Množství reklam v IE a Chrome
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Vážení uživaterlé!
Ve dnech 4. - 6-9.2026 budou někteříí naši členové na každoročním srazu fóra. Žádáme vás, abyste měli strpení, nemusí se na na řešení vašeho problému dostat hned. Děkujeme za pochopení.
Množství reklam v IE a Chrome
Také se mi po instalaci na první pohled neškodného prográmku začalo objevovat množství reklam, které prakticky zabraňuje používání prohlížeče. Děkuji předem za pomoc!
Zde je log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 09:47:15
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(CANON INC.) C:\Program Files (x86)\Canon\My Image Garden\cnmigmain.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKCU - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL =
BHO: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho64.dll (HD+v2.1)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho.dll (HD+v2.1)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-01-23]
Chrome:
=======
CHR HomePage: Default ->
CHR DefaultSearchKeyword: Default -> BA33BF65373CDD3F7F493C56C7F13E0F2CC57EFAF8E014DB0B0DFE5D0848598D
CHR DefaultSearchURL: Default -> DB47068A646927AA12AE0DC02E58AF87345D85BFC514AD7744A55B1DC4305A22
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Dokumenty Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Disk Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (HD+v2.1) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol [2014-08-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Peněženka Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-07-28] (Aztec Media Inc)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-07-28] (Aztec Media Inc)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 MpKslaaf69ae1; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E52B3AB9-DC6E-4269-B619-022149B4909B}\MpKslaaf69ae1.sys [45352 2014-09-06] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R1 {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64; C:\Windows\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys [61128 2014-07-08] (StdLib)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:46 - 2014-09-06 09:47 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-09-06 09:28 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:22 - 2014-09-06 09:27 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-08-26 15:22 - 2014-09-06 09:27 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-08-26 15:22 - 2014-09-06 09:05 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-26 15:22 - 2014-08-26 15:23 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-08-20 12:04 - 00000000 ____D () C:\AdwCleaner
2014-08-18 23:17 - 2014-07-08 18:42 - 00061128 _____ (StdLib) C:\WINDOWS\system32\Drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
2014-08-18 22:14 - 2014-09-06 09:45 - 00000000 ____D () C:\ProgramData\smdmf
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:47 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 09:45 - 2014-08-18 22:14 - 00000000 ____D () C:\ProgramData\smdmf
2014-09-06 09:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 09:28 - 2014-08-26 15:23 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-09-06 09:28 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 09:27 - 2014-08-26 15:22 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-09-06 09:27 - 2014-08-26 15:22 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-06 09:27 - 2014-01-07 11:24 - 00004964 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 09:23 - 2014-08-26 15:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-09-06 09:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-09-06 09:20 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 09:20 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 09:20 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 09:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 09:13 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 09:13 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:08 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:07 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 09:06 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 09:06 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 09:06 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 09:06 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 09:06 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 09:05 - 2014-08-26 15:22 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-06 09:05 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 09:05 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 09:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 09:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 09:03 - 2014-01-05 18:04 - 01818463 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 09:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:56 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:37 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-05 13:30 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-04 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-04 14:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:23 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:04 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp260ont.dll
C:\Users\Vit\AppData\Local\Temp\KMP_3.9.0.127.exe
C:\Users\Vit\AppData\Local\Temp\setup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 09:28
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.21 GB) NTFS
Drive e: (IBM_PRELOAD) (Fixed) (Total:69.69 GB) (Free:0.77 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS
Drive y: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS
Available physical RAM: 13304.93 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 18%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)
Disk: 2 (Size: 74.5 GB) (Disk ID: CCCDCCCD)
Partition 1: (Active) - (Size=69.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=4.8 GB) - (Type=12)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job => C:\Program Files (x86)\HD+v2.1\HD+v2.1-codedownloader.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-11.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-2.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-3.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-6.exeĚ/JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-7.exeá/xLWKjq /JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Vit\Desktop" je 159 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Zde je log z FRST:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 09:47:15
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Aztec Media Inc) C:\Program Files (x86)\Settings Manager\smdmf\smdmfu.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(CANON INC.) C:\Program Files (x86)\Canon\My Image Garden\cnmigmain.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\PROGRAM FILES\ZONER\PHOTO STUDIO 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
IFEO\jumpflip: [Debugger] tasklist.exe
IFEO\volaro: [Debugger] tasklist.exe
IFEO\vonteera: [Debugger] tasklist.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKLM - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - DefaultScope {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKLM-x32 - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL = http://www.bing.com/search?q={searchTer ... TR&pc=DCJB
SearchScopes: HKCU - {7265A0BD-AEB8-468A-8AD0-AD7910F7F287} URL =
BHO: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho64.dll (HD+v2.1)
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Qualcomm Atheros Commnucations)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: HD+v2.1 -> {11111111-1111-1111-1111-110611281146} -> C:\Program Files (x86)\HD+v2.1\HD+v2.1-bho.dll (HD+v2.1)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - PDF Architect Toolbar - {25A3A431-30BB-47C8-AD6A-E1063801134F} - C:\Program Files (x86)\PDF Architect\PDFIEPlugin.dll (pdfforge GmbH)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2014-01-23]
Chrome:
=======
CHR HomePage: Default ->
CHR DefaultSearchKeyword: Default -> BA33BF65373CDD3F7F493C56C7F13E0F2CC57EFAF8E014DB0B0DFE5D0848598D
CHR DefaultSearchURL: Default -> DB47068A646927AA12AE0DC02E58AF87345D85BFC514AD7744A55B1DC4305A22
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Dokumenty Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Disk Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (HD+v2.1) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol [2014-08-31]
CHR Extension: (Vyhledávání Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Peněženka Google) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2014-08-26] (globalUpdate) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
R2 SmdmFService; C:\Program Files (x86)\Settings Manager\smdmf\SmdmFService.exe [3572240 2014-07-28] (Aztec Media Inc)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
R1 F06DEFF2-5B9C-490D-910F-35D3A9119622; C:\Program Files (x86)\Settings Manager\smdmf\x64\smdmfmgrc2.cfg [41872 2014-07-28] (Aztec Media Inc)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 MpKslaaf69ae1; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E52B3AB9-DC6E-4269-B619-022149B4909B}\MpKslaaf69ae1.sys [45352 2014-09-06] (Microsoft Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
R1 {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64; C:\Windows\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys [61128 2014-07-08] (StdLib)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:46 - 2014-09-06 09:47 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-09-06 09:28 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-08-26 15:23 - 2014-09-06 09:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:22 - 2014-09-06 09:27 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-08-26 15:22 - 2014-09-06 09:27 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-08-26 15:22 - 2014-09-06 09:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-08-26 15:22 - 2014-09-06 09:05 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-08-26 15:22 - 2014-08-26 15:23 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-08-20 12:04 - 00000000 ____D () C:\AdwCleaner
2014-08-18 23:17 - 2014-07-08 18:42 - 00061128 _____ (StdLib) C:\WINDOWS\system32\Drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
2014-08-18 22:14 - 2014-09-06 09:45 - 00000000 ____D () C:\ProgramData\smdmf
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 09:47 - 2014-09-06 09:47 - 00028155 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 09:47 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 09:45 - 2014-08-18 22:14 - 00000000 ____D () C:\ProgramData\smdmf
2014-09-06 09:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 09:28 - 2014-08-26 15:23 - 00003118 _____ () C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job
2014-09-06 09:28 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 09:27 - 2014-08-26 15:22 - 00001796 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job
2014-09-06 09:27 - 2014-08-26 15:22 - 00000928 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job
2014-09-06 09:27 - 2014-01-07 11:24 - 00004964 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 09:23 - 2014-08-26 15:23 - 00001980 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001498 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001412 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job
2014-09-06 09:23 - 2014-08-26 15:23 - 00001328 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job
2014-09-06 09:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00003800 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00002430 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job
2014-09-06 09:22 - 2014-08-26 15:22 - 00001838 _____ () C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job
2014-09-06 09:20 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 09:20 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 09:20 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 09:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 09:13 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 09:13 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:08 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 09:07 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 09:06 - 2014-09-06 09:06 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 09:06 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 09:06 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 09:06 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 09:06 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 09:06 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 09:05 - 2014-08-26 15:22 - 00000924 _____ () C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job
2014-09-06 09:05 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 09:05 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 09:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 09:05 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 09:03 - 2014-01-05 18:04 - 01818463 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 09:02 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:56 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:37 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-05 13:30 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-04 20:56 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-04 14:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-08-27 22:20 - 00000716 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:23 - 2014-08-26 15:23 - 00006122 _____ () C:\WINDOWS\System32\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04
2014-08-26 15:23 - 2014-08-26 15:23 - 00004984 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4
2014-08-26 15:23 - 2014-08-26 15:23 - 00004502 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1
