Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Costmin virus

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
Mufii
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 19 črc 2014 20:36

Costmin virus

#1 Příspěvek od Mufii »

DObrý večer ve spolek :)
Přítelkyně dostala nový noťas a po pár dnech se ji ho podařilo zavirovat :) Jedná se o costmin, je v doplňcích v prohlížeči (chrome) a nejde odstranit. Hledal jsem návody na netu, ale nic z toho nepomohlo, proto se obrátím raději na profesionály :) Předem mockrát děkuji :)

Zde je addition soubor:
Addition.rar
(6.36 KiB) Staženo 48 x
a zde log:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 19-07-2014
Ran by Léňa2 (administrator) on ACERPC on 19-07-2014 21:53:50
Running from C:\Users\Acer\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(SurfRight B.V.) C:\Program Files\HitmanPro\hmpsched.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\AdminService.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(McAfee, Inc.) C:\Windows\System32\mfevtps.exe
(McAfee, Inc.) C:\Program Files\Common Files\mcafee\systemcore\mfefire.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(TODO: <Company name>) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.179.348.0.exe
(Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
() C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QuickAccess.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\wsqmcons.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_6.3.9600.17200_none_fa7026dd9b04586e\TiWorker.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(forum.viry.cz) C:\Users\Acer\Desktop\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13657304 2013-10-18] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\BtvStack.exe [132736 2013-09-07] ( (Qualcomm®Atheros®))
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [831488 2013-12-13] (ZONER software)
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-202830934-2532720410-3113998622-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
HKU\S-1-5-21-202830934-2532720410-3113998622-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform

HKU\S-1-5-21-202830934-2532720410-3113998622-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKCU - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
SearchScopes: HKCU - {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - c:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 - C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Acer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)

Chrome:
=======
CHR HomePage:
CHR Extension: (Dokumenty Google) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-28]
CHR Extension: (Disk Google) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-28]
CHR Extension: (YouTube) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-28]
CHR Extension: (Adblock Plus) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2014-06-08]
CHR Extension: (Vyhledávání Google) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-28]
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk [2014-07-15]
CHR Extension: (Peněženka Google) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-08]
CHR Extension: (Gmail) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-28]
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk\2.0 [2014-07-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 AtherosSvc; C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\adminservice.exe [312448 2013-09-07] (Windows (R) Win 7 DDK provider)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\Acer Portal\CCDMonitorService.exe [2650696 2013-07-27] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [663592 2013-07-06] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [235008 2013-07-16] (TODO: <Company name>) [File not signed]
R2 HitmanProScheduler; C:\Program Files\HitmanPro\hmpsched.exe [127752 2014-07-16] (SurfRight B.V.)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-02] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-02] (Intel(R) Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [457768 2013-08-03] (Acer Incorporate)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1809720 2014-05-12] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [860472 2014-05-12] (Malwarebytes Corporation)
R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [219272 2013-08-07] (McAfee, Inc.)
R2 mfevtp; C:\Windows\system32\mfevtps.exe [182752 2013-08-07] (McAfee, Inc.)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [457768 2013-08-03] (Acer Incorporate)
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [448040 2013-08-03] (Acer Incorporate)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]

