Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Mám pořád adsgosave a další pomoc

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Odpovědět
Zpráva
Autor
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Mám pořád adsgosave a další pomoc

#1 Příspěvek od wizzymantv »

pomocte mi pořád na youtube mi na videu vyskakují reklamy od adsgosave atd
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#2 Příspěvek od Rudy »

Zdravím!
Dejte log FRST: http://forum.viry.cz/viewtopic.php?f=13&t=133100 .
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#3 Příspěvek od wizzymantv »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by User (administrator) on WIZZY-PC on 19-09-2014 21:31:36
Running from C:\Users\User\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Gaming Keyboard\OSD.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\SyncServer.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-03-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VICTORY Gaming Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [MP3 To M4R Converter Software.exe] => [X]
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-04-07] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{AD5B331D-8735-43FC-A8ED-F847E7761D95}: [NameServer] 213.46.172.36,213.46.172.37

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://google.co.uk/"
CHR DefaultSearchKeyword: Default -> 62667509A4E0202E1025CCD866781C8C9B0F8170F25BD13FDD1EA012FCEE67AD
CHR DefaultSearchProvider: Default -> 3E5262D94AD5DF8462CF28ED0ECBF3C1E86624E39DCE268A4DE400070340158D
CHR DefaultSearchURL: Default -> EFDB1533AE7CA8AC24F8B9D00EDFDCA711136EC1743B6BB20A4C6BF070A4C6F3
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-17]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-17]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-17]
CHR Extension: (Vyhledávání Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-17]
CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-14]
CHR Extension: (GoSSavE) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\koccdhmilmkepgpklkblacnpamildcmh [2014-09-12]
CHR Extension: (Peněženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-17]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-17]
CHR Extension: (GoSSavE) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\koccdhmilmkepgpklkblacnpamildcmh\2.0 [2014-09-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [720952 2010-03-05] (Conexant Systems Inc.)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42224 2014-05-13] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 21:31 - 2014-09-19 21:31 - 00010617 _____ () C:\Users\User\Desktop\FRST.txt
2014-09-19 21:26 - 2014-09-19 21:31 - 00000000 ____D () C:\FRST
2014-09-19 21:25 - 2014-09-19 21:25 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-09-19 21:24 - 2014-09-19 21:24 - 02105856 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-09-19 19:04 - 2014-09-19 19:04 - 00001242 _____ () C:\Users\Public\Desktop\PhoneClean.lnk
2014-09-19 19:03 - 2014-09-19 19:03 - 06986800 _____ (iMobie Inc. ) C:\Users\User\Desktop\phoneclean-setup.exe
2014-09-18 16:11 - 2014-09-18 16:11 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-18 16:11 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\Program Files\iTunes
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-09-18 16:10 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iPod
2014-09-17 18:55 - 2014-09-17 18:55 - 00001236 _____ () C:\Windows\PFRO.log
2014-09-17 18:50 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-17 18:49 - 2014-09-17 18:53 - 00000000 ____D () C:\AdwCleaner
2014-09-17 18:49 - 2014-09-17 18:49 - 01373475 _____ () C:\Users\User\Desktop\adwcleaner_3.310.exe
2014-09-16 21:21 - 2014-09-16 21:21 - 00001263 _____ () C:\Users\Public\Desktop\MP3 To M4R Converter Software.lnk
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To M4R Converter Software
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\Program Files (x86)\MP3 To M4R Converter Software
2014-09-16 21:21 - 2005-06-15 03:00 - 00102400 _____ (TechSmith Corporation) C:\Windows\SysWOW64\tsccvid.dll
2014-09-16 20:38 - 2014-09-16 20:38 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-09-15 19:36 - 2014-09-19 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2014-09-15 19:36 - 2014-09-19 19:04 - 00000000 ____D () C:\Program Files (x86)\iMobie
2014-09-15 19:36 - 2014-09-15 19:51 - 00001214 _____ () C:\Users\Public\Desktop\AppTrans.lnk
2014-09-14 21:12 - 2014-09-19 17:56 - 00001306 _____ () C:\Windows\setupact.log
2014-09-14 21:12 - 2014-09-14 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 19:19 - 2014-09-14 19:24 - 1413184522 _____ () C:\Users\User\Desktop\iPad3,4_7.1.1_11D201_Restore.ipsw
2014-09-14 18:17 - 2014-09-14 18:17 - 00001089 _____ () C:\Users\User\Desktop\Cheat Engine.lnk
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Users\User\Documents\My Cheat Tables
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-09-13 16:09 - 2014-09-13 16:09 - 00000939 _____ () C:\Users\User\Desktop\Open Broadcaster Software.lnk
2014-09-13 16:09 - 2014-09-13 16:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-09-13 15:48 - 2014-09-16 21:35 - 00000000 ____D () C:\Users\User\Desktop\AllMyFiles
2014-09-13 13:02 - 2014-09-13 13:02 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-09-13 13:01 - 2014-09-13 13:02 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-09-13 12:56 - 2014-09-13 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-13 12:55 - 2014-09-13 12:56 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-13 11:30 - 2014-09-13 11:30 - 00000218 _____ () C:\Users\User\.recently-used.xbel
2014-09-13 11:27 - 2014-09-13 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\TF2CC
2014-09-12 20:49 - 2014-09-19 20:49 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-12 14:08 - 2014-09-12 14:25 - 00000000 ____D () C:\ProgramData\50ec3dc700d83375
2014-09-12 14:08 - 2014-09-12 14:21 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-09-12 14:08 - 2014-09-12 14:17 - 00000000 ____D () C:\ProgramData\GoSAve
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\User\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator
2014-09-12 13:47 - 2014-09-13 11:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\.purple
2014-09-12 13:45 - 2014-09-12 13:45 - 00000995 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
2014-09-12 13:45 - 2014-09-12 13:45 - 00000000 ____D () C:\Program Files (x86)\Pidgin
2014-09-10 20:32 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 20:32 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 20:32 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 20:32 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 20:32 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 20:32 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-10 20:32 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 20:32 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 20:32 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 20:32 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 20:32 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 20:32 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 20:32 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 20:32 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 20:32 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 20:32 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 20:32 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-10 20:32 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 20:32 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 20:32 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-10 20:32 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 20:32 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-10 20:32 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-10 20:32 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-10 20:32 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-10 20:32 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-10 20:32 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 20:32 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-10 20:32 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-10 20:32 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-10 20:32 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 20:32 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 20:32 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 20:32 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 20:32 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 20:32 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-10 20:32 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-10 20:32 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-10 20:32 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-10 20:32 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 20:32 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-10 20:32 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 20:32 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-10 20:32 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 20:32 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-10 20:32 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 20:32 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-10 20:32 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 20:32 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 20:32 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-10 20:22 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 20:22 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 19:32 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 19:32 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 19:32 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 19:32 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 19:31 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-10 19:31 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 19:31 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 19:31 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 19:31 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 19:31 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 19:31 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-09 19:44 - 2014-09-15 20:41 - 00000000 ____D () C:\Users\User\AppData\Local\pangu
2014-09-09 19:43 - 2014-09-09 19:43 - 35796928 _____ () C:\Users\User\Desktop\Pangu_v1.2.1.exe
2014-09-06 14:52 - 2014-09-16 21:38 - 00000000 ____D () C:\Users\User\Documents\Škola
2014-09-04 14:45 - 2014-09-16 21:29 - 00000000 ____D () C:\Users\User\Desktop\iPhone
2014-09-01 19:39 - 2014-09-01 19:39 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-01 19:39 - 2014-09-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-01 19:38 - 2014-09-01 19:39 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-30 21:49 - 2014-08-30 21:49 - 00000000 ____D () C:\Users\User\Documents\Eidos
2014-08-30 21:48 - 2014-08-30 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-08-30 21:47 - 2014-08-30 21:47 - 00003068 _____ () C:\Windows\System32\Tasks\Tomb Raider - Anniversary
2014-08-30 21:26 - 2014-08-30 21:50 - 00000000 ____D () C:\Program Files (x86)\Tomb Raider - Anniversary
2014-08-30 21:23 - 2014-08-30 21:23 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aspyr Media, Inc
2014-08-27 22:28 - 2014-08-27 22:28 - 00000000 ____D () C:\Program Files (x86)\Aspyr Media, Inc
2014-08-27 19:31 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 19:31 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 19:31 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 19:25 - 2014-08-27 19:25 - 00004022 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-08-25 20:53 - 2014-09-16 21:25 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMP WinOFF
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\Program Files (x86)\AMP WinOFF
2014-08-21 14:09 - 2014-08-26 17:01 - 00000000 ____D () C:\Program Files (x86)\The-Lost-Island
2014-08-21 13:58 - 2014-08-21 14:00 - 1490421380 _____ () C:\Users\User\Downloads\The-Lost-Island.zip
2014-08-20 19:54 - 2014-09-03 20:36 - 00000000 ____D () C:\Users\User\Documents\RAR
2014-08-20 16:06 - 2014-08-20 16:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\Teiron
2014-08-20 15:06 - 2014-09-02 20:30 - 00000000 ____D () C:\Users\User\Documents\Tongbu
2014-08-20 14:59 - 2014-08-20 14:59 - 21692472 _____ () C:\Users\User\Downloads\Tongbu_2.191_1.exe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-19 21:31 - 2014-09-19 21:31 - 00010617 _____ () C:\Users\User\Desktop\FRST.txt
2014-09-19 21:31 - 2014-09-19 21:26 - 00000000 ____D () C:\FRST
2014-09-19 21:29 - 2013-10-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-19 21:25 - 2014-09-19 21:25 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-09-19 21:24 - 2014-09-19 21:24 - 02105856 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-09-19 20:49 - 2014-09-12 20:49 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-19 20:09 - 2013-03-28 20:11 - 01218431 _____ () C:\Windows\WindowsUpdate.log
2014-09-19 19:04 - 2014-09-19 19:04 - 00001242 _____ () C:\Users\Public\Desktop\PhoneClean.lnk
2014-09-19 19:04 - 2014-09-15 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2014-09-19 19:04 - 2014-09-15 19:36 - 00000000 ____D () C:\Program Files (x86)\iMobie
2014-09-19 19:03 - 2014-09-19 19:03 - 06986800 _____ (iMobie Inc. ) C:\Users\User\Desktop\phoneclean-setup.exe
2014-09-19 17:56 - 2014-09-14 21:12 - 00001306 _____ () C:\Windows\setupact.log
2014-09-18 16:24 - 2009-07-14 06:45 - 00026064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:24 - 2009-07-14 06:45 - 00026064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-18 16:16 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-18 16:11 - 2014-09-18 16:11 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-18 16:11 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iTunes
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-09-18 16:10 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iPod
2014-09-17 19:02 - 2014-07-31 15:55 - 00003830 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1406814931
2014-09-17 19:02 - 2014-07-31 15:55 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-09-17 18:55 - 2014-09-17 18:55 - 00001236 _____ () C:\Windows\PFRO.log
2014-09-17 18:53 - 2014-09-17 18:49 - 00000000 ____D () C:\AdwCleaner
2014-09-17 18:49 - 2014-09-17 18:49 - 01373475 _____ () C:\Users\User\Desktop\adwcleaner_3.310.exe
2014-09-17 15:31 - 2013-04-20 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-09-16 21:38 - 2014-09-06 14:52 - 00000000 ____D () C:\Users\User\Documents\Škola
2014-09-16 21:35 - 2014-09-13 15:48 - 00000000 ____D () C:\Users\User\Desktop\AllMyFiles
2014-09-16 21:29 - 2014-09-04 14:45 - 00000000 ____D () C:\Users\User\Desktop\iPhone
2014-09-16 21:25 - 2014-08-25 20:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-09-16 21:21 - 2014-09-16 21:21 - 00001263 _____ () C:\Users\Public\Desktop\MP3 To M4R Converter Software.lnk
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To M4R Converter Software
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\Program Files (x86)\MP3 To M4R Converter Software
2014-09-16 20:38 - 2014-09-16 20:38 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-09-15 20:41 - 2014-09-09 19:44 - 00000000 ____D () C:\Users\User\AppData\Local\pangu
2014-09-15 19:51 - 2014-09-15 19:36 - 00001214 _____ () C:\Users\Public\Desktop\AppTrans.lnk
2014-09-15 19:37 - 2013-08-19 21:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\iMobie
2014-09-14 21:12 - 2014-09-14 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 19:24 - 2014-09-14 19:19 - 1413184522 _____ () C:\Users\User\Desktop\iPad3,4_7.1.1_11D201_Restore.ipsw
2014-09-14 18:17 - 2014-09-14 18:17 - 00001089 _____ () C:\Users\User\Desktop\Cheat Engine.lnk
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Users\User\Documents\My Cheat Tables
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-09-13 16:29 - 2014-04-26 08:52 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-09-13 16:29 - 2014-02-23 16:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\OBS
2014-09-13 16:09 - 2014-09-13 16:09 - 00000939 _____ () C:\Users\User\Desktop\Open Broadcaster Software.lnk
2014-09-13 16:09 - 2014-09-13 16:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-09-13 16:09 - 2014-02-23 16:32 - 00000000 ____D () C:\Program Files\OBS
2014-09-13 16:09 - 2014-02-23 16:32 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-09-13 13:02 - 2014-09-13 13:02 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-09-13 13:02 - 2014-09-13 13:01 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-09-13 12:56 - 2014-09-13 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-13 12:56 - 2014-09-13 12:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-13 11:30 - 2014-09-13 11:30 - 00000218 _____ () C:\Users\User\.recently-used.xbel
2014-09-13 11:30 - 2014-09-12 13:47 - 00000000 ____D () C:\Users\User\AppData\Roaming\.purple
2014-09-13 11:27 - 2014-09-13 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\TF2CC
2014-09-12 21:49 - 2014-07-08 22:49 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-12 21:49 - 2013-04-03 21:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-12 21:49 - 2013-04-03 21:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-12 21:49 - 2013-04-03 21:05 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-12 15:13 - 2013-12-20 16:27 - 00000000 ____D () C:\Users\User\AppData\Local\gtk-2.0
2014-09-12 14:25 - 2014-09-12 14:08 - 00000000 ____D () C:\ProgramData\50ec3dc700d83375
2014-09-12 14:21 - 2014-09-12 14:08 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-09-12 14:17 - 2014-09-12 14:08 - 00000000 ____D () C:\ProgramData\GoSAve
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\User\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator
2014-09-12 14:08 - 2013-11-01 15:19 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-12 14:08 - 2013-03-28 21:21 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-09-12 14:08 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-12 13:45 - 2014-09-12 13:45 - 00000995 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
2014-09-12 13:45 - 2014-09-12 13:45 - 00000000 ____D () C:\Program Files (x86)\Pidgin
2014-09-12 13:28 - 2014-06-08 20:58 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-12 13:27 - 2013-04-20 19:24 - 00000000 ____D () C:\ProgramData\Skype
2014-09-11 21:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-10 20:37 - 2013-05-05 19:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-10 20:30 - 2013-12-24 18:31 - 01559292 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 20:30 - 2009-07-14 17:18 - 00668890 _____ () C:\Windows\system32\perfh005.dat
2014-09-10 20:30 - 2009-07-14 17:18 - 00141518 _____ () C:\Windows\system32\perfc005.dat
2014-09-10 20:30 - 2009-07-14 07:13 - 01559292 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 20:28 - 2013-10-12 14:46 - 00002155 _____ () C:\Windows\epplauncher.mif
2014-09-10 20:28 - 2013-10-12 14:45 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-10 20:28 - 2013-10-12 14:45 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-10 20:28 - 2013-10-12 14:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-10 20:27 - 2014-05-19 16:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 20:23 - 2014-05-19 16:25 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 20:21 - 2014-05-19 17:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-09 19:43 - 2014-09-09 19:43 - 35796928 _____ () C:\Users\User\Desktop\Pangu_v1.2.1.exe
2014-09-05 04:10 - 2014-09-10 19:31 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-10 19:31 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-03 20:36 - 2014-08-20 19:54 - 00000000 ____D () C:\Users\User\Documents\RAR
2014-09-03 16:16 - 2013-04-16 17:57 - 00000000 ____D () C:\Program Files (x86)\QuadCoreM2
2014-09-02 20:46 - 2013-06-08 17:35 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 20:30 - 2014-08-20 15:06 - 00000000 ____D () C:\Users\User\Documents\Tongbu
2014-09-01 19:43 - 2014-01-27 21:25 - 00000000 ____D () C:\Windows\Minidump
2014-09-01 19:43 - 2013-03-28 20:08 - 00000000 ____D () C:\Windows\Panther
2014-09-01 19:39 - 2014-09-01 19:39 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-01 19:39 - 2014-09-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-01 19:39 - 2014-09-01 19:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-31 16:56 - 2014-07-06 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player
2014-08-30 21:50 - 2014-08-30 21:26 - 00000000 ____D () C:\Program Files (x86)\Tomb Raider - Anniversary
2014-08-30 21:49 - 2014-08-30 21:49 - 00000000 ____D () C:\Users\User\Documents\Eidos
2014-08-30 21:48 - 2014-08-30 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-08-30 21:47 - 2014-08-30 21:47 - 00003068 _____ () C:\Windows\System32\Tasks\Tomb Raider - Anniversary
2014-08-30 21:47 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-30 21:23 - 2014-08-30 21:23 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aspyr Media, Inc
2014-08-27 22:28 - 2014-08-27 22:28 - 00000000 ____D () C:\Program Files (x86)\Aspyr Media, Inc
2014-08-27 22:26 - 2014-02-06 16:45 - 00000000 ___RD () C:\Wizzy
2014-08-27 22:16 - 2009-07-14 06:45 - 00420592 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-27 19:31 - 2013-12-20 16:25 - 00000000 ____D () C:\Users\User\.gimp-2.8
2014-08-27 19:25 - 2014-08-27 19:25 - 00004022 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-08-26 17:01 - 2014-08-21 14:09 - 00000000 ____D () C:\Program Files (x86)\The-Lost-Island
2014-08-26 16:52 - 2014-02-06 18:32 - 00000000 ____D () C:\Program Files (x86)\Last-World
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-08-25 12:19 - 2014-08-16 18:04 - 00000000 ____D () C:\Program Files (x86)\Attomey ---
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMP WinOFF
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\Program Files (x86)\AMP WinOFF
2014-08-23 19:21 - 2013-11-06 20:38 - 00000000 ____D () C:\Users\User\Documents\ihelper
2014-08-23 04:07 - 2014-08-27 19:31 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-27 19:31 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-27 19:31 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 17:24 - 2009-07-14 07:08 - 00032562 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-21 21:35 - 2014-06-26 15:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\DivX
2014-08-21 14:00 - 2014-08-21 13:58 - 1490421380 _____ () C:\Users\User\Downloads\The-Lost-Island.zip
2014-08-20 16:06 - 2014-08-20 16:06 - 00000000 ____D () C:\Users\User\AppData\Roaming\Teiron
2014-08-20 16:00 - 2014-03-05 21:07 - 00000000 ____D () C:\Users\User\AppData\Roaming\ihelper2014
2014-08-20 14:59 - 2014-08-20 14:59 - 21692472 _____ () C:\Users\User\Downloads\Tongbu_2.191_1.exe

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 19:39

==================== End Of Log ============================
Přílohy
Addition.rar
(8.6 KiB) Staženo 51 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#4 Příspěvek od Rudy »

Spusťte tuto utilitu:
Stáhněte AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Uložte na plochu
Ukončete všechny programy
Klikněte nejprve na >Scan< a pak na >Clean<.
Proběhne skenováni a pak se objeví log, který sem vložte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#5 Příspěvek od wizzymantv »

# AdwCleaner v3.310 - Report created 20/09/2014 at 14:37:03
# Updated 12/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : User - WIZZY-PC
# Running from : C:\Users\User\Desktop\adwcleaner_3.310.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17280


-\\ Google Chrome v37.0.2062.120

[ File : C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://websearch.fixsearch.info/?l=1&q={searchTerms}&pid=2171&r=2014/09/12&hid=7074873041048140492&lg=EN&cc=ME&unqvl=61
Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************

AdwCleaner[R5].txt - [3419 octets] - [17/09/2014 18:49:51]
AdwCleaner[R6].txt - [3692 octets] - [17/09/2014 18:51:58]
AdwCleaner[R7].txt - [1195 octets] - [20/09/2014 14:33:50]
AdwCleaner[R8].txt - [1256 octets] - [20/09/2014 14:35:25]
AdwCleaner[S2].txt - [3334 octets] - [17/09/2014 18:53:16]
AdwCleaner[S3].txt - [1181 octets] - [20/09/2014 14:37:03]

########## EOF - C:\AdwCleaner\AdwCleaner[S3].txt - [1241 octets] ##########
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#6 Příspěvek od Rudy »

Dejte nový log FRST.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#7 Příspěvek od wizzymantv »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 12-09-2014
Ran by User (administrator) on WIZZY-PC on 20-09-2014 16:23:42
Running from C:\Users\User\Desktop
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Conexant Systems, Inc.) C:\Program Files\CONEXANT\cAudioFilterAgent\cAudioFilterAgent64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files (x86)\Gaming Keyboard\Monitor.EXE
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
() C:\Program Files (x86)\Gaming Keyboard\OSD.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [520760 2010-03-10] (Conexant Systems, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2052392 2010-03-10] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1331288 2014-08-22] (Microsoft Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [98304 2010-03-15] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [VICTORY Gaming Keyboard] => C:\Program Files (x86)\Gaming Keyboard\Monitor.exe [270336 2013-04-09] ()
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [MP3 To M4R Converter Software.exe] => [X]
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-09-01] (Apple Inc.)
HKU\.DEFAULT\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-04-07] (Microsoft Corporation)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Tcpip\Parameters: [DhcpNameServer] 213.46.172.36 213.46.172.37
Tcpip\..\Interfaces\{AD5B331D-8735-43FC-A8ED-F847E7761D95}: [NameServer] 213.46.172.36,213.46.172.37

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @divx.com/DivX VOD Helper,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF Plugin-x32: @divx.com/DivX Web Player Plug-In,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @talk.google.com/GoogleTalkPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin HKCU: @talk.google.com/O1DPlugin -> C:\Users\User\AppData\Roaming\Mozilla\plugins\npo1d.dll (Google)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin HKCU: @tools.google.com/Google Update;version=9 -> C:\Users\User\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npgoogletalk.dll (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\User\AppData\Roaming\mozilla\plugins\npo1d.dll (Google)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://google.co.uk/"
CHR DefaultSearchKeyword: Default -> 62667509A4E0202E1025CCD866781C8C9B0F8170F25BD13FDD1EA012FCEE67AD
CHR DefaultSearchProvider: Default -> 3E5262D94AD5DF8462CF28ED0ECBF3C1E86624E39DCE268A4DE400070340158D
CHR DefaultSearchURL: Default -> EFDB1533AE7CA8AC24F8B9D00EDFDCA711136EC1743B6BB20A4C6BF070A4C6F3
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Dokumenty Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-17]
CHR Extension: (Disk Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-08-17]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-08-17]
CHR Extension: (Vyhledávání Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-08-17]
CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2014-09-14]
CHR Extension: (GoSSavE) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\koccdhmilmkepgpklkblacnpamildcmh [2014-09-12]
CHR Extension: (Peněženka Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-17]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-08-17]
CHR Extension: (GoSSavE) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\koccdhmilmkepgpklkblacnpamildcmh\2.0 [2014-09-12]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23784 2014-08-22] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [368624 2014-08-22] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 CnxtHdmiAudService; C:\Windows\System32\drivers\CHDMI64.sys [720952 2010-03-05] (Conexant Systems Inc.)
S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [42224 2014-05-13] (Visicom Media Inc.)
S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [269008 2014-07-17] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [125584 2014-07-17] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-20 16:19 - 2014-09-20 16:23 - 00010524 _____ () C:\Users\User\Desktop\FRST.txt
2014-09-20 16:13 - 2014-09-20 16:13 - 02105856 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-09-20 16:13 - 2014-09-20 16:13 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-09-20 14:32 - 2014-09-20 14:32 - 01373475 _____ () C:\Users\User\Desktop\adwcleaner_3.310.exe
2014-09-19 21:26 - 2014-09-20 16:23 - 00000000 ____D () C:\FRST
2014-09-19 19:04 - 2014-09-19 19:04 - 00001242 _____ () C:\Users\Public\Desktop\PhoneClean.lnk
2014-09-18 16:11 - 2014-09-18 16:11 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-18 16:11 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\Program Files\iTunes
2014-09-18 16:10 - 2014-09-18 16:11 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-09-18 16:10 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iPod
2014-09-17 18:55 - 2014-09-20 14:38 - 00001546 _____ () C:\Windows\PFRO.log
2014-09-17 18:50 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-09-17 18:49 - 2014-09-20 14:37 - 00000000 ____D () C:\AdwCleaner
2014-09-16 21:21 - 2014-09-16 21:21 - 00001263 _____ () C:\Users\Public\Desktop\MP3 To M4R Converter Software.lnk
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To M4R Converter Software
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\Program Files (x86)\MP3 To M4R Converter Software
2014-09-16 21:21 - 2005-06-15 03:00 - 00102400 _____ (TechSmith Corporation) C:\Windows\SysWOW64\tsccvid.dll
2014-09-16 20:38 - 2014-09-16 20:38 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-09-15 19:36 - 2014-09-19 19:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2014-09-15 19:36 - 2014-09-19 19:04 - 00000000 ____D () C:\Program Files (x86)\iMobie
2014-09-15 19:36 - 2014-09-15 19:51 - 00001214 _____ () C:\Users\Public\Desktop\AppTrans.lnk
2014-09-14 21:12 - 2014-09-20 14:38 - 00001418 _____ () C:\Windows\setupact.log
2014-09-14 21:12 - 2014-09-14 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 19:19 - 2014-09-14 19:24 - 1413184522 _____ () C:\Users\User\Desktop\iPad3,4_7.1.1_11D201_Restore.ipsw
2014-09-14 18:17 - 2014-09-14 18:17 - 00001089 _____ () C:\Users\User\Desktop\Cheat Engine.lnk
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Users\User\Documents\My Cheat Tables
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-09-13 16:09 - 2014-09-13 16:09 - 00000939 _____ () C:\Users\User\Desktop\Open Broadcaster Software.lnk
2014-09-13 16:09 - 2014-09-13 16:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-09-13 15:48 - 2014-09-16 21:35 - 00000000 ____D () C:\Users\User\Desktop\AllMyFiles
2014-09-13 13:02 - 2014-09-13 13:02 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-09-13 13:01 - 2014-09-13 13:02 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-09-13 12:56 - 2014-09-13 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-13 12:55 - 2014-09-13 12:56 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-13 11:30 - 2014-09-13 11:30 - 00000218 _____ () C:\Users\User\.recently-used.xbel
2014-09-13 11:27 - 2014-09-13 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\TF2CC
2014-09-12 20:49 - 2014-09-20 15:49 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-12 14:08 - 2014-09-12 14:25 - 00000000 ____D () C:\ProgramData\50ec3dc700d83375
2014-09-12 14:08 - 2014-09-12 14:21 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-09-12 14:08 - 2014-09-12 14:17 - 00000000 ____D () C:\ProgramData\GoSAve
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\User\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator
2014-09-12 13:47 - 2014-09-13 11:30 - 00000000 ____D () C:\Users\User\AppData\Roaming\.purple
2014-09-12 13:45 - 2014-09-12 13:45 - 00000995 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
2014-09-12 13:45 - 2014-09-12 13:45 - 00000000 ____D () C:\Program Files (x86)\Pidgin
2014-09-10 20:32 - 2014-08-19 20:05 - 00374968 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-09-10 20:32 - 2014-08-19 19:39 - 00327872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-09-10 20:32 - 2014-08-19 01:01 - 23591424 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-09-10 20:32 - 2014-08-19 00:29 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-09-10 20:32 - 2014-08-19 00:29 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-09-10 20:32 - 2014-08-19 00:26 - 17455104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-09-10 20:32 - 2014-08-19 00:20 - 02793984 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-09-10 20:32 - 2014-08-19 00:19 - 05833728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-09-10 20:32 - 2014-08-19 00:15 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-09-10 20:32 - 2014-08-19 00:15 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-09-10 20:32 - 2014-08-19 00:14 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-09-10 20:32 - 2014-08-19 00:14 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 04232704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-09-10 20:32 - 2014-08-19 00:08 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-09-10 20:32 - 2014-08-19 00:05 - 00596480 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-09-10 20:32 - 2014-08-19 00:03 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-09-10 20:32 - 2014-08-19 00:03 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-09-10 20:32 - 2014-08-19 00:03 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-09-10 20:32 - 2014-08-18 23:57 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-09-10 20:32 - 2014-08-18 23:56 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-09-10 20:32 - 2014-08-18 23:51 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-09-10 20:32 - 2014-08-18 23:46 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-09-10 20:32 - 2014-08-18 23:45 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-09-10 20:32 - 2014-08-18 23:45 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-09-10 20:32 - 2014-08-18 23:44 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-09-10 20:32 - 2014-08-18 23:44 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-09-10 20:32 - 2014-08-18 23:42 - 02185728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-09-10 20:32 - 2014-08-18 23:40 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-09-10 20:32 - 2014-08-18 23:39 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-09-10 20:32 - 2014-08-18 23:38 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-09-10 20:32 - 2014-08-18 23:37 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-09-10 20:32 - 2014-08-18 23:36 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-09-10 20:32 - 2014-08-18 23:35 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-09-10 20:32 - 2014-08-18 23:27 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-09-10 20:32 - 2014-08-18 23:25 - 00727040 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-09-10 20:32 - 2014-08-18 23:25 - 00707072 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-09-10 20:32 - 2014-08-18 23:23 - 02104832 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-09-10 20:32 - 2014-08-18 23:23 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-09-10 20:32 - 2014-08-18 23:22 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-10 20:32 - 2014-08-18 23:19 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-09-10 20:32 - 2014-08-18 23:17 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-09-10 20:32 - 2014-08-18 23:17 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-09-10 20:32 - 2014-08-18 23:16 - 13588480 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-09-10 20:32 - 2014-08-18 23:15 - 11769856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-09-10 20:32 - 2014-08-18 23:15 - 02310656 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-09-10 20:32 - 2014-08-18 23:09 - 00603136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-09-10 20:32 - 2014-08-18 23:08 - 02014208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-09-10 20:32 - 2014-08-18 23:07 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-09-10 20:32 - 2014-08-18 22:55 - 01447424 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-09-10 20:32 - 2014-08-18 22:46 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-09-10 20:32 - 2014-08-18 22:38 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-09-10 20:32 - 2014-08-18 22:38 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-09-10 20:32 - 2014-08-18 22:36 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-09-10 20:22 - 2014-06-27 04:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-09-10 20:22 - 2014-06-27 03:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-09-10 19:32 - 2014-08-01 13:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-09-10 19:32 - 2014-08-01 13:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-09-10 19:32 - 2014-06-24 05:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-09-10 19:32 - 2014-06-24 04:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-09-10 19:31 - 2014-09-05 04:10 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-10 19:31 - 2014-09-05 04:05 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-10 19:31 - 2014-07-07 04:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-09-10 19:31 - 2014-07-07 04:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-09-10 19:31 - 2014-07-07 03:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-09-10 19:31 - 2014-07-07 03:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-09-10 19:31 - 2014-07-07 03:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-09-09 19:44 - 2014-09-15 20:41 - 00000000 ____D () C:\Users\User\AppData\Local\pangu
2014-09-09 19:43 - 2014-09-09 19:43 - 35796928 _____ () C:\Users\User\Desktop\Pangu_v1.2.1.exe
2014-09-06 14:52 - 2014-09-16 21:38 - 00000000 ____D () C:\Users\User\Documents\Škola
2014-09-04 14:45 - 2014-09-16 21:29 - 00000000 ____D () C:\Users\User\Desktop\iPhone
2014-09-01 19:39 - 2014-09-01 19:39 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-01 19:39 - 2014-09-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-01 19:38 - 2014-09-01 19:39 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-30 21:49 - 2014-08-30 21:49 - 00000000 ____D () C:\Users\User\Documents\Eidos
2014-08-30 21:48 - 2014-08-30 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-08-30 21:47 - 2014-08-30 21:47 - 00003068 _____ () C:\Windows\System32\Tasks\Tomb Raider - Anniversary
2014-08-30 21:26 - 2014-08-30 21:50 - 00000000 ____D () C:\Program Files (x86)\Tomb Raider - Anniversary
2014-08-30 21:23 - 2014-08-30 21:23 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aspyr Media, Inc
2014-08-27 22:28 - 2014-08-27 22:28 - 00000000 ____D () C:\Program Files (x86)\Aspyr Media, Inc
2014-08-27 19:31 - 2014-08-23 04:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-27 19:31 - 2014-08-23 03:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-27 19:31 - 2014-08-23 02:59 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-27 19:25 - 2014-08-27 19:25 - 00004022 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-08-25 20:53 - 2014-09-16 21:25 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMP WinOFF
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\Program Files (x86)\AMP WinOFF
2014-08-21 14:09 - 2014-09-19 22:02 - 00000000 ____D () C:\Program Files (x86)\The-Lost-Island
2014-08-21 13:58 - 2014-08-21 14:00 - 1490421380 _____ () C:\Users\User\Downloads\The-Lost-Island.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-20 16:23 - 2014-09-20 16:19 - 00010524 _____ () C:\Users\User\Desktop\FRST.txt
2014-09-20 16:23 - 2014-09-19 21:26 - 00000000 ____D () C:\FRST
2014-09-20 16:14 - 2013-10-23 15:34 - 00000000 ____D () C:\Program Files (x86)\Steam
2014-09-20 16:13 - 2014-09-20 16:13 - 02105856 _____ (Farbar) C:\Users\User\Desktop\FRST64.exe
2014-09-20 16:13 - 2014-09-20 16:13 - 00112640 _____ (forum.viry.cz) C:\Users\User\Desktop\FRSTLauncher.exe
2014-09-20 15:49 - 2014-09-12 20:49 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-09-20 14:54 - 2013-03-28 20:11 - 01245897 _____ () C:\Windows\WindowsUpdate.log
2014-09-20 14:45 - 2009-07-14 06:45 - 00026064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-09-20 14:45 - 2009-07-14 06:45 - 00026064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-09-20 14:38 - 2014-09-17 18:55 - 00001546 _____ () C:\Windows\PFRO.log
2014-09-20 14:38 - 2014-09-14 21:12 - 00001418 _____ () C:\Windows\setupact.log
2014-09-20 14:38 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-09-20 14:37 - 2014-09-17 18:49 - 00000000 ____D () C:\AdwCleaner
2014-09-20 14:32 - 2014-09-20 14:32 - 01373475 _____ () C:\Users\User\Desktop\adwcleaner_3.310.exe
2014-09-19 22:02 - 2014-08-21 14:09 - 00000000 ____D () C:\Program Files (x86)\The-Lost-Island
2014-09-19 19:04 - 2014-09-19 19:04 - 00001242 _____ () C:\Users\Public\Desktop\PhoneClean.lnk
2014-09-19 19:04 - 2014-09-15 19:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2014-09-19 19:04 - 2014-09-15 19:36 - 00000000 ____D () C:\Program Files (x86)\iMobie
2014-09-18 16:11 - 2014-09-18 16:11 - 00001783 _____ () C:\Users\Public\Desktop\iTunes.lnk
2014-09-18 16:11 - 2014-09-18 16:11 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\ProgramData\34BE82C4-E596-4e99-A191-52C6199EBF69
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iTunes
2014-09-18 16:11 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files (x86)\iTunes
2014-09-18 16:10 - 2014-09-18 16:10 - 00000000 ____D () C:\Program Files\iPod
2014-09-17 19:02 - 2014-07-31 15:55 - 00003830 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1406814931
2014-09-17 19:02 - 2014-07-31 15:55 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-09-17 15:31 - 2013-04-20 19:24 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2014-09-16 21:38 - 2014-09-06 14:52 - 00000000 ____D () C:\Users\User\Documents\Škola
2014-09-16 21:35 - 2014-09-13 15:48 - 00000000 ____D () C:\Users\User\Desktop\AllMyFiles
2014-09-16 21:29 - 2014-09-04 14:45 - 00000000 ____D () C:\Users\User\Desktop\iPhone
2014-09-16 21:25 - 2014-08-25 20:53 - 00000000 ____D () C:\Users\User\AppData\Roaming\Mp3tag
2014-09-16 21:21 - 2014-09-16 21:21 - 00001263 _____ () C:\Users\Public\Desktop\MP3 To M4R Converter Software.lnk
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MP3 To M4R Converter Software
2014-09-16 21:21 - 2014-09-16 21:21 - 00000000 ____D () C:\Program Files (x86)\MP3 To M4R Converter Software
2014-09-16 20:38 - 2014-09-16 20:38 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-09-15 20:41 - 2014-09-09 19:44 - 00000000 ____D () C:\Users\User\AppData\Local\pangu
2014-09-15 19:51 - 2014-09-15 19:36 - 00001214 _____ () C:\Users\Public\Desktop\AppTrans.lnk
2014-09-15 19:37 - 2013-08-19 21:16 - 00000000 ____D () C:\Users\User\AppData\Roaming\iMobie
2014-09-14 21:12 - 2014-09-14 21:12 - 00000000 _____ () C:\Windows\setuperr.log
2014-09-14 19:24 - 2014-09-14 19:19 - 1413184522 _____ () C:\Users\User\Desktop\iPad3,4_7.1.1_11D201_Restore.ipsw
2014-09-14 18:17 - 2014-09-14 18:17 - 00001089 _____ () C:\Users\User\Desktop\Cheat Engine.lnk
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Users\User\Documents\My Cheat Tables
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2014-09-14 18:17 - 2014-09-14 18:17 - 00000000 ____D () C:\Program Files (x86)\Cheat Engine 6.4
2014-09-13 16:29 - 2014-04-26 08:52 - 00000000 ____D () C:\Users\User\AppData\Roaming\vlc
2014-09-13 16:29 - 2014-02-23 16:33 - 00000000 ____D () C:\Users\User\AppData\Roaming\OBS
2014-09-13 16:09 - 2014-09-13 16:09 - 00000939 _____ () C:\Users\User\Desktop\Open Broadcaster Software.lnk
2014-09-13 16:09 - 2014-09-13 16:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2014-09-13 16:09 - 2014-02-23 16:32 - 00000000 ____D () C:\Program Files\OBS
2014-09-13 16:09 - 2014-02-23 16:32 - 00000000 ____D () C:\Program Files (x86)\OBS
2014-09-13 13:02 - 2014-09-13 13:02 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-09-13 13:02 - 2014-09-13 13:01 - 00000000 ____D () C:\Program Files (x86)\Safari
2014-09-13 12:56 - 2014-09-13 12:56 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2014-09-13 12:56 - 2014-09-13 12:55 - 00000000 ____D () C:\Program Files (x86)\QuickTime
2014-09-13 11:30 - 2014-09-13 11:30 - 00000218 _____ () C:\Users\User\.recently-used.xbel
2014-09-13 11:30 - 2014-09-12 13:47 - 00000000 ____D () C:\Users\User\AppData\Roaming\.purple
2014-09-13 11:27 - 2014-09-13 11:27 - 00000000 ____D () C:\Users\User\AppData\Local\TF2CC
2014-09-12 21:49 - 2014-07-08 22:49 - 10036224 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2014-09-12 21:49 - 2013-04-03 21:05 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-09-12 21:49 - 2013-04-03 21:05 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-12 21:49 - 2013-04-03 21:05 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-09-12 15:13 - 2013-12-20 16:27 - 00000000 ____D () C:\Users\User\AppData\Local\gtk-2.0
2014-09-12 14:25 - 2014-09-12 14:08 - 00000000 ____D () C:\ProgramData\50ec3dc700d83375
2014-09-12 14:21 - 2014-09-12 14:08 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-09-12 14:17 - 2014-09-12 14:08 - 00000000 ____D () C:\ProgramData\GoSAve
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\User\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\HomeGroupUser$
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Guest
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Torch
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Chromatic Browser
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Google
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator\AppData\Local\Comodo
2014-09-12 14:08 - 2014-09-12 14:08 - 00000000 ____D () C:\Users\Administrator
2014-09-12 14:08 - 2013-11-01 15:19 - 00000000 ____D () C:\Program Files (x86)\Google
2014-09-12 14:08 - 2013-03-28 21:21 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-09-12 14:08 - 2009-07-14 05:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2014-09-12 13:45 - 2014-09-12 13:45 - 00000995 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pidgin.lnk
2014-09-12 13:45 - 2014-09-12 13:45 - 00000000 ____D () C:\Program Files (x86)\Pidgin
2014-09-12 13:28 - 2014-06-08 20:58 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-12 13:27 - 2013-04-20 19:24 - 00000000 ____D () C:\ProgramData\Skype
2014-09-11 21:15 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-09-10 20:37 - 2013-05-05 19:34 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-09-10 20:30 - 2013-12-24 18:31 - 01559292 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-09-10 20:30 - 2009-07-14 17:18 - 00668890 _____ () C:\Windows\system32\perfh005.dat
2014-09-10 20:30 - 2009-07-14 17:18 - 00141518 _____ () C:\Windows\system32\perfc005.dat
2014-09-10 20:30 - 2009-07-14 07:13 - 01559292 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-09-10 20:28 - 2013-10-12 14:46 - 00002155 _____ () C:\Windows\epplauncher.mif
2014-09-10 20:28 - 2013-10-12 14:45 - 00002117 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2014-09-10 20:28 - 2013-10-12 14:45 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2014-09-10 20:28 - 2013-10-12 14:45 - 00000000 ____D () C:\Program Files (x86)\Microsoft Security Client
2014-09-10 20:27 - 2014-05-19 16:25 - 00000000 ____D () C:\Windows\system32\MRT
2014-09-10 20:23 - 2014-05-19 16:25 - 101694776 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-09-10 20:21 - 2014-05-19 17:26 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-09-09 19:43 - 2014-09-09 19:43 - 35796928 _____ () C:\Users\User\Desktop\Pangu_v1.2.1.exe
2014-09-05 04:10 - 2014-09-10 19:31 - 00578048 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-09-05 04:05 - 2014-09-10 19:31 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-09-03 20:36 - 2014-08-20 19:54 - 00000000 ____D () C:\Users\User\Documents\RAR
2014-09-03 16:16 - 2013-04-16 17:57 - 00000000 ____D () C:\Program Files (x86)\QuadCoreM2
2014-09-02 20:46 - 2013-06-08 17:35 - 00000000 ____D () C:\ProgramData\Apple Computer
2014-09-02 20:30 - 2014-08-20 15:06 - 00000000 ____D () C:\Users\User\Documents\Tongbu
2014-09-01 19:43 - 2014-01-27 21:25 - 00000000 ____D () C:\Windows\Minidump
2014-09-01 19:43 - 2013-03-28 20:08 - 00000000 ____D () C:\Windows\Panther
2014-09-01 19:39 - 2014-09-01 19:39 - 00002770 _____ () C:\Windows\System32\Tasks\CCleanerSkipUAC
2014-09-01 19:39 - 2014-09-01 19:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-01 19:39 - 2014-09-01 19:38 - 00000000 ____D () C:\Program Files\CCleaner
2014-08-31 16:56 - 2014-07-06 17:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FLV Player
2014-08-30 21:50 - 2014-08-30 21:26 - 00000000 ____D () C:\Program Files (x86)\Tomb Raider - Anniversary
2014-08-30 21:49 - 2014-08-30 21:49 - 00000000 ____D () C:\Users\User\Documents\Eidos
2014-08-30 21:48 - 2014-08-30 21:48 - 00000000 ____D () C:\Windows\System32\Tasks\Games
2014-08-30 21:47 - 2014-08-30 21:47 - 00003068 _____ () C:\Windows\System32\Tasks\Tomb Raider - Anniversary
2014-08-30 21:47 - 2009-07-14 07:32 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2014-08-30 21:23 - 2014-08-30 21:23 - 00000000 ____D () C:\Windows\Downloaded Installations
2014-08-27 22:39 - 2014-08-27 22:39 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aspyr Media, Inc
2014-08-27 22:28 - 2014-08-27 22:28 - 00000000 ____D () C:\Program Files (x86)\Aspyr Media, Inc
2014-08-27 22:26 - 2014-02-06 16:45 - 00000000 ___RD () C:\Wizzy
2014-08-27 22:16 - 2009-07-14 06:45 - 00420592 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-08-27 19:31 - 2013-12-20 16:25 - 00000000 ____D () C:\Users\User\.gimp-2.8
2014-08-27 19:25 - 2014-08-27 19:25 - 00004022 _____ () C:\Users\User\AppData\Local\recently-used.xbel
2014-08-26 16:52 - 2014-02-06 18:32 - 00000000 ____D () C:\Program Files (x86)\Last-World
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag
2014-08-25 20:53 - 2014-08-25 20:53 - 00000000 ____D () C:\Program Files (x86)\Mp3tag
2014-08-25 12:19 - 2014-08-16 18:04 - 00000000 ____D () C:\Program Files (x86)\Attomey ---
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMP WinOFF
2014-08-25 02:16 - 2014-08-25 02:16 - 00000000 ____D () C:\Program Files (x86)\AMP WinOFF
2014-08-23 19:21 - 2013-11-06 20:38 - 00000000 ____D () C:\Users\User\Documents\ihelper
2014-08-23 04:07 - 2014-08-27 19:31 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-08-23 03:45 - 2014-08-27 19:31 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-08-23 02:59 - 2014-08-27 19:31 - 03163648 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-08-22 17:24 - 2009-07-14 07:08 - 00032562 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-08-21 21:35 - 2014-06-26 15:34 - 00000000 ____D () C:\Users\User\AppData\Roaming\DivX
2014-08-21 14:00 - 2014-08-21 13:58 - 1490421380 _____ () C:\Users\User\Downloads\The-Lost-Island.zip

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-09-17 19:39

==================== End Of Log ============================
Přílohy
Addition.rar
(8.64 KiB) Staženo 52 x
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#8 Příspěvek od wizzymantv »

Pořád my ads
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#9 Příspěvek od Rudy »

Otevřte poznámkový blok a zkopírujte do něj:
Start
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR DefaultSearchKeyword: Default -> 62667509A4E0202E1025CCD866781C8C9B0F8170F25BD13FDD1EA012FCEE67AD
CHR DefaultSearchProvider: Default -> 3E5262D94AD5DF8462CF28ED0ECBF3C1E86624E39DCE268A4DE400070340158D
CHR DefaultSearchURL: Default -> EFDB1533AE7CA8AC24F8B9D00EDFDCA711136EC1743B6BB20A4C6BF070A4C6F3
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\ProgramData\GoSAve
C:\Users\User\AppData\Local\Temp
Task: {5B411D06-68E6-4F82-9486-8DCEE5D920BC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: {7C7B7A3C-D874-49CC-8CA0-56629908D235} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1570955093-1124358558-1990792310-1000UA => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {EE417974-8A2D-4220-B9B6-21035266253E} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-1570955093-1124358558-1990792310-1000Core => C:\Users\User\AppData\Local\Google\Update\GoogleUpdate.exe
End
Uložte na plochu jako fixlist.txt. Spusťte znovu FRST a klikněte na >Fix<. Po skončení akce se objeví log, který sem zkopírujte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#10 Příspěvek od wizzymantv »

nešel jsem copy ten log tak jsem ho dal do raru
Přílohy
Fixlog.rar
(58.98 KiB) Staženo 47 x
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#11 Příspěvek od Rudy »

Smazáno. Nastala nějaká změna?
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#12 Příspěvek od wizzymantv »

Ano mockrát děkuji. dá se zjistit jak se my to dostalo do PC?
:| :| :| :| :all_coholic:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#13 Příspěvek od Rudy »

wizzymantv píše:Ano mockrát děkuji. dá se zjistit jak se my to dostalo do PC?
:| :| :| :| :all_coholic:
Zřejmě jste si někde kliknul, kde jste neměl. Konkrétní web ale těžko zjistím. Nemáte zač! :)
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
wizzymantv
Návštěvník
Návštěvník
Příspěvky: 31
Registrován: 31 srp 2014 14:26

Re: Mám pořád adsgosave a další pomoc

#14 Příspěvek od wizzymantv »

Mohu se zeptat když vám pošlu nový log zjistíte my jestli mám keylogger v pc vím, že to mám psát jinam, ale prosím podíval byste se mi na to? :???:
Nahoru
Uživatelský avatar
Rudy
Site Admin
Site Admin
Příspěvky: 119547
Registrován: 30 říj 2003 13:42
Bydliště: Plzeň
Kontaktovat uživatele:
Kontaktovat uživatele Rudy

Re: Mám pořád adsgosave a další pomoc

#15 Příspěvek od Rudy »

Kouknu, pošlěte.
Dotazy a logy vkládejte pouze do vašich threadů. Soukromé zprávy, icq a e-maily neslouží k řešení vašich problémů.

Podpořte, prosím, naše fórum : https://platba.viry.cz/payment/.

Navštivte: Obrázek

e-mail: rudy(zavináč)forum.viry.cz

Varování: Před odvirováním PC si udělejte zálohy svých důležitých dat (pošta, kontakty, dokumenty, fotografie, videa, hudba apod.). Virus mimo svých "viditelných" aktivit může poškodit systém!


Po dořešení vašeho problému bude vlákno zamknuto. Stejně tak tehdy, pokud bude nečinné více než 14dnů. Pokud budete chtít vlákno aktivovat, napište mi na mail uvedený výše.
Nahoru
Odpovědět

Zpět na „Řešení problémů, logy“