-03-06 10:57 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-29 07:59 - 2014-03-06 10:53 - 02767360 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-29 07:59 - 2014-03-06 10:29 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-29 07:59 - 2014-03-06 10:29 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-29 07:59 - 2014-03-06 10:15 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-29 07:59 - 2014-03-06 10:11 - 05784064 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-29 07:59 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-04-29 07:59 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-04-29 07:59 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-04-29 07:59 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-04-29 07:59 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-04-29 07:59 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-04-29 07:59 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-04-29 07:59 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-04-29 07:59 - 2014-03-06 09:11 - 02043904 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-29 07:59 - 2014-03-06 08:53 - 13551104 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-29 07:59 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-04-29 07:59 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-04-29 07:59 - 2014-03-06 08:22 - 02260480 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-29 07:59 - 2014-03-06 07:58 - 01400832 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-29 07:59 - 2014-03-06 07:50 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-29 07:59 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-04-29 07:59 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-04-29 07:59 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-04-28 21:47 - 2014-04-24 12:22 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys
2014-04-27 15:27 - 2014-04-27 16:13 - 412584110 _____ () C:\Users\Jirka\Downloads\The-Originals-1x19-CZ-titulky.avi
2014-04-27 14:45 - 2014-04-27 15:25 - 363866112 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x19-CZ-titulky.avi
2014-04-27 07:30 - 2014-04-27 07:30 - 00014143 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E05_Garfielduv_polarni_kocour_1988_TVRip_.torrent
2014-04-27 07:29 - 2014-04-27 07:29 - 00014677 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E04_Prisera_Frankenstein_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014251 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E02_Bu_kravo_bu_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014246 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E03_Soud_a_omyl_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014134 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E01_Filmove_soky_TVRip_.torrent
2014-04-26 09:52 - 2014-04-26 09:52 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Macromedia
2014-04-24 06:55 - 2014-04-24 06:55 - 00015376 _____ () C:\Users\Jirka\Downloads\[CzT]Doba_ledova_4_Zeme_v_pohybu_Ice_Age_Continental_Drift_2012_CZ_.torrent
2014-04-22 21:38 - 2014-04-22 22:17 - 365924352 _____ () C:\Users\Jirka\Downloads\Arrow-S02E02---cz-tit..avi
2014-04-22 20:56 - 2014-04-22 21:36 - 365920256 _____ () C:\Users\Jirka\Downloads\Arrow-S02E01---cz-tit..avi
