Problém s gameharbor.org (Adverttraff.org)

Zpráva

Elsone · #1 Příspěvek od **Elsone** » 28 Zář 2014 16:12

Dobrý den. Přibližně před 4mi dny mi při zapnutí naskočí běžný windows příkazový řádek, otevře se sám prohlížeč (Firefox) a automaticky se otevře stránka adverttraff.org, která mě následně přesměruje na gameharbor.org. Zkoušel jsem několik nástrojů na odstanění, ale nijak se to nezlepšilo. JEdiné, čeho jsem byl schopen, bylo v "Po Spuštění" zakázat příkazový řádek a tudíž i spuštění prohlížeče se stránkou. Takže se raději obracím na počítačově gramotnější skupinu, nežli jsem já a doufám, že mi budete ochotni pomoci =)

Log z RSIT (Nenašel jsem spoiler, tak je to takhle roztáhlé)
Logfile of random's system information tool 1.10 (written by random/random)
Run by Filip at 2014-09-28 17:03:06
Microsoft Windows 8.1
System drive C: has 13 GB (5%) free of 286 GB
Total RAM: 6030 MB (64% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:03:24, on 28. 9. 2014
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.17278)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
C:\Program Files (x86)\Skype\Phone\Skype.exe
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
C:\Users\Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Program Files\AVAST Software\Avast\avastui.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe
C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe
C:\Program Files\trend micro\Filip.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/p/?LinkId=255141
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=255141
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [ASUSPRP] "C:\Program Files (x86)\ASUS\APRP\APRP.EXE"
O4 - HKLM\..\Run: [ASUSWebStorage] C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe /S
O4 - HKLM\..\Run: [BtTray] "C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [AvastUI.exe] "C:\Program Files\AVAST Software\Avast\AvastUI.exe" /nogui
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
O4 - HKCU\..\Run: [Battle.net] "D:\Battle.net\Battle.net Launcher.exe" --autostarted
O4 - HKCU\..\Run: [Autodesk Sync] C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe
O4 - HKCU\..\Run: [Akamai NetSession Interface] "C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe"
O4 - HKCU\..\Run: [Skype] "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
O4 - HKCU\..\Run: [CMD] cmd.exe /c start http://adverttraff.org && exit
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - Startup: Dropbox.lnk = Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIE.dll
O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office 15\root\Office15\ONBttnIELinkedNotes.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O15 - Trusted Zone: *.clonewarsadventures.com
O15 - Trusted Zone: *.freerealms.com
O15 - Trusted Zone: *.soe.com
O15 - Trusted Zone: *.sony.com
O18 - Protocol: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - AppInit_DLLs: C:\WINDOWS\SysWOW64\nvinit.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: ASLDR Service (ASLDRService) - ASUSTek Computer Inc. - C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe
O23 - Service: ASUS InstantOn Service (ASUS InstantOn) - ASUS - C:\Program Files\ASUS\P4G\InsOnSrv.exe
O23 - Service: Asus WebStorage Windows Service - Unknown owner - C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
O23 - Service: ATKGFNEX Service (ATKGFNEXSrv) - ASUS - C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
O23 - Service: Autodesk Content Service - Autodesk, Inc. - C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: BlueSoleilCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
O23 - Service: BsHelpCS - IVT Corporation - C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: FlexNet Licensing Service 64 - Flexera Software LLC - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe
O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe
O23 - Service: Služba Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Služba Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Network Service (NvNetworkService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
O23 - Service: NVIDIA Streamer Service (NvStreamSvc) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\WINDOWS\system32\nvvsvc.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: TunngleService - Tunngle.net GmbH - C:\Program Files (x86)\Tunngle\TnglCtrl.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 12836 bytes

======Listing Processes======

wininit.exe

winlogon.exe

C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k RPCSS
"C:\WINDOWS\system32\nvvsvc.exe"
"dwm.exe"
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\WINDOWS\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\nvvsvc.exe -session
C:\WINDOWS\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\WINDOWS\system32\svchost.exe -k NetworkService
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe"
"C:\Program Files\AVAST Software\Avast\AvastSvc.exe"
C:\WINDOWS\System32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
"C:\Program Files\ASUS\P4G\InsOnSrv.exe"
"C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe"
C:\WINDOWS\Explorer.EXE
"C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe"
"C:\Program Files\ASUS\P4G\InsOnWMI.exe"
taskhostex.exe
"C:\Program Files\ASUS\P4G\BatteryLife.exe"
"C:\Program Files (x86)\ASUS\Splendid\ACMON.exe"
"C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe"
"C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe"
KBFiltr.exe
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe"
"C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe" /service
dashost.exe {4fd3a8c6-5126-43ba-831348f67ca22472}
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
"C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe"
C:\WINDOWS\system32\svchost.exe -k imgsvc
"C:\WINDOWS\system32\rundll32.exe" Shell32.dll,Control_RunDLL mmsys.cpl
"C:/Program Files/NVIDIA Corporation/Display/nvtray.exe" -user_has_logged_in 1
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe"
C:\WINDOWS\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe"
"C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\WINDOWS\system32\SearchIndexer.exe /Embedding
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Windows\System32\skydrive.exe -Embedding
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Windows\System32\igfxtray.exe"
"C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe" serviceapp
\??\C:\WINDOWS\system32\conhost.exe 0x4
"C:\WINDOWS\system32\igfxsrvc.exe" -Embedding
"C:\Windows\System32\hkcmd.exe"
"C:\Windows\System32\igfxpers.exe"
"C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe" silentrun
"C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe"
"C:/Users/Filip/AppData/Local/Akamai/netsession_win.exe" --client
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
"C:\Windows\System32\SettingSyncHost.exe" -Embedding
"C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe"
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe"
"C:\Users\Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe" /systemstartup
"C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
"C:\Program Files\AVAST Software\Avast\avastui.exe" /nogui
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe"
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe"

C:\WINDOWS\system32\wbem\unsecapp.exe -Embedding
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe"
"C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" "C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE" -Embedding
"C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe"
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe"
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
"C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe" --channel=3312.157fef00.50754036 "C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll" -greomni "C:\Program Files (x86)\Mozilla Firefox\omni.ja" -appomni "C:\Program Files (x86)\Mozilla Firefox\browser\omni.ja" -appdir "C:\Program Files (x86)\Mozilla Firefox\browser" E7CF176E110C211B 3312 "\\.\pipe\gecko-crash-server-pipe.3312" plugin
"C:\WINDOWS\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe" --proxy-stub-channel=Flash5132.6ABB3FA8.18298 --host-broker-channel=Flash5132.6ABB3FA8.3986 --host-pid=5132 --host-npapi-version=27 --plugin-path="C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32_15_0_0_152.dll"
"C:\WINDOWS\SYSTEM32\Macromed\Flash\FlashPlayerPlugin_15_0_0_152.exe" --channel=4176.0049F864.1288458795 --proxy-stub-channel=Flash5132.6ABB3FA8.18298 --plugin-path="C:\WINDOWS\SYSTEM32\Macromed\Flash\NPSWF32_15_0_0_152.dll" --host-npapi-version=27 --type=renderer
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineScannerApp.exe" lng=1033
"C:\Program Files (x86)\ESET\ESET Online Scanner\OnlineCmdLineScanner.exe" "/base-dir=C:\Program Files (x86)\ESET\ESET Online Scanner" /lang=1033 /as
\??\C:\WINDOWS\system32\conhost.exe 0x4
taskhost.exe $(Arg0)
"C:\WINDOWS\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe3_ Global\UsGthrCtrlFltPipeMssGthrPipe3 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
"C:\WINDOWS\system32\SearchFilterHost.exe" 0 588 592 600 65536 596
"C:\Users\Filip\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\WINDOWS\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job - C:\Program Files\SUPERAntiSpyware\SASTask.exe "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" /TASK:3af490e6-ad19-4afb-a210-4749b55be86c
C:\WINDOWS\tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job - C:\Program Files\SUPERAntiSpyware\SASTask.exe "C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" /TASK:ce70f61b-cf56-4a9e-a6e3-4aec25b537e8

=========Mozilla firefox=========

ProfilePath - C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn.me/esnsonar,version=0.70.4]
"Description"=ESN Sonar browser plugin
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.3.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.67.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.67.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0]
"Description"=WildTangent Games App V2 Presence Detector Plugin
"Path"=C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 15.0.0.152 Plugin
"Path"=C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31D09BA0-12F5-4CCE-BE8A-2923E76605DA}]
Lync Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2014-09-25 218776]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2014-07-13 612248]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF}]
Microsoft SkyDrive Pro Browser Helper - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2014-09-25 2334416]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2014-09-23 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{8E5E2654-AD2D-48bf-AC2D-D17F00898D06}]
avast! Online Security - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-07-13 457712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2014-09-23 171944]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-12-12 13263072]
"NvBackend"=C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2013-12-10 2279712]
"ShadowPlay"=C:\Windows\system32\nvspcap64.dll [2013-12-10 1100248]
"IgfxTray"=C:\WINDOWS\system32\igfxtray.exe [2013-10-01 391128]
"HotKeysCmds"=C:\WINDOWS\system32\hkcmd.exe [2013-10-01 771032]
"Persistence"=C:\WINDOWS\system32\igfxpers.exe [2013-10-01 769496]
"XboxStat"=C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [2009-10-01 825184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Lite"=C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-10-28 3675352]
"Battle.net"=D:\Battle.net\Battle.net Launcher.exe [2014-09-08 2869808]
"Autodesk Sync"=C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [2013-02-05 1081224]
"Akamai NetSession Interface"=C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe [2013-06-05 4489472]
"Skype"=C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-08-27 22041192]
"CMD"=cmd.exe /c start http://adverttraff.org && exit []
"SUPERAntiSpyware"=C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2014-09-10 7763736]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [2013-12-18 40312]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2013-11-21 959904]
"ASUSPRP"=C:\Program Files (x86)\ASUS\APRP\APRP.EXE [2013-05-01 3187360]
"ASUSWebStorage"=C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [2012-12-19 3576784]
"BtTray"=C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [2012-09-03 364544]
"RemoteControl10"=C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [2013-03-08 95192]
"AvastUI.exe"=C:\Program Files\AVAST Software\Avast\AvastUI.exe [2014-07-31 4085896]
"SunJavaUpdateSched"=C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-07-25 256896]

