Pomatene pismena

[latyno]

Dobry den, do pc mi pravděpodobně nalezl nějaký sajrajt a úplně se mi zbláznilo psaní, stiskem klávesy se napíše hned několik znaků najednou. Odzkoušená i jiná klávesnice. Prosím o kontrolu logu.

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by latyno (administrator) on LATYNO-PC on 05-09-2014 18:09:40
Running from C:\Users\latyno\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(VIA Technologies, Inc.) C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Spotify Ltd) C:\Users\latyno\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(Dolby Laboratories Inc.) C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe
(Curse) C:\Users\latyno\AppData\Local\Apps\2.0\5YKKOCYH.POH\BZN9GY10.AQC\curs..tion_9e9e83ddf3ed3ead_0005.0001_36a9b6290e21932c\CurseClient.exe
() C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\latyno\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monito
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13662936 2013-12-13] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1368792 2013-12-13] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1271072 2014-03-11] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-08-30] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Dolby Home Theater v4] => C:\Program Files (x86)\Dolby Home Theater v4\pcee4.exe [508144 2012-08-31] (Dolby Laboratories Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-06-30] (Microsoft Corporation)
HKU\S-1-5-21-2793960855-1282776421-186333144-1000\...\Run: [Spotify] => C:\Users\latyno\AppData\Roaming\Spotify\Spotify.exe [6621752 2014-08-29] (Spotify Ltd)
HKU\S-1-5-21-2793960855-1282776421-186333144-1000\...\Run: [Spotify Web Helper] => C:\Users\latyno\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe [1245752 2014-08-29] (Spotify Ltd)
HKU\S-1-5-21-2793960855-1282776421-186333144-1000\...\Run: [Viber] => C:\Users\latyno\AppData\Local\Viber\Viber.exe [930816 2014-06-19] ()
HKU\S-1-5-21-2793960855-1282776421-186333144-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7762712 2014-08-11] (SUPERAntiSpyware)
Startup: C:\Users\latyno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip ()