==================== Drivers (Whitelisted) ====================

R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-16] (Qualcomm Atheros Communications, Inc.)
S3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [8536752 2013-07-01] (Broadcom Corporation)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-07] (Qualcomm Atheros)
S3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
S3 cfwids; C:\Windows\System32\drivers\cfwids.sys [70112 2013-08-07] (McAfee, Inc.)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-06-08] (Disc Soft Ltd)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-05-12] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [122584 2014-07-19] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-05-12] (Malwarebytes Corporation)
S3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [179664 2013-08-07] (McAfee, Inc.)
R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [310224 2013-08-07] (McAfee, Inc.)
S0 mfeelamk; C:\Windows\System32\drivers\mfeelamk.sys [69264 2013-08-07] (McAfee, Inc.)
R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [519064 2013-08-07] (McAfee, Inc.)
R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [776168 2013-08-07] (McAfee, Inc.)
R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [343568 2013-08-07] (McAfee, Inc.)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [87568 2013-07-02] (Intel Corporation)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 cpuz135; \??\C:\Users\Acer\AppData\Local\Temp\cpuz135\cpuz135_x64.sys [X]
S3 cpuz136; \??\C:\Users\Acer\AppData\Local\Temp\cpuz136\cpuz136_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-19 21:53 - 2014-07-19 21:53 - 00016676 _____ () C:\Users\Acer\Desktop\FRST.txt
2014-07-19 21:49 - 2014-07-19 21:49 - 00112640 _____ (forum.viry.cz) C:\Users\Acer\Desktop\FRSTLauncher (1).exe
2014-07-19 21:48 - 2014-07-19 21:53 - 00000000 ____D () C:\FRST
2014-07-19 21:48 - 2014-07-19 21:48 - 00112640 _____ (forum.viry.cz) C:\Users\Acer\Downloads\Nepotvrzeno 929672.crdownload
2014-07-19 21:47 - 2014-07-19 21:47 - 02089984 _____ (Farbar) C:\Users\Acer\Desktop\FRST64.exe
2014-07-18 09:29 - 2014-07-18 09:29 - 00000000 _____ () C:\autoexec.bat
2014-07-16 22:21 - 2014-07-16 22:21 - 00003322 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2014-07-16 22:21 - 2014-07-16 22:21 - 00002272 _____ () C:\Users\Acer\Desktop\SpyHunter.lnk
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\sh4ldr
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-16 22:21 - 2012-06-22 11:01 - 00022704 _____ () C:\Windows\system32\Drivers\EsgScanner.sys
2014-07-16 22:20 - 2014-07-16 22:21 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-16 22:19 - 2014-07-16 22:19 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Acer\Downloads\sh-remover.exe
2014-07-16 22:15 - 2014-07-16 22:15 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2014-07-16 22:06 - 2014-07-16 22:06 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-07-16 22:06 - 2014-07-16 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-07-16 22:06 - 2014-07-16 22:06 - 00000000 ____D () C:\Program Files\HitmanPro
2014-07-16 22:05 - 2014-07-16 22:17 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-16 22:05 - 2014-07-16 22:05 - 11188736 _____ (SurfRight B.V.) C:\Users\Acer\Downloads\HitmanPro_x64.exe
2014-07-16 21:32 - 2014-07-19 21:43 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-16 21:32 - 2014-07-16 21:32 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-16 21:31 - 2014-07-16 21:32 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-16 21:31 - 2014-07-16 21:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 21:31 - 2014-05-12 07:26 - 00091352 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-07-16 21:31 - 2014-05-12 07:26 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-07-16 21:31 - 2014-05-12 07:25 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-07-16 21:28 - 2014-07-16 21:28 - 00005182 _____ () C:\Users\Acer\Desktop\AdwCleaner[S0].txt
2014-07-16 21:15 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-16 21:14 - 2014-07-16 21:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Acer\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-16 21:11 - 2014-07-16 21:25 - 00000000 ____D () C:\AdwCleaner
2014-07-16 21:11 - 2014-07-16 21:11 - 01348263 _____ () C:\Users\Acer\Downloads\adwcleaner_3.215.exe
2014-07-16 10:03 - 2014-07-16 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-16 10:02 - 2014-07-16 10:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-16 10:02 - 2014-07-16 10:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-15 12:32 - 2014-07-15 12:32 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Acer\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\ProgramData\60190b7125642476
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-15 12:25 - 2014-07-15 12:25 - 00003116 _____ () C:\Windows\System32\Tasks\{9C4259D9-73EA-4617-999E-939CA3420396}
2014-07-15 12:23 - 2014-07-15 12:23 - 00049342 _____ () C:\Users\Acer\Downloads\=-ANSI_X3.4-1968-Q-V=3Fplatn=3F=5Fl=3Fstek=5FHand-=%0D%0A =-ANSI_X3.4-1968-Q-lov=3F=5FLenka=5FD7540A.pdf-=
2014-07-14 19:08 - 2014-07-14 19:09 - 00000000 _____ () C:\Users\Acer\Desktop\Velký Gatsby (2013) CZdabing.avi
2014-07-14 19:07 - 2014-07-14 19:07 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\freemkvtomp4converter
2014-07-14 19:05 - 2014-07-14 19:05 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Convert Audio Free
2014-07-14 19:03 - 2014-07-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Zrychleni Pocitace
2014-07-14 19:00 - 2014-07-14 19:00 - 00929416 _____ (CNET Download.com) C:\Users\Acer\Downloads\cbsidlm-cbsi188-Free_MKV_to_AVI_Converter-SEO-75984422.exe
2014-07-14 18:29 - 2014-07-14 18:51 - 1809489232 ____R () C:\Users\Acer\Downloads\Velký Gatsby (2013) CZdabing.mkv
2014-07-14 18:27 - 2014-07-14 18:36 - 00000000 ____D () C:\Users\Acer\Downloads\The.Grand.Budapest.Hotel.2014.480p.BDRip.AC3.XViD.CZ.4play
2014-07-14 18:26 - 2014-07-14 18:26 - 00017817 _____ () C:\Users\Acer\Downloads\[CzT]Velky_Gatsby_The_Great_Gatsby_2013_CZ_.torrent
2014-07-14 18:25 - 2014-07-14 18:25 - 00016535 _____ () C:\Users\Acer\Downloads\[CzT]Grandhotel_Budapest_The_Grand_Budapest_Hotel_2014_CZ_.torrent
2014-07-12 20:03 - 2014-07-12 20:03 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Unity
2014-07-12 20:02 - 2014-07-12 20:02 - 01080480 _____ (Unity Technologies ApS) C:\Users\Acer\Downloads\UnityWebPlayer.exe
2014-07-12 20:02 - 2014-07-12 20:02 - 00000000 ____D () C:\Users\Acer\AppData\Local\Unity
2014-07-11 12:32 - 2014-06-26 22:55 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-07-11 12:32 - 2014-06-26 22:55 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-07-10 22:51 - 2014-07-10 22:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 15:57 - 2014-04-14 05:29 - 01018880 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-07-09 15:31 - 2014-07-09 15:52 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-09 15:31 - 2014-07-09 15:31 - 00002043 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-07-09 14:07 - 2014-07-01 00:45 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-07-09 14:07 - 2014-06-28 09:48 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-07-09 14:07 - 2014-06-28 09:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-07-09 09:32 - 2014-06-17 00:26 - 00779264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\osk.exe
2014-07-09 09:32 - 2014-06-17 00:24 - 00834048 _____ (Microsoft Corporation) C:\Windows\system32\osk.exe
2014-07-09 09:32 - 2014-06-06 16:20 - 04190720 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-07-09 09:32 - 2014-05-30 05:03 - 00563200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2014-07-09 09:32 - 2014-05-29 14:02 - 00565576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2014-07-09 09:32 - 2014-05-29 09:55 - 00735232 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2014-07-09 09:32 - 2014-05-29 08:40 - 00735232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2014-07-09 09:32 - 2014-05-29 08:37 - 00436224 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2014-07-09 09:32 - 2014-05-29 07:34 - 00318976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2014-07-09 09:32 - 2014-05-29 07:27 - 01417216 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-07-09 09:31 - 2014-06-19 03:39 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-07-09 09:31 - 2014-06-19 02:48 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-07-09 09:31 - 2014-06-19 02:16 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-07-09 09:31 - 2014-06-19 02:09 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-07-09 09:31 - 2014-06-19 01:51 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-07-09 09:31 - 2014-06-19 01:50 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-07-09 09:31 - 2014-06-19 01:48 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-07-09 09:31 - 2014-06-19 01:46 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-07-09 09:31 - 2014-06-19 01:39 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-07-09 09:31 - 2014-06-19 01:33 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-07-09 09:31 - 2014-06-19 01:32 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-07-09 09:31 - 2014-06-19 01:27 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-07-09 09:31 - 2014-06-19 01:12 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-07-09 09:31 - 2014-06-19 00:59 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-07-09 09:31 - 2014-06-19 00:58 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-07-09 09:31 - 2014-06-19 00:58 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-07-09 09:31 - 2014-06-19 00:57 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-07-09 09:31 - 2014-06-19 00:52 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-07-09 09:31 - 2014-06-19 00:51 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-07-09 09:31 - 2014-06-19 00:49 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-07-09 09:31 - 2014-06-19 00:45 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-07-09 09:31 - 2014-06-19 00:35 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-07-09 09:31 - 2014-06-19 00:34 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-07-09 09:31 - 2014-06-19 00:15 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-07-09 09:31 - 2014-06-19 00:13 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-07-09 09:31 - 2014-06-19 00:09 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-07-09 09:31 - 2014-06-19 00:07 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-07-09 09:31 - 2014-06-06 15:04 - 00586240 _____ (Microsoft Corporation) C:\Windows\system32\qedit.dll
2014-07-09 09:31 - 2014-06-06 14:18 - 00488960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qedit.dll
2014-07-09 09:31 - 2014-05-31 12:07 - 00054776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-07-09 09:31 - 2014-05-31 12:06 - 00555736 _____ (Microsoft Corporation) C:\Windows\system32\twinapi.appcore.dll
2014-07-09 09:31 - 2014-05-31 05:40 - 13287936 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-07-09 09:31 - 2014-05-31 05:30 - 11792384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-07-09 09:31 - 2014-05-31 05:12 - 00249344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 09:31 - 2014-05-31 05:06 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-07-09 09:31 - 2014-05-31 05:03 - 00827392 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-07-09 09:31 - 2014-05-31 05:01 - 00189952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-07-09 09:31 - 2014-05-31 04:56 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-07-09 09:31 - 2014-05-31 04:54 - 00666624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-07-09 09:31 - 2014-05-31 04:48 - 03463680 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-07-09 09:31 - 2014-05-31 04:37 - 01054208 _____ (Microsoft Corporation) C:\Windows\system32\twinui.appcore.dll
2014-07-09 09:31 - 2014-05-31 04:36 - 00923136 _____ (Microsoft Corporation) C:\Windows\system32\WSShared.dll
2014-07-09 09:31 - 2014-05-31 04:35 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.appcore.dll
2014-07-09 09:31 - 2014-05-31 04:32 - 00756224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WSShared.dll
2014-07-09 09:22 - 2014-07-09 09:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-02 20:11 - 2014-07-02 20:11 - 00094687 _____ () C:\Users\Acer\Downloads\DINPUT8.zip
2014-07-02 18:13 - 2014-07-02 18:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00527192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_7.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00518488 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_7.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_7.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_7.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00077656 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_5.dll
2014-07-02 18:12 - 2010-06-02 04:55 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_5.dll
2014-07-02 18:12 - 2010-05-26 11:41 - 02526056 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_43.dll
2014-07-02 18:12 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_43.dll
2014-07-02 18:12 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_43.dll
2014-07-02 18:12 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_43.dll
2014-07-02 18:12 - 2010-05-26 11:41 - 00276832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_43.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_6.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_6.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_6.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_6.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_4.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_4.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_7.dll