C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
Dropbox.lnk - C:\Users\Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"="C:\Windows\system32\nvinitx.dll,C:\WINDOWS\system32\nvinitx.dll"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui]
C:\WINDOWS\system32\igfxdev.dll [2013-10-01 623104]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\!SASCORE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\!SASCORE]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
""=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"VIDC.YUY2"=msyuv.dll
"vidc.i420"=iyuv_32.dll
"msacm.msgsm610"=msgsm32.acm
"msacm.msg711"=msg711.acm
"VIDC.YVYU"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"wavemapper"=msacm32.drv
"midimapper"=midimap.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"vidc.msvc"=msvidc32.dll
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - C:\WINDOWS\system32\notepad.exe "%1"
.scr - install -
.scr - config -

======List of files/folders created in the last 1 month======

2014-09-28 17:03:07 ----D---- C:\Program Files\trend micro
2014-09-28 17:03:06 ----D---- C:\rsit
2014-09-28 16:45:45 ----D---- C:\Program Files (x86)\ESET
2014-09-28 16:19:50 ----D---- C:\Program Files (x86)\CCleaner
2014-09-26 14:42:43 ----D---- C:\Users\Filip\AppData\Roaming\SUPERAntiSpyware.com
2014-09-26 14:42:27 ----D---- C:\Program Files\SUPERAntiSpyware
2014-09-26 14:42:26 ----D---- C:\ProgramData\SUPERAntiSpyware.com
2014-09-25 21:59:37 ----D---- C:\Program Files\Enigma Software Group
2014-09-25 12:09:55 ----D---- C:\Program Files (x86)\Mozilla Firefox
2014-09-23 12:12:33 ----A---- C:\WINDOWS\SYSWOW64\javaws.exe
2014-09-23 12:12:27 ----A---- C:\WINDOWS\SYSWOW64\WindowsAccessBridge-32.dll
2014-09-23 12:12:27 ----A---- C:\WINDOWS\SYSWOW64\javaw.exe
2014-09-23 12:12:27 ----A---- C:\WINDOWS\SYSWOW64\java.exe
2014-09-19 10:36:22 ----RD---- C:\Program Files (x86)\Skype
2014-09-16 17:26:44 ----D---- C:\Users\Filip\AppData\Roaming\Steam
2014-09-14 17:45:45 ----A---- C:\WINDOWS\SYSWOW64\FlashPlayerApp.exe
2014-09-14 11:56:27 ----A---- C:\WINDOWS\SYSWOW64\explorer.exe
2014-09-14 11:56:26 ----A---- C:\WINDOWS\system32\uDWM.dll
2014-09-14 11:56:26 ----A---- C:\WINDOWS\explorer.exe
2014-09-14 11:56:24 ----A---- C:\WINDOWS\system32\twinui.dll
2014-09-14 11:56:19 ----A---- C:\WINDOWS\SYSWOW64\twinui.dll
2014-09-14 11:56:16 ----A---- C:\WINDOWS\SYSWOW64\actxprxy.dll
2014-09-14 11:56:16 ----A---- C:\WINDOWS\system32\actxprxy.dll
2014-09-14 11:56:15 ----A---- C:\WINDOWS\SYSWOW64\UXInit.dll
2014-09-14 11:56:15 ----A---- C:\WINDOWS\system32\UXInit.dll
2014-09-14 11:56:11 ----A---- C:\WINDOWS\system32\WSDMon.dll
2014-09-14 11:56:10 ----A---- C:\WINDOWS\system32\tcpmon.dll
2014-09-14 11:55:18 ----A---- C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-09-14 11:55:14 ----A---- C:\WINDOWS\SYSWOW64\authui.dll
2014-09-14 11:55:14 ----A---- C:\WINDOWS\system32\authui.dll
2014-09-14 11:55:12 ----A---- C:\WINDOWS\system32\shell32.dll
2014-09-14 11:55:10 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Xaml.dll
2014-09-14 11:55:08 ----A---- C:\WINDOWS\SYSWOW64\shell32.dll
2014-09-14 11:55:05 ----A---- C:\WINDOWS\system32\mstscax.dll
2014-09-14 11:55:04 ----A---- C:\WINDOWS\system32\Windows.UI.Search.dll
2014-09-14 11:55:02 ----A---- C:\WINDOWS\system32\ntoskrnl.exe
2014-09-14 11:55:01 ----A---- C:\WINDOWS\SYSWOW64\mstscax.dll
2014-09-14 11:55:00 ----A---- C:\WINDOWS\system32\d3d10warp.dll
2014-09-14 11:54:59 ----A---- C:\WINDOWS\system32\SettingsHandlers.dll
2014-09-14 11:54:52 ----A---- C:\WINDOWS\system32\mfcore.dll
2014-09-14 11:54:51 ----A---- C:\WINDOWS\system32\drivers\tcpip.sys
2014-09-14 11:54:49 ----A---- C:\WINDOWS\SYSWOW64\mfcore.dll
2014-09-14 11:54:48 ----A---- C:\WINDOWS\SYSWOW64\d3d10warp.dll
2014-09-14 11:54:48 ----A---- C:\WINDOWS\system32\gpsvc.dll
2014-09-14 11:54:47 ----A---- C:\WINDOWS\system32\wlansvc.dll
2014-09-14 11:54:46 ----A---- C:\WINDOWS\system32\workfolderssvc.dll
2014-09-14 11:54:44 ----A---- C:\WINDOWS\system32\Windows.Media.dll
2014-09-14 11:54:43 ----A---- C:\WINDOWS\system32\iphlpsvc.dll
2014-09-14 11:54:42 ----A---- C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-09-14 11:54:41 ----A---- C:\WINDOWS\SYSWOW64\Windows.Media.dll
2014-09-14 11:54:41 ----A---- C:\WINDOWS\SYSWOW64\mfmp4srcsnk.dll
2014-09-14 11:54:41 ----A---- C:\WINDOWS\system32\localspl.dll
2014-09-14 11:54:40 ----A---- C:\WINDOWS\SYSWOW64\Windows.UI.Search.dll
2014-09-14 11:54:40 ----A---- C:\WINDOWS\system32\drivers\srv.sys
2014-09-14 11:54:39 ----A---- C:\WINDOWS\system32\WMVDECOD.DLL
2014-09-14 11:54:38 ----A---- C:\WINDOWS\SYSWOW64\mfplat.dll
2014-09-14 11:54:38 ----A---- C:\WINDOWS\system32\SRH.dll
2014-09-14 11:54:38 ----A---- C:\WINDOWS\system32\mfplat.dll
2014-09-14 11:54:37 ----A---- C:\WINDOWS\system32\printui.dll
2014-09-14 11:54:37 ----A---- C:\WINDOWS\system32\drivers\ntfs.sys
2014-09-14 11:54:36 ----A---- C:\WINDOWS\system32\wuaueng.dll
2014-09-14 11:54:35 ----A---- C:\WINDOWS\SYSWOW64\WMVDECOD.DLL
2014-09-14 11:54:35 ----A---- C:\WINDOWS\system32\drivers\srv2.sys
2014-09-14 11:54:34 ----A---- C:\WINDOWS\system32\mispace.dll
2014-09-14 11:54:34 ----A---- C:\WINDOWS\system32\drivers\netio.sys
2014-09-14 11:54:33 ----A---- C:\WINDOWS\system32\XpsPrint.dll
2014-09-14 11:54:32 ----AC---- C:\WINDOWS\system32\drivers\bthport.sys
2014-09-14 11:54:32 ----A---- C:\WINDOWS\system32\netcfgx.dll
2014-09-14 11:54:31 ----A---- C:\WINDOWS\SYSWOW64\mispace.dll
2014-09-14 11:54:31 ----A---- C:\WINDOWS\system32\WorkfoldersControl.dll
2014-09-14 11:54:31 ----A---- C:\WINDOWS\system32\AppxPackaging.dll
2014-09-14 11:54:30 ----A---- C:\WINDOWS\SYSWOW64\printui.dll
2014-09-14 11:54:30 ----A---- C:\WINDOWS\SYSWOW64\netcfgx.dll
2014-09-14 11:54:29 ----AC---- C:\WINDOWS\system32\drivers\spaceport.sys
2014-09-14 11:54:29 ----A---- C:\WINDOWS\SYSWOW64\SRH.dll
2014-09-14 11:54:29 ----A---- C:\WINDOWS\system32\aclui.dll
2014-09-14 11:54:28 ----A---- C:\WINDOWS\system32\wlanmsm.dll
2014-09-14 11:54:28 ----A---- C:\WINDOWS\system32\srvsvc.dll
2014-09-14 11:54:27 ----A---- C:\WINDOWS\SYSWOW64\aclui.dll
2014-09-14 11:54:27 ----A---- C:\WINDOWS\system32\spoolsv.exe
2014-09-14 11:54:27 ----A---- C:\WINDOWS\system32\mfreadwrite.dll
2014-09-14 11:54:26 ----AC---- C:\WINDOWS\system32\drivers\usbccgp.sys
2014-09-14 11:54:26 ----A---- C:\WINDOWS\SYSWOW64\mfreadwrite.dll
2014-09-14 11:54:26 ----A---- C:\WINDOWS\SYSWOW64\AppxPackaging.dll
2014-09-14 11:54:26 ----A---- C:\WINDOWS\system32\SHCore.dll
2014-09-14 11:54:25 ----AC---- C:\WINDOWS\system32\drivers\volsnap.sys
2014-09-14 11:54:25 ----A---- C:\WINDOWS\SYSWOW64\wlanmsm.dll