2014-04-21 20:42 - 2014-04-21 21:02 - 355459072 _____ () C:\Users\Jirka\Downloads\The-Originals-1x18-CZ-titulky.avi
2014-04-21 19:28 - 2014-04-21 20:27 - 363810816 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x18-CZ-titulky.avi
2014-04-19 12:03 - 2014-05-08 23:05 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\TS3Client
2014-04-19 12:03 - 2014-04-19 12:03 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\Jirka\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-04-19 12:03 - 2014-04-19 12:03 - 00000973 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-04-19 12:03 - 2014-04-19 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-04-19 12:03 - 2014-04-19 12:03 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-19 11:20 - 2014-04-19 11:20 - 05862994 _____ () C:\Users\Jirka\Downloads\ts2_client_rc2_2032.exe
2014-04-19 11:20 - 2014-04-19 11:20 - 00034064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lhacm.acm
2014-04-19 11:20 - 2014-04-19 11:20 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\teamspeak2
2014-04-18 08:57 - 2014-04-18 08:57 - 00316930 _____ () C:\Users\Jirka\Desktop\hackovana sukne.htm
2014-04-17 16:23 - 2014-05-16 20:30 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-04-17 16:23 - 2014-04-18 05:29 - 00000000 ____D () C:\ProgramData\Adobe
2014-04-17 16:23 - 2014-04-17 16:23 - 00002025 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-04-17 16:23 - 2014-04-17 16:23 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-04-17 16:21 - 2014-04-17 20:56 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Adobe
2014-04-17 12:30 - 2014-04-17 12:30 - 00043154 _____ () C:\Users\Jirka\Downloads\[CzT]Arrow_1_serie_CZ_.torrent
2014-04-17 12:11 - 2014-04-17 12:11 - 00014965 _____ () C:\Users\Jirka\Downloads\[CzT]Vanocni_zasilka_Christmas_Mail_2010_CZ_TvRip_.torrent
2014-04-17 12:10 - 2014-04-17 12:10 - 00012854 _____ () C:\Users\Jirka\Downloads\[CzT]Snehurka_Jiny_pribeh_Blancanieves_2012_.torrent
2014-04-17 11:32 - 2014-04-17 12:09 - 352045664 _____ () C:\Users\Jirka\Downloads\Arrow---1x02---Honor-Thy-Father.avi
2014-04-16 11:56 - 2014-04-16 11:56 - 00014944 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_zivot_Timothyho_Greena_The_Odd_Life_of_Timothy_Green_2012_.torrent
2014-04-16 11:55 - 2014-04-16 11:55 - 00014679 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_Odd_Thomas_Odd_Thomas_2013_CZ_ (1).torrent
2014-04-16 11:55 - 2014-04-16 11:55 - 00014678 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_Odd_Thomas_Odd_Thomas_2013_CZ_.torrent
2014-04-16 11:54 - 2014-04-16 11:54 - 00017083 _____ () C:\Users\Jirka\Downloads\[CzT]Deti_moje_The_Descendants_2011_.torrent
2014-04-16 11:53 - 2014-04-16 11:53 - 00014711 _____ () C:\Users\Jirka\Downloads\[CzT]Mocny_vladce_Oz_Oz_The_Great_and_Powerful_2013_CZ_.torrent
2014-04-16 11:51 - 2014-04-16 11:51 - 00015493 _____ () C:\Users\Jirka\Downloads\[CzT]Dobrodruzstvi_s_robotem_Robosapien_Rebooted_2013_CZ_.torrent
2014-04-16 11:50 - 2014-04-16 11:50 - 00017137 _____ () C:\Users\Jirka\Downloads\[CzT]Percy_Jackson_More_nestvur_Percy_Jackson_Sea_of_Monsters_2013_CZ_.torrent
2014-04-16 10:03 - 2014-04-16 11:54 - 998970876 _____ () C:\Users\Jirka\Downloads\Navrat-na-zapomenuty-ostrov-2013-cesky-dabing.avi
2014-04-16 08:37 - 2014-04-16 09:57 - 733327162 _____ () C:\Users\Jirka\Downloads\Most-do-země-Terabithia-Cz.avi