2014-07-02 18:12 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_7.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_5.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_5.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_5.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_5.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_3.dll
2014-07-02 18:12 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\Windows\system32\d3dcsx_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dcsx_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 00523088 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\Windows\system32\d3dx11_42.dll
2014-07-02 18:12 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx11_42.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_4.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_4.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_6.dll
2014-07-02 18:12 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_41.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_41.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_41.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 01846632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_41.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_41.dll
2014-07-02 18:12 - 2009-03-09 15:27 - 00453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_41.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_3.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_3.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_3.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_3.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_2.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_2.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_5.dll
2014-07-02 18:12 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_5.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_40.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_40.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_40.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_40.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_40.dll
2014-07-02 18:12 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_40.dll
2014-07-02 18:12 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_2.dll
2014-07-02 18:12 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_2.dll
2014-07-02 18:12 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_1.dll
2014-07-02 18:12 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_1.dll
2014-07-02 18:12 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_2.dll
2014-07-02 18:12 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_2.dll
2014-07-02 18:12 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-07-02 18:12 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll
2014-07-02 18:12 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-07-02 18:12 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll
2014-07-02 18:12 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-07-02 18:12 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll
2014-07-02 18:12 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2014-07-02 18:12 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2014-07-02 18:12 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_1.dll
2014-07-02 18:12 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2014-07-02 18:12 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2014-07-02 18:12 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2014-07-02 18:12 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2014-07-02 18:12 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_38.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_38.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2014-07-02 18:12 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_38.dll
2014-07-02 18:12 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2014-07-02 18:12 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_0.dll
2014-07-02 18:12 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_0.dll
2014-07-02 18:12 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2014-07-02 18:12 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2014-07-02 18:12 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_3.dll
2014-07-02 18:12 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2014-07-02 18:12 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_37.dll
2014-07-02 18:12 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2014-07-02 18:12 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_37.dll
2014-07-02 18:12 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2014-07-02 18:12 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_37.dll
2014-07-02 18:12 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2014-07-02 18:12 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_10.dll
2014-07-02 18:12 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2014-07-02 18:12 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_36.dll
2014-07-02 18:12 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2014-07-02 18:12 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_36.dll
2014-07-02 18:11 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2014-07-02 18:11 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_2.dll
2014-07-02 18:11 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2014-07-02 18:11 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_36.dll
2014-07-02 18:11 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2014-07-02 18:11 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_35.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_35.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2014-07-02 18:11 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_35.dll
2014-07-02 18:11 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2014-07-02 18:11 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_8.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_34.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_34.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2014-07-02 18:11 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_34.dll
2014-07-02 18:11 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2014-07-02 18:11 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_7.dll
2014-07-02 18:11 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2014-07-02 18:11 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2014-07-02 18:11 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2014-07-02 18:11 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_33.dll
2014-07-02 18:11 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2014-07-02 18:11 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2014-07-02 18:11 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2014-07-02 18:11 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_33.dll
2014-07-02 18:11 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2014-07-02 18:11 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_1.dll
2014-07-02 18:11 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2014-07-02 18:11 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_6.dll
2014-07-02 18:11 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_5.dll
2014-07-02 18:11 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2014-07-02 18:11 - 2006-11-29 13:06 - 04398360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2014-07-02 18:11 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_32.dll
2014-07-02 18:11 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2014-07-02 18:11 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10.dll
2014-07-02 18:11 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2014-07-02 18:11 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2014-07-02 18:11 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_4.dll
2014-07-02 18:11 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2014-07-02 18:11 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2014-07-02 18:11 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2014-07-02 18:11 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_3.dll
2014-07-02 18:11 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_2.dll
2014-07-02 18:11 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_2.dll
2014-07-02 18:11 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2014-07-02 18:11 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2014-07-02 18:11 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_30.dll
2014-07-02 18:11 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2014-07-02 18:11 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_1.dll
2014-07-02 18:11 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2014-07-02 18:11 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_1.dll
2014-07-02 18:11 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2014-07-02 18:11 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_29.dll
2014-07-02 18:11 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2014-07-02 18:11 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_0.dll
2014-07-02 18:11 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2014-07-02 18:11 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_0.dll
2014-07-02 18:11 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2014-07-02 18:11 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_28.dll
2014-07-02 18:11 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2014-07-02 18:11 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_27.dll
2014-07-02 18:11 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2014-07-02 18:11 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_26.dll
2014-07-02 18:11 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2014-07-02 18:11 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll
2014-07-02 18:11 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2014-07-02 18:11 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_24.dll
2014-07-02 18:07 - 2014-07-02 18:12 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-07-02 18:07 - 2014-07-02 18:10 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-07-02 18:07 - 2014-07-02 18:07 - 00292184 _____ (Microsoft Corporation) C:\Users\Acer\Downloads\dxwebsetup.exe
2014-07-02 18:06 - 2014-07-02 18:12 - 00011755 _____ () C:\Windows\DirectX.log
2014-07-02 18:05 - 2014-07-02 18:23 - 00000000 ____D () C:\Users\Acer\Documents\GTA San Andreas User Files
2014-07-02 18:04 - 2014-07-02 18:04 - 00001237 _____ () C:\Users\Acer\Desktop\gta_sa – zástupce.lnk
2014-07-02 17:51 - 2014-07-02 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-07-02 17:51 - 2014-07-02 17:51 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-02 15:44 - 2014-07-02 15:44 - 00000646 _____ () C:\Users\Acer\Desktop\KMPlayer.lnk
2014-07-02 15:44 - 2014-07-02 15:44 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-07-02 15:43 - 2014-07-02 19:47 - 00000000 ____D () C:\The KMPlayer
2014-07-02 15:30 - 2014-07-02 15:34 - 32772784 _____ (PandoraTV) C:\Users\Acer\Downloads\3.9.0.124_20140513022949.exe
2014-07-02 15:11 - 2014-07-02 18:04 - 00000000 ____D () C:\Users\Acer\Downloads\GTA San Andreas
2014-07-02 15:10 - 2014-07-02 15:34 - 00000000 ____D () C:\Users\Acer\Downloads\Stoletý stařík,který vylezl z okna a zmizel
2014-07-02 15:06 - 2014-07-02 15:06 - 00041792 _____ () C:\Users\Acer\Downloads\[CzT]Grand_Theft_Auto_GTA_San_Andreas_2008_CZ_.torrent
2014-07-02 15:05 - 2014-07-02 15:05 - 00013883 _____ () C:\Users\Acer\Downloads\[CzT]Stolety_starik_ktery_vylezl_z_okna_a_zmizel_Hundra_ringen_som_klev_ut_genom_fonstret_och_forsvann_2013_.torrent
2014-07-01 20:23 - 2014-07-01 20:23 - 00102589 _____ () C:\Users\Acer\Downloads\Neighbors(0000238249).srt
2014-07-01 19:26 - 2014-07-01 19:26 - 00087774 _____ () C:\Users\Acer\Downloads\Edge-of-Tomorrow(0000237753).srt
2014-07-01 19:26 - 2014-07-01 19:26 - 00000000 ____D () C:\Users\Acer\Downloads\Edge of Tomorrow 2014 TS x264 AC3 TiTAN
2014-07-01 18:45 - 2014-07-01 19:02 - 00000000 ____D () C:\Users\Acer\Downloads\Bad.Neighbors.2014.WEBRip.HC.XviD.MP3-RARBG
2014-07-01 16:46 - 2014-07-01 16:46 - 00023025 _____ () C:\Users\Acer\Downloads\Pravidla.odt
2014-06-27 16:45 - 2014-06-27 16:45 - 00000000 ____D () C:\Users\Acer\AppData\Local\CrashDumps
2014-06-27 09:35 - 2014-06-27 10:21 - 00000000 ____D () C:\Users\Acer\Downloads\Přátelé CZ
2014-06-27 09:34 - 2014-06-27 09:34 - 00228827 _____ () C:\Users\Acer\Downloads\[CzT]Pratele_CZ_1_10_serie.torrent
2014-06-26 22:42 - 2014-06-26 22:42 - 00000000 ____D () C:\Users\Taťka\AppData\Local\BMExplorer
2014-06-26 22:40 - 2014-06-26 22:40 - 00000000 ____D () C:\Users\Taťka\Documents\Bluetooth Folder
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 __SHD () C:\Users\Acer\AppData\Local\EmieUserList
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 __SHD () C:\Users\Acer\AppData\Local\EmieSiteList
2014-06-24 19:41 - 2014-06-24 19:41 - 00122480 _____ () C:\Users\Acer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-23 22:49 - 2014-06-23 22:49 - 00000000 ____D () C:\Users\Acer\AppData\Local\BMExplorer
2014-06-23 22:47 - 2014-06-23 22:47 - 00000000 ____D () C:\Users\Acer\Documents\Bluetooth Folder
2014-06-22 10:00 - 2014-06-22 15:08 - 00000000 ____D () C:\Users\Acer\Desktop\Nová složka (17)
2014-06-20 20:03 - 2014-06-22 14:19 - 00000000 ____D () C:\Users\Acer\Documents\Dantem
2014-06-20 19:38 - 2014-06-20 19:38 - 00000000 ____D () C:\Users\Public\OEM
2014-06-20 19:38 - 2014-06-20 19:38 - 00000000 ____D () C:\Users\Acer\Documents\clear.fi
2014-06-19 20:23 - 2014-06-25 20:55 - 00000000 ____D () C:\Users\Acer\Documents\Škola
2014-06-19 20:21 - 2014-03-05 00:07 - 292150090 _____ () C:\Users\Acer\Desktop\Milackovi.avi