2014-09-14 11:54:25 ----A---- C:\WINDOWS\system32\puiobj.dll
2014-09-14 11:54:24 ----A---- C:\WINDOWS\SYSWOW64\Windows.Devices.Bluetooth.dll
2014-09-14 11:54:23 ----A---- C:\WINDOWS\SYSWOW64\mftranscode.dll
2014-09-14 11:54:22 ----A---- C:\WINDOWS\system32\storagewmi.dll
2014-09-14 11:54:22 ----A---- C:\WINDOWS\system32\mftranscode.dll
2014-09-14 11:54:21 ----A---- C:\WINDOWS\SYSWOW64\SHCore.dll
2014-09-14 11:54:21 ----A---- C:\WINDOWS\system32\comdlg32.dll
2014-09-14 11:54:21 ----A---- C:\WINDOWS\system32\clusapi.dll
2014-09-14 11:54:20 ----A---- C:\WINDOWS\system32\wuapi.dll
2014-09-14 11:54:20 ----A---- C:\WINDOWS\system32\usbmon.dll
2014-09-14 11:54:19 ----AC---- C:\WINDOWS\system32\drivers\USBHUB3.SYS
2014-09-14 11:54:19 ----A---- C:\WINDOWS\system32\WebClnt.dll
2014-09-14 11:54:18 ----A---- C:\WINDOWS\system32\wisp.dll
2014-09-14 11:54:18 ----A---- C:\WINDOWS\system32\winload.exe
2014-09-14 11:54:18 ----A---- C:\WINDOWS\system32\defragsvc.dll
2014-09-14 11:54:17 ----A---- C:\WINDOWS\system32\lsasrv.dll
2014-09-14 11:54:16 ----A---- C:\WINDOWS\SYSWOW64\comdlg32.dll
2014-09-14 11:54:16 ----A---- C:\WINDOWS\system32\winresume.exe
2014-09-14 11:54:15 ----A---- C:\WINDOWS\system32\wsecedit.dll
2014-09-14 11:54:14 ----A---- C:\WINDOWS\SYSWOW64\WebClnt.dll
2014-09-14 11:54:14 ----A---- C:\WINDOWS\system32\profsvc.dll
2014-09-14 11:54:14 ----A---- C:\WINDOWS\system32\drivers\srvnet.sys
2014-09-14 11:54:14 ----A---- C:\WINDOWS\system32\drivers\nwifi.sys
2014-09-14 11:54:13 ----A---- C:\WINDOWS\SYSWOW64\clusapi.dll
2014-09-14 11:54:13 ----A---- C:\WINDOWS\system32\user32.dll
2014-09-14 11:54:12 ----A---- C:\WINDOWS\system32\wpdbusenum.dll
2014-09-14 11:54:12 ----A---- C:\WINDOWS\system32\winmmbase.dll
2014-09-14 11:54:11 ----AC---- C:\WINDOWS\system32\drivers\usbhub.sys
2014-09-14 11:54:11 ----A---- C:\WINDOWS\system32\WiFiDisplay.dll
2014-09-14 11:54:10 ----A---- C:\WINDOWS\system32\win32spl.dll
2014-09-14 11:54:10 ----A---- C:\WINDOWS\system32\rdpcorets.dll
2014-09-14 11:54:09 ----A---- C:\WINDOWS\SYSWOW64\puiobj.dll
2014-09-14 11:54:09 ----A---- C:\WINDOWS\system32\rdvidcrl.dll
2014-09-14 11:54:09 ----A---- C:\WINDOWS\system32\conhost.exe
2014-09-14 11:54:08 ----A---- C:\WINDOWS\SYSWOW64\Display.dll
2014-09-14 11:54:08 ----A---- C:\WINDOWS\system32\VAN.dll
2014-09-14 11:54:08 ----A---- C:\WINDOWS\system32\SettingSync.dll
2014-09-14 11:54:07 ----A---- C:\WINDOWS\SYSWOW64\storagewmi.dll
2014-09-14 11:54:07 ----A---- C:\WINDOWS\system32\Display.dll
2014-09-14 11:54:07 ----A---- C:\WINDOWS\system32\AppxSip.dll
2014-09-14 11:54:06 ----A---- C:\WINDOWS\SYSWOW64\winmmbase.dll
2014-09-14 11:54:06 ----A---- C:\WINDOWS\system32\WUSettingsProvider.dll
2014-09-14 11:54:06 ----A---- C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-09-14 11:54:05 ----A---- C:\WINDOWS\system32\SndVol.exe
2014-09-14 11:54:05 ----A---- C:\WINDOWS\system32\osk.exe
2014-09-14 11:54:04 ----A---- C:\WINDOWS\SYSWOW64\wuapi.dll
2014-09-14 11:54:04 ----A---- C:\WINDOWS\SYSWOW64\wisp.dll
2014-09-14 11:54:04 ----A---- C:\WINDOWS\system32\drivers\IPMIDrv.sys
2014-09-14 11:54:03 ----A---- C:\WINDOWS\system32\DafPrintProvider.dll
2014-09-14 11:54:03 ----A---- C:\WINDOWS\system32\bcryptprimitives.dll
2014-09-14 11:54:02 ----A---- C:\WINDOWS\SYSWOW64\wlanapi.dll
2014-09-14 11:54:02 ----A---- C:\WINDOWS\system32\mfps.dll
2014-09-14 11:54:01 ----A---- C:\WINDOWS\SYSWOW64\bcryptprimitives.dll
2014-09-14 11:54:01 ----A---- C:\WINDOWS\system32\httpprxm.dll
2014-09-14 11:54:01 ----A---- C:\WINDOWS\system32\drivers\ndis.sys
2014-09-14 11:54:00 ----AC---- C:\WINDOWS\system32\drivers\hdaudbus.sys
2014-09-14 11:54:00 ----A---- C:\WINDOWS\system32\winmm.dll
2014-09-14 11:54:00 ----A---- C:\WINDOWS\system32\drivers\NdisImPlatform.sys
2014-09-14 11:54:00 ----A---- C:\WINDOWS\system32\drivers\mrxsmb20.sys
2014-09-14 11:53:59 ----A---- C:\WINDOWS\system32\Windows.Networking.dll
2014-09-14 11:53:59 ----A---- C:\WINDOWS\system32\dwmapi.dll
2014-09-14 11:53:58 ----A---- C:\WINDOWS\SYSWOW64\AppxSip.dll
2014-09-14 11:53:58 ----A---- C:\WINDOWS\system32\wucltux.dll
2014-09-14 11:53:58 ----A---- C:\WINDOWS\system32\twinapi.dll
2014-09-14 11:53:58 ----A---- C:\WINDOWS\system32\drivers\bridge.sys
2014-09-14 11:53:57 ----A---- C:\WINDOWS\SYSWOW64\wsecedit.dll
2014-09-14 11:53:57 ----A---- C:\WINDOWS\system32\WSShared.dll
2014-09-14 11:53:56 ----A---- C:\WINDOWS\system32\prnntfy.dll
2014-09-14 11:53:56 ----A---- C:\WINDOWS\system32\GdiPlus.dll
2014-09-14 11:53:55 ----A---- C:\WINDOWS\SYSWOW64\prnntfy.dll
2014-09-14 11:53:55 ----A---- C:\WINDOWS\system32\WorkFoldersShell.dll
2014-09-14 11:53:55 ----A---- C:\WINDOWS\system32\gpedit.dll
2014-09-14 11:53:54 ----A---- C:\WINDOWS\SYSWOW64\XpsPrint.dll
2014-09-14 11:53:54 ----A---- C:\WINDOWS\SYSWOW64\winmm.dll
2014-09-14 11:53:53 ----A---- C:\WINDOWS\SYSWOW64\puiapi.dll
2014-09-14 11:53:53 ----A---- C:\WINDOWS\system32\puiapi.dll
2014-09-14 11:53:52 ----A---- C:\WINDOWS\system32\iasnap.dll
2014-09-14 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\VAN.dll
2014-09-14 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\SndVol.exe
2014-09-14 11:53:51 ----A---- C:\WINDOWS\SYSWOW64\dwmapi.dll
2014-09-14 11:53:51 ----A---- C:\WINDOWS\system32\adhsvc.dll
2014-09-14 11:53:50 ----A---- C:\WINDOWS\system32\wups.dll
2014-09-14 11:53:49 ----AC---- C:\WINDOWS\system32\drivers\pci.sys
2014-09-14 11:53:49 ----A---- C:\WINDOWS\SYSWOW64\WSShared.dll
2014-09-14 11:53:48 ----A---- C:\WINDOWS\system32\drivers\ks.sys
2014-09-14 11:53:47 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-09-14 11:53:47 ----A---- C:\WINDOWS\system32\stobject.dll
2014-09-14 11:53:47 ----A---- C:\WINDOWS\system32\AppxSysprep.dll
2014-09-14 11:53:46 ----A---- C:\WINDOWS\SYSWOW64\rdvidcrl.dll
2014-09-14 11:53:46 ----A---- C:\WINDOWS\system32\wcmcsp.dll
2014-09-14 11:53:46 ----A---- C:\WINDOWS\system32\dab.dll
2014-09-14 11:53:45 ----A---- C:\WINDOWS\SYSWOW64\iasnap.dll
2014-09-14 11:53:45 ----A---- C:\WINDOWS\system32\wwanconn.dll
2014-09-14 11:53:44 ----A---- C:\WINDOWS\SYSWOW64\gpedit.dll
2014-09-14 11:53:44 ----A---- C:\WINDOWS\system32\wuauclt.exe
2014-09-14 11:53:43 ----A---- C:\WINDOWS\SYSWOW64\rsaenh.dll
2014-09-14 11:53:43 ----A---- C:\WINDOWS\system32\rsaenh.dll
2014-09-14 11:53:43 ----A---- C:\WINDOWS\system32\ActionCenter.dll
2014-09-14 11:53:42 ----A---- C:\WINDOWS\system32\wlanapi.dll
2014-09-14 11:53:41 ----A---- C:\WINDOWS\system32\wups2.dll
2014-09-14 11:53:40 ----A---- C:\WINDOWS\SYSWOW64\osk.exe
2014-09-14 11:53:40 ----A---- C:\WINDOWS\system32\wshbth.dll
2014-09-14 11:53:40 ----A---- C:\WINDOWS\system32\schannel.dll