==================== One Month Modified Files and Folders =======

2014-05-16 21:23 - 2014-05-16 21:23 - 00008229 _____ () C:\Users\Jirka\Downloads\FRST.txt
2014-05-16 21:23 - 2014-05-16 21:23 - 00000000 ____D () C:\FRST
2014-05-16 21:21 - 2014-05-16 21:21 - 02067456 _____ (Farbar) C:\Users\Jirka\Downloads\FRST64.exe
2014-05-16 21:13 - 2009-07-14 06:45 - 00025312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-05-16 21:13 - 2009-07-14 06:45 - 00025312 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-05-16 21:10 - 2011-04-12 10:34 - 00668138 _____ () C:\Windows\system32\perfh005.dat
2014-05-16 21:10 - 2011-04-12 10:34 - 00140798 _____ () C:\Windows\system32\perfc005.dat
2014-05-16 21:10 - 2009-07-14 07:13 - 01582262 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-05-16 21:09 - 2014-03-08 05:11 - 01505550 _____ () C:\Windows\WindowsUpdate.log
2014-05-16 21:07 - 2014-05-16 20:57 - 00006622 _____ () C:\zoek-results.log
2014-05-16 21:06 - 2014-03-08 05:14 - 00000946 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-05-16 21:06 - 2010-11-21 05:47 - 00009712 _____ () C:\Windows\PFRO.log
2014-05-16 21:06 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-05-16 21:06 - 2009-07-14 06:51 - 00099878 _____ () C:\Windows\setupact.log
2014-05-16 21:04 - 2014-05-16 20:51 - 00000000 ____D () C:\zoek_backup
2014-05-16 21:04 - 2014-03-08 05:11 - 00000000 ____D () C:\Users\Jirka
2014-05-16 20:54 - 2014-05-16 21:05 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-16 20:50 - 2014-05-16 20:50 - 01285120 _____ () C:\Users\Jirka\Downloads\zoek.exe
2014-05-16 20:47 - 2014-05-16 20:43 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 906309.crdownload
2014-05-16 20:40 - 2014-05-16 20:38 - 00000000 ____D () C:\AdwCleaner
2014-05-16 20:38 - 2014-05-16 20:38 - 01325827 _____ () C:\Users\Jirka\Downloads\adwcleaner_3.208.exe
2014-05-16 20:33 - 2014-03-08 05:14 - 00000950 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-05-16 20:30 - 2014-05-16 20:30 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 606375.crdownload
2014-05-16 20:30 - 2014-04-17 16:23 - 00002441 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-05-16 20:28 - 2009-07-14 04:34 - 00000678 _____ () C:\Windows\win.ini
2014-05-16 20:25 - 2014-05-16 20:25 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 819382.crdownload
2014-05-16 20:10 - 2014-05-16 20:10 - 00006699 _____ () C:\Users\Jirka\Desktop\attach.txt
2014-05-16 20:09 - 2014-05-16 20:10 - 00016910 _____ () C:\Users\Jirka\Desktop\dds.txt
2014-05-16 20:07 - 2014-05-16 20:07 - 00688992 ____R (Swearware) C:\Users\Jirka\Downloads\dds.exe
2014-05-16 18:23 - 2014-03-08 05:42 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Battle.net
2014-05-16 16:06 - 2014-03-17 21:17 - 00000000 ____D () C:\ProgramData\Spyware Terminator
2014-05-16 16:02 - 2014-05-01 16:02 - 00003506 _____ () C:\Windows\System32\Tasks\Windows Updater
2014-05-16 12:44 - 2014-05-16 11:17 - 1499898906 _____ () C:\Users\Jirka\Downloads\Královna-prokletých-2002.mkv
2014-05-16 06:26 - 2014-03-08 15:46 - 00000000 ____D () C:\Users\Jirka\Desktop\Honza
2014-05-16 00:00 - 2014-05-15 23:19 - 364900352 _____ () C:\Users\Jirka\Downloads\The-Originals-1x22-CZ-titulky.avi