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com
CHR DefaultSearchKeyword: Default -> 0343BB03510251119824F62508784BF9E633F51A584A4B2DD4FBB17C1FB8C237
CHR DefaultSearchURL: Default -> 15BC7492FBE266A1F214849A1DCD38C2ABF6C3B9DE3F85DC81808BF3B61A3F26
CHR Profile: C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-06-28]
CHR Extension: (Dokumenty Google) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-28]
CHR Extension: (Disk Google) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-06-28]
CHR Extension: (YouTube) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-06-28]
CHR Extension: (Vyhledávání Google) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-28]
CHR Extension: (AdBlock) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-06-28]
CHR Extension: (Peněženka Google) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-06-28]
CHR Extension: (Gmail) - C:\Users\latyno\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-06-28]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-08-30] (Advanced Micro Devices, Inc.) [File not signed]
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [174368 2014-02-28] ()
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [377616 2014-07-16] (LogMeIn, Inc.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2014-03-11] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [347872 2014-03-11] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1617696 2014-04-30] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [21007192 2014-04-30] (NVIDIA Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [268512 2014-01-25] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133928 2014-03-11] (Microsoft Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [18776 2014-04-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [40392 2014-03-31] (NVIDIA Corporation)
S1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 VUSB3HUB; C:\Windows\System32\DRIVERS\ViaHub3.sys [225792 2013-08-12] (VIA Technologies, Inc.)
R3 xhcdrv; C:\Windows\System32\DRIVERS\xhcdrv.sys [295424 2013-08-12] (VIA Technologies, Inc.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-05 18:09 - 2014-09-05 18:09 - 00011436 _____ () C:\Users\latyno\Desktop\FRST.txt
2014-09-05 18:08 - 2014-09-05 18:08 - 02104832 _____ (Farbar) C:\Users\latyno\Desktop\FRST64.exe
2014-09-05 18:08 - 2014-09-05 18:08 - 00112640 _____ (forum.viry.cz) C:\Users\latyno\Desktop\FRSTLauncher.exe
2014-09-05 18:01 - 2014-09-05 18:09 - 00000000 ____D () C:\FRST
2014-09-05 16:45 - 2014-09-05 16:45 - 00003590 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 4ef4a8a4-3745-4694-9d18-646ab014ce97
2014-09-05 16:45 - 2014-09-05 16:45 - 00003516 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 8fa61662-20a4-42aa-aab1-3e9c8248b619
2014-09-05 16:45 - 2014-09-05 16:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8fa61662-20a4-42aa-aab1-3e9c8248b619.job
2014-09-05 16:45 - 2014-09-05 16:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4ef4a8a4-3745-4694-9d18-646ab014ce97.job
2014-09-05 16:45 - 2014-09-05 16:45 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\SUPERAntiSpyware.com
2014-09-05 16:44 - 2014-09-05 16:45 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-09-05 16:44 - 2014-09-05 16:45 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-09-05 16:44 - 2014-09-05 16:44 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-09-05 16:44 - 2014-09-05 16:44 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-09-05 16:43 - 2014-09-05 16:43 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-05 16:43 - 2014-09-05 16:43 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-09-05 16:43 - 2014-09-05 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-05 16:43 - 2014-09-05 16:43 - 00000000 ____D () C:\Program Files\CCleaner
2014-09-05 16:28 - 2014-09-05 16:34 - 00000000 ____D () C:\Program Files (x86)\Advanced Anti Keylogger
2014-09-05 16:28 - 2014-09-05 16:28 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Anti Keylogger
2014-09-05 16:27 - 2014-09-05 16:34 - 00000000 ____D () C:\Users\latyno\Desktop\advanced-anti-keylogger
2014-09-05 16:27 - 2014-09-05 16:27 - 00802188 _____ () C:\Users\latyno\Desktop\advanced-anti-keylogger.zip
2014-09-05 16:26 - 2014-09-05 16:28 - 04623885 _____ () C:\Users\latyno\Desktop\bsetup.zip
2014-09-05 16:19 - 2014-09-05 16:35 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-05 16:19 - 2014-09-05 16:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-05 16:02 - 2014-09-05 16:02 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-09-04 00:16 - 2014-09-05 16:02 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-04 00:16 - 2014-09-04 00:18 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Apple Computer
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\Users\latyno\AppData\Local\Apple Computer
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\Users\latyno\AppData\Local\Apple
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-04 00:15 - 2014-09-05 16:03 - 00000000 ____D () C:\ProgramData\Apple
2014-09-03 15:29 - 2014-09-03 15:29 - 00000000 ____D () C:\Users\latyno\AppData\Local\Logitech
2014-09-03 15:29 - 2014-09-03 15:29 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-09-03 15:26 - 2014-09-03 15:26 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Logitech