==================== One Month Modified Files and Folders =======

2021-10-21 15:36 - 2014-01-21 04:51 - 00000852 _____ () C:\Windows\system32\Drivers\RTKHDRC.dat
2021-10-04 09:34 - 2014-01-21 04:51 - 00000712 _____ () C:\Windows\system32\Drivers\RTMICEQ0.dat
2014-07-19 21:53 - 2014-07-19 21:53 - 00016676 _____ () C:\Users\Acer\Desktop\FRST.txt
2014-07-19 21:53 - 2014-07-19 21:48 - 00000000 ____D () C:\FRST
2014-07-19 21:53 - 2014-01-21 04:23 - 01666632 _____ () C:\Windows\WindowsUpdate.log
2014-07-19 21:49 - 2014-07-19 21:49 - 00112640 _____ (forum.viry.cz) C:\Users\Acer\Desktop\FRSTLauncher (1).exe
2014-07-19 21:49 - 2014-01-21 06:11 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-202830934-2532720410-3113998622-1001
2014-07-19 21:48 - 2014-07-19 21:48 - 00112640 _____ (forum.viry.cz) C:\Users\Acer\Downloads\Nepotvrzeno 929672.crdownload
2014-07-19 21:47 - 2014-07-19 21:47 - 02089984 _____ (Farbar) C:\Users\Acer\Desktop\FRST64.exe
2014-07-19 21:43 - 2014-07-16 21:32 - 00122584 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-07-19 21:42 - 2014-06-08 22:41 - 00000000 ____D () C:\Users\Acer\AppData\Local\Adobe
2014-07-19 21:42 - 2014-02-28 13:27 - 00000958 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-18 14:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2014-07-18 13:38 - 2014-02-28 13:27 - 00000962 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-18 09:29 - 2014-07-18 09:29 - 00000000 _____ () C:\autoexec.bat
2014-07-18 09:27 - 2013-11-27 11:49 - 00072616 _____ () C:\Windows\PFRO.log
2014-07-18 09:27 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-17 07:58 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2014-07-16 22:21 - 2014-07-16 22:21 - 00003322 _____ () C:\Windows\System32\Tasks\SpyHunter4Startup
2014-07-16 22:21 - 2014-07-16 22:21 - 00002272 _____ () C:\Users\Acer\Desktop\SpyHunter.lnk
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SpyHunter
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\sh4ldr
2014-07-16 22:21 - 2014-07-16 22:21 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-07-16 22:21 - 2014-07-16 22:20 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-07-16 22:19 - 2014-07-16 22:19 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Acer\Downloads\sh-remover.exe
2014-07-16 22:17 - 2014-07-16 22:05 - 00000000 ____D () C:\ProgramData\HitmanPro
2014-07-16 22:15 - 2014-07-16 22:15 - 00012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2014-07-16 22:06 - 2014-07-16 22:06 - 00001909 _____ () C:\Users\Public\Desktop\HitmanPro.lnk
2014-07-16 22:06 - 2014-07-16 22:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HitmanPro
2014-07-16 22:06 - 2014-07-16 22:06 - 00000000 ____D () C:\Program Files\HitmanPro
2014-07-16 22:05 - 2014-07-16 22:05 - 11188736 _____ (SurfRight B.V.) C:\Users\Acer\Downloads\HitmanPro_x64.exe
2014-07-16 21:59 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-07-16 21:32 - 2014-07-16 21:32 - 00001118 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-07-16 21:32 - 2014-07-16 21:32 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-07-16 21:32 - 2014-07-16 21:31 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-07-16 21:31 - 2014-07-16 21:31 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-07-16 21:28 - 2014-07-16 21:28 - 00005182 _____ () C:\Users\Acer\Desktop\AdwCleaner[S0].txt
2014-07-16 21:25 - 2014-07-16 21:11 - 00000000 ____D () C:\AdwCleaner
2014-07-16 21:14 - 2014-07-16 21:14 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Acer\Downloads\mbam-setup-2.0.2.1012.exe
2014-07-16 21:11 - 2014-07-16 21:11 - 01348263 _____ () C:\Users\Acer\Downloads\adwcleaner_3.215.exe
2014-07-16 13:56 - 2013-08-22 15:25 - 00000301 _____ () C:\Windows\win.ini
2014-07-16 10:03 - 2014-07-16 10:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2014-07-16 10:02 - 2014-07-16 10:02 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2014-07-16 10:02 - 2014-07-16 10:02 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2014-07-15 12:32 - 2014-07-15 12:32 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Guest
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Administrator
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Users\Acer\AppData\Local\Comodo
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\ProgramData\60190b7125642476
2014-07-15 12:32 - 2014-07-15 12:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-15 12:32 - 2014-07-14 19:03 - 00000000 ____D () C:\Program Files (x86)\Zrychleni Pocitace
2014-07-15 12:32 - 2014-06-12 22:28 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Google
2014-07-15 12:32 - 2014-02-28 13:27 - 00000000 ____D () C:\Users\Acer\AppData\Local\Google
2014-07-15 12:32 - 2014-02-28 13:27 - 00000000 ____D () C:\Program Files (x86)\Google
2014-07-15 12:32 - 2013-08-22 17:36 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-07-15 12:32 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2014-07-15 12:25 - 2014-07-15 12:25 - 00003116 _____ () C:\Windows\System32\Tasks\{9C4259D9-73EA-4617-999E-939CA3420396}
2014-07-15 12:23 - 2014-07-15 12:23 - 00049342 _____ () C:\Users\Acer\Downloads\=-ANSI_X3.4-1968-Q-V=3Fplatn=3F=5Fl=3Fstek=5FHand-=%0D%0A =-ANSI_X3.4-1968-Q-lov=3F=5FLenka=5FD7540A.pdf-=
2014-07-15 08:24 - 2014-02-28 13:28 - 00002265 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-07-14 19:09 - 2014-07-14 19:08 - 00000000 _____ () C:\Users\Acer\Desktop\Velký Gatsby (2013) CZdabing.avi
2014-07-14 19:07 - 2014-07-14 19:07 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\freemkvtomp4converter
2014-07-14 19:05 - 2014-07-14 19:05 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Convert Audio Free
2014-07-14 19:00 - 2014-07-14 19:00 - 00929416 _____ (CNET Download.com) C:\Users\Acer\Downloads\cbsidlm-cbsi188-Free_MKV_to_AVI_Converter-SEO-75984422.exe
2014-07-14 18:54 - 2014-01-21 04:07 - 00739924 _____ () C:\Windows\system32\perfh005.dat
2014-07-14 18:54 - 2014-01-21 04:07 - 00151610 _____ () C:\Windows\system32\perfc005.dat
2014-07-14 18:54 - 2013-11-27 11:55 - 01745984 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-07-14 18:51 - 2014-07-14 18:29 - 1809489232 ____R () C:\Users\Acer\Downloads\Velký Gatsby (2013) CZdabing.mkv
2014-07-14 18:36 - 2014-07-14 18:27 - 00000000 ____D () C:\Users\Acer\Downloads\The.Grand.Budapest.Hotel.2014.480p.BDRip.AC3.XViD.CZ.4play
2014-07-14 18:26 - 2014-07-14 18:26 - 00017817 _____ () C:\Users\Acer\Downloads\[CzT]Velky_Gatsby_The_Great_Gatsby_2013_CZ_.torrent
2014-07-14 18:25 - 2014-07-14 18:25 - 00016535 _____ () C:\Users\Acer\Downloads\[CzT]Grandhotel_Budapest_The_Grand_Budapest_Hotel_2014_CZ_.torrent
2014-07-13 14:54 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2014-07-12 20:03 - 2014-07-12 20:03 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Unity
2014-07-12 20:02 - 2014-07-12 20:02 - 01080480 _____ (Unity Technologies ApS) C:\Users\Acer\Downloads\UnityWebPlayer.exe
2014-07-12 20:02 - 2014-07-12 20:02 - 00000000 ____D () C:\Users\Acer\AppData\Local\Unity
2014-07-11 12:32 - 2013-08-22 16:44 - 05099928 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-10 22:51 - 2014-07-10 22:51 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-07-10 22:51 - 2013-08-22 21:11 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-10 22:51 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ToastData
2014-07-10 22:51 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-10 22:51 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-07-10 22:51 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\WinStore
2014-07-10 16:05 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2014-07-10 16:04 - 2014-06-10 12:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-07-10 15:59 - 2014-06-10 12:25 - 96441528 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-07-10 15:56 - 2014-06-08 21:44 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-07-09 15:52 - 2014-07-09 15:31 - 00002457 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2014-07-09 15:34 - 2014-06-08 22:42 - 00000000 ____D () C:\ProgramData\Adobe
2014-07-09 15:33 - 2014-01-21 06:05 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Adobe
2014-07-09 15:32 - 2013-11-27 12:22 - 00000000 ____D () C:\ProgramData\McAfee
2014-07-09 15:31 - 2014-07-09 15:31 - 00002043 _____ () C:\Users\Public\Desktop\Adobe Reader XI.lnk
2014-07-09 15:31 - 2014-06-08 22:59 - 00000000 ____D () C:\Program Files (x86)\Adobe
2014-07-09 09:22 - 2014-07-09 09:22 - 00079872 _____ (Microsoft Corporation) C:\Windows\system32\WSReset.exe
2014-07-08 18:34 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\ELAM
2014-07-06 15:43 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\LiveKernelReports
2014-07-06 14:44 - 2014-02-28 13:26 - 00000000 ____D () C:\Users\Acer\AppData\Local\Deployment