2014-05-15 21:15 - 2014-03-09 13:42 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\uTorrent
2014-05-15 20:03 - 2014-03-08 05:43 - 00000000 ____D () C:\Program Files (x86)\Diablo III
2014-05-15 14:18 - 2014-05-15 13:39 - 364834816 _____ () C:\Users\Jirka\Downloads\The-Originals-1x21-CZ-titulky (1).avi
2014-05-15 05:31 - 2014-03-08 05:29 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-05-14 21:22 - 2014-03-08 20:46 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Skype
2014-05-14 19:41 - 2014-05-14 19:41 - 00017578 _____ () C:\Users\Jirka\Downloads\[CzT]Twilight_saga_Rozbresk_2_cast_The_Twilight_Saga_Breaking_Dawn_Part_Two_CZ_2012_ (1).torrent
2014-05-14 19:40 - 2014-05-14 19:40 - 00017578 _____ () C:\Users\Jirka\Downloads\[CzT]Twilight_saga_Rozbresk_2_cast_The_Twilight_Saga_Breaking_Dawn_Part_Two_CZ_2012_.torrent
2014-05-14 13:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-05-14 12:53 - 2014-05-14 11:08 - 974730307 _____ () C:\Users\Jirka\Downloads\Samec-(2009)-CZ.avi
2014-05-14 06:00 - 2014-03-08 08:43 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\vlc
2014-05-14 05:01 - 2014-03-08 05:12 - 00000000 ___RD () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
2014-05-14 05:01 - 2014-03-08 05:12 - 00000000 ___RD () C:\Users\Jirka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
2014-05-14 04:53 - 2014-05-06 22:25 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-05-14 04:53 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-05-14 03:02 - 2014-03-08 15:49 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-05-14 03:02 - 2014-03-08 07:34 - 00000000 ____D () C:\Windows\system32\MRT
2014-05-14 03:01 - 2014-03-08 07:34 - 93223848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-05-12 20:10 - 2014-05-12 20:10 - 00044051 _____ () C:\Users\Jirka\Downloads\[CzT]Prolhane_krasky_Pretty_Little_Liars_3_serie_CZ_.torrent
2014-05-12 20:10 - 2014-05-12 20:10 - 00044050 _____ () C:\Users\Jirka\Downloads\[CzT]Prolhane_krasky_Pretty_Little_Liars_3_serie_CZ_ (1).torrent
2014-05-12 13:43 - 2014-05-12 12:20 - 768739080 _____ () C:\Users\Jirka\Downloads\Twilight-saga-4.Rozbřesk-1část-cz-dubing-100%.avi
2014-05-10 19:04 - 2014-05-10 18:24 - 363821056 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x21-CZ-titulky.avi
2014-05-09 11:32 - 2014-05-09 11:32 - 00077221 _____ () C:\Users\Jirka\Downloads\[CzT]Prava_krev_True_Blood_1_5_serie.torrent
2014-05-09 08:14 - 2014-05-14 01:49 - 00477184 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-05-09 08:11 - 2014-05-14 01:49 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-05-08 23:05 - 2014-04-19 12:03 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\TS3Client
2014-05-08 21:02 - 2014-05-08 20:21 - 364834816 _____ () C:\Users\Jirka\Downloads\The-Originals-1x21-CZ-titulky.avi
2014-05-08 20:26 - 2014-03-08 05:14 - 00003946 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-05-08 20:26 - 2014-03-08 05:14 - 00003694 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-05-08 17:02 - 2014-05-08 13:18 - 2085030597 _____ () C:\Users\Jirka\Downloads\Twilight-saga-3.Zatmeni-cz-dubing-100%.avi
2014-05-08 12:50 - 2014-05-08 11:23 - 807249396 _____ () C:\Users\Jirka\Downloads\Twilight-saga-2---Novy-mesic.avi