2014-08-26 15:23 - 2014-08-26 15:23 - 00004416 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5
2014-08-26 15:23 - 2014-08-26 15:23 - 00004332 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2
2014-08-26 15:23 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\HD+v2.1
2014-08-26 15:22 - 2014-08-26 15:22 - 00006804 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11
2014-08-26 15:22 - 2014-08-26 15:22 - 00005434 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3
2014-08-26 15:22 - 2014-08-26 15:22 - 00004842 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7
2014-08-26 15:22 - 2014-08-26 15:22 - 00004800 _____ () C:\WINDOWS\System32\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6
2014-08-26 15:22 - 2014-08-26 15:22 - 00003900 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineUA
2014-08-26 15:22 - 2014-08-26 15:22 - 00003664 _____ () C:\WINDOWS\System32\Tasks\globalUpdateUpdateTaskMachineCore
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Users\Vit\AppData\Local\globalUpdate
2014-08-26 15:22 - 2014-08-26 15:22 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:04 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:14 - 2014-08-18 22:14 - 00000000 ____D () C:\Program Files (x86)\Settings Manager
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp260ont.dll
C:\Users\Vit\AppData\Local\Temp\KMP_3.9.0.127.exe
C:\Users\Vit\AppData\Local\Temp\setup.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 09:28
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.21 GB) NTFS
Drive e: (IBM_PRELOAD) (Fixed) (Total:69.69 GB) (Free:0.77 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS
Drive y: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS
Available physical RAM: 13304.93 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 18%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)
Disk: 2 (Size: 74.5 GB) (Disk ID: CCCDCCCD)
Partition 1: (Active) - (Size=69.7 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=4.8 GB) - (Type=12)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-1.job => C:\Program Files (x86)\HD+v2.1\HD+v2.1-codedownloader.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-11.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-11.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-2.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-2.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-3.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-3.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-4.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-5_user.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-5.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-6.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-6.exeĚ/JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\57d05856-1a6c-44dc-9873-1df40136a5ad-7.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-7.exeá/xLWKjq /JmpsI='HD+v2.1' /OqSkPg=62846 /QjYDI='001962' /pASHhU='0' /bkfGzhn='0' /luhuNz=3B4E16B379254556A85F4728E5FAC219IE /wonrdLPm=acbded0dfafafacedf3b59455ef16c30 /pXMCw=1_34_07_29 /qjMZtD=1.34.7.29 /UgOLjUjM=1409059360 /TbHysNwkL=http://stats.infostatsserv.com /dKAMiS=http://errors.infostatsserv.com /HbpoW=http://js.infostatsserv.com /fJDkTWl=ch /RAuobiai /UmOMcNxVS=HD+v2.1 /VJDxZ52ce2334-9a65-49a5-b18b-28dd02d4fdc0.dll /kHvhqJwDH41429d6d-9060-41b8-bd54-eec70a9b66d1.dll /ssFJUuHEJ57d05856-1a6c-44dc-9873-1df40136a5ad-64.exe
Task: C:\WINDOWS\Tasks\73d68c93-60af-473f-a4bb-67ac00825a04.job => C:\Program Files (x86)\HD+v2.1\57d05856-1a6c-44dc-9873-1df40136a5ad-4.exe
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Vit\Desktop" je 159 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition.zip
- (13.78 KiB) Staženo 68 x
Re: Množství reklam v IE a Chrome
Zdravim
Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
- Probehne vytvoreni zalohy a nasledne prohledavani
- Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Re: Množství reklam v IE a Chrome
Výpis z JRT:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8.1 x64
Ran by Vit on so 06. 09. 2014 at 15:14:00,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Vit\AppData\Roaming\pdfforge"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 06. 09. 2014 at 15:15:32,75
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Výpis z AdwCleaner:
# AdwCleaner v3.309 - Report created 06/09/2014 at 15:20:04
# Updated 02/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Vit - PRACOVNI
# Running from : C:\Users\Vit\Desktop\adwcleaner_3.309.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : SmdmFService
Service Deleted : {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64
***** [ Files / Folders ] *****
[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\Program Files (x86)\globalUpdate
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\HD+v2.1
Folder Deleted : C:\Users\Vit\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Vit\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\Extensions\jacobtodd@hotmail.com
File Deleted : C:\WINDOWS\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
File Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
***** [ Scheduled Tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-1
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-11
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-2
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-3
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-4
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5_user
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-6
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-7
Task Deleted : 73d68c93-60af-473f-a4bb-67ac00825a04
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\AppDataLow\Software\HD+v2.1
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\HD+v2.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17239
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v32.0 (x86 cs)
[ File : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "default-search.net");
Line Deleted : user_pref("browser.search.order.1", "default-search.net");
Line Deleted : user_pref("browser.search.selectedEngine", "default-search.net");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.default-search.net?sid=476&aid=113& ... 43&src=hmp");
Line Deleted : user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22urls[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1484b1e029bd97927ed6383f25b6ab31");
Line Deleted : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&a ... &src=ds&p=");
-\\ Google Chrome v37.0.2062.103
[ File : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
Deleted [Extension] : pljcgbedjplidkdjahbaalanadmjfgop
*************************
AdwCleaner[R0].txt - [248 octets] - [20/08/2014 12:01:22]
AdwCleaner[R1].txt - [248 octets] - [20/08/2014 12:02:17]
AdwCleaner[R2].txt - [248 octets] - [20/08/2014 12:03:32]
AdwCleaner[R3].txt - [248 octets] - [20/08/2014 12:04:07]
AdwCleaner[R4].txt - [14343 octets] - [06/09/2014 15:17:51]
AdwCleaner[S0].txt - [13946 octets] - [06/09/2014 15:20:04]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14007 octets] ##########
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.1.3 (03.23.2014:1)
OS: Windows 8.1 x64
Ran by Vit on so 06. 09. 2014 at 15:14:00,94
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~ Services
~~~ Registry Values
~~~ Registry Keys
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\softonic
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\AppDataLow\software\crossrider
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\installedbrowserextensions
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{22222222-2222-2222-2222-220622282246}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_CLASSES_ROOT\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.BHO.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\CrossriderApp0062846.Sandbox.1
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{11111111-1111-1111-1111-110611281146}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{55555555-5555-5555-5555-550655285546}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\Interface\{66666666-6666-6666-6666-660666286646}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Classes\Wow6432Node\TypeLib\{44444444-4444-4444-4444-440644284446}
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146}
~~~ Files
~~~ Folders
Successfully deleted: [Folder] "C:\ProgramData\apn"
Successfully deleted: [Folder] "C:\Users\Vit\AppData\Roaming\pdfforge"
~~~ Event Viewer Logs were cleared
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on so 06. 09. 2014 at 15:15:32,75
Computer was rebooted
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Výpis z AdwCleaner:
# AdwCleaner v3.309 - Report created 06/09/2014 at 15:20:04
# Updated 02/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Vit - PRACOVNI
# Running from : C:\Users\Vit\Desktop\adwcleaner_3.309.exe
# Option : Clean
***** [ Services ] *****
Service Deleted : F06DEFF2-5B9C-490D-910F-35D3A91196222
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : SmdmFService
Service Deleted : {75e31400-eac4-49b7-986c-d198f0b97db7}Gw64
***** [ Files / Folders ] *****
[!] Folder Deleted : C:\ProgramData\smdmf
Folder Deleted : C:\Program Files (x86)\globalUpdate
[!] Folder Deleted : C:\Program Files (x86)\Settings Manager
Folder Deleted : C:\Program Files (x86)\HD+v2.1
Folder Deleted : C:\Users\Vit\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Vit\AppData\Roaming\FirefoxToolbar
Folder Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\Extensions\jacobtodd@hotmail.com
File Deleted : C:\WINDOWS\System32\drivers\{75e31400-eac4-49b7-986c-d198f0b97db7}Gw64.sys
File Deleted : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\searchplugins\default-search.xml
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\default-search.xml
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_api.ciuvo.com_0.localstorage-journal
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage
File Deleted : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.superfish.com_0.localstorage-journal
***** [ Scheduled Tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-1
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-11
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-2
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-3
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-4
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-5_user
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-6
Task Deleted : 57d05856-1a6c-44dc-9873-1df40136a5ad-7
Task Deleted : 73d68c93-60af-473f-a4bb-67ac00825a04
***** [ Shortcuts ] *****
***** [ Registry ] *****
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\superfish.com
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.superfish.com
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bitguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bprotect.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserdefender.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browserprotect.exe
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x64]
Value Deleted : HKLM\SYSTEM\ControlSet001\Control\Session Manager\AppCertDlls [x86]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{25A3A431-30BB-47C8-AD6A-E1063801134F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{25A3A431-30BB-47C8-AD6A-E1063801134F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{54739D49-AC03-4C57-9264-C5195596B3A1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2476}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\Linkey
Key Deleted : HKCU\Software\SmdmF
Key Deleted : HKCU\Software\AppDataLow\Software\HD+v2.1
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SmdmF
Key Deleted : HKLM\SOFTWARE\HD+v2.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Settings Manager
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\HD+v2.1
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\08121C32A9C319F4CB0C11FF059552A4
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bpsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\browsersafeguard.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dprotectsvc.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\jumpflip
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\protectedsearch.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchinstaller.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotection.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchprotector.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\searchsettings64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\snapdo.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst32.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\stinst64.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\umbrella.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\utiljumpflip.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\volaro
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vonteera
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroids.exe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\websteroidsservice.exe
***** [ Browsers ] *****
-\\ Internet Explorer v11.0.9600.17239
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
-\\ Mozilla Firefox v32.0 (x86 cs)
[ File : C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js ]
Line Deleted : user_pref("browser.search.defaultenginename", "default-search.net");
Line Deleted : user_pref("browser.search.order.1", "default-search.net");
Line Deleted : user_pref("browser.search.selectedEngine", "default-search.net");
Line Deleted : user_pref("browser.startup.homepage", "hxxp://www.default-search.net?sid=476&aid=113& ... 43&src=hmp");
Line Deleted : user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.value", "%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%3A%7B%22urls[...]