2014-09-14 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\Windows.Networking.dll
2014-09-14 11:53:39 ----A---- C:\WINDOWS\SYSWOW64\SettingSync.dll
2014-09-14 11:53:38 ----A---- C:\WINDOWS\system32\PrintDialogs.dll
2014-09-14 11:53:37 ----A---- C:\WINDOWS\SYSWOW64\DafPrintProvider.dll
2014-09-14 11:53:37 ----A---- C:\WINDOWS\system32\SearchFolder.dll
2014-09-14 11:53:37 ----A---- C:\WINDOWS\system32\browser.dll
2014-09-14 11:53:36 ----A---- C:\WINDOWS\system32\wlansvcpal.dll
2014-09-14 11:53:36 ----A---- C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-09-14 11:53:35 ----A---- C:\WINDOWS\SYSWOW64\wshbth.dll
2014-09-14 11:53:34 ----A---- C:\WINDOWS\SYSWOW64\stobject.dll
2014-09-14 11:53:33 ----A---- C:\WINDOWS\SYSWOW64\ActionCenter.dll
2014-09-14 11:53:33 ----A---- C:\WINDOWS\system32\Defrag.exe
2014-09-14 11:53:32 ----A---- C:\WINDOWS\SYSWOW64\wups.dll
2014-09-14 11:53:32 ----A---- C:\WINDOWS\SYSWOW64\KBDRUM.DLL
2014-09-14 11:53:32 ----A---- C:\WINDOWS\system32\KBDRUM.DLL
2014-09-14 11:53:31 ----A---- C:\WINDOWS\SYSWOW64\GdiPlus.dll
2014-09-14 11:53:30 ----A---- C:\WINDOWS\SYSWOW64\schannel.dll
2014-09-14 11:53:29 ----A---- C:\WINDOWS\system32\KBDYAK.DLL
2014-09-14 11:53:29 ----A---- C:\WINDOWS\system32\KBDRU1.DLL
2014-09-14 11:53:29 ----A---- C:\WINDOWS\system32\KBDRU.DLL
2014-09-14 11:53:29 ----A---- C:\WINDOWS\system32\KBDBASH.DLL
2014-09-14 11:53:28 ----A---- C:\WINDOWS\SYSWOW64\user32.dll
2014-09-14 11:53:27 ----A---- C:\WINDOWS\SYSWOW64\KBDRU1.DLL
2014-09-14 11:53:27 ----A---- C:\WINDOWS\SYSWOW64\KBDRU.DLL
2014-09-14 11:53:27 ----A---- C:\WINDOWS\SYSWOW64\KBDBASH.DLL
2014-09-14 11:53:27 ----A---- C:\WINDOWS\system32\BluetoothApis.dll
2014-09-14 11:53:26 ----A---- C:\WINDOWS\SYSWOW64\KBDYAK.DLL
2014-09-14 11:53:23 ----AC---- C:\WINDOWS\system32\drivers\bthpan.sys
2014-09-14 11:53:23 ----A---- C:\WINDOWS\system32\certcli.dll
2014-09-14 11:53:22 ----A---- C:\WINDOWS\SYSWOW64\PrintDialogs.dll
2014-09-14 11:53:22 ----A---- C:\WINDOWS\SYSWOW64\certcli.dll
2014-09-14 11:53:21 ----A---- C:\WINDOWS\system32\wwanmm.dll
2014-09-14 11:53:21 ----A---- C:\WINDOWS\system32\SndVolSSO.dll
2014-09-14 11:53:21 ----A---- C:\WINDOWS\system32\KBDTAT.DLL
2014-09-14 11:53:20 ----A---- C:\WINDOWS\SYSWOW64\KBDTAT.DLL
2014-09-14 11:53:20 ----A---- C:\WINDOWS\system32\compstui.dll
2014-09-14 11:53:19 ----A---- C:\WINDOWS\SYSWOW64\BluetoothApis.dll
2014-09-14 11:53:18 ----A---- C:\WINDOWS\system32\rdpudd.dll
2014-09-14 11:53:17 ----A---- C:\WINDOWS\system32\wlansec.dll
2014-09-14 11:53:15 ----A---- C:\WINDOWS\SYSWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-14 11:53:15 ----A---- C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-14 11:53:15 ----A---- C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-09-14 11:53:14 ----A---- C:\WINDOWS\system32\wudriver.dll
2014-09-14 11:53:13 ----A---- C:\WINDOWS\SYSWOW64\wudriver.dll
2014-09-14 11:53:11 ----A---- C:\WINDOWS\system32\KBDTT102.DLL
2014-09-14 11:53:10 ----A---- C:\WINDOWS\SYSWOW64\KBDTT102.DLL
2014-09-14 11:41:04 ----A---- C:\WINDOWS\system32\drivers\msgpioclx.sys
2014-09-11 17:43:21 ----A---- C:\WINDOWS\system32\aepdu.dll
2014-09-11 17:43:21 ----A---- C:\WINDOWS\system32\aeinv.dll
2014-09-11 17:43:19 ----A---- C:\WINDOWS\system32\aepic.dll
2014-09-11 17:29:29 ----A---- C:\WINDOWS\SYSWOW64\MshtmlDac.dll
2014-09-11 17:29:28 ----A---- C:\WINDOWS\system32\MshtmlDac.dll
2014-09-11 17:29:25 ----A---- C:\WINDOWS\system32\mshtmled.dll
2014-09-11 17:29:24 ----A---- C:\WINDOWS\SYSWOW64\mshtmled.dll
2014-09-11 17:29:23 ----A---- C:\WINDOWS\system32\iernonce.dll
2014-09-11 17:29:22 ----A---- C:\WINDOWS\SYSWOW64\vbscript.dll
2014-09-11 17:29:22 ----A---- C:\WINDOWS\system32\vbscript.dll
2014-09-11 17:29:22 ----A---- C:\WINDOWS\system32\jscript9diag.dll
2014-09-11 17:29:22 ----A---- C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-09-11 17:29:22 ----A---- C:\WINDOWS\system32\ieetwcollectorres.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\msrating.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\dxtrans.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\SYSWOW64\dxtmsft.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\system32\msrating.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\system32\jsproxy.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\system32\dxtrans.dll
2014-09-11 17:29:17 ----A---- C:\WINDOWS\system32\dxtmsft.dll
2014-09-11 17:29:16 ----A---- C:\WINDOWS\SYSWOW64\jsproxy.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\msfeeds.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\ieUnatt.exe
2014-09-11 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\iesetup.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\iernonce.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\SYSWOW64\iedkcs32.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\system32\msfeeds.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\system32\ieUnatt.exe
2014-09-11 17:29:15 ----A---- C:\WINDOWS\system32\iesetup.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\system32\iedkcs32.dll
2014-09-11 17:29:15 ----A---- C:\WINDOWS\system32\ie4uinit.exe
2014-09-11 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\jscript9diag.dll
2014-09-11 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\JavaScriptCollectionAgent.dll
2014-09-11 17:29:13 ----A---- C:\WINDOWS\SYSWOW64\ieapfltr.dll
2014-09-11 17:29:13 ----A---- C:\WINDOWS\system32\ieapfltr.dll
2014-09-11 17:29:12 ----A---- C:\WINDOWS\SYSWOW64\ieetwproxystub.dll
2014-09-11 17:29:12 ----A---- C:\WINDOWS\system32\ieetwproxystub.dll
2014-09-11 17:29:12 ----A---- C:\WINDOWS\system32\ieetwcollector.exe
2014-09-11 17:29:11 ----A---- C:\WINDOWS\system32\mshtml.dll
2014-09-11 17:29:08 ----A---- C:\WINDOWS\SYSWOW64\wininet.dll
2014-09-11 17:29:08 ----A---- C:\WINDOWS\system32\wininet.dll
2014-09-11 17:29:07 ----A---- C:\WINDOWS\SYSWOW64\urlmon.dll
2014-09-11 17:29:07 ----A---- C:\WINDOWS\SYSWOW64\iertutil.dll
2014-09-11 17:29:07 ----A---- C:\WINDOWS\system32\urlmon.dll
2014-09-11 17:29:07 ----A---- C:\WINDOWS\system32\iertutil.dll
2014-09-11 17:29:06 ----A---- C:\WINDOWS\system32\ieframe.dll
2014-09-11 17:29:05 ----A---- C:\WINDOWS\SYSWOW64\ieframe.dll
2014-09-11 17:29:04 ----A---- C:\WINDOWS\SYSWOW64\mshtml.dll
2014-09-11 17:29:03 ----A---- C:\WINDOWS\SYSWOW64\jscript9.dll
2014-09-11 17:29:03 ----A---- C:\WINDOWS\system32\jscript9.dll
2014-09-11 11:55:35 ----A---- C:\WINDOWS\system32\schedsvc.dll
2014-09-11 11:54:37 ----A---- C:\WINDOWS\SYSWOW64\msvcr120_clr0400.dll
2014-09-11 11:54:37 ----A---- C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-09-08 18:40:21 ----D---- C:\Users\Filip\AppData\Roaming\Battle.net