2014-05-08 10:05 - 2014-05-08 08:46 - 733812736 _____ () C:\Users\Jirka\Downloads\Twilight-saga-1.Stmivani-cz-dubing-100%.avi
2014-05-07 14:38 - 2014-05-07 14:38 - 00236952 _____ () C:\Users\Jirka\Downloads\FLVPlayerSetup-N4PGq1hdi.exe
2014-05-06 16:17 - 2014-05-06 16:17 - 00019551 _____ () C:\Users\Jirka\Downloads\[CzT]Borek_Stavitel_Bob_the_Builder_1_serie_2001_TvRip_.torrent
2014-05-06 16:17 - 2014-05-06 16:17 - 00013365 _____ () C:\Users\Jirka\Downloads\[CzT]Alvin_a_Chipmunkove_1_2_3_2007_2011_.torrent
2014-05-06 06:40 - 2014-05-14 03:02 - 23544320 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-05-06 06:17 - 2014-05-14 03:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-05-06 05:25 - 2014-05-14 03:02 - 17382912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-05-06 05:07 - 2014-05-14 03:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-05-06 05:00 - 2014-05-14 03:02 - 00084992 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-05-06 04:10 - 2014-05-14 03:02 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-05-04 22:35 - 2014-05-04 22:02 - 311168708 _____ () C:\Users\Jirka\Downloads\The-Originals-1x20-CZ-titulky.avi
2014-05-04 16:31 - 2014-05-04 16:31 - 00114176 _____ () C:\Users\Jirka\Downloads\winbox.exe
2014-05-02 16:40 - 2014-03-08 05:42 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-04-28 07:17 - 2009-07-14 07:08 - 00032578 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-04-27 16:13 - 2014-04-27 15:27 - 412584110 _____ () C:\Users\Jirka\Downloads\The-Originals-1x19-CZ-titulky.avi
2014-04-27 15:25 - 2014-04-27 14:45 - 363866112 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x19-CZ-titulky.avi
2014-04-27 07:30 - 2014-04-27 07:30 - 00014143 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E05_Garfielduv_polarni_kocour_1988_TVRip_.torrent
2014-04-27 07:29 - 2014-04-27 07:29 - 00014677 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E04_Prisera_Frankenstein_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014251 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E02_Bu_kravo_bu_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014246 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E03_Soud_a_omyl_TVRip_.torrent
2014-04-27 07:28 - 2014-04-27 07:28 - 00014134 _____ () C:\Users\Jirka\Downloads\[CzT]Garfield_a_pratele_Garfield_and_Friends_S01E01_Filmove_soky_TVRip_.torrent
2014-04-26 09:52 - 2014-04-26 09:52 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Macromedia
2014-04-24 12:22 - 2014-04-28 21:47 - 00061120 _____ (StdLib) C:\Windows\system32\Drivers\{01531192-f7ef-415f-a549-cfdb11836731}w64.sys
2014-04-24 06:55 - 2014-04-24 06:55 - 00015376 _____ () C:\Users\Jirka\Downloads\[CzT]Doba_ledova_4_Zeme_v_pohybu_Ice_Age_Continental_Drift_2012_CZ_.torrent
2014-04-22 22:17 - 2014-04-22 21:38 - 365924352 _____ () C:\Users\Jirka\Downloads\Arrow-S02E02---cz-tit..avi
2014-04-22 21:36 - 2014-04-22 20:56 - 365920256 _____ () C:\Users\Jirka\Downloads\Arrow-S02E01---cz-tit..avi
2014-04-21 21:02 - 2014-04-21 20:42 - 355459072 _____ () C:\Users\Jirka\Downloads\The-Originals-1x18-CZ-titulky.avi
2014-04-21 20:27 - 2014-04-21 19:28 - 363810816 _____ () C:\Users\Jirka\Downloads\Upíří-deníky-5x18-CZ-titulky.avi