Line Deleted : user_pref("extensions.crossrider.bic", "1484b1e029bd97927ed6383f25b6ab31");
Line Deleted : user_pref("keyword.URL", "hxxp://www.default-search.net/search?sid=476&a ... &src=ds&p=");
-\\ Google Chrome v37.0.2062.103
[ File : C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences ]
Deleted [Extension] : fpmeembnagmagppkgghhfjfdfajdfcah
Deleted [Extension] : pljcgbedjplidkdjahbaalanadmjfgop
*************************
AdwCleaner[R0].txt - [248 octets] - [20/08/2014 12:01:22]
AdwCleaner[R1].txt - [248 octets] - [20/08/2014 12:02:17]
AdwCleaner[R2].txt - [248 octets] - [20/08/2014 12:03:32]
AdwCleaner[R3].txt - [248 octets] - [20/08/2014 12:04:07]
AdwCleaner[R4].txt - [14343 octets] - [06/09/2014 15:17:51]
AdwCleaner[S0].txt - [13946 octets] - [06/09/2014 15:20:04]
########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [14007 octets] ##########
Re: Množství reklam v IE a Chrome
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; emptyclsid; iedefaults; FFdefaults; CHRdefaults; emptyalltemp; resethosts;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
Re: Množství reklam v IE a Chrome
Zoek.exe v5.0.0.0 Updated 05-September-2014
Tool run by Vit on so 06. 09. 2014 at 16:26:22,30.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Vit\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 9. 2014 16:28:53 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{25A3A431-30BB-47C8-AD6A-E1063801134F} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110611281146} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:
Added to C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
user.js not found
---- Lines jacobtodd removed from prefs.js ----
user_pref("extensions.ajacobtoddhotmailcom62846.62846.active", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbar", "NA");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbarenhanced", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncdb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncinternaldb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.backgroundver", 1);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.certdomaininstaller", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.value", "%221409059360%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2C%22
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.expiration", "Sat Sep 06 2014 21:19:04 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.value", "%22http%3A//forum.viry.cz/viewtopic.php%3Ff%3D13%26t%3D140084%22")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.value", "%221484b1e029bd97927ed6383f25b6ab31%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.description", "Lights out for YouTube");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.domain", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.enablesearch", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.homepage", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.changeprevious", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.iframe", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationThankYouPage", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationTime", 1409059360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.value", "%22ch%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.value", "%7B%22asw%22%3A%5B0%2C16641%2C0%5D%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%223B4E16
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A85F4728E5F
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A8
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.value", "null");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.value", "43");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.expiration", "Sat Sep 06 2014 21:18:59 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastDailyReport", "1410009537950");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastUpdate", "1410009532678");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.manifesturl", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.name", "Cinema-Plus-1.6c");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.newtab", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.opensearch", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsurl", "http://js.loadgenclientservice.com/plug ... ugins.json");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsversion", 36);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.publisher", "Cinema Plus");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.searchstatus", 0);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.setnewtab", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.thankyou", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.updateinterval", 360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.ver", 43);
user_pref("extensions.ajacobtoddhotmailcom62846.apps", "62846");
user_pref("extensions.ajacobtoddhotmailcom62846.bic", "1484b1e029bd97927ed6383f25b6ab31");
user_pref("extensions.ajacobtoddhotmailcom62846.cid", 62846);
user_pref("extensions.ajacobtoddhotmailcom62846.firstrun", false);
user_pref("extensions.ajacobtoddhotmailcom62846.hadappinstalled", true);
user_pref("extensions.ajacobtoddhotmailcom62846.installationdate", 1410009531);
user_pref("extensions.ajacobtoddhotmailcom62846.installerAdditionalInfo", "{\"asw\":[0, 16641, 0]}");
user_pref("extensions.ajacobtoddhotmailcom62846.modetype", "production");
user_pref("extensions.ajacobtoddhotmailcom62846.reportInstall", true);
user_pref("extensions.ajacobtoddhotmailcom62846.statsDailyCounter", 1);
---- Lines FFPDFArchitectConverter@pdfarchitect.com modified from prefs.js ----
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"FFPDFArchitectConverter@pdfarchitect.com\":{\"descriptor\":\"C:\\
---- FireFox user.js and prefs.js backups ----
prefs_201406.09._1635_.backup
==== Deleting Files \ Folders ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"FFPDFArchitectConverter@pdfarchitect.com"=hex(2):43,00,3a,00,5c,00,50,00,72,\ []
==== Firefox Extensions ======================
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
FB5621842FDABF9F8359775573498FBC - C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
5CB01CF141E021DAAE96991A5BA57944 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
DD31F0C436E4F5E6FA9783FF8A80ADC1 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013
==== Chrome Look ======================
HD+v2.1 - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol
Booking.com for Chrome™ - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip
Alarm Clock Radio - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi
Calendar View for Astrid - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi
==== Chrome Fix ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0 deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cepmakjlanepojocakadfpohnhhalfol deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{05F70EC0-4417-48E6-9461-0F7755CD0754} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} Unknown Url="Not_Found"
==== Reset Google Chrome ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\SearchScopes\{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\FFPDFArchitectConverter@pdfarchitect.com deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=99 folders=13 1303785 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\Vit\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\Users\Vit\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on so 06. 09. 2014 at 16:38:53,88 ======================
Tool run by Vit on so 06. 09. 2014 at 16:26:22,30.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Vit\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
6. 9. 2014 16:28:53 Zoek.exe System Restore Point Created Succesfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
127.0.0.1 localhost
==== Deleting CLSID Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110611281146} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{25A3A431-30BB-47C8-AD6A-E1063801134F} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110611281146} deleted successfully
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\Approved Extensions\{54739D49-AC03-4C57-9264-C5195596B3A1} deleted successfully
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:
Added to C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);
ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
user.js not found
---- Lines jacobtodd removed from prefs.js ----
user_pref("extensions.ajacobtoddhotmailcom62846.62846.active", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbar", "NA");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.addressbarenhanced", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncdb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.asyncinternaldb.was_copied", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.backgroundver", 1);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.certdomaininstaller", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallationTime.value", "%221409059360%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2C%22
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.expiration", "Sat Sep 06 2014 21:19:04 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.load_balancer.value", "%22%7B%20%5C%22Status%5C%22%3A%201%2C%5C%22Endpoint%5C%22%3A%20%5C
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.previous_page.value", "%22http%3A//forum.viry.cz/viewtopic.php%3Ff%3D13%26t%3D140084%22")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.cookie.user_id.value", "%221484b1e029bd97927ed6383f25b6ab31%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.description", "Lights out for YouTube");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.domain", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.enablesearch", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.homepage", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.changeprevious", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.iframe", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationThankYouPage", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.InstallationTime", 1409059360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.__defualt_browser__.value", "%22ch%22");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb._installer_additional_info.value", "%7B%22asw%22%3A%5B0%2C16641%2C0%5D%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.installer.value", "%7B%22InstallerIdentifiers%22%3A%7B%22installer_bic%22%3A%223B4E16
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerIdentifiers.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A85F4728E5F
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParams.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220%22%2
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerParamsCache.value", "%7B%22source_id%22%3A%22001962%22%2C%22sub_id%22%3A%220
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.InstallerUserIdentifiersCache.value", "%7B%22installer_bic%22%3A%223B4E16B379254556A8
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledUrls.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100")
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_bundledWithHash.value", "null");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_notBundledArr_.value", "%5B%5D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.expiration", "Fri Feb 01 2030 00:00:00 GMT