2014-09-03 15:26 - 2014-09-03 15:26 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Logishrd
2014-08-30 09:39 - 2014-08-30 09:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-08-29 16:45 - 2014-08-29 16:45 - 42565120 _____ (Intel Corporation) C:\Users\latyno\Desktop\Intel SSD Toolbox - v3.2.3.exe
2014-08-27 20:22 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 20:22 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 20:22 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-24 19:21 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-24 19:21 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-24 19:21 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-24 19:21 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-24 19:21 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-24 19:21 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-24 19:21 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-24 19:21 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-24 19:21 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-24 19:21 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-24 19:21 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-24 19:21 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-24 19:21 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-24 19:21 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-14 02:42 - 2014-07-01 00:24 - 00008856 _____ (Microsoft Corporation) C:\Windows\system32\icardres.dll
2014-08-14 02:42 - 2014-07-01 00:14 - 00008856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardres.dll
2014-08-14 02:42 - 2014-06-06 08:16 - 00035480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TsWpfWrp.exe
2014-08-14 02:42 - 2014-06-06 08:12 - 00035480 _____ (Microsoft Corporation) C:\Windows\system32\TsWpfWrp.exe
2014-08-14 02:42 - 2014-03-09 23:48 - 01389208 _____ (Microsoft Corporation) C:\Windows\system32\icardagt.exe
2014-08-14 02:42 - 2014-03-09 23:48 - 00171160 _____ (Microsoft Corporation) C:\Windows\system32\infocardapi.dll
2014-08-14 02:42 - 2014-03-09 23:47 - 00619672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\icardagt.exe
2014-08-14 02:42 - 2014-03-09 23:47 - 00099480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\infocardapi.dll
2014-08-13 15:33 - 2014-08-01 01:41 - 00348856 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-08-13 15:33 - 2014-08-01 01:16 - 00307384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-08-13 15:33 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-08-13 15:33 - 2014-07-25 16:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-08-13 15:33 - 2014-07-25 16:01 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-08-13 15:33 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-08-13 15:33 - 2014-07-25 15:30 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-08-13 15:33 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-08-13 15:33 - 2014-07-25 15:28 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-08-13 15:33 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-08-13 15:33 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-08-13 15:33 - 2014-07-25 15:11 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-08-13 15:33 - 2014-07-25 15:10 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-08-13 15:33 - 2014-07-25 15:04 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-08-13 15:33 - 2014-07-25 15:03 - 00598016 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-08-13 15:33 - 2014-07-25 15:00 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-08-13 15:33 - 2014-07-25 15:00 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-08-13 15:33 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-08-13 15:33 - 2014-07-25 14:47 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-08-13 15:33 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-08-13 15:33 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-08-13 15:33 - 2014-07-25 14:34 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-08-13 15:33 - 2014-07-25 14:33 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-08-13 15:33 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-08-13 15:33 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-08-13 15:33 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-08-13 15:33 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-08-13 15:33 - 2014-07-25 14:19 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-08-13 15:33 - 2014-07-25 14:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-08-13 15:33 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-08-13 15:33 - 2014-07-25 14:17 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-08-13 15:33 - 2014-07-25 14:12 - 00438784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-08-13 15:33 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-08-13 15:33 - 2014-07-25 14:10 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-08-13 15:33 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-08-13 15:33 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-08-13 15:33 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-08-13 15:33 