2014-04-19 12:03 - 2014-04-19 12:03 - 29498592 _____ (TeamSpeak Systems GmbH) C:\Users\Jirka\Downloads\TeamSpeak3-Client-win64-3.0.14.exe
2014-04-19 12:03 - 2014-04-19 12:03 - 00000973 _____ () C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk
2014-04-19 12:03 - 2014-04-19 12:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client
2014-04-19 12:03 - 2014-04-19 12:03 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2014-04-19 12:00 - 2014-03-08 05:12 - 00000000 ____D () C:\Users\Jirka\AppData\Local\VirtualStore
2014-04-19 11:20 - 2014-04-19 11:20 - 05862994 _____ () C:\Users\Jirka\Downloads\ts2_client_rc2_2032.exe
2014-04-19 11:20 - 2014-04-19 11:20 - 00034064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lhacm.acm
2014-04-19 11:20 - 2014-04-19 11:20 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\teamspeak2
2014-04-18 08:57 - 2014-04-18 08:57 - 00316930 _____ () C:\Users\Jirka\Desktop\hackovana sukne.htm
2014-04-18 05:29 - 2014-04-17 16:23 - 00000000 ____D () C:\ProgramData\Adobe
2014-04-17 20:56 - 2014-04-17 16:21 - 00000000 ____D () C:\Users\Jirka\AppData\Local\Adobe
2014-04-17 20:56 - 2014-03-08 07:46 - 00000000 ____D () C:\Users\Jirka\AppData\Roaming\Adobe
2014-04-17 16:23 - 2014-04-17 16:23 - 00002025 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-04-17 16:23 - 2014-04-17 16:23 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-04-17 12:30 - 2014-04-17 12:30 - 00043154 _____ () C:\Users\Jirka\Downloads\[CzT]Arrow_1_serie_CZ_.torrent
2014-04-17 12:11 - 2014-04-17 12:11 - 00014965 _____ () C:\Users\Jirka\Downloads\[CzT]Vanocni_zasilka_Christmas_Mail_2010_CZ_TvRip_.torrent
2014-04-17 12:10 - 2014-04-17 12:10 - 00012854 _____ () C:\Users\Jirka\Downloads\[CzT]Snehurka_Jiny_pribeh_Blancanieves_2012_.torrent
2014-04-17 12:09 - 2014-04-17 11:32 - 352045664 _____ () C:\Users\Jirka\Downloads\Arrow---1x02---Honor-Thy-Father.avi
2014-04-17 04:55 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF
2014-04-16 11:56 - 2014-04-16 11:56 - 00014944 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_zivot_Timothyho_Greena_The_Odd_Life_of_Timothy_Green_2012_.torrent
2014-04-16 11:55 - 2014-04-16 11:55 - 00014679 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_Odd_Thomas_Odd_Thomas_2013_CZ_ (1).torrent
2014-04-16 11:55 - 2014-04-16 11:55 - 00014678 _____ () C:\Users\Jirka\Downloads\[CzT]Neobycejny_Odd_Thomas_Odd_Thomas_2013_CZ_.torrent
2014-04-16 11:54 - 2014-04-16 11:54 - 00017083 _____ () C:\Users\Jirka\Downloads\[CzT]Deti_moje_The_Descendants_2011_.torrent
2014-04-16 11:54 - 2014-04-16 10:03 - 998970876 _____ () C:\Users\Jirka\Downloads\Navrat-na-zapomenuty-ostrov-2013-cesky-dabing.avi
2014-04-16 11:53 - 2014-04-16 11:53 - 00014711 _____ () C:\Users\Jirka\Downloads\[CzT]Mocny_vladce_Oz_Oz_The_Great_and_Powerful_2013_CZ_.torrent
2014-04-16 11:51 - 2014-04-16 11:51 - 00015493 _____ () C:\Users\Jirka\Downloads\[CzT]Dobrodruzstvi_s_robotem_Robosapien_Rebooted_2013_CZ_.torrent
2014-04-16 11:50 - 2014-04-16 11:50 - 00017137 _____ () C:\Users\Jirka\Downloads\[CzT]Percy_Jackson_More_nestvur_Percy_Jackson_Sea_of_Monsters_2013_CZ_.torrent
2014-04-16 09:57 - 2014-04-16 08:37 - 733327162 _____ () C:\Users\Jirka\Downloads\Most-do-země-Terabithia-Cz.avi