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.monetization_plugin_regBundledWithSoftware.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_appVer.value", "43");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_lastVersion.value", "1");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_meta.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.expiration", "Sat Sep 06 2014 21:18:59 GMT+0200");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_nextCheck.value", "true");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.expiration", "Fri Feb 01 2030 00:00:00 GMT+0100");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.internaldb.Resources_queue.value", "%7B%7D");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comajacobtoddhotmailcom62846_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncdb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.jacobtodd@hotmail.comasyncinternaldb_dbWasSet_FF25_FIX", true);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastDailyReport", "1410009537950");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.lastUpdate", "1410009532678");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.manifesturl", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.name", "Cinema-Plus-1.6c");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.newtab", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.opensearch", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsurl", "http://js.loadgenclientservice.com/plug ... ugins.json");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.pluginsversion", 36);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.publisher", "Cinema Plus");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.searchstatus", 0);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.setnewtab", false);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.thankyou", "");
user_pref("extensions.ajacobtoddhotmailcom62846.62846.updateinterval", 360);
user_pref("extensions.ajacobtoddhotmailcom62846.62846.ver", 43);
user_pref("extensions.ajacobtoddhotmailcom62846.apps", "62846");
user_pref("extensions.ajacobtoddhotmailcom62846.bic", "1484b1e029bd97927ed6383f25b6ab31");
user_pref("extensions.ajacobtoddhotmailcom62846.cid", 62846);
user_pref("extensions.ajacobtoddhotmailcom62846.firstrun", false);
user_pref("extensions.ajacobtoddhotmailcom62846.hadappinstalled", true);
user_pref("extensions.ajacobtoddhotmailcom62846.installationdate", 1410009531);
user_pref("extensions.ajacobtoddhotmailcom62846.installerAdditionalInfo", "{\"asw\":[0, 16641, 0]}");
user_pref("extensions.ajacobtoddhotmailcom62846.modetype", "production");
user_pref("extensions.ajacobtoddhotmailcom62846.reportInstall", true);
user_pref("extensions.ajacobtoddhotmailcom62846.statsDailyCounter", 1);
---- Lines FFPDFArchitectConverter@pdfarchitect.com modified from prefs.js ----
user_pref("extensions.installCache", "[{\"name\":\"winreg-app-global\",\"addons\":{\"FFPDFArchitectConverter@pdfarchitect.com\":{\"descriptor\":\"C:\\
---- FireFox user.js and prefs.js backups ----
prefs_201406.09._1635_.backup
==== Deleting Files \ Folders ======================
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"FFPDFArchitectConverter@pdfarchitect.com"=hex(2):43,00,3a,00,5c,00,50,00,72,\ []
==== Firefox Extensions ======================
AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
==== Firefox Plugins ======================
Profilepath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
4390CCD3790F8D9C427C0C29590C62D7 - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll - Shockwave Flash
FB5621842FDABF9F8359775573498FBC - C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll - Google Update
5CB01CF141E021DAAE96991A5BA57944 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll - Google Talk Plugin Video Renderer
DD31F0C436E4F5E6FA9783FF8A80ADC1 - C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll - Google Talk Plugin
18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013
==== Chrome Look ======================
HD+v2.1 - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol
Booking.com for Chrome™ - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip
Alarm Clock Radio - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi
Calendar View for Astrid - Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi
==== Chrome Fix ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_www.superfish.com_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\cepmakjlanepojocakadfpohnhhalfol deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0.localstorage-journal deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_cepmakjlanepojocakadfpohnhhalfol_0 deleted successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cepmakjlanepojocakadfpohnhhalfol deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{05F70EC0-4417-48E6-9461-0F7755CD0754} Google Url="http://www.google.com/search?q={searchT ... utEncoding?}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} Unknown Url="Not_Found"
==== Reset Google Chrome ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
==== Deleting CLSID Registry Keys ======================
HKEY_USERS\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Internet Explorer\SearchScopes\{7265A0BD-AEB8-468A-8AD0-AD7910F7F287} deleted successfully
==== Deleting CLSID Registry Values ======================
HKEY_LOCAL_MACHINE\software\Wow6432Node\mozilla\Firefox\extensions\FFPDFArchitectConverter@pdfarchitect.com deleted successfully
==== Empty IE Cache ======================
C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\Users\Vit\AppData\Local\Microsoft\Windows\INetCache\Low\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Cache found
==== Empty Chrome Cache ======================
C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=99 folders=13 1303785 bytes)
==== Empty Temp Folders ======================
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\UpdatusUser\AppData\Local\Temp emptied successfully
C:\Users\Vit\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\WINDOWS\Temp successfully emptied
C:\Users\Vit\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on so 06. 09. 2014 at 16:38:53,88 ======================
Re: Množství reklam v IE a Chrome
Poprosim o novy log z FRST
Re: Množství reklam v IE a Chrome
can result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 03-09-2014 02
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 20:46:04
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
Chrome:
=======
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Google Docs) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Google Drive) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (Google Search) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Google Wallet) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
S2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:46 - 2014-09-06 20:46 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-09-06 16:37 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 20:46 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 20:45 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-06 20:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 20:26 - 2014-01-05 18:04 - 01904375 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 20:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 20:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 18:24 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 18:15 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 17:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-06 16:58 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 16:58 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 16:58 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 16:49 - 2014-01-07 11:24 - 00004966 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 16:46 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 16:46 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 16:40 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 16:39 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 16:39 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 16:39 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 16:39 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 16:38 - 2014-09-06 16:28 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:38 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 16:38 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 16:38 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 16:38 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 16:37 - 2014-08-27 22:20 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-09-06 16:36 - 2014-09-06 16:25 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:26 - 2014-09-06 16:37 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 16:21 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-06 15:20 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:06 - 2014-09-06 15:08 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 14:23 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-06 12:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:48 - 2014-09-06 09:47 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:48 - 2014-09-06 09:47 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiictht.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 16:05
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.01 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS
Available physical RAM: 13582.95 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 16%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Vit\Desktop" je 162 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by Vit (administrator) on PRACOVNI on 06-09-2014 20:46:04
Running from C:\Users\Vit\Desktop
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/downloa ... ool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/downloa ... ool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Software602 a.s.) C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Code 42 Software) C:\Program Files\CrashPlan\CrashPlanService.exe
() C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Windows\SysWOW64\irstrtsv.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Intel) C:\Program Files (x86)\Intel\irstrt\RapidStartConfig.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\Program Files (x86)\QNAP\Qfinder\iSCSIAgent.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\tv_x64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Qualcomm Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
() C:\Program Files (x86)\Bluetooth Suite\ActivateDesktop.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(ZONER software) C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Code 42 Software, Inc.) C:\Program Files\CrashPlan\CrashPlanTray.exe
() C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(Dropbox, Inc.) C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\splwow64.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(QNAP Systems, Inc.) C:\Program Files (x86)\QNAP\Qsync\Qsync.exe
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMSWCS.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Dell Products, LP.) C:\Program Files (x86)\Dell Digital Delivery\DeliveryService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Realsil Microelectronics Inc.) C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(CyberLink) C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell Backup and Recovery\SftService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Components\DBRUpdate\DBRUpd.exe
(SoftThinks - Dell) C:\Program Files (x86)\Dell Backup and Recovery\Toaster.exe
() C:\Program Files (x86)\Dell Backup and Recovery\Components\Shell\DBRCrawler.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20573_x64__8wekyb3d8bbwe\livecomm.exe
(Qualcomm Atheros) C:\Program Files (x86)\Bluetooth Suite\BtTray.exe
(forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6842000 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1230992 2012-10-08] (Realtek Semiconductor)
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [5757328 2012-10-19] (Dell Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-15] (CANON INC.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3010952 2012-12-21] (Synaptics Incorporated)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [285680 2013-03-05] (Intel Corporation)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [EPSON_UD_START] => C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UD.exe [534664 2011-11-17] (SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1273448 2012-04-03] (CANON INC.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [449168 2012-03-26] (CANON INC.)