2014-07-04 21:39 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\NDF
2014-07-04 03:24 - 2014-01-21 06:04 - 00000000 ____D () C:\Users\Acer
2014-07-02 20:11 - 2014-07-02 20:11 - 00094687 _____ () C:\Users\Acer\Downloads\DINPUT8.zip
2014-07-02 19:47 - 2014-07-02 15:43 - 00000000 ____D () C:\The KMPlayer
2014-07-02 18:23 - 2014-07-02 18:05 - 00000000 ____D () C:\Users\Acer\Documents\GTA San Andreas User Files
2014-07-02 18:13 - 2014-07-02 18:13 - 00461312 _____ (Microsoft Corporation) C:\Windows\system32\dpnet.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00377856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnet.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00214016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplayx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\dpnathlp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00059904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnathlp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00045056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpwsockx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\dpnsvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnsvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dplaysvr.exe
2014-07-02 18:13 - 2014-07-02 18:13 - 00023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpmodemx.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhupnp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dpnhpast.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhupnp.dll
2014-07-02 18:13 - 2014-07-02 18:13 - 00009216 _____ (Microsoft Corporation) C:\Windows\system32\dpnhpast.dll
2014-07-02 18:12 - 2014-07-02 18:07 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-07-02 18:12 - 2014-07-02 18:06 - 00011755 _____ () C:\Windows\DirectX.log
2014-07-02 18:10 - 2014-07-02 18:07 - 00000000 ___HD () C:\Windows\msdownld.tmp
2014-07-02 18:07 - 2014-07-02 18:07 - 00292184 _____ (Microsoft Corporation) C:\Users\Acer\Downloads\dxwebsetup.exe
2014-07-02 18:04 - 2014-07-02 18:04 - 00001237 _____ () C:\Users\Acer\Desktop\gta_sa – zástupce.lnk
2014-07-02 18:04 - 2014-07-02 15:11 - 00000000 ____D () C:\Users\Acer\Downloads\GTA San Andreas
2014-07-02 17:51 - 2014-07-02 17:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2014-07-02 17:51 - 2014-07-02 17:51 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2014-07-02 17:51 - 2014-01-21 04:49 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-07-02 15:44 - 2014-07-02 15:44 - 00000646 _____ () C:\Users\Acer\Desktop\KMPlayer.lnk
2014-07-02 15:44 - 2014-07-02 15:44 - 00000000 ____D () C:\Users\Acer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer
2014-07-02 15:34 - 2014-07-02 15:30 - 32772784 _____ (PandoraTV) C:\Users\Acer\Downloads\3.9.0.124_20140513022949.exe
2014-07-02 15:34 - 2014-07-02 15:10 - 00000000 ____D () C:\Users\Acer\Downloads\Stoletý stařík,který vylezl z okna a zmizel
2014-07-02 15:06 - 2014-07-02 15:06 - 00041792 _____ () C:\Users\Acer\Downloads\[CzT]Grand_Theft_Auto_GTA_San_Andreas_2008_CZ_.torrent
2014-07-02 15:05 - 2014-07-02 15:05 - 00013883 _____ () C:\Users\Acer\Downloads\[CzT]Stolety_starik_ktery_vylezl_z_okna_a_zmizel_Hundra_ringen_som_klev_ut_genom_fonstret_och_forsvann_2013_.torrent
2014-07-01 20:23 - 2014-07-01 20:23 - 00102589 _____ () C:\Users\Acer\Downloads\Neighbors(0000238249).srt
2014-07-01 19:26 - 2014-07-01 19:26 - 00087774 _____ () C:\Users\Acer\Downloads\Edge-of-Tomorrow(0000237753).srt
2014-07-01 19:26 - 2014-07-01 19:26 - 00000000 ____D () C:\Users\Acer\Downloads\Edge of Tomorrow 2014 TS x264 AC3 TiTAN
2014-07-01 19:02 - 2014-07-01 18:45 - 00000000 ____D () C:\Users\Acer\Downloads\Bad.Neighbors.2014.WEBRip.HC.XviD.MP3-RARBG
2014-07-01 16:46 - 2014-07-01 16:46 - 00023025 _____ () C:\Users\Acer\Downloads\Pravidla.odt
2014-07-01 00:45 - 2014-07-09 14:07 - 00688128 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-28 09:48 - 2014-07-09 14:07 - 00527360 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-28 09:07 - 2014-07-09 14:07 - 00385536 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2014-06-27 16:45 - 2014-06-27 16:45 - 00000000 ____D () C:\Users\Acer\AppData\Local\CrashDumps
2014-06-27 10:21 - 2014-06-27 09:35 - 00000000 ____D () C:\Users\Acer\Downloads\Přátelé CZ
2014-06-27 09:34 - 2014-06-27 09:34 - 00228827 _____ () C:\Users\Acer\Downloads\[CzT]Pratele_CZ_1_10_serie.torrent
2014-06-26 22:55 - 2014-07-11 12:32 - 00703968 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-06-26 22:55 - 2014-07-11 12:32 - 00105440 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-06-26 22:46 - 2014-06-12 22:34 - 00003596 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-202830934-2532720410-3113998622-1002
2014-06-26 22:42 - 2014-06-26 22:42 - 00000000 ____D () C:\Users\Taťka\AppData\Local\BMExplorer
2014-06-26 22:40 - 2014-06-26 22:40 - 00000000 ____D () C:\Users\Taťka\Documents\Bluetooth Folder
2014-06-26 22:40 - 2014-01-21 05:01 - 00000000 ____D () C:\ProgramData\Atheros
2014-06-26 15:38 - 2014-06-12 22:28 - 00000000 ____D () C:\Users\Taťka\AppData\Local\Pokki
2014-06-25 20:55 - 2014-06-19 20:23 - 00000000 ____D () C:\Users\Acer\Documents\Škola
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 __SHD () C:\Users\Acer\AppData\Local\EmieUserList
2014-06-25 19:49 - 2014-06-25 19:49 - 00000000 __SHD () C:\Users\Acer\AppData\Local\EmieSiteList
2014-06-24 19:41 - 2014-06-24 19:41 - 00122480 _____ () C:\Users\Acer\AppData\Local\GDIPFONTCACHEV1.DAT
2014-06-23 22:49 - 2014-06-23 22:49 - 00000000 ____D () C:\Users\Acer\AppData\Local\BMExplorer
2014-06-23 22:47 - 2014-06-23 22:47 - 00000000 ____D () C:\Users\Acer\Documents\Bluetooth Folder
2014-06-22 15:08 - 2014-06-22 10:00 - 00000000 ____D () C:\Users\Acer\Desktop\Nová složka (17)
2014-06-22 14:19 - 2014-06-20 20:03 - 00000000 ____D () C:\Users\Acer\Documents\Dantem
2014-06-20 19:41 - 2014-01-21 06:07 - 00000000 ____D () C:\Users\Acer\AppData\Local\clear.fi
2014-06-20 19:38 - 2014-06-20 19:38 - 00000000 ____D () C:\Users\Public\OEM
2014-06-20 19:38 - 2014-06-20 19:38 - 00000000 ____D () C:\Users\Acer\Documents\clear.fi
2014-06-20 17:33 - 2014-02-28 13:27 - 00003934 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-20 17:33 - 2014-02-28 13:27 - 00003698 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-19 20:20 - 2013-08-22 16:46 - 00013100 _____ () C:\Windows\setupact.log
2014-06-19 03:39 - 2014-07-09 09:31 - 23464448 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-19 02:48 - 2014-07-09 09:31 - 02768384 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-19 02:16 - 2014-07-09 09:31 - 17276416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-19 02:09 - 2014-07-09 09:31 - 00452608 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-19 01:51 - 2014-07-09 09:31 - 05721088 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-19 01:50 - 2014-07-09 09:31 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-19 01:48 - 2014-07-09 09:31 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-19 01:46 - 2014-07-09 09:31 - 00250880 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-06-19 01:39 - 2014-07-09 09:31 - 00608768 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-19 01:33 - 2014-07-09 09:31 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-19 01:32 - 2014-07-09 09:31 - 02179072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-19 01:27 - 2014-07-09 09:31 - 02040832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-19 01:12 - 2014-07-09 09:31 - 00367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-19 00:59 - 2014-07-09 09:31 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-19 00:58 - 2014-07-09 09:31 - 02266112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-19 00:58 - 2014-07-09 09:31 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-19 00:57 - 2014-07-09 09:31 - 00225280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-06-19 00:52 - 2014-07-09 09:31 - 04254720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-19 00:51 - 2014-07-09 09:31 - 13527040 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-19 00:49 - 2014-07-09 09:31 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-19 00:45 - 2014-07-09 09:31 - 01964544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-19 00:35 - 2014-07-09 09:31 - 11742208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-19 00:34 - 2014-07-09 09:31 - 01393664 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-19 00:15 - 2014-07-09 09:31 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-06-19 00:13 - 2014-07-09 09:31 - 01791488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-19 00:09 - 2014-07-09 09:31 - 01139200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-19 00:07 - 2014-07-09 09:31 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