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-08-13 15:33 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 15:33 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-08-13 15:33 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-08-13 15:33 - 2014-07-25 13:39 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-08-13 15:33 - 2014-07-25 13:36 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-08-13 15:33 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-08-13 15:33 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-08-13 15:33 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-08-13 15:33 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-08-13 15:33 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-08-13 15:33 - 2014-07-25 13:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-08-13 15:33 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-08-13 15:33 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-08-13 15:33 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-08-13 15:33 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-08-13 15:33 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-08-13 15:33 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-08-13 15:33 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-08-13 15:33 - 2014-07-16 05:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-08-13 15:33 - 2014-07-16 04:46 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-08-13 15:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-08-13 15:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-08-13 15:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-08-13 15:33 - 2014-07-09 04:03 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-08-13 15:33 - 2014-07-09 04:03 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-08-13 15:33 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-08-13 15:33 - 2014-07-09 03:31 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-08-13 15:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-08-13 15:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-08-13 15:33 - 2014-07-09 03:31 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-08-13 15:33 - 2014-07-09 00:38 - 00419992 _____ () C:\Windows\system32\locale.nls
2014-08-13 15:33 - 2014-07-09 00:30 - 00419992 _____ () C:\Windows\SysWOW64\locale.nls
2014-08-13 15:33 - 2014-06-25 04:05 - 14175744 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2014-08-13 15:33 - 2014-06-25 03:41 - 12874240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2014-08-13 15:33 - 2014-06-16 04:10 - 00985536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2014-08-13 15:33 - 2014-06-03 12:02 - 03241984 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-08-13 15:33 - 2014-06-03 12:02 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-08-13 15:33 - 2014-06-03 12:02 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2014-08-13 15:33 - 2014-06-03 12:02 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2014-08-13 15:33 - 2014-06-03 11:29 - 02363392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-08-13 15:33 - 2014-06-03 11:29 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-08-13 15:33 - 2014-06-03 11:29 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2014-08-13 15:32 - 2014-08-07 04:06 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-13 15:32 - 2014-08-07 04:01 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-13 15:32 - 2014-07-14 04:02 - 01216000 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2014-08-13 15:32 - 2014-07-14 03:40 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2014-08-12 21:35 - 2014-08-12 21:35 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Macromedia
2014-08-12 21:35 - 2014-08-12 21:35 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\LolClient
2014-08-12 20:56 - 2014-08-12 20:56 - 00000000 ____D () C:\ProgramData\Riot Games
2014-08-12 20:55 - 2014-08-12 20:55 - 00001325 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-08-12 20:55 - 2014-08-12 20:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-08-12 20:55 - 2014-08-12 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-08-12 20:55 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2014-08-12 20:55 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2014-08-12 20:55 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2014-08-12 20:54 - 2014-09-05 16:35 - 00000000 ____D () C:\ProgramData\PMB Files
2014-08-12 20:54 - 2014-09-04 16:00 - 00000000 ____D () C:\Users\latyno\AppData\Local\PMB Files
2014-08-12 20:54 - 2014-08-12 20:54 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-08-12 20:53 - 2014-08-12 20:54 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Riot Games
2014-08-12 20:53 - 2014-08-12 20:53 - 35411496 _____ (Riot Games) C:\Users\latyno\Desktop\LeagueofLegends_EUNE_Installer_04_21_14.exe
2014-08-11 19:54 - 2014-08-11 19:54 - 01939090 _____ () C:\Users\latyno\Desktop\4.wmv
2014-08-11 18:58 - 2014-09-05 16:57 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-08-11 18:58 - 2014-09-05 16:35 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-08-11 18:58 - 2014-08-11 18:58 - 00001258 _____ () C:\Users\latyno\Desktop\Spybot - Search & Destroy.lnk