HKLM-x32\...\Run: [Qsync] => C:\Program Files (x86)\QNAP\Qsync\Qsync.exe [13693136 2014-04-29] (QNAP Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [132736 2013-03-27] ( (Qualcomm Atheros Commnucations))
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [22734160 2014-08-08] (Google)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CrashPlan Tray.lnk
ShortcutTarget: CrashPlan Tray.lnk -> C:\Program Files\CrashPlan\CrashPlanTray.exe (Code 42 Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Qualcomm Atheros Killer Network Manager.lnk
ShortcutTarget: Qualcomm Atheros Killer Network Manager.lnk -> C:\Program Files\Qualcomm Atheros\Killer Network Manager\KillerNetManager.exe ()
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Vit\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
Startup: C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\onenotem.exe (Microsoft Corporation)
ShellIconOverlayIdentifiers: QsyncEx_Icon1 -> {9EF65B94-EC0D-49F7-B46D-006B388EB03E} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon2 -> {6C472CFB-6B9B-4F7D-A3BF-9DF968D6C5C1} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: QsyncEx_Icon3 -> {DD344E99-05CF-47B7-8108-D7BD456B4314} => C:\Program Files (x86)\QNAP\Qsync\QsyncExt.dll ()
ShellIconOverlayIdentifiers: DBARFileBackuped -> {831cebdd-6baf-4432-be76-9e0989c14aef} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: DBARFileNotBackuped -> {275e4fd7-21ef-45cf-a836-832e5d2cc1b3} => C:\WINDOWS\system32\mscoree.dll (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexbho.dll (CANON INC.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll (pdfforge GmbH)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Evernote extension -> {92EF2EAD-A7CE-4424-B0DB-499CF856608E} -> C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
Toolbar: HKCU - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\addon64\ewpexhlp.dll (CANON INC.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138
FireFox:
========
FF ProfilePath: C:\Users\Vit\AppData\Roaming\Mozilla\Firefox\Profiles\cjsyutna.default
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_14_0_0_145.dll ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_14_0_0_145.dll ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @software602.cz/602XML Filler -> C:\Program Files (x86)\Software602\602XML\Filler\npfiller.dll (Software602 a.s.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\Vit\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\Vit\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Vit\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
Chrome:
=======
CHR Profile: C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\agljkoinmcdnopnlbhhjibjiablccgoh [2014-01-03]
CHR Extension: (Google Docs) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-03]
CHR Extension: (Google Drive) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-03]
CHR Extension: (YouTube) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-03]
CHR Extension: (Google Search) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-03]
CHR Extension: (Booking.com for Chrome™) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\fgkeilefmpmbamgcejhjpiecahcbipip [2014-06-29]
CHR Extension: (Alarm Clock Radio) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kipdhcpepbpjaoggihaloebfjfafagmi [2014-01-03]
CHR Extension: (Calendar View for Astrid) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmddbiagkpdgldeekdakkodcfhfagdhi [2014-01-03]
CHR Extension: (Google Wallet) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-03]
CHR Extension: (Evernote Web Clipper) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2014-01-03]
CHR Extension: (Gmail) - C:\Users\Vit\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-03]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 602XML Updater; C:\Program Files (x86)\Common Files\soft602\602updsvc\602updsvc.exe [85344 2011-10-10] (Software602 a.s.)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [227968 2013-03-27] (Qualcomm Atheros Commnucations)
S2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5873840 2011-03-18] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2369720 2014-08-01] (Microsoft Corporation)
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\CyberLink\PowerDVD12\Common\NavFilter\kmsvc.exe [243464 2013-09-23] (CyberLink)
R2 CrashPlanService; C:\Program Files\CrashPlan\CrashPlanService.exe [223232 2014-06-26] (Code 42 Software) [File not signed]
R2 DragonUpdater; C:\Program Files (x86)\Comodo\Dragon\dragon_updater.exe [2135232 2014-03-08] ()
R2 EMP_UDSA; C:\Program Files (x86)\EPSON Projector\Epson USB Display V1.6\EMP_UDSA.exe [157696 2011-11-17] (SEIKO EPSON CORPORATION) [File not signed]
R2 irstrtsv; C:\Windows\SysWOW64\irstrtsv.exe [193576 2012-07-29] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-20] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
S2 Qualcomm Atheros Killer Service; C:\Program Files\Qualcomm Atheros\Killer Network Manager\BFNService.exe [506880 2013-05-03] () [File not signed]
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [253776 2013-03-26] (CyberLink)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [201360 2012-10-08] (Realtek Semiconductor)
R2 SftService; C:\Program Files (x86)\Dell Backup and Recovery\sftservice.exe [1915920 2014-04-04] (SoftThinks SAS)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R3 akw8x64; C:\Windows\system32\DRIVERS\akw8x64.sys [3800272 2013-05-03] (Qualcomm Atheros, Inc.)
S1 BfLwf; C:\Windows\system32\DRIVERS\bwcW8x64.sys [74096 2013-05-03] (Qualcomm Atheros, Inc.)
S3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-03-27] (Qualcomm Atheros)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R1 CLVirtualDrive; C:\Windows\system32\DRIVERS\CLVirtualDrive.sys [91712 2013-03-05] (CyberLink)
S3 dot4; C:\Windows\system32\DRIVERS\Dot4.sys [151968 2012-10-19] (Windows (R) Win 7 DDK provider)
S3 Dot4Print; C:\Windows\System32\drivers\Dot4Prt.sys [27040 2012-10-19] (Windows (R) Win 7 DDK provider)
R1 EMP_MIRRUD; C:\Windows\system32\DRIVERS\EMP_MirrUD.sys [5632 2011-11-17] (Windows (R) Codename Longhorn DDK provider)
R3 eppvad_simple; C:\Windows\system32\drivers\EMP_UDAU.sys [23040 2011-11-17] (SEIKO EPSON CORPORATION)
S3 GemCCID; C:\Windows\system32\DRIVERS\GemCCID.sys [130688 2014-03-14] (Gemalto)
R3 irstrtdv; C:\Windows\System32\drivers\irstrtdv.sys [43800 2012-07-29] (Intel Corporation)
R1 nvkflt; C:\Windows\system32\DRIVERS\nvkflt.sys [300320 2013-11-21] (NVIDIA Corporation)
S3 SmbDrv; C:\Windows\System32\drivers\Smb_driver_AMDASF.sys [28040 2012-12-21] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [32136 2012-12-21] (Synaptics Incorporated)
R3 ST_Accel; C:\Windows\system32\DRIVERS\ST_Accel.sys [71832 2012-07-14] (STMicroelectronics)
R3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:46 - 2014-09-06 20:46 - 00000000 ____D () C:\FRST
2014-09-06 09:11 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:07 - 2014-09-06 09:08 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-08-28 07:43 - 2014-08-23 02:42 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-27 22:34 - 2014-08-29 23:29 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 22:20 - 2014-09-06 16:37 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-08-27 12:32 - 2014-09-06 09:12 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:05 - 2014-08-27 12:21 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:03 - 2014-08-26 15:04 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:36 - 2014-08-20 16:17 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
2014-08-18 22:12 - 2014-08-26 15:05 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2010-06-02 04:55 - 00239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2014-08-18 21:42 - 2010-06-02 04:55 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 02401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 01868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2014-08-18 21:42 - 2010-05-26 11:41 - 00470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2014-08-18 21:42 - 2010-02-04 10:01 - 00074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2014-08-18 21:41 - 2010-02-04 10:01 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:44 - 00069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 05501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 02475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 01892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2014-08-18 21:41 - 2009-09-04 17:29 - 00235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-16 14:18 - 00022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 05425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 04178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 02430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2014-08-18 21:41 - 2009-03-09 15:27 - 00520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-27 10:04 - 00023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 05631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 04379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 02036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2014-08-18 21:41 - 2008-10-10 04:52 - 00452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:41 - 00068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-31 10:40 - 00509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2014-08-18 21:41 - 2008-07-10 11:01 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 04992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 03851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 01493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2014-08-18 21:41 - 2008-07-10 11:00 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:18 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2014-08-18 21:41 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:16 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 04991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2014-08-18 21:41 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2014-08-18 21:41 - 2008-03-05 16:04 - 00489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:03 - 00177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 04910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2014-08-18 21:41 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2014-08-18 21:41 - 2007-10-22 03:40 - 00411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 05081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 02006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2014-08-18 21:41 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 05073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2014-08-18 21:41 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2014-08-18 21:41 - 2007-06-20 20:49 - 00409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2014-08-18 21:41 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 04496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2014-08-18 21:41 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2014-08-18 21:41 - 2007-04-04 18:54 - 00107368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_3.dll