======List of files/folders modified in the last 1 month======

2014-09-28 17:03:07 ----D---- C:\Program Files
2014-09-28 17:03:00 ----D---- C:\WINDOWS\Prefetch
2014-09-28 17:02:48 ----D---- C:\WINDOWS\Temp
2014-09-28 17:00:19 ----D---- C:\WINDOWS\system32\sru
2014-09-28 16:53:09 ----D---- C:\Users\Filip\AppData\Roaming\Skype
2014-09-28 16:45:45 ----RD---- C:\Program Files (x86)
2014-09-28 16:37:54 ----A---- C:\WINDOWS\SYSWOW64\bscs.ini
2014-09-28 16:36:58 ----A---- C:\WINDOWS\SYSWOW64\log.txt
2014-09-28 16:36:03 ----D---- C:\Users\Filip\AppData\Roaming\Dropbox
2014-09-28 16:35:36 ----A---- C:\WINDOWS\SYSWOW64\LOCALSERVICE.INI
2014-09-28 16:34:40 ----A---- C:\WINDOWS\SYSWOW64\LOCALDEVICE.INI
2014-09-28 16:21:09 ----D---- C:\WINDOWS\Minidump
2014-09-28 16:21:09 ----D---- C:\WINDOWS\debug
2014-09-28 16:21:09 ----D---- C:\Windows
2014-09-28 16:10:44 ----SHD---- C:\WINDOWS\Installer
2014-09-28 14:57:13 ----D---- C:\WINDOWS\Microsoft.NET
2014-09-28 12:00:58 ----D---- C:\WINDOWS\system32\Tasks
2014-09-28 11:04:52 ----D---- C:\WINDOWS\AppReadiness
2014-09-27 23:46:19 ----D---- C:\Users\Filip\AppData\Roaming\TS3Client
2014-09-27 14:29:57 ----D---- C:\WINDOWS\system32\drivers
2014-09-27 13:54:48 ----D---- C:\WINDOWS\system32\config
2014-09-27 13:40:33 ----HD---- C:\ProgramData
2014-09-27 13:40:31 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2014-09-27 13:39:14 ----D---- C:\WINDOWS\system32\DriverStore
2014-09-27 13:39:14 ----D---- C:\WINDOWS\Inf
2014-09-27 13:39:07 ----SHD---- C:\System Volume Information
2014-09-27 12:08:10 ----D---- C:\Users\Filip\AppData\Roaming\vlc
2014-09-27 01:24:49 ----D---- C:\WINDOWS\rescache
2014-09-27 00:40:29 ----RSD---- C:\WINDOWS\assembly
2014-09-26 23:55:23 ----HD---- C:\Program Files\WindowsApps
2014-09-26 14:42:54 ----D---- C:\WINDOWS\Tasks
2014-09-25 23:01:53 ----D---- C:\ProgramData\regid.1991-06.com.microsoft
2014-09-25 22:56:40 ----D---- C:\Program Files\Microsoft Office 15
2014-09-25 21:58:10 ----D---- C:\Program Files (x86)\Common Files
2014-09-25 21:35:59 ----D---- C:\WINDOWS\system32\NDF
2014-09-25 21:24:18 ----D---- C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-25 19:02:44 ----D---- C:\Users\Filip\AppData\Roaming\Azureus
2014-09-25 16:17:30 ----D---- C:\WINDOWS\CbsTemp
2014-09-25 16:17:29 ----D---- C:\WINDOWS\WinSxS
2014-09-25 16:17:14 ----D---- C:\WINDOWS\SYSWOW64\cs-CZ
2014-09-25 16:17:14 ----D---- C:\WINDOWS\system32\cs-CZ
2014-09-23 12:21:51 ----D---- C:\ProgramData\Oracle
2014-09-23 12:12:33 ----D---- C:\WINDOWS\SysWOW64
2014-09-22 18:51:00 ----RD---- C:\WINDOWS\System32
2014-09-22 18:51:00 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-21 13:14:45 ----D---- C:\WINDOWS\system32\catroot2
2014-09-20 15:16:44 ----HD---- C:\WINDOWS\system32\GroupPolicy
2014-09-20 15:16:44 ----D---- C:\WINDOWS\SYSWOW64\GroupPolicy
2014-09-19 10:36:25 ----D---- C:\ProgramData\Skype
2014-09-17 23:01:34 ----D---- C:\ProgramData\Tunngle
2014-09-17 23:01:33 ----D---- C:\Users\Filip\AppData\Roaming\Tunngle
2014-09-15 11:18:02 ----D---- C:\WINDOWS\system32\catroot
2014-09-14 17:41:06 ----RD---- C:\WINDOWS\ToastData
2014-09-14 17:40:58 ----D---- C:\WINDOWS\WinStore
2014-09-14 17:40:58 ----D---- C:\WINDOWS\SYSWOW64\wbem
2014-09-14 17:40:58 ----D---- C:\Program Files\Windows Journal
2014-09-14 17:40:57 ----D---- C:\WINDOWS\SYSWOW64\setup
2014-09-14 17:40:55 ----RD---- C:\WINDOWS\ImmersiveControlPanel
2014-09-14 17:40:55 ----D---- C:\WINDOWS\system32\drivers\cs-CZ
2014-09-14 17:40:51 ----D---- C:\WINDOWS\system32\wbem
2014-09-14 17:40:51 ----D---- C:\WINDOWS\system32\setup
2014-09-14 17:40:51 ----D---- C:\WINDOWS\system32\oobe
2014-09-14 17:40:51 ----D---- C:\WINDOWS\system32\Boot
2014-09-14 17:40:48 ----RSD---- C:\WINDOWS\Fonts
2014-09-14 17:40:47 ----D---- C:\WINDOWS\apppatch
2014-09-14 17:40:46 ----SD---- C:\WINDOWS\system32\CompatTel
2014-09-14 17:40:46 ----D---- C:\WINDOWS\SYSWOW64\migration
2014-09-14 17:40:46 ----D---- C:\WINDOWS\SYSWOW64\InputMethod
2014-09-14 17:40:46 ----D---- C:\WINDOWS\system32\migration
2014-09-14 17:40:43 ----D---- C:\Program Files\Internet Explorer
2014-09-14 17:40:43 ----D---- C:\Program Files (x86)\Internet Explorer
2014-09-14 17:39:05 ----D---- C:\WINDOWS\system32\MRT
2014-09-14 17:30:14 ----A---- C:\WINDOWS\system32\MRT.exe
2014-09-13 23:20:58 ----D---- C:\Program Files\Nexus Mod Manager