2014-08-11 18:58 - 2014-08-11 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2014-08-11 18:57 - 2014-08-11 18:57 - 16409960 _____ (Safer Networking Limited ) C:\Users\latyno\Desktop\spybotsd162.exe
2014-08-07 01:29 - 2014-08-07 01:30 - 00004216 _____ () C:\Users\latyno\Desktop\galakras.txt
2014-08-07 01:12 - 2014-08-07 01:12 - 00004556 _____ () C:\Users\latyno\Desktop\thok.txt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-05 18:09 - 2014-09-05 18:09 - 00011436 _____ () C:\Users\latyno\Desktop\FRST.txt
2014-09-05 18:09 - 2014-09-05 18:01 - 00000000 ____D () C:\FRST
2014-09-05 18:08 - 2014-09-05 18:08 - 02104832 _____ (Farbar) C:\Users\latyno\Desktop\FRST64.exe
2014-09-05 18:08 - 2014-09-05 18:08 - 00112640 _____ (forum.viry.cz) C:\Users\latyno\Desktop\FRSTLauncher.exe
2014-09-05 17:57 - 2014-06-28 11:52 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-05 17:55 - 2014-06-28 13:48 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Spotify
2014-09-05 17:35 - 2014-06-28 11:52 - 00000000 ____D () C:\Users\latyno\AppData\Local\Deployment
2014-09-05 16:57 - 2014-08-11 18:58 - 00000000 ____D () C:\ProgramData\Spybot - Search & Destroy
2014-09-05 16:57 - 2014-06-28 12:59 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\TeamViewer
2014-09-05 16:56 - 2014-07-22 18:44 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-05 16:56 - 2014-07-11 14:54 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Media Player Classic
2014-09-05 16:55 - 2014-07-22 22:24 - 00000000 ____D () C:\Users\latyno\AppData\Local\LogMeIn Hamachi
2014-09-05 16:55 - 2014-06-28 13:19 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\TS3Client
2014-09-05 16:55 - 2014-06-28 12:31 - 00000000 ____D () C:\Windows\Panther
2014-09-05 16:48 - 2014-06-28 11:36 - 01218705 ____N () C:\Windows\WindowsUpdate.log
2014-09-05 16:45 - 2014-09-05 16:45 - 00003590 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 4ef4a8a4-3745-4694-9d18-646ab014ce97
2014-09-05 16:45 - 2014-09-05 16:45 - 00003516 _____ () C:\Windows\System32\Tasks\SUPERAntiSpyware Scheduled Task 8fa61662-20a4-42aa-aab1-3e9c8248b619
2014-09-05 16:45 - 2014-09-05 16:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8fa61662-20a4-42aa-aab1-3e9c8248b619.job
2014-09-05 16:45 - 2014-09-05 16:45 - 00000512 _____ () C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4ef4a8a4-3745-4694-9d18-646ab014ce97.job
2014-09-05 16:45 - 2014-09-05 16:45 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\SUPERAntiSpyware.com
2014-09-05 16:45 - 2014-09-05 16:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-09-05 16:45 - 2014-09-05 16:44 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-09-05 16:44 - 2014-09-05 16:44 - 00001808 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk
2014-09-05 16:44 - 2014-09-05 16:44 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-09-05 16:43 - 2014-09-05 16:43 - 00002774 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-05 16:43 - 2014-09-05 16:43 - 00000822 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-09-05 16:43 - 2014-09-05 16:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-05 16:43 - 2014-09-05 16:43 - 00000000 ____D () C:\Program Files\CCleaner
2014-09-05 16:42 - 2009-07-14 06:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-05 16:42 - 2009-07-14 06:45 - 00020704 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-05 16:41 - 2009-07-14 17:18 - 00668866 _____ () C:\Windows\system32\perfh005.dat
2014-09-05 16:41 - 2009-07-14 17:18 - 00141526 _____ () C:\Windows\system32\perfc005.dat
2014-09-05 16:41 - 2009-07-14 07:13 - 01584554 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-05 16:35 - 2014-09-05 16:19 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-09-05 16:35 - 2014-08-12 20:54 - 00000000 ____D () C:\ProgramData\PMB Files
2014-09-05 16:35 - 2014-08-11 18:58 - 00000000 ____D () C:\Program Files (x86)\Spybot - Search & Destroy
2014-09-05 16:35 - 2014-07-22 22:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
2014-09-05 16:35 - 2014-07-22 22:23 - 00000000 ____D () C:\Program Files (x86)\LogMeIn Hamachi
2014-09-05 16:35 - 2014-06-28 23:51 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\ViberPC
2014-09-05 16:35 - 2014-06-28 23:50 - 00000000 ____D () C:\Users\latyno\AppData\Local\Viber
2014-09-05 16:35 - 2014-06-28 13:35 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Battle.net
2014-09-05 16:35 - 2014-06-28 12:58 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-05 16:35 - 2014-06-28 11:52 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-05 16:35 - 2014-06-28 11:52 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2014-09-05 16:35 - 2014-06-28 11:39 - 00000000 ____D () C:\ProgramData\Package Cache
2014-09-05 16:35 - 2014-06-28 11:37 - 00000000 ____D () C:\Users\latyno
2014-09-05 16:35 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-05 16:34 - 2014-09-05 16:28 - 00000000 ____D () C:\Program Files (x86)\Advanced Anti Keylogger
2014-09-05 16:34 - 2014-09-05 16:27 - 00000000 ____D () C:\Users\latyno\Desktop\advanced-anti-keylogger
2014-09-05 16:34 - 2009-07-14 17:36 - 00000000 ___RD () C:\Users\Public\Recorded TV
2014-09-05 16:34 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-09-05 16:28 - 2014-09-05 16:28 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Advanced Anti Keylogger
2014-09-05 16:28 - 2014-09-05 16:26 - 04623885 _____ () C:\Users\latyno\Desktop\bsetup.zip
2014-09-05 16:27 - 2014-09-05 16:27 - 00802188 _____ () C:\Users\latyno\Desktop\advanced-anti-keylogger.zip
2014-09-05 16:19 - 2014-09-05 16:19 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-09-05 16:03 - 2014-09-04 00:15 - 00000000 ____D () C:\ProgramData\Apple
2014-09-05 16:02 - 2014-09-05 16:02 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-09-05 16:02 - 2014-09-04 00:16 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-04 23:43 - 2014-06-28 13:35 - 00000000 ____D () C:\Users\latyno\AppData\Local\Battle.net
2014-09-04 16:00 - 2014-08-12 20:54 - 00000000 ____D () C:\Users\latyno\AppData\Local\PMB Files
2014-09-04 00:18 - 2014-09-04 00:16 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Apple Computer
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\Users\latyno\AppData\Local\Apple Computer
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\Users\latyno\AppData\Local\Apple
2014-09-04 00:16 - 2014-09-04 00:16 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-03 15:29 - 2014-09-03 15:29 - 00000000 ____D () C:\Users\latyno\AppData\Local\Logitech
2014-09-03 15:29 - 2014-09-03 15:29 - 00000000 ____D () C:\ProgramData\LogiShrd
2014-09-03 15:26 - 2014-09-03 15:26 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Logitech
2014-09-03 15:26 - 2014-09-03 15:26 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Logishrd
2014-08-30 09:39 - 2014-08-30 09:39 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2014-08-29 16:46 - 2014-07-10 00:30 - 00001280 _____ () C:\Users\Public\Desktop\Intel SSD Toolbox.lnk
2014-08-29 16:45 - 2014-08-29 16:45 - 42565120 _____ (Intel Corporation) C:\Users\latyno\Desktop\Intel SSD Toolbox - v3.2.3.exe
2014-08-29 08:54 - 2014-06-28 13:49 - 00000000 ____D () C:\Users\latyno\AppData\Local\Spotify
2014-08-28 10:59 - 2009-07-14 06:45 - 00334520 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-26 15:36 - 2014-06-28 13:36 - 00000000 ____D () C:\Program Files (x86)\World of Warcraft
2014-08-25 19:43 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-23 04:07 - 2014-08-27 20:22 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-27 20:22 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-27 20:22 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 15:10 - 2014-06-28 13:35 - 00000000 ____D () C:\Program Files (x86)\Battle.net
2014-08-14 15:18 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-08-14 02:47 - 2014-06-28 14:03 - 00000000 ____D () C:\Windows\system32\MRT
2014-08-14 02:46 - 2014-06-28 14:03 - 99218768 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-08-14 02:41 - 2014-07-01 15:16 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-08-12 21:35 - 2014-08-12 21:35 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Macromedia
2014-08-12 21:35 - 2014-08-12 21:35 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\LolClient
2014-08-12 20:56 - 2014-08-12 20:56 - 00000000 ____D () C:\ProgramData\Riot Games
2014-08-12 20:55 - 2014-08-12 20:55 - 00001325 _____ () C:\Users\Public\Desktop\Play League of Legends.lnk
2014-08-12 20:55 - 2014-08-12 20:55 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2014-08-12 20:55 - 2014-08-12 20:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2014-08-12 20:54 - 2014-08-12 20:54 - 00000000 ____D () C:\Program Files (x86)\Pando Networks
2014-08-12 20:54 - 2014-08-12 20:53 - 00000000 ____D () C:\Users\latyno\AppData\Roaming\Riot Games
2014-08-12 20:53 - 2014-08-12 20:53 - 35411496 _____ (Riot Games) C:\Users\latyno\Desktop\LeagueofLegends_EUNE_Installer_04_21_14.exe
2014-08-11 19:54 - 2014-08-11 19:54 - 01939090 _____ () C:\Users\latyno\Desktop\4.wmv
2014-08-11 18:58 - 2014-08-11 18:58 - 00001258 _____ () C:\Users\latyno\Desktop\Spybot - Search & Destroy.lnk
2014-08-11 18:58 - 2014-08-11 18:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy
2014-08-11 18:57 - 2014-08-11 18:57 - 16409960 _____ (Safer Networking Limited ) C:\Users\latyno\Desktop\spybotsd162.exe
2014-08-11 16:56 - 2014-07-03 17:08 - 00000000 ____D () C:\Users\latyno\temp
2014-08-11 16:56 - 2014-07-03 16:32 - 00000902 _____ () C:\Users\latyno\AppData\Roaming\__AvidCloudManager.log
2014-08-11 16:53 - 2014-07-03 16:32 - 00000861 _____ () C:\Users\latyno\AppData\Roaming\LATYNO-PC.MTBF.txt
2014-08-11 16:53 - 2014-07-03 16:19 - 00000349 _____ () C:\Users\Public\Documents\PCLECHAL.INI
2014-08-11 16:53 - 2014-07-03 16:17 - 00000000 ____D () C:\Users\latyno\AppData\Local\Pinnacle
2014-08-08 16:39 - 2014-06-28 12:58 - 00001102 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-07 04:06 - 2014-08-13 15:32 - 00529920 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-08-07 04:01 - 2014-08-13 15:32 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-08-07 01:30 - 2014-08-07 01:29 - 00004216 _____ () C:\Users\latyno\Desktop\galakras.txt
2014-08-07 01:12 - 2014-08-07 01:12 - 00004556 _____ () C:\Users\latyno\Desktop\thok.txt
2014-08-06 20:13 - 2014-07-13 00:37 - 00000000 ____D () C:\Program Files (x86)\SpeedFan
2014-08-06 18:51 - 2014-06-28 13:19 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-27 16:15