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe
[2014-05-14 01:49] - [2014-03-04 13:08] - 0455680 ____A (Microsoft Corporation) 6CE2AE073BD21C542FC2C707CAE944CC

C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll
[2012-01-12 18:53] - [2012-01-12 18:53] - 1008128 ____A (Microsoft Corporation) 125D3C2F7E57FE2C4671B650AA1E6E97

C:\Windows\SysWOW64\User32.dll
[2012-01-12 18:53] - [2012-01-12 18:53] - 0833024 ____A (Microsoft Corporation) C1BA7E60CA004C160606DEBDE9C3394F

C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll
[2012-01-12 15:52] - [2012-01-12 15:52] - 0512000 ____A (Microsoft Corporation) 225EFEE8960E554F3AB9A4A91790C039

ATTENTION ======> If the system is having audio adware rpcss.dll is patched. Google the MD5, if the MD5 is unique the file is infected.
C:\Windows\System32\Drivers\volsnap.sys
[2012-01-12 18:54] - [2012-01-12 18:54] - 0296816 ____A (Microsoft Corporation) ABFECA99D72CE81E5C3612861F03B0CA



LastRegBack: 2014-05-10 13:46

==================== End Of Log ============================
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#8 Příspěvek od vyosek »

:arrow: Odinstalujte Spyware Terminator - ma uz davno nejlepsi leta za sebou

:arrow: Tvorba fixlistu pro FRST
  • Spustte poznamkovy blok (Start-spustit-notepad)
  • Zkopirujte skript nize

  • Kód: Vybrat vše

    Start
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => D:\Program Files (x86)\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesPreload] => D:\Program Files (x86)\Kies\Kies.exe [1564992 2014-02-14] (Samsung)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesAirMessage] => D:\Program Files (x86)\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [] => D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)

2014-05-16 21:05 - 2014-05-16 20:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-16 20:57 - 2014-05-16 21:07 - 00006622 _____ () C:\zoek-results.log
2014-05-16 20:51 - 2014-05-16 21:04 - 00000000 ____D () C:\zoek_backup
2014-05-16 20:50 - 2014-05-16 20:50 - 01285120 _____ () C:\Users\Jirka\Downloads\zoek.exe
2014-05-16 20:43 - 2014-05-16 20:47 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 906309.crdownload
2014-05-16 20:38 - 2014-05-16 20:38 - 01325827 _____ () C:\Users\Jirka\Downloads\adwcleaner_3.208.exe
2014-05-16 20:30 - 2014-05-16 20:30 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 606375.crdownload
2014-05-16 20:25 - 2014-05-16 20:25 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 819382.crdownload
2014-05-16 20:10 - 2014-05-16 20:10 - 00006699 _____ () C:\Users\Jirka\Desktop\attach.txt
2014-05-16 20:10 - 2014-05-16 20:09 - 00016910 _____ () C:\Users\Jirka\Desktop\dds.txt
2014-05-16 20:07 - 2014-05-16 20:07 - 00688992 ____R (Swearware) C:\Users\Jirka\Downloads\dds.exe

Hosts:
End
  • Ulozte vytvoreny TXT jako fixlist.txt
  • Presunte vytvoreny fixlist vedle FRST
:arrow: Spustte znovu FRST.exe
  • Kliknete na Fix
  • Probehne oprava a vytvori log Fixlog.txt
:arrow: Restart PC a dejte mi sem fixlog.txt
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#9 Příspěvek od Sukurij »

zitra :/ jsem pryc.... u i sousedoveho PC :/
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#10 Příspěvek od vyosek »

Ou Kej, zitra sem budu tez nakukovat...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#11 Příspěvek od Sukurij »

Jak jsem psal... jsem u rodicu, v sobotu jsem musel nahle do prace a pak co nejrychleji k nasim... Resit to zacnu tak po treti hodine snad :) a dekuji za pochopeni.... je toho moc :(
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#12 Příspěvek od vyosek »

Nic se nedeje, i my mame forum jako konicek a jsme tu ve svem volnem case...
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#13 Příspěvek od Sukurij »

log ale bez restartu... obevil se log ale restart se nenabidl... neco spatne? :/

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-05-2014
Ran by Jirka at 2014-05-18 16:47:07 Run:1
Running from C:\Users\Jirka\Downloads
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKLM\...\Run: [SpywareTerminatorShield] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorShield.exe [2777736 2013-04-03] (Crawler.com)
HKLM\...\Run: [SpywareTerminatorUpdater] => C:\Program Files (x86)\Spyware Terminator\SpywareTerminatorUpdate.exe [3684488 2013-04-03] (Crawler.com)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [KiesTrayAgent] => D:\Program Files (x86)\Kies\KiesTrayAgent.exe [311616 2014-02-14] (Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [DAEMON Tools Lite] => D:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesPreload] => D:\Program Files (x86)\Kies\Kies.exe [1564992 2014-02-14] (Samsung)
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [KiesAirMessage] => D:\Program Files (x86)\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-876127526-1631873760-906640867-1000\...\Run: [] => D:\Program Files (x86)\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2014-02-14] (Samsung)