2014-08-18 21:41 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 04494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2014-08-18 21:41 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2014-08-18 21:41 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2014-08-18 21:41 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2014-08-18 21:41 - 2006-12-08 12:00 - 00390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2014-08-18 21:41 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 03977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2014-08-18 21:41 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2014-08-18 21:41 - 2006-09-28 16:04 - 00364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2014-08-18 21:41 - 2006-07-28 09:31 - 00083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2014-08-18 21:41 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2014-08-18 21:41 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2014-08-18 21:41 - 2006-05-31 07:22 - 00354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2014-08-18 21:41 - 2006-03-31 12:41 - 03927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2014-08-18 21:41 - 2006-03-31 12:40 - 00352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2014-08-18 21:41 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 03830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2014-08-18 21:41 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 03815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2014-08-18 21:41 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 03807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2014-08-18 21:41 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 03767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2014-08-18 21:41 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 03823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2014-08-18 21:41 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 03544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2014-08-18 21:41 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2014-08-18 21:39 - 2014-08-18 21:42 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:39 - 2014-08-18 21:41 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 10:23 - 2014-07-25 16:52 - 23645696 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:51 - 17524224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-08-13 10:23 - 2014-07-25 15:28 - 00548352 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 02774528 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-08-13 10:23 - 2014-07-25 15:25 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:59 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:40 - 00452096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 14:34 - 00455168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-08-13 10:23 - 2014-07-25 14:30 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 05824512 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-08-13 10:23 - 2014-07-25 14:28 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 14:21 - 02184704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-08-13 10:23 - 2014-07-25 14:17 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 14:10 - 00292864 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 14:08 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-08-13 10:23 - 2014-07-25 14:06 - 04204032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-08-13 10:23 - 2014-07-25 13:52 - 00367104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-08-13 10:23 - 2014-07-25 13:47 - 00631808 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:43 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-08-13 10:23 - 2014-07-25 13:42 - 00692736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-08-13 10:23 - 2014-07-25 13:39 - 02087936 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:34 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-08-13 10:23 - 2014-07-25 13:29 - 00239616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-08-13 10:23 - 2014-07-25 13:23 - 13547008 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-08-13 10:23 - 2014-07-25 13:13 - 00526336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-08-13 10:23 - 2014-07-25 13:09 - 00291840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-08-13 10:23 - 2014-07-25 13:07 - 02001920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-08-13 10:23 - 2014-07-25 13:03 - 11772928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-08-13 10:23 - 2014-07-25 12:52 - 02266624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:26 - 01431040 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-08-13 10:23 - 2014-07-25 12:17 - 00846336 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:09 - 00704512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-08-13 10:23 - 2014-07-25 12:05 - 01792512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-08-13 10:23 - 2014-07-25 12:00 - 01169920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-08-13 10:20 - 2014-06-20 03:48 - 01273184 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2014-08-13 10:20 - 2014-06-20 01:52 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2014-08-13 10:20 - 2014-06-13 03:15 - 00517528 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxgi.dll
2014-08-13 10:20 - 2014-06-13 03:14 - 01557848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2014-08-13 10:20 - 2014-06-13 02:10 - 00406400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxgi.dll
2014-08-13 10:20 - 2014-06-06 13:34 - 02133504 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2014-08-13 10:19 - 2014-07-15 20:16 - 03048880 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcMon.exe
2014-08-13 10:19 - 2014-07-15 10:29 - 03118080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wpc.dll
2014-08-13 10:19 - 2014-07-15 10:22 - 02861056 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebSync.dll
2014-08-13 10:19 - 2014-07-15 10:03 - 02344448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Wpc.dll
2014-08-13 10:19 - 2014-07-10 06:16 - 00716800 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveTelemetry.dll
2014-08-13 10:19 - 2014-07-10 06:03 - 04756992 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncEngine.dll
2014-08-13 10:19 - 2014-07-10 05:33 - 01120256 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDrive.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2014-08-13 10:19 - 2014-06-10 00:13 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2014-08-13 10:19 - 2014-05-31 08:27 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-08-13 10:19 - 2014-05-13 07:07 - 02844160 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-08-13 10:19 - 2014-05-13 06:41 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winbici.dll
2014-08-13 10:19 - 2014-05-13 06:26 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\system32\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-13 05:31 - 00265216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SkyDriveShell.dll
2014-08-13 10:19 - 2014-05-03 13:29 - 01726224 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2014-08-13 10:19 - 2014-05-03 11:20 - 01473080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2014-08-13 10:19 - 2014-05-03 07:19 - 00071168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 07:08 - 00301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedynos.dll
2014-08-13 10:19 - 2014-05-03 07:07 - 00262656 _____ (Microsoft Corporation) C:\WINDOWS\system32\framedyn.dll
2014-08-13 10:19 - 2014-05-03 06:46 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncobjapi.dll
2014-08-13 10:19 - 2014-05-03 06:37 - 00235008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedynos.dll
2014-08-13 10:19 - 2014-05-01 07:44 - 01025536 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-08-13 10:19 - 2014-04-30 08:41 - 00402432 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\agilevpn.sys
2014-08-13 10:19 - 2014-04-30 08:41 - 00038912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwifimp.sys
2014-08-13 10:19 - 2014-04-30 07:45 - 00123392 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2014-08-13 10:19 - 2014-04-30 06:23 - 00353280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 06:23 - 00271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 06:14 - 00827392 _____ (Microsoft Corporation) C:\WINDOWS\system32\BFE.DLL
2014-08-13 10:19 - 2014-04-30 05:46 - 00285696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore.dll
2014-08-13 10:19 - 2014-04-30 05:46 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcore6.dll
2014-08-13 10:19 - 2014-04-30 05:42 - 00403968 _____ (Microsoft Corporation) C:\WINDOWS\system32\vpnike.dll
2014-08-13 10:19 - 2014-04-29 00:40 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2014-08-13 10:19 - 2014-04-27 00:03 - 02140888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-08-13 10:19 - 2014-04-26 22:14 - 02144984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-08-13 10:19 - 2014-04-26 18:39 - 00339456 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2014-08-13 10:19 - 2014-04-14 11:37 - 02125344 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d9.dll
2014-08-13 10:19 - 2014-04-14 10:08 - 01797896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d9.dll
2014-08-13 10:19 - 2014-04-09 08:11 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-08-13 10:19 - 2014-04-09 07:20 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-08-13 10:18 - 2014-06-05 16:13 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-08-13 10:18 - 2014-06-05 15:14 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-08-13 10:18 - 2014-06-04 11:27 - 00114520 _____ (Microsoft Corporation) C:\WINDOWS\system32\consent.exe
2014-08-13 10:18 - 2014-06-04 07:31 - 00356352 _____ (Microsoft Corporation) C:\WINDOWS\system32\msihnd.dll
2014-08-13 10:18 - 2014-06-04 07:22 - 02790912 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll
2014-08-13 10:18 - 2014-06-04 06:43 - 00281088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msihnd.dll
2014-08-13 10:18 - 2014-06-04 06:38 - 03304448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll
2014-08-13 10:18 - 2014-06-04 04:15 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-08-13 10:18 - 2014-06-04 04:14 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-08-13 10:18 - 2014-06-02 04:10 - 00423768 _____ (Microsoft Corporation) C:\WINDOWS\system32\hal.dll
2014-08-13 10:18 - 2014-05-31 12:07 - 00467800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-08-13 10:18 - 2014-05-31 12:07 - 00440664 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbport.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00419672 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00089944 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbehci.sys
2014-08-13 10:18 - 2014-05-31 12:07 - 00027480 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbd.sys
2014-08-13 10:18 - 2014-05-31 08:30 - 00037376 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbuhci.sys
2014-08-13 10:18 - 2014-05-31 08:27 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFPf.sys
2014-08-13 10:18 - 2014-05-31 08:26 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WUDFRd.sys
2014-08-13 10:18 - 2014-05-31 06:01 - 00284672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFHost.exe
2014-08-13 10:18 - 2014-05-31 06:01 - 00209408 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFPlatform.dll
2014-08-13 10:18 - 2014-05-31 06:01 - 00099840 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUDFSvc.dll
2014-08-13 10:18 - 2014-05-27 17:53 - 02518360 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-08-13 10:18 - 2014-05-27 11:56 - 00323584 _____ (Microsoft Corporation) C:\WINDOWS\system32\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-27 11:53 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DaOtpCredentialProvider.dll
2014-08-13 10:18 - 2014-05-17 06:59 - 16871936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-17 06:13 - 12711424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-08-13 10:18 - 2014-05-13 09:01 - 00076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\BulkOperationHost.exe
2014-08-13 10:18 - 2014-05-13 05:59 - 01035264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-08-13 10:18 - 2014-05-03 07:36 - 00997888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2014-08-13 10:18 - 2014-05-03 06:37 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\framedyn.dll
2014-08-13 10:18 - 2014-05-03 01:26 - 00050745 _____ () C:\WINDOWS\system32\srms.dat
2014-08-13 10:18 - 2014-04-30 08:43 - 00071680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vwififlt.sys
2014-08-13 10:18 - 2014-04-30 06:48 - 00106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2014-08-13 10:18 - 2014-04-30 06:24 - 00065024 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 06:23 - 00087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-30 05:59 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\IKEEXT.DLL
2014-08-13 10:18 - 2014-04-30 05:46 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc6.dll