Some content of TEMP:
====================
C:\Users\Acer\AppData\Local\Temp\6_Offer_5.exe
C:\Users\Acer\AppData\Local\Temp\BackupSetup.exe
C:\Users\Acer\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\Acer\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\Acer\AppData\Local\Temp\ExPromo.exe
C:\Users\Acer\AppData\Local\Temp\NSISPromotionEx.dll
C:\Users\Acer\AppData\Local\Temp\octD8E3.tmp.exe
C:\Users\Acer\AppData\Local\Temp\ose00000.exe
C:\Users\Acer\AppData\Local\Temp\Quarantine.exe
C:\Users\Acer\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\Acer\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\Acer\AppData\Local\Temp\SHSetup.exe
C:\Users\Taťka\AppData\Local\Temp\octF134.tmp.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================



==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Acer\Desktop" je 1364 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Costmin virus

#2 Příspěvek od Rudy »

Zdravím!
Otevřte poznámkový blok a zkopírujte do něj:
Start
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
HKU\S-1-5-21-202830934-2532720410-3113998622-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKCU - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
SearchScopes: HKCU - {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Acer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk [2014-07-15]
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk\2.0 [2014-07-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Users\Acer\AppData\Local\Temp
C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
C:\Users\Taťka\AppData\Local\Temp
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.

Dále bych doporučil redukci dat, uložených na ploše. Máte tam cca 1,3GB, což zpomaluje start. Přesuňte je do jiného adresáře a na plochu dejte zástupce.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Mufii
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 19 črc 2014 20:36

Re: Costmin virus

#3 Příspěvek od Mufii »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 19-07-2014
Ran by Léňa2 at 2014-07-19 22:49:56 Run:1
Running from C:\Users\Acer\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-202830934-2532720410-3113998622-1001\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\Install.exe"
HKU\S-1-5-21-202830934-2532720410-3113998622-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
HKU\S-1-5-21-202830934-2532720410-3113998622-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495} - "E:\SETUP.EXE"
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
SearchScopes: HKLM - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {BEB3BA96-C090-463F-9EBA-72204222D386} URL = http://www.bing.com/search?q={searchTer ... TR&pc=ACJB
SearchScopes: HKCU - DefaultScope {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
SearchScopes: HKCU - {BEB3BA96-C090-463F-9EBA-72204222D386} URL =
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Acer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk [2014-07-15]
CHR Extension: (cosstminn) - C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk\2.0 [2014-07-15]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\Users\Acer\AppData\Local\Temp
C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
C:\Users\Taťka\AppData\Local\Temp
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
End
*****************

'HKU\S-1-5-21-202830934-2532720410-3113998622-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{086a4d83-ef31-11e3-8274-201a06d6b495}' => Key deleted successfully.
'HKCR\CLSID\{086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKU\S-1-5-21-202830934-2532720410-3113998622-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKCR\CLSID\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKU\S-1-5-21-202830934-2532720410-3113998622-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKCR\CLSID\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKU\S-1-5-21-202830934-2532720410-3113998622-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
'HKCR\CLSID\{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {086a4d83-ef31-11e3-8274-201a06d6b495}'=> Key not found.
C:\Windows\system32\GroupPolicy\Machine => Moved successfully.
C:\Windows\system32\GroupPolicy\GPT.ini => Moved successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}' => Key deleted successfully.
'HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'=> Key not found.
'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BEB3BA96-C090-463F-9EBA-72204222D386}' => Key deleted successfully.
'HKCR\CLSID\{BEB3BA96-C090-463F-9EBA-72204222D386}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{BEB3BA96-C090-463F-9EBA-72204222D386}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{BEB3BA96-C090-463F-9EBA-72204222D386}'=> Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{BEB3BA96-C090-463F-9EBA-72204222D386}' => Key deleted successfully.
'HKCR\CLSID\{BEB3BA96-C090-463F-9EBA-72204222D386}'=> Key not found.
'HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0' => Key deleted successfully.
C:\Users\Acer\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk => Moved successfully.
C:\Users\Acer\AppData\Local\Google\Chrome\User Data\Default\Extensions\ilpoiomobmhnajonfmemelencepkfkbk\2.0 directory not found.
'HKLM\SOFTWARE\Policies\Google' => Key deleted successfully.

"C:\Users\Acer\AppData\Local\Temp" directory move:

C:\Users\Acer\AppData\Local\Temp\38D3540D.TMP => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\58D22E97-AA36-4927-91FB-51C15A369D23.Verify.2.etl => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\6_Offer_5.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\713665781.od => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\83297F06-1E3B-41CE-87C0-4ADD389668BF.Diagnose.0.etl => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\90870500.od => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\AdobeARM.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\AdobeSFX.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\AdwCleaner.jpg => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\amt3.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\AvgRep.xml => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\BackupSetup.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\binsis142.xml => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\binsischeck654.xml => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\chrome_installer.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Cleaning.ico => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\CVR92E4.tmp.cvr => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\CVRACF5.tmp.cvr => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dd_vcredistMSI75FC.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dd_vcredistMSI764D.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dd_vcredistUI75FC.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dd_vcredistUI764D.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\DMI4768.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\DMID4F3.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Donate.ico => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\DseShExt-x64.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\DseShExt-x86.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\EsgScanner.inf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ESGScanner.sys => Moved successfully.
Could not move "C:\Users\Acer\AppData\Local\Temp\etilqs_xu2ab7Y5Ih7662C" => Scheduled to move on reboot.
C:\Users\Acer\AppData\Local\Temp\EULA.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ExPromo.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\GLC7DAF.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\GLG8255.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\gomtemp.smi => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Guest.bmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Kno4AE0.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\KnoAC16.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\KnoB815.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\KnoE0DA.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Lang_cs-CZ.msi => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Léňa.bmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Léňa2.bmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20140608_225720719-MSI_vc_red.msi.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Microsoft Visual C++ 2010 x64 Redistributable Setup_20140608_225720719.html => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_20140608_225356086-MSI_vc_red.msi.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Microsoft Visual C++ 2010 x86 Redistributable Setup_20140608_225356086.html => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\modules00 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\modules11 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\mpbtrk.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\MpSigStub.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\MSI8cf97.LOG => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\MSIbcdc3.LOG => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\NSISPromotionEx.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\NSISPromotionEx.ini => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\nso8CF2.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct14A.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct162F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct1820.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct18BA.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct1A64.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct1F61.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct24C0.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct2D53.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct301A.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct3683.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct397D.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct3CA2.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct40FE.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct4270.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct4DE2.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct592E.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct5940.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct5C81.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct5D34.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct5FF8.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct605D.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct7AC6.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct7D36.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct7F9F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct8753.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct8804.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct93D7.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9969.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9BEB.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9D6B.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9E65.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9EB8.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oct9F83.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA33C.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA40F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA446.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA923.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA937.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA947.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octA976.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octAA70.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octAC44.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octACB2.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octAD1F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octAF0A.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB09A.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB0F8.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB126.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB1F2.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB211.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB760.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB86A.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octB8C7.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octBB19.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octBC71.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octC72F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octC888.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octCA06.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octCB59.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octCD11.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octCDD.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD0CA.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD130.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD19F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD383.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD8E3.tmp.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octD939.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octDC2E.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octDC2F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octDFA3.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octE027.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octE3B.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octF121.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octF18C.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octF3AE.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octF61E.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octF997.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octFBCC.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\octFCEC.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\oobelib.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ose00000.exe => Moved successfully.
Could not move "C:\Users\Acer\AppData\Local\Temp\PDApp.log" => Scheduled to move on reboot.
C:\Users\Acer\AppData\Local\Temp\Pokki-2014-07-12.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Pokki-2014-07-13.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Pokki-2014-07-14.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Pokki-2014-07-15.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Pokki-2014-07-16.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Quarantine.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Report.ico => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Scan.ico => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SDShelEx-win32.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SDShelEx-x64.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\set411B.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Setup Log 2014-07-14 #001.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Setup Log 2014-07-14 #002.txt => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SetupExe(20140608214255186C).log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SHSetup.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Silverlight0.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SilverlightMSI.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\StructuredQuery.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\swtag.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Taťka.bmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\TUInstallLogBP_2014-06-11_18-26-24.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\TUMDB2B.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\TUMDD30.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\tuneupmsi.7z => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Uninstall.ico => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\utt5CC1.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\utt5CC1.tmp.old => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\utt8C26.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\utt8C26.tmp.bat => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\winstore.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog00.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog01.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog02.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog03.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog04.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmplog05.sqm => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\wmsetup.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\_320D.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\_E20F.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\_isdelet.ini => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\~5152.bat => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\~5152.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\~8933.bat => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\~8933.tmp => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\Yawtix\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\SDIAG_aa9e7986-c034-4eed-8670-3806bd5f62ba\NetworkDiagnosticSnapIn.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\nst51EF.tmp\___ocnsis.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\isp46CB.tmp\_Setup.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f7cbd6de701f414a97834bce522e71cc\e28a842362144af9ba6c9ee1217d9e28 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f7cbd6de701f414a97834bce522e71cc\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f7cbd6de701f414a97834bce522e71cc\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\27ad5f9541a84ac987dc0eb45ec5ceab => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f58b48a75a0e428b8427b600598f6248\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\5be6f1d59f4947d9b1f517dce0741926 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f2f6e20e49b7460d8822cd25cc7172c2\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f04c52a1a2ca451cb99eb022f58915f1\80bdc034cbee4bb28f2ceed66c41aa0d => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f04c52a1a2ca451cb99eb022f58915f1\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\f04c52a1a2ca451cb99eb022f58915f1\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ec92084c06a341fabf6eaba89b052e78\057fce640dcd40818b2f9d91c5e5cd32 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ec92084c06a341fabf6eaba89b052e78\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ec92084c06a341fabf6eaba89b052e78\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e843140f521d45309a125ec79375c71c\36ca4ff138284a238f6d97d53805fc6b => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e843140f521d45309a125ec79375c71c\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e843140f521d45309a125ec79375c71c\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e77c21f93e014d9da65e80f29027c873\30882bfb9fcc4d8bbb3bd0cca5334674 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e77c21f93e014d9da65e80f29027c873\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e77c21f93e014d9da65e80f29027c873\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e105c73e5e534b9b83265b659871bc71\0e775fee794f4bf09b1e85498a074bed => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e105c73e5e534b9b83265b659871bc71\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\e105c73e5e534b9b83265b659871bc71\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\1x1.gif => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\checkmark.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmbg.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmDlLogo.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmGryBtm.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmGryLft.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmGryRgt.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\dlmGryTop.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\iconimg_286599.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\mkvtoavi_setup.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\pcspeedup1109.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\dlmE978.tmp\ttofferbullet.png => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\daa422a80f7041b99315f389ec03dc0a\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\daa422a80f7041b99315f389ec03dc0a\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d914c1ef0ef04fa1b40efbb6f926df5b\50232bd59f1d48b1abb841a8281d2b6e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d914c1ef0ef04fa1b40efbb6f926df5b\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d914c1ef0ef04fa1b40efbb6f926df5b\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d1cb0091d595451fab7ff33f3f95ce2b\6d959cce17b34acbb9db12ca12a9ab90 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d1cb0091d595451fab7ff33f3f95ce2b\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d1cb0091d595451fab7ff33f3f95ce2b\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d1cb0091d595451fab7ff33f3f95ce2b\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d1cb0091d595451fab7ff33f3f95ce2b\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d01ec90a41974562bf5c21085cd7f703\2a62d1810eb24075a6348d56b051a352 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d01ec90a41974562bf5c21085cd7f703\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\d01ec90a41974562bf5c21085cd7f703\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ce73cd0f0a604ac69da228fa25fab834\5e071600704741adbf9a2926e73efa42 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ce73cd0f0a604ac69da228fa25fab834\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\ce73cd0f0a604ac69da228fa25fab834\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\c70a135042d344bdb0280dea334c9a87\51f77f9e773145dfa7a109831f955d99 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\c70a135042d344bdb0280dea334c9a87\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\c70a135042d344bdb0280dea334c9a87\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\bf366d8e69db434e9afd80bba682ea4e\7dec4cac31334f7cbf981ccec6336eb0 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\bf366d8e69db434e9afd80bba682ea4e\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\bf366d8e69db434e9afd80bba682ea4e\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\be7c72561a344bf9be21e1fba66cf1d6\3fc57342a17a4b76bd66081f6b263b7b => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\be7c72561a344bf9be21e1fba66cf1d6\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\be7c72561a344bf9be21e1fba66cf1d6\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\5f035ccbd2d8460eac3eeb1ffd2e1c4e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\b1c009381dcf41e1aed09e12c1f46656\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\APN-Stub\Unknown\Stbc79fb954-3e1c-4bda-ad56-68bf110fa46c.log => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\aa41a349d1844a7a8ef17bade43422c4\239b48b1342a4421a71c63a0a6a0ff2d => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\aa41a349d1844a7a8ef17bade43422c4\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\aa41a349d1844a7a8ef17bade43422c4\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\aa41a349d1844a7a8ef17bade43422c4\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\aa41a349d1844a7a8ef17bade43422c4\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\a413131a5b01425aa7d82b8bc37b2d63\95d3bcee142c48109b2fe83352a53207 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\a413131a5b01425aa7d82b8bc37b2d63\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\a413131a5b01425aa7d82b8bc37b2d63\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9f4a75aa13054eaf9619f783afdcaaab\844185adf0964e1fa3f14bb1ef9bdea0 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9f4a75aa13054eaf9619f783afdcaaab\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9f4a75aa13054eaf9619f783afdcaaab\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9a012f60f7514c778a7dfe6175d06678\9891c9d8415c401b92d815fa6305044d => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9a012f60f7514c778a7dfe6175d06678\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\9a012f60f7514c778a7dfe6175d06678\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\990ea2ea375d4115aa0324d8b423fd68\e5fa55bba57a43e092b61b60c4eaba6e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\990ea2ea375d4115aa0324d8b423fd68\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\990ea2ea375d4115aa0324d8b423fd68\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\986bc0800b344dd194309b0ba6c29d9c\8aa32b63031d47cc99a74de4fdcc86b5 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\986bc0800b344dd194309b0ba6c29d9c\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\986bc0800b344dd194309b0ba6c29d9c\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fe350b2415b4d0bba9bba37dda40d50\1b95e3db2efa4cbbb9f8ca7b87bf0acb => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fe350b2415b4d0bba9bba37dda40d50\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fe350b2415b4d0bba9bba37dda40d50\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fe350b2415b4d0bba9bba37dda40d50\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fe350b2415b4d0bba9bba37dda40d50\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fa6b7c788a640b99069c72bb666212c\0db9ca9998464bb68e9b4a26bc94744e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fa6b7c788a640b99069c72bb666212c\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8fa6b7c788a640b99069c72bb666212c\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\01223a37b5a34cc7a4f98d2615b6886c => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\8850751ec6764d36a9fae150aaac9261\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7d5de97d27e84daeafc7d4bbee58d4a1\3deaea29b9114a88aa2230f586c26a21 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7d5de97d27e84daeafc7d4bbee58d4a1\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7d5de97d27e84daeafc7d4bbee58d4a1\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7b1c6137d0d942fca369615f0beec09b\8473eb8a1b7041e9b6ff40d656fc262e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7b1c6137d0d942fca369615f0beec09b\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7b1c6137d0d942fca369615f0beec09b\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7a4b309ba7b04fc0b65c55858ea5bfce\94fda342bcd0427d9cc47d20c595cd9b => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7a4b309ba7b04fc0b65c55858ea5bfce\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\7a4b309ba7b04fc0b65c55858ea5bfce\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\77efc1448e2d4b75884db56359fbfee6\357f7b0e2f054c6aac546344b3a1e170 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\77efc1448e2d4b75884db56359fbfee6\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\77efc1448e2d4b75884db56359fbfee6\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\5a9e95e9a45b4452bef9882e923dabc9 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\70aed987f8884ff59df99d3736ce21d1\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\674c2d725bdc4429a4a96c75ea7d3d3a\3101517e05e04f15b5d5951a7b427d6f => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\674c2d725bdc4429a4a96c75ea7d3d3a\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\674c2d725bdc4429a4a96c75ea7d3d3a\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\5d729def6c8e4a1793d45750fb1b4cca\b225b3fa77d2422a911c7a5efc5ec5db => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\5d729def6c8e4a1793d45750fb1b4cca\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\5d729def6c8e4a1793d45750fb1b4cca\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4e26b2a202f342a2a04ec420f4a02639\79f7bbcf66964e46b2109f192e6dceb1 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4e26b2a202f342a2a04ec420f4a02639\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4e26b2a202f342a2a04ec420f4a02639\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4931228735db4bc29d5be7df006baa37\49e934bcecc74c0891c848c8efde7204 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4931228735db4bc29d5be7df006baa37\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4931228735db4bc29d5be7df006baa37\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4931228735db4bc29d5be7df006baa37\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\4931228735db4bc29d5be7df006baa37\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\48f6e18fae304423bfc992a7b0d6827b\8c4e90ff6484431aac367bbc3279458f => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\48f6e18fae304423bfc992a7b0d6827b\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\48f6e18fae304423bfc992a7b0d6827b\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\3f279baedfcd4e3199723523754618c9\70bc3c52dc3b4129a5bc69cf053f7c2c => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\3f279baedfcd4e3199723523754618c9\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\3f279baedfcd4e3199723523754618c9\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\329bd0f3ddb2450d93f3610866956a1f\c26247f93e7c40189db208a644c83661 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\329bd0f3ddb2450d93f3610866956a1f\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\329bd0f3ddb2450d93f3610866956a1f\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\31ae120077c54d19bce79ee0341b181f\5825c7a5f87a4a0a8cbb9ef887b6505e => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\31ae120077c54d19bce79ee0341b181f\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\31ae120077c54d19bce79ee0341b181f\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d8e66da385644678cef86ae72944cd1\dd3654003ed548bfa865731905387402 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d8e66da385644678cef86ae72944cd1\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d8e66da385644678cef86ae72944cd1\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d4042b1be394ca8b7ee7062fb022fc3\ea852274e9b04514853de815dce82593 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d4042b1be394ca8b7ee7062fb022fc3\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d4042b1be394ca8b7ee7062fb022fc3\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d4042b1be394ca8b7ee7062fb022fc3\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2d4042b1be394ca8b7ee7062fb022fc3\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2b650e2e0a3a47498cc15c339d50e05e\fb475fcc1f7d4302b1a0387e795eca8f => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2b650e2e0a3a47498cc15c339d50e05e\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2b650e2e0a3a47498cc15c339d50e05e\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2b650e2e0a3a47498cc15c339d50e05e\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\2b650e2e0a3a47498cc15c339d50e05e\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1e9018912e7a4761bfb4a607652fe0d3\d7aacdde01024db982ea92e122de16ec => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1e9018912e7a4761bfb4a607652fe0d3\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1e9018912e7a4761bfb4a607652fe0d3\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1e9018912e7a4761bfb4a607652fe0d3\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1e9018912e7a4761bfb4a607652fe0d3\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\3fd85e37ad9047e998ae56aa7ebeebfe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\7za.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\fsum.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\udp.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\199bc7558a6a4cd1aee00c59886e4c4e\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1881b9bd25c14557bab873aa1f9d7700\0b03dd2c99af41f69c055454c51da6ae => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1881b9bd25c14557bab873aa1f9d7700\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1881b9bd25c14557bab873aa1f9d7700\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\12e7bee23d7947ae846c7891437b58aa\5b258172c96f47f4b8b9511d746357ba => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\12e7bee23d7947ae846c7891437b58aa\filesys.dll => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\12e7bee23d7947ae846c7891437b58aa\sqlhelper.exe => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\12e7bee23d7947ae846c7891437b58aa\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\12e7bee23d7947ae846c7891437b58aa\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1099a8b118d44791bae55079ce33e3a0\b41ea3fee7a0435093c2e51fa2ca4049 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1099a8b118d44791bae55079ce33e3a0\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\1099a8b118d44791bae55079ce33e3a0\__main.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\03fc37ac9b794821b58b048e59af94ca\49e6cd0cdfbb470ca255acce1e667480 => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\03fc37ac9b794821b58b048e59af94ca\__0.swf => Moved successfully.
C:\Users\Acer\AppData\Local\Temp\03fc37ac9b794821b58b048e59af94ca\__main.swf => Moved successfully.
Could not move "C:\Users\Acer\AppData\Local\Temp" directory. => Scheduled to move on reboot.

C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP => Moved successfully.
C:\Users\Taťka\AppData\Local\Temp => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.

=> Result of Scheduled Files to move (Boot Mode: Normal) (Date&Time: 2014-07-19 22:52:05)<=

C:\Users\Acer\AppData\Local\Temp\etilqs_xu2ab7Y5Ih7662C => Is moved successfully.
C:\Users\Acer\AppData\Local\Temp\PDApp.log => Is moved successfully.
C:\Users\Acer\AppData\Local\Temp => Moved successfully.

==== End of Fixlog ====

A teď se jdu vrhnout na tu redukci dat :)

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Costmin virus

#4 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Mufii
Návštěvník
Návštěvník
Příspěvky: 35
Registrován: 19 črc 2014 20:36

Re: Costmin virus

#5 Příspěvek od Mufii »

Skvělé, dotěrné reklamy se již nezobrazují a rozšíření je také pryč :) Děkuji mockrát.

Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119541
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:

Re: Costmin virus

#6 Příspěvek od Rudy »

Rádo se stalo! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování:
Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.

Zamčeno