2014-05-16 21:05 - 2014-05-16 20:54 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-05-16 20:57 - 2014-05-16 21:07 - 00006622 _____ () C:\zoek-results.log
2014-05-16 20:51 - 2014-05-16 21:04 - 00000000 ____D () C:\zoek_backup
2014-05-16 20:50 - 2014-05-16 20:50 - 01285120 _____ () C:\Users\Jirka\Downloads\zoek.exe
2014-05-16 20:43 - 2014-05-16 20:47 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 906309.crdownload
2014-05-16 20:38 - 2014-05-16 20:38 - 01325827 _____ () C:\Users\Jirka\Downloads\adwcleaner_3.208.exe
2014-05-16 20:30 - 2014-05-16 20:30 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 606375.crdownload
2014-05-16 20:25 - 2014-05-16 20:25 - 01016261 _____ (Thisisu) C:\Users\Jirka\Downloads\Nepotvrzeno 819382.crdownload
2014-05-16 20:10 - 2014-05-16 20:10 - 00006699 _____ () C:\Users\Jirka\Desktop\attach.txt
2014-05-16 20:10 - 2014-05-16 20:09 - 00016910 _____ () C:\Users\Jirka\Desktop\dds.txt
2014-05-16 20:07 - 2014-05-16 20:07 - 00688992 ____R (Swearware) C:\Users\Jirka\Downloads\dds.exe

Hosts:
End
*****************

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorShield => Value deleted successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\SpywareTerminatorUpdater => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\GrooveMonitor => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\KiesTrayAgent => Value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => Value deleted successfully.
HKU\S-1-5-21-876127526-1631873760-906640867-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => Value deleted successfully.
HKU\S-1-5-21-876127526-1631873760-906640867-1000\Software\Microsoft\Windows\CurrentVersion\Run\\KiesPreload => Value deleted successfully.
HKU\S-1-5-21-876127526-1631873760-906640867-1000\Software\Microsoft\Windows\CurrentVersion\Run\\KiesAirMessage => Value deleted successfully.
HKU\S-1-5-21-876127526-1631873760-906640867-1000\Software\Microsoft\Windows\CurrentVersion\Run\\ => Value deleted successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Jirka\Downloads\zoek.exe => Moved successfully.
C:\Users\Jirka\Downloads\Nepotvrzeno 906309.crdownload => Moved successfully.
C:\Users\Jirka\Downloads\adwcleaner_3.208.exe => Moved successfully.
C:\Users\Jirka\Downloads\Nepotvrzeno 606375.crdownload => Moved successfully.
C:\Users\Jirka\Downloads\Nepotvrzeno 819382.crdownload => Moved successfully.
C:\Users\Jirka\Desktop\attach.txt => Moved successfully.
C:\Users\Jirka\Desktop\dds.txt => Moved successfully.
C:\Users\Jirka\Downloads\dds.exe => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.

==== End of Fixlog ====
Nahoru
Avatar uživatele
vyosek
VIP
VIP
Příspěvky: 56365
Registrován: 07 Lis 2006 15:24
Místo/Bydliště: Šalingrad - Brno

Re: Zavirovany PC

#14 Příspěvek od vyosek »

:arrow: NeNe, neni to spatne, on obcas restart neni potreba

:arrow: Jak se chova PC :???:
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen Obrázek od 1. února 2011.
Nahoru
Sukurij
Návštěvník
Návštěvník
Příspěvky: 58
Registrován: 16 Kvě 2014 19:12

Re: Zavirovany PC

#15 Příspěvek od Sukurij »

Hned od prvnich zasahu je to o sto procent lepsi... chova se paradne :) vsechno slape jak ma :) mam z toho radost :)
Dikec :) jeste doresime ten souseduv a bude to cajk... :)
Nahoru
Odpovědět

Vrátit se na „Řešení problémů, logy“