2014-08-13 10:18 - 2014-04-30 05:45 - 00062976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dhcpcsvc.dll
2014-08-13 10:18 - 2014-04-14 07:18 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d8thk.dll
2014-08-13 10:17 - 2014-08-07 04:12 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:56 - 01064448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32.dll
2014-08-13 10:17 - 2014-08-02 05:11 - 00918528 _____ (Microsoft Corporation) C:\WINDOWS\system32\MrmCoreR.dll
2014-08-13 10:17 - 2014-07-12 06:17 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDMAgent.exe
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 20:46 - 2014-09-06 09:46 - 00000000 ____D () C:\FRST
2014-09-06 20:45 - 2013-12-23 03:59 - 00000000 ____D () C:\Users\Vit\Documents\Soubory aplikace Outlook
2014-09-06 20:43 - 2014-08-05 19:43 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-06 20:26 - 2014-01-05 18:04 - 01904375 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-06 20:23 - 2014-02-05 15:56 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job
2014-09-06 20:15 - 2014-01-03 12:45 - 00000964 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-06 20:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-06 18:24 - 2013-12-22 10:52 - 00003596 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1708774153-823386485-165443587-1002
2014-09-06 18:15 - 2014-07-17 21:07 - 00000000 ___RD () C:\Users\Vit\Qsync
2014-09-06 18:14 - 2014-09-06 18:14 - 00000000 ___RD () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-09-06 17:55 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-06 16:58 - 2013-11-14 14:40 - 01749406 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-06 16:58 - 2013-11-14 14:24 - 00740962 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-06 16:58 - 2013-11-14 14:24 - 00152146 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-06 16:49 - 2014-01-07 11:24 - 00004966 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for PRACOVNI-Vit pracovni
2014-09-06 16:46 - 2013-12-22 10:52 - 00000000 ____D () C:\ProgramData\softthinks
2014-09-06 16:46 - 2013-09-11 23:31 - 00000000 ____D () C:\Program Files (x86)\Dell Backup and Recovery
2014-09-06 16:40 - 2014-01-03 12:45 - 00002205 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2014-09-06 16:39 - 2014-07-04 09:33 - 00000000 ___RD () C:\Users\Vit\Disk Google
2014-09-06 16:39 - 2014-01-06 16:14 - 00000000 ___RD () C:\Users\Vit\Dropbox
2014-09-06 16:39 - 2014-01-06 16:11 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Dropbox
2014-09-06 16:39 - 2013-09-11 23:22 - 00000000 ____D () C:\ProgramData\Bigfoot Networks
2014-09-06 16:38 - 2014-09-06 16:28 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:38 - 2014-01-05 18:24 - 00000000 ___DO () C:\Users\Vit\SkyDrive
2014-09-06 16:38 - 2014-01-05 18:05 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-09-06 16:38 - 2014-01-03 12:45 - 00000960 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-06 16:38 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-06 16:37 - 2014-08-27 22:20 - 00001572 _____ () C:\WINDOWS\PFRO.log
2014-09-06 16:36 - 2014-09-06 16:25 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:26 - 2014-09-06 16:37 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 16:21 - 2013-12-21 01:36 - 00000000 ____D () C:\Users\Vit\AppData\Local\Packages
2014-09-06 15:20 - 2014-08-20 12:01 - 00000000 ____D () C:\AdwCleaner
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:12 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:06 - 2014-09-06 15:08 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 14:23 - 2014-02-05 15:56 - 00000920 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job
2014-09-06 12:44 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:48 - 2014-09-06 09:47 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:48 - 2014-09-06 09:47 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:12 - 2014-08-27 12:32 - 00004815 _____ () C:\WINDOWS\setupact.log
2014-09-06 09:10 - 2014-09-06 09:11 - 02104832 _____ (Farbar) C:\Users\Vit\Desktop\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:11 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-09-06 09:08 - 2014-09-06 09:07 - 00000000 ____D () C:\Users\Vit\AppData\Local\Mozilla
2014-09-06 09:08 - 2014-06-08 18:17 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00001173 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00001161 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\ProgramData\Mozilla
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-06 09:07 - 2014-09-06 09:07 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-06 08:56 - 2014-09-06 08:56 - 35100360 _____ () C:\Users\Vit\Downloads\Firefox Setup 32.0.exe
2014-09-05 20:45 - 2014-01-03 15:33 - 00000000 ____D () C:\Users\Vit\Documents\Přijato
2014-09-05 15:20 - 2014-01-05 18:29 - 00003962 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{B826F5AB-6BBF-4767-A8CC-BFD84080E3D3}
2014-09-04 13:40 - 2014-01-20 11:13 - 00000000 ____D () C:\wdata
2014-09-04 09:00 - 2013-12-26 16:40 - 00000000 ____D () C:\Users\Vit\Documents\Osobni
2014-08-29 23:29 - 2014-08-27 22:34 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Audacity
2014-08-29 15:22 - 2014-05-02 20:48 - 00000000 ____D () C:\The KMPlayer
2014-08-28 11:06 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\tracing
2014-08-28 10:54 - 2013-08-22 16:44 - 00381992 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-08-28 07:56 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-08-28 02:05 - 2014-01-05 18:10 - 00000000 ____D () C:\Users\Vit
2014-08-27 22:34 - 2014-08-27 22:34 - 00001033 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00001021 _____ () C:\Users\Public\Desktop\Audacity.lnk
2014-08-27 22:34 - 2014-08-27 22:34 - 00000000 ____D () C:\Program Files (x86)\Audacity
2014-08-27 22:33 - 2014-08-27 22:33 - 22180353 _____ (Audacity Team ) C:\Users\Vit\Downloads\audacity-win-2.0.5.exe
2014-08-27 12:32 - 2014-08-27 12:32 - 00000000 _____ () C:\WINDOWS\setuperr.log
2014-08-27 12:21 - 2014-08-27 12:05 - 662462464 _____ () C:\Users\Vit\Downloads\Kanadský les.mpg
2014-08-26 15:05 - 2014-08-18 22:12 - 00001936 _____ () C:\Users\Vit\Desktop\KMP Games.lnk
2014-08-26 15:05 - 2014-05-02 20:48 - 00000644 _____ () C:\Users\Vit\Desktop\KMPlayer.lnk
2014-08-26 15:04 - 2014-08-26 15:03 - 32885912 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-127.exe
2014-08-26 12:19 - 2013-12-22 12:10 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-08-25 14:23 - 2013-12-23 14:43 - 00000000 ____D () C:\Users\Vit\Documents\Projekty
2014-08-25 11:35 - 2014-07-09 17:10 - 00000000 ____D () C:\Program Files (x86)\PDFCreator
2014-08-25 11:35 - 2014-01-26 11:59 - 00000000 ____D () C:\WINDOWS\Minidump
2014-08-25 11:35 - 2014-01-05 18:02 - 00000000 ___DC () C:\WINDOWS\Panther
2014-08-25 11:35 - 2013-12-30 03:29 - 00000000 ____D () C:\Users\Vit\AppData\Local\CrashDumps
2014-08-25 11:11 - 2014-08-25 11:11 - 00002768 _____ () C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2014-08-25 11:11 - 2014-08-25 11:11 - 00000836 _____ () C:\Users\Public\Desktop\CCleaner.lnk
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-08-25 11:11 - 2014-08-25 11:11 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-25 11:09 - 2014-08-25 11:09 - 04813544 _____ (Piriform Ltd) C:\Users\Vit\Downloads\ccsetup416.exe
2014-08-23 02:42 - 2014-08-28 07:43 - 04148224 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2014-08-20 16:17 - 2014-08-20 12:36 - 00000000 ____D () C:\WINDOWS\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-20 16:15 - 2013-08-22 15:25 - 00000194 _____ () C:\WINDOWS\win.ini
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-19 15:46 - 2013-12-26 17:00 - 00000000 ____D () C:\Users\Vit\Documents\Granty
2014-08-18 22:10 - 2014-08-18 22:10 - 32833984 _____ (PandoraTV) C:\Users\Vit\Desktop\KMPlayer_3-9-0-126.exe
2014-08-18 21:42 - 2014-08-18 21:42 - 00000949 _____ () C:\Users\Vit\Desktop\Open Broadcaster Software.lnk
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files\OBS
2014-08-18 21:42 - 2014-08-18 21:42 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-08-18 21:42 - 2014-08-18 21:39 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2014-08-18 21:41 - 2014-08-18 21:39 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2014-08-18 21:39 - 2013-09-11 23:32 - 00000000 ____D () C:\Temp
2014-08-18 21:38 - 2014-08-18 21:38 - 00292184 _____ (Microsoft Corporation) C:\Users\Vit\Downloads\dxwebsetup.exe
2014-08-18 21:37 - 2014-08-18 21:37 - 08351107 _____ () C:\Users\Vit\Downloads\OBS_0_625b_Installer.exe
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default\AppData\Local\Google
2014-08-16 21:17 - 2014-08-16 21:17 - 00000000 ____D () C:\Users\Default User\AppData\Local\Google
2014-08-16 21:17 - 2014-07-04 09:12 - 00002060 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002058 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00002048 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-08-16 21:17 - 2014-07-04 09:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Notepad++
2014-08-16 14:12 - 2014-07-13 10:53 - 00000000 ____D () C:\Program Files (x86)\Notepad++
2014-08-14 08:54 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-08-14 08:01 - 2014-08-14 08:01 - 00673606 _____ () C:\Users\Vit\Downloads\ICT3017.pptx
2014-08-13 16:08 - 2014-01-06 16:14 - 00001065 _____ () C:\Users\Vit\Desktop\Dropbox.lnk
2014-08-13 16:08 - 2014-01-06 16:12 - 00000000 ____D () C:\Users\Vit\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\PolicyDefinitions
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\MediaViewer
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\FileManager
2014-08-13 12:13 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\Camera
2014-08-13 10:28 - 2013-12-22 10:55 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-08-13 10:25 - 2013-12-22 10:55 - 99218768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-08-13 10:17 - 2014-06-12 08:49 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-08-13 10:17 - 2014-06-12 08:48 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-08-13 10:17 - 2014-04-18 22:53 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-08-13 10:17 - 2014-04-18 22:49 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-08-13 10:17 - 2014-04-17 08:51 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-08-13 10:17 - 2014-04-17 08:51 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-08-13 10:17 - 2014-04-17 08:44 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-08-13 10:14 - 2014-04-17 08:51 - 00233912 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-08-13 10:13 - 2014-06-11 08:34 - 00428888 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\FWPKCLNT.SYS
2014-08-11 14:15 - 2014-08-11 14:15 - 01154560 _____ () C:\Users\Vit\Downloads\AKD2_korelace.ppt
2014-08-11 10:51 - 2014-01-17 16:03 - 00001120 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2014-08-11 10:51 - 2014-01-17 16:03 - 00001108 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2014-08-07 18:30 - 2013-12-26 16:45 - 00000000 ____D () C:\Users\Vit\Documents\Duchovni
2014-08-07 04:12 - 2014-08-13 10:17 - 01336624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32.dll
Some content of TEMP:
====================
C:\Users\Vit\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpiictht.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2014-09-06 16:05
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:915.4 GB) (Free:616.01 GB) NTFS
Drive h: (WINRETOOLS) (Fixed) (Total:0.48 GB) (Free:0.21 GB) NTFS
Drive x: () (Fixed) (Total:0.34 GB) (Free:0.04 GB) NTFS
Drive y: (PBR Image) (Fixed) (Total:14.63 GB) (Free:0.71 GB) NTFS
Available physical RAM: 13582.95 MB
Total physical RAM: 16261.75 MB
Percentage of memory in use: 16%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5FD83D15)
Disk: 1 (Size: 8 GB) (Disk ID: 284BFD8C)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Alternate Data Streams (whitelisted) ==================
AlternateDataStreams: C:\Users\Vit\SkyDrive:ms-properties
==================== Security Center ==================
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Vit\Desktop" je 162 MB.
***** Startup Programs *****
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition.zip
- (12.38 KiB) Staženo 82 x
Re: Množství reklam v IE a Chrome
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start HKLM\...\Run: [Firebird] => [X] HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation) HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.) HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] () HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.) HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software) HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe" HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB 2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt 2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe 2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log 2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup 2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe 2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe 2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll 2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt 2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe 2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe 2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe 2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe 2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm 2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip 2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt 2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt 2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe 2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe 2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe 2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe 2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe 2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe 2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe Hosts: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Re: Množství reklam v IE a Chrome
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 03-09-2014 02
Ran by Vit at 2014-09-07 15:07:46 Run:1
Running from C:\Users\Vit\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Hosts:
Reboot:
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Firebird => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Service 16 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key not found.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
"C:\Users\Vit\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Vit\Downloads\zoek.exe => Moved successfully.
C:\Users\Vit\Desktop\zoek.exe => Moved successfully.
C:\WINDOWS\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Vit\Desktop\JRT.txt => Moved successfully.
C:\Users\Vit\Downloads\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\rkclknEc.htm => Moved successfully.
C:\Users\Vit\Downloads\2147496874.zip => Moved successfully.
C:\Users\Vit\Desktop\FRST_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\Addition_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\FRST64.exe => Moved successfully.
C:\Users\Vit\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe => Moved successfully.
C:\Users\Vit\Downloads\SpyHunter-Installer.exe => Moved successfully.
C:\Users\Vit\Downloads\sh-remover.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => Moved successfully.
C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => Moved successfully.
C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
The system needed a reboot.
==== End of Fixlog ====
Ran by Vit at 2014-09-07 15:07:46 Run:1
Running from C:\Users\Vit\Desktop
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
HKLM\...\Run: [Firebird] => [X]
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Google Update] => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe [116648 2014-01-03] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Service 16] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSService.exe [27648 2014-06-16] ()
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [852808 2014-08-30] (Google Inc.)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\Run: [Zoner Photo Studio Autoupdate] => C:\Program Files\Zoner\Photo Studio 16\Program32\ZPSTRAY.EXE [833024 2014-06-16] (ZONER software)
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {10762dc7-0cbf-11e4-be86-0c84dccbb53c} - "F:\AutoRun.exe"
HKU\S-1-5-21-1708774153-823386485-165443587-1002\...\MountPoints2: {81fa8d9e-7b99-11e3-be73-0c84dccbb53c} - "E:\EMP_UDSe.exe" /autorun
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://dell13.msn.com/?pc=DCJB
2014-09-06 20:46 - 2014-09-06 20:46 - 00024958 _____ () C:\Users\Vit\Desktop\FRST.txt
2014-09-06 16:37 - 2014-09-06 16:26 - 00024064 _____ () C:\WINDOWS\zoek-delete.exe
2014-09-06 16:28 - 2014-09-06 16:38 - 00020271 _____ () C:\zoek-results.log
2014-09-06 16:25 - 2014-09-06 16:36 - 00000000 ____D () C:\zoek_backup
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Downloads\zoek.exe
2014-09-06 16:25 - 2014-09-06 16:25 - 01288704 _____ () C:\Users\Vit\Desktop\zoek.exe
2014-09-06 15:18 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-06 15:15 - 2014-09-06 15:15 - 00004163 _____ () C:\Users\Vit\Desktop\JRT.txt
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Downloads\adwcleaner_3.309.exe
2014-09-06 15:11 - 2014-09-06 15:11 - 01370467 _____ () C:\Users\Vit\Desktop\adwcleaner_3.309.exe
2014-09-06 15:08 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Desktop\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 01016261 _____ (Thisisu) C:\Users\Vit\Downloads\JRT.exe
2014-09-06 15:06 - 2014-09-06 15:06 - 00020932 _____ () C:\Users\Vit\Downloads\rkclknEc.htm
2014-09-06 12:02 - 2014-09-06 12:02 - 00802108 _____ () C:\Users\Vit\Downloads\2147496874.zip
2014-09-06 09:47 - 2014-09-06 09:48 - 00094081 _____ () C:\Users\Vit\Desktop\FRST_prvni.txt
2014-09-06 09:47 - 2014-09-06 09:48 - 00060707 _____ () C:\Users\Vit\Desktop\Addition_prvni.txt
2014-09-06 09:11 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Desktop\FRSTLauncher.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 02104832 _____ (Farbar) C:\Users\Vit\Downloads\FRST64.exe
2014-09-06 09:10 - 2014-09-06 09:10 - 00112640 _____ (forum.viry.cz) C:\Users\Vit\Downloads\FRSTLauncher.exe
2014-08-20 13:24 - 2014-08-20 13:24 - 17292760 _____ (Malwarebytes Corporation ) C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe
2014-08-20 12:34 - 2014-08-20 12:34 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\SpyHunter-Installer.exe
2014-08-20 12:33 - 2014-08-20 12:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Vit\Downloads\sh-remover.exe
2014-08-20 12:01 - 2014-09-06 15:20 - 00000000 ____D () C:\AdwCleaner
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => C:\Users\Vit\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => C:\PROGRA~2\SMARTD~1\Messages\SDNotify.exe
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Hosts:
Reboot:
End
*****************
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Firebird => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Google Update => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Service 16 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\GoogleChromeAutoLaunch_488306D2FE146380E275F912D8552E42 => value deleted successfully.
HKU\S-1-5-21-1708774153-823386485-165443587-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Zoner Photo Studio Autoupdate => value deleted successfully.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{10762dc7-0cbf-11e4-be86-0c84dccbb53c}" => Key not found.
"HKU\S-1-5-21-1708774153-823386485-165443587-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key deleted successfully.
"HKCR\CLSID\{81fa8d9e-7b99-11e3-be73-0c84dccbb53c}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
"C:\Users\Vit\Desktop\FRST.txt" => File/Directory not found.
C:\WINDOWS\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Vit\Downloads\zoek.exe => Moved successfully.
C:\Users\Vit\Desktop\zoek.exe => Moved successfully.
C:\WINDOWS\SysWOW64\sqlite3.dll => Moved successfully.
C:\Users\Vit\Desktop\JRT.txt => Moved successfully.
C:\Users\Vit\Downloads\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\adwcleaner_3.309.exe => Moved successfully.
C:\Users\Vit\Desktop\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\JRT.exe => Moved successfully.
C:\Users\Vit\Downloads\rkclknEc.htm => Moved successfully.
C:\Users\Vit\Downloads\2147496874.zip => Moved successfully.
C:\Users\Vit\Desktop\FRST_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\Addition_prvni.txt => Moved successfully.
C:\Users\Vit\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\FRST64.exe => Moved successfully.
C:\Users\Vit\Downloads\FRSTLauncher.exe => Moved successfully.
C:\Users\Vit\Downloads\mbam-setup-2.0.2.1012.exe => Moved successfully.
C:\Users\Vit\Downloads\SpyHunter-Installer.exe => Moved successfully.
C:\Users\Vit\Downloads\sh-remover.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002Core.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-1708774153-823386485-165443587-1002UA.job => Moved successfully.
C:\WINDOWS\Tasks\SDMsgUpdate (SD).job => Moved successfully.
C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
The system needed a reboot.
==== End of Fixlog ====
Re: Množství reklam v IE a Chrome
Jak se chova PC???
Re: Množství reklam v IE a Chrome
Kromě toho, že se notebook znatelně zrychlil, jsem po několika dnech sebral odvahu a znovu spustil IE a Chrome a skutečně tam reklamy už nejsou! Prohlížeče fungují svižně, nepadají, zobrazuje se v nich to co má.
Takže zdá se, že je vyřešeno! Děkuji moc za Vaši skvělou pomoc!!!
Takže zdá se, že je vyřešeno! Děkuji moc za Vaši skvělou pomoc!!!
Re: Množství reklam v IE a Chrome
Tak jeste uklidime
T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe
OTC http://oldtimer.geekstogo.com/OTC.exe
TFC http://oldtimer.geekstogo.com/TFC.exe
Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 
- Stahnete a spustte
- Pro potvrzeni volby mackejte A, Enter
- Po pouziti utilitu smazte
- Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)
- Stahnete a spustte
- Kliknete na CleanUp a potvrdte YES
- Program uklidi a restartuje PC
- Stahnete a spustte
- Kliknete na Start a potvrdte OK
- Program uklidi a restartuje pc
- Po pouziti utilitu smazte
Panel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy



Přispějete na provoz fóra?