===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:111.79 GB) (Free:23.97 GB) NTFS ==>[Drive with boot components (obtained from BCD)]
Drive d: (Rezervováno systémem) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive e: (Nový svazek) (Fixed) (Total:195.31 GB) (Free:14.46 GB) NTFS ==>[System with boot components (obtained from reading drive)]
Drive f: () (Fixed) (Total:74.43 GB) (Free:6.63 GB) NTFS
Drive g: (Nový svazek) (Fixed) (Total:270.45 GB) (Free:22.48 GB) NTFS

Available physical RAM: 5811.23 MB
Total physical RAM: 8156.61 MB
Percentage of memory in use: 28%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: DDDFC255)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 05F6ED0B)
Partition 1: (Active) - (Size=111.8 GB) - (Type=07 NTFS)
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 00000001)
Partition 1: (Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=270.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 4ef4a8a4-3745-4694-9d18-646ab014ce97.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\Windows\Tasks\SUPERAntiSpyware Scheduled Task 8fa61662-20a4-42aa-aab1-3e9c8248b619.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Alternate Data Streams (whitelisted) ==================


==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {641105E6-77ED-3F35-A304-765193BCB75F}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Microsoft Security Essentials (Enabled - Up to date) {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\latyno\Desktop" je 108 MB.


***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay
C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer
C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================

[Rudy]

Zdravím!
Jak je na tom váš oper. systém s legalitou?

[latyno]

Jedná se o nelegální kopii

[Rudy]

V tom případě vám nepomůžeme. Viz. pravidla: http://forum.viry.cz/viewtopic.php?f=12&t=115512 .

[latyno]

I tak děkuji, sic nerad ale formát to také vyřeší.

[Rudy]

To jistě. Lepší řešení ale je mít legální Windows. Pokud na něj nemáte, přejděte na Linux. Ten je v základu zdarma. Nemáte zač.