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 aswRvrt;avast! Revert; C:\WINDOWS\system32\drivers\aswRvrt.sys [2014-07-13 65776]
R0 aswVmm;avast! VM Monitor; C:\WINDOWS\system32\drivers\aswVmm.sys [2014-07-13 224896]
R0 iaStorA;iaStorA; C:\WINDOWS\System32\drivers\iaStorA.sys [2012-09-14 647736]
R0 nvpciflt;nvpciflt; C:\WINDOWS\system32\DRIVERS\nvpciflt.sys [2014-03-04 33736]
R1 aswRdr;aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [2014-07-13 93568]
R1 aswSnx;aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [2014-07-13 1041168]
R1 aswSP;aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [2014-07-13 427360]
R1 ATKWMIACPIIO;ATKWMIACPI Driver; \??\C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [2011-09-07 17536]
R1 dtsoftbus01;@oem17.inf,%DTSoftBus.SVCDESC%;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [2014-01-07 283064]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [2011-07-22 14928]
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [2011-07-12 12368]
R1 vwififlt;@%SystemRoot%\System32\drivers\vwififlt.sys,-259; C:\WINDOWS\system32\DRIVERS\vwififlt.sys [2014-04-30 71680]
R2 ASMMAP64;ASMMAP64; \??\C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [2009-07-02 15416]
R2 aswHwid;avast! HardwareID; C:\WINDOWS\system32\drivers\aswHwid.sys [2014-07-13 29208]
R2 aswMonFlt;aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [2014-07-13 79184]
R2 aswStm;aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [2014-07-13 92008]
R3 AiCharger;ASUS Charger Driver; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [2012-09-18 17152]
R3 ATP;@oem3.inf,%PS2.DeviceDesc%;ASUS Input Device; C:\WINDOWS\System32\drivers\AsusTP.sys [2013-04-29 65784]
R3 BtAudioBusSrv;@oem10.inf,%SvcDesc%;Ralink Bluetooth Audio Bus Service; C:\WINDOWS\System32\Drivers\BtAudioBus.sys [2012-06-15 23136]
R3 BthEnum;@bth.inf,%BthEnum.SVCDESC%;Služba Bluetooth Enumerator; C:\WINDOWS\System32\drivers\BthEnum.sys [2013-08-22 53248]
R3 BthL2caScoIfSrv;Bluetooth Profile Interface Driver Service; C:\WINDOWS\System32\Drivers\BtL2caScoIf.sys [2012-07-19 56904]
R3 BthLEEnum;@bthleenum.inf,%BthLEEnum.SVCDESC%;Bluetooth Low Energy Driver; C:\WINDOWS\System32\drivers\BthLEEnum.sys [2013-12-04 226304]
R3 BthPan;@bthpan.inf,%BthPan.DisplayName%;Bluetooth Device (Personal Area Network); C:\WINDOWS\System32\drivers\bthpan.sys [2014-07-24 118272]
R3 BTHUSB;@bth.inf,%BTHUSB.SvcDesc%;Ovladač rozhraní USB radiostanice Bluetooth; C:\WINDOWS\System32\Drivers\BTHUSB.sys [2014-01-31 81920]
R3 btUrbFilterDrv;IVT URB Bluetooth Filter Driver Service; C:\WINDOWS\System32\Drivers\IvtUrbBtFlt.sys [2012-08-14 48736]
R3 HIDSwitch;@oem14.inf,%ASSW.DisplayName%;ASUS Wireless Radio Control; C:\WINDOWS\System32\drivers\AsHIDSwitch64.sys [2012-05-31 21152]
R3 igfx;igfx; C:\WINDOWS\system32\DRIVERS\igdkmd64.sys [2013-10-01 4177920]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RTKVHD64.sys [2012-12-18 3262816]
R3 iwdbus;@oem25.inf,%iwdbus.SVCDESC%;IWD Bus Enumerator; C:\WINDOWS\System32\drivers\iwdbus.sys [2013-08-23 26008]
R3 kbfiltr;@oem15.inf,%kbfiltr.SvcDesc%;Keyboard Filter; C:\WINDOWS\System32\drivers\kbfiltr.sys [2012-08-02 14992]
R3 L1C;@netl1c63x64.inf,%L1C.Service.DispName%;NDIS Miniport – ovladač pro řadič Qualcomm Atheros AR81xx PCI-E Ethernet; C:\WINDOWS\system32\DRIVERS\L1C63x64.sys [2013-06-18 129224]
R3 MEIx64;@oem27.inf,%HECI_SvcDesc%;Intel(R) Management Engine Interface ; C:\WINDOWS\System32\drivers\HECIx64.sys [2012-07-02 62784]
R3 netr28x;@netr28x.inf,%Generic.Service.DispName%;Ralink 802.11n – rozšiřitelný bezdrátový ovladač; C:\WINDOWS\system32\DRIVERS\netr28x.sys [2013-07-25 2607792]
R3 nvlddmkm;nvlddmkm; C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys [2014-03-04 12708128]
R3 nvvad_WaveExtensible;@oem18.inf,%nvvad_WaveExtensible.SvcDesc%;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\WINDOWS\system32\drivers\nvvad64v.sys [2013-12-05 39200]
R3 RFCOMM;@tdibth.inf,%RFCOMM.DisplayName%;Bluetooth Device (RFCOMM Protocol TDI); C:\WINDOWS\System32\drivers\rfcomm.sys [2014-01-27 167424]
R3 rtbth;@oem7.inf,%General.Service.DispName%;RTBTH Bluetooth Device Driver; C:\WINDOWS\System32\drivers\rtbth.sys [2012-09-05 695904]
R3 tap0901t;@oem21.inf,%DeviceDescription%;TAP-Win32 Adapter V9 (Tunngle); C:\WINDOWS\system32\DRIVERS\tap0901t.sys [2009-09-16 31232]
R3 usbvideo;@usbvideo.inf,%USBVideo.SvcDesc%;Zobrazovací zařízení USB (WDM); C:\WINDOWS\System32\Drivers\usbvideo.sys [2013-08-22 212224]
R3 vwifimp;@%SystemRoot%\System32\drivers\vwifimp.sys,-261; C:\WINDOWS\system32\DRIVERS\vwifimp.sys [2014-04-30 38912]
S3 BTHPORT;@bth.inf,%BTHPORT.SvcDesc%;Ovladač portu Bluetooth; C:\WINDOWS\System32\Drivers\BTHport.sys [2014-07-24 1200640]
S3 dg_ssudbus;@oem34.inf,%ssud.Service.DeviceDesc%;SAMSUNG Mobile USB Composite Device Driver (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudbus.sys [2014-01-22 108800]
S3 EagleX64;EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys []
S3 esgiguard;esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys []
S3 intaud_WaveExtensible;@oem24.inf,%INTAUD_WEX.SvcDesc%;Intel WiDi Audio Device; C:\WINDOWS\system32\drivers\intelaud.sys [2013-08-23 39320]
S3 IntcDAud;@oem25.inf,%IntcDAud.SvcDesc%;Intel(R) Display Audio; C:\WINDOWS\system32\DRIVERS\IntcDAud.sys [2012-11-15 342528]
S3 ssudmdm;@oem45.inf,%ssud.Service.Name%;SAMSUNG Mobile USB Modem Drivers (DEVGURU Ver.); C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [2014-01-22 206080]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 !SASCORE;SAS Core Service; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [2014-07-23 172344]
R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2013-12-18 65432]
R2 ASLDRService;ASLDR Service; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\ASLDRSrv.exe [2013-01-15 107320]
R2 ASUS InstantOn;ASUS InstantOn Service; C:\Program Files\ASUS\P4G\InsOnSrv.exe [2013-06-19 277120]
R2 Asus WebStorage Windows Service;Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [2012-12-19 72192]
R2 ATKGFNEXSrv;ATKGFNEX Service; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe [2011-11-21 96896]
R2 avast! Antivirus;avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [2014-07-13 50344]
R2 BlueSoleilCS;BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [2012-09-03 1602560]
R2 ClickToRunSvc;Služba Microsoft Office ClickToRun; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2014-08-12 2428088]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 Intel(R) ME Service;Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [2012-06-27 129856]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-06-25 166720]
R2 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 277824]
R2 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2013-12-10 1494304]
R2 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2013-12-10 15129376]
R2 nvsvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvvsvc.exe [2014-03-04 922968]
R2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 365376]
R3 BsHelpCS;BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [2012-09-03 138752]
S2 Autodesk Content Service;Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [2012-12-13 12288]
S2 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10 116648]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09 267440]
S3 cphs;Intel(R) Content Protection HECI Service; C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe [2013-10-01 279000]
S3 FlexNet Licensing Service 64;FlexNet Licensing Service 64; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe [2014-01-06 1471352]
S3 FontCache3.0.0.0;@%SystemRoot%\system32\PresentationHost.exe,-3309; C:\WINDOWS\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe [2013-08-03 43696]
S3 GamesAppService;GamesAppService; C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072]
S3 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-10 116648]
S3 MozillaMaintenance;Mozilla Maintenance Service; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe [2014-09-25 114288]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2013-02-01 150600]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-08-28 833728]
S3 TunngleService;TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [2013-11-06 758224]
S4 BthAvrcpTg;@bthaudhid.inf,%BthAvrcpTg_SvcDesc%;Bluetooth Audio/Video Remote Control HID; C:\WINDOWS\System32\drivers\BthAvrcpTg.sys [2013-08-22 36992]
S4 BthHFEnum;@bthhfenum.inf,%BthHFEnum.SVCDESC%;Bluetooth Hands-Free Audio and Call Control HID Enumerator; C:\WINDOWS\System32\drivers\bthhfenum.sys [2013-08-22 57856]
S4 bthhfhid;@bthaudhid.inf,%BthAudioHFHid.SVCDESC%;Bluetooth Hands-Free Call Control HID; C:\WINDOWS\System32\drivers\BthHFHid.sys [2013-08-22 30720]

-----------------EOF-----------------

#2 Příspěvek od **vyosek** » 28 Zář 2014 16:48

Zdravim

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Elsone · #3 Příspěvek od **Elsone** » 28 Zář 2014 17:36

Děkuji za rychlou reakci. Zde jsou logy =)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.2.3 (09.27.2014:1)
OS: Windows 8.1 x64
Ran by Filip on ne 28. 09. 2014 at 18:17:40,68
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~ Services

~~~ Registry Values

Successfully deleted: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\cmd

~~~ Registry Keys

~~~ Files

~~~ Folders

Successfully deleted: [Folder] "C:\ProgramData\boost_interprocess"

~~~ Chrome

Successfully deleted: [Folder] C:\Users\Filip\appdata\local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck
Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\eofcbnmajmjmplflapaojjnihcjkigck

~~~ Event Viewer Logs were cleared

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on ne 28. 09. 2014 at 18:24:29,62
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

# AdwCleaner v3.310 - Report created 28/09/2014 at 18:29:50
# Updated 12/09/2014 by Xplode
# Operating System : Windows 8.1 (64 bits)
# Username : Filip - NTB-FILIP
# Running from : C:\Users\Filip\Desktop\adwcleaner_3.310.exe
# Option : Clean

***** [ Services ] *****

***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Filip\AppData\Local\PackageAware

***** [ Scheduled Tasks ] *****

***** [ Shortcuts ] *****

***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{6DDA37BA-0553-499A-AE0D-BEBA67204548}
Key Deleted : HKCU\Software\Conduit

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17278

-\\ Mozilla Firefox v32.0.3 (x86 cs)

[ File : C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\7n8af7ci.default\prefs.js ]

[ File : C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771\prefs.js ]

-\\ Google Chrome v37.0.2062.124

[ File : C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\preferences ]

*************************

AdwCleaner[R0].txt - [1332 octets] - [28/09/2014 18:26:33]
AdwCleaner[S0].txt - [1216 octets] - [28/09/2014 18:29:50]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1276 octets] ##########

#4 Příspěvek od **vyosek** » 28 Zář 2014 20:19

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Elsone · #5 Příspěvek od **Elsone** » 28 Zář 2014 22:43

Zoek.exe v5.0.0.0 Updated 27-09-2014
Tool run by Filip on ne 28. 09. 2014 at 23:06:58,30.
Microsoft Windows 8.1 6.3.9600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Filip\Desktop\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

28. 9. 2014 23:09:55 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

==== Deleting CLSID Registry Values ======================

==== Deleting Services ======================

==== FireFox Fix ======================

Deleted from C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\7n8af7ci.default\prefs.js:
user_pref("browser.startup.homepage", "www.google.cz");

Added to C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\7n8af7ci.default\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

Deleted from C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771\prefs.js:

Added to C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771\prefs.js:
user_pref("browser.startup.homepage", "http://www.google.com");
user_pref("browser.search.defaulturl", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.newtab.url", "http://www.google.com/");
user_pref("browser.search.defaultengine", "Google");
user_pref("browser.search.defaultenginename", "Google");
user_pref("browser.search.selectedEngine", "Google");
user_pref("browser.search.order.1", "Google");
user_pref("keyword.URL", "http://www.google.com/search?btnG=Google+Search&q=");
user_pref("browser.search.suggest.enabled", true);
user_pref("browser.search.useDBForOrder", true);

ProfilePath: C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\7n8af7ci.default

user.js not found
---- Lines browser.startup.page removed from prefs.js ----
user_pref("browser.startup.page", 3);
---- FireFox user.js and prefs.js backups ----

prefs_201428.09._2328_.backup

ProfilePath: C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771

user.js not found
---- FireFox user.js and prefs.js backups ----

prefs_201428.09._2328_.backup

==== Deleting Files \ Folders ======================

C:\PROGRA~3\SetStretch.VBS deleted
C:\Users\Filip\AppData\Local\cache deleted
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Search.lnk deleted
C:\WINDOWS\SysNative\config\systemprofile\Searches deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [13. 07. 2014 19:53]

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771
DFC9460CC37E5C414DC4680B10C19E7A - C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll - Shockwave Flash
18CF51689186AEB9D1D149AEB0E92D03 - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL - Microsoft Office 2013
65C1D9F74004E775F9A8598476ABE5EE - C:\Users\Filip\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
F3B0E300AFC94E1A775A2D935A7D384F - C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll - Shockwave for Director / Shockwave for Director

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[13. 07. 2014 19:53]

avast Online Security - Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\preferences was reset successfully
C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Filip\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully
C:\WINDOWS\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\INetCache\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=134 folders=20 1177687 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Filip\AppData\Local\Temp will be emptied at reboot
C:\WINDOWS\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\WINDOWS\Temp will be emptied at reboot

#6 Příspěvek od **vyosek** » 29 Zář 2014 05:23

Dejte log z FRST http://forum.viry.cz/viewtopic.php?f=13&t=133100

Elsone · #7 Příspěvek od **Elsone** » 29 Zář 2014 09:23

Zde je log. VYpadá to, že je pryč. Už se nic nespouští a daný proces už nemám ani v úlohách "Po Spuštění". Přikládám i Addition.txt (V návodu bylo řečeno, že můžu také)

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-09-2014 02
Ran by Filip (administrator) on NTB-FILIP on 29-09-2014 10:17:08
Running from C:\Users\Filip\Desktop
Loaded Profile: Filip (Available profiles: Filip)
Platform: Windows 8.1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(ASUS) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCore64.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnSrv.exe
() C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(ASUS) C:\Program Files\ASUS\P4G\InsOnWMI.exe
(ASUS) C:\Program Files\ASUS\P4G\BatteryLife.exe
(ASUS) C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\KBFiltr.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x64\QuickGesture64.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\QuickGesture\x86\QuickGesture.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Microsoft Corporation) C:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Akamai Technologies, Inc.) C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(IVT Corporation) C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe
(CyberLink Corp.) C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
(Dropbox, Inc.) C:\Users\Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\CSISYNCCLIENT.EXE
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\MSOSYNC.EXE
(AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(forum.viry.cz) C:\Users\Filip\Desktop\FRSTLauncher.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\setup\instup.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13263072 2012-12-12] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2279712 2013-12-10] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [ASUSPRP] => C:\Program Files (x86)\ASUS\APRP\APRP.EXE [3187360 2013-05-01] (ASUSTek Computer Inc.)
HKLM-x32\...\Run: [ASUSWebStorage] => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSPanel.exe [3576784 2012-12-19] (ASUS Cloud Corporation)
HKLM-x32\...\Run: [BtTray] => C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BtTray.exe [364544 2012-09-03] (IVT Corporation)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-07-31] (AVAST Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\WINDOWS\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Battle.net] => D:\Battle.net\Battle.net Launcher.exe [2869808 2014-09-08] (Blizzard Entertainment)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Autodesk Sync] => C:\Program Files\Autodesk\Autodesk Sync\AdSync.exe [1081224 2013-02-05] (Autodesk, Inc.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7763736 2014-09-10] (SUPERAntiSpyware)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Policies\Explorer: []
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\MountPoints2: {a9486f97-77c6-11e3-824f-34238719aa68} - "F:\setup.exe"
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs: ,C:\WINDOWS\system32\nvinitx.dll => C:\WINDOWS\system32\nvinitx.dll [174296 2014-03-04] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\WINDOWS\SysWOW64\nvinit.dll => C:\WINDOWS\SysWOW64\nvinit.dll [148016 2014-03-04] (NVIDIA Corporation)
Startup: C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\Filip\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers: !AsusWSShellExt_B -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: !AsusWSShellExt_O -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: !AsusWSShellExt_U -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4D} => C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\ASUSWSShellExt64.dll (ASUS Cloud Corporation.)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: AutoCAD Digital Signatures Icon Overlay Handler -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll (Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.138

FireFox:
========
FF ProfilePath: C:\Users\Filip\AppData\Roaming\Mozilla\Firefox\Profiles\fufdtq41.default-1411740454771
FF NewTab: hxxp://www.google.com/
FF SearchEngineOrder.1: Google
FF SelectedSearchEngine: Google
FF Homepage: hxxp://www.google.com
FF Keyword.URL: hxxp://www.google.com/search?btnG=Google+Search&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1207148.dll (Adobe Systems, Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3505.0912 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Filip\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\heureka-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\mapy-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\seznam-cz.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\slunecnice-cz.xml
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-24]
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

Chrome:
=======
CHR Profile: C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-10]
CHR Extension: (Google Drive) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-10]
CHR Extension: (YouTube) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-10]
CHR Extension: (Google Search) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-10]
CHR Extension: (avast! Online Security) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-16]
CHR Extension: (Google Wallet) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-10]
CHR Extension: (Gmail) - C:\Users\Filip\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-10]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-13]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ASUS InstantOn; C:\Program Files\ASUS\P4G\InsOnSrv.exe [277120 2013-06-19] (ASUS)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage Sync Agent\1.1.18.159\AsusWSWinService.exe [72192 2012-12-19] () [File not signed]
S2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-13] (AVAST Software)
R2 BlueSoleilCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BlueSoleilCS.exe [1602560 2012-09-03] (IVT Corporation) [File not signed]
R3 BsHelpCS; C:\Program Files (x86)\Ralink Corporation\Ralink Bluetooth Stack\BsHelpCS.exe [138752 2012-09-03] (IVT Corporation) [File not signed]
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2428088 2014-08-12] (Microsoft Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [129856 2012-06-27] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-06-25] (Intel Corporation)
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [44032 2013-08-22] (Microsoft Corporation)
S3 lfsvc; C:\Windows\SysWOW64\GeofenceMonitorService.dll [357376 2014-03-14] (Microsoft Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [688640 2014-03-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1494304 2013-12-10] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [15129376 2013-12-10] (NVIDIA Corporation)
S3 smphost; C:\Windows\SysWOW64\smphost.dll [11776 2013-08-22] (Microsoft Corporation)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18944 2013-08-22] (Microsoft Corporation)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [758224 2013-11-06] (Tunngle.net GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347880 2014-03-24] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2014-03-24] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-13] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-13] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-13] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-13] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-13] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-07-13] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-13] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-13] ()
R3 ATP; C:\Windows\System32\drivers\AsusTP.sys [65784 2013-04-29] (ASUS Corporation)
R3 BtAudioBusSrv; C:\Windows\System32\Drivers\BtAudioBus.sys [23136 2012-06-15] (IVT Corporation)
U4 BthAvrcpTg; No ImagePath
U4 BthHFEnum; No ImagePath
U4 bthhfhid; No ImagePath
R3 BthL2caScoIfSrv; C:\Windows\System32\Drivers\BtL2caScoIf.sys [56904 2012-07-19] (Ralink Corporation)
R3 BthLEEnum; C:\Windows\System32\drivers\BthLEEnum.sys [226304 2013-12-04] (Microsoft Corporation)
R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [48736 2012-08-14] (Ralink Corporation)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2014-01-07] (Disc Soft Ltd)
S3 IntcDAud; C:\Windows\system32\DRIVERS\IntcDAud.sys [342528 2012-11-15] (Intel(R) Corporation) [File not signed]
R3 kbfiltr; C:\Windows\System32\drivers\kbfiltr.sys [14992 2012-08-02] ( )
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [39200 2013-12-05] (NVIDIA Corporation)
R3 rtbth; C:\Windows\System32\drivers\rtbth.sys [695904 2012-09-05] (Ralink Technology, Corp.)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R3 tap0901t; C:\Windows\system32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123224 2014-03-24] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 EagleX64; \??\C:\WINDOWS\system32\drivers\EagleX64.sys [X]
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 10:17 - 2014-09-29 10:17 - 00022734 _____ () C:\Users\Filip\Desktop\FRST.txt
2014-09-29 10:16 - 2014-09-29 10:17 - 00000000 ____D () C:\FRST
2014-09-29 10:15 - 2014-09-29 10:15 - 00112640 _____ (forum.viry.cz) C:\Users\Filip\Desktop\FRSTLauncher.exe
2014-09-29 10:13 - 2014-09-29 10:13 - 02108928 _____ (Farbar) C:\Users\Filip\Desktop\FRST64.exe
2014-09-28 23:27 - 2014-09-28 23:32 - 00000079 _____ () C:\folders.log
2014-09-28 23:08 - 2014-09-28 23:32 - 00007959 _____ () C:\zoek-results.log
2014-09-28 23:06 - 2014-09-28 23:29 - 00000000 ____D () C:\zoek_backup
2014-09-28 23:05 - 2014-09-28 23:05 - 01290752 _____ () C:\Users\Filip\Desktop\zoek.exe
2014-09-28 18:31 - 2014-09-28 23:33 - 00000646 _____ () C:\WINDOWS\PFRO.log
2014-09-28 18:28 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-28 18:26 - 2014-09-28 18:30 - 00000000 ____D () C:\AdwCleaner
2014-09-28 18:25 - 2014-09-28 18:25 - 01373475 _____ () C:\Users\Filip\Desktop\adwcleaner_3.310.exe
2014-09-28 18:24 - 2014-09-28 18:24 - 00001086 _____ () C:\Users\Filip\Desktop\JRT.txt
2014-09-28 18:17 - 2014-09-28 18:17 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-09-28 18:16 - 2014-09-28 18:16 - 01699276 _____ (Thisisu) C:\Users\Filip\Desktop\JRT.exe
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\rsit
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\Program Files\trend micro
2014-09-28 17:02 - 2014-09-28 17:02 - 01222144 _____ () C:\Users\Filip\Downloads\RSITx64.exe
2014-09-28 16:45 - 2014-09-28 16:45 - 02347384 _____ (ESET) C:\Users\Filip\Downloads\esetsmartinstaller_enu.exe
2014-09-28 16:45 - 2014-09-28 16:45 - 00000000 ____D () C:\Program Files (x86)\ESET
2014-09-28 16:19 - 2014-09-28 16:19 - 01187896 _____ (Piriform Ltd) C:\Users\Filip\Downloads\ccleaner.exe
2014-09-28 16:19 - 2014-09-28 16:19 - 00001025 _____ () C:\Users\Filip\Desktop\CCleaner.lnk
2014-09-28 16:19 - 2014-09-28 16:19 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
2014-09-28 16:19 - 2014-09-28 16:19 - 00000000 ____D () C:\Program Files (x86)\CCleaner
2014-09-28 16:11 - 2014-09-28 16:11 - 00448512 _____ (OldTimer Tools) C:\Users\Filip\Downloads\TFC.exe
2014-09-28 16:03 - 2014-09-28 16:04 - 00165888 _____ () C:\Users\Filip\Downloads\T-Cleaner.exe
2014-09-26 16:07 - 2014-09-26 16:07 - 00000000 ____D () C:\Users\Filip\Desktop\Původní data aplikace Firefox
2014-09-26 14:42 - 2014-09-28 23:35 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-09-26 14:42 - 2014-09-28 22:42 - 00000530 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job
2014-09-26 14:42 - 2014-09-26 15:59 - 00000530 _____ () C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job
2014-09-26 14:42 - 2014-09-26 14:42 - 00003586 _____ () C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c
2014-09-26 14:42 - 2014-09-26 14:42 - 00003504 _____ () C:\WINDOWS\System32\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8
2014-09-26 14:42 - 2014-09-26 14:42 - 00001782 _____ () C:\Users\Filip\Desktop\SUPERAntiSpyware Professional.lnk
2014-09-26 14:42 - 2014-09-26 14:42 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\SUPERAntiSpyware.com
2014-09-26 14:42 - 2014-09-26 14:42 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-09-26 14:42 - 2014-09-26 14:42 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-09-26 14:41 - 2014-09-26 14:42 - 19590584 _____ (SUPERAntiSpyware) C:\Users\Filip\Downloads\SUPERAntiSpyware.exe
2014-09-26 14:38 - 2014-09-26 14:38 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Filip\Downloads\SpyHunter-Installer(2).exe
2014-09-26 14:38 - 2014-09-26 14:38 - 00000000 __SHD () C:\Users\Filip\AppData\Local\EmieUserList
2014-09-26 14:38 - 2014-09-26 14:38 - 00000000 __SHD () C:\Users\Filip\AppData\Local\EmieSiteList
2014-09-26 14:33 - 2014-09-26 14:33 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Filip\Downloads\SpyHunter-Installer(1).exe
2014-09-25 21:59 - 2014-09-25 21:59 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-09-25 21:56 - 2014-09-25 21:56 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\Filip\Downloads\SpyHunter-Installer.exe
2014-09-25 12:09 - 2014-09-25 12:10 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-09-23 22:38 - 2014-09-23 22:39 - 08778436 _____ () C:\Users\Filip\Downloads\35656_7.wmv
2014-09-23 12:12 - 2014-09-23 12:12 - 00272808 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaws.exe
2014-09-23 12:12 - 2014-09-23 12:12 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\javaw.exe
2014-09-23 12:12 - 2014-09-23 12:12 - 00175528 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\java.exe
2014-09-23 12:12 - 2014-09-23 12:12 - 00098216 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2014-09-23 12:12 - 2014-09-23 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-09-22 21:17 - 2014-09-22 21:17 - 00087841 _____ () C:\Users\Filip\Downloads\Edge-of-Tomorrow(0000241797).srt
2014-09-22 21:16 - 2014-09-22 21:16 - 00017553 _____ () C:\Users\Filip\Downloads\[kickass.to]edge.of.tomorrow.2014.1080p.brrip.x264.yify.torrent
2014-09-22 18:48 - 2014-09-22 18:50 - 91906368 _____ (AVAST Software) C:\Users\Filip\Downloads\avast_free_antivirus_setup.exe
2014-09-20 15:16 - 2014-09-20 18:10 - 00000270 __RSH () C:\ProgramData\ntuser.pol
2014-09-20 12:01 - 2014-09-20 12:01 - 00001394 _____ () C:\Users\Filip\AppData\Local\recently-used.xbel
2014-09-20 11:55 - 2014-09-20 11:55 - 00000000 ____D () C:\Users\Filip\AppData\Local\webkit
2014-09-19 11:06 - 2014-09-19 11:06 - 00000981 _____ () C:\Users\Filip\Desktop\godus – zástupce.lnk
2014-09-19 10:36 - 2014-09-19 10:36 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-09-19 10:36 - 2014-09-19 10:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-09-17 21:10 - 2014-09-16 17:29 - 00001228 _____ () C:\Users\Filip\Desktop\NSUNSR.ini
2014-09-17 21:05 - 2014-09-17 21:05 - 00003354 _____ () C:\Users\Filip\Desktop\codex.ini
2014-09-17 19:12 - 2014-09-17 19:13 - 00030736 _____ () C:\Users\Filip\Downloads\[kickass.to]naruto.shippuden.ultimate.ninja.storm.revolution.2014.dlc.РС.repack.by.r.g.steamgames.torrent
2014-09-16 17:26 - 2014-09-16 17:26 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Steam
2014-09-16 14:53 - 2014-09-16 14:54 - 04902336 _____ (Piriform Ltd) C:\Users\Filip\Downloads\ccsetup417pro.exe
2014-09-16 14:42 - 2014-09-16 14:43 - 04862664 _____ (AVAST Software) C:\Users\Filip\Downloads\avast_free_antivirus_setup_online.exe
2014-09-14 17:45 - 2014-09-02 22:06 - 00706016 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2014-09-14 17:45 - 2014-09-02 22:06 - 00105440 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2014-09-14 11:56 - 2014-08-23 09:48 - 02374784 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2014-09-14 11:56 - 2014-08-23 09:13 - 02084520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2014-09-14 11:56 - 2014-08-23 08:10 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\UXInit.dll
2014-09-14 11:56 - 2014-08-23 07:32 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UXInit.dll
2014-09-14 11:56 - 2014-08-23 06:44 - 02860032 _____ (Microsoft Corporation) C:\WINDOWS\system32\actxprxy.dll
2014-09-14 11:56 - 2014-08-23 06:34 - 13423104 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2014-09-14 11:56 - 2014-08-23 06:33 - 00796672 _____ (Microsoft Corporation) C:\WINDOWS\system32\uDWM.dll
2014-09-14 11:56 - 2014-08-23 06:31 - 01038336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\actxprxy.dll
2014-09-14 11:56 - 2014-08-23 06:20 - 11818496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2014-09-14 11:56 - 2014-07-30 03:56 - 00299520 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSDMon.dll
2014-09-14 11:56 - 2014-07-29 07:22 - 00205824 _____ (Microsoft Corporation) C:\WINDOWS\system32\tcpmon.dll
2014-09-14 11:55 - 2014-07-24 17:20 - 21266336 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2014-09-14 11:55 - 2014-07-24 17:07 - 07424320 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2014-09-14 11:55 - 2014-07-24 15:46 - 18760328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2014-09-14 11:55 - 2014-07-24 11:44 - 16874496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2014-09-14 11:55 - 2014-07-24 11:16 - 12730880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2014-09-14 11:55 - 2014-07-24 09:46 - 08652800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Search.dll
2014-09-14 11:55 - 2014-07-24 09:39 - 02642944 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2014-09-14 11:55 - 2014-07-24 09:38 - 06649344 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2014-09-14 11:55 - 2014-07-24 09:38 - 05777408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2014-09-14 11:55 - 2014-07-24 09:30 - 02318336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2014-09-14 11:55 - 2014-06-14 08:03 - 02389504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll
2014-09-14 11:54 - 2014-07-24 17:28 - 00468288 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2014-09-14 11:54 - 2014-07-24 17:28 - 00419648 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2014-09-14 11:54 - 2014-07-24 17:28 - 00412992 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys
2014-09-14 11:54 - 2014-07-24 17:28 - 00143680 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2014-09-14 11:54 - 2014-07-24 17:23 - 01519488 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2014-09-14 11:54 - 2014-07-24 17:20 - 00645592 _____ (Microsoft Corporation) C:\WINDOWS\system32\SHCore.dll
2014-09-14 11:54 - 2014-07-24 17:16 - 02574208 _____ (Microsoft Corporation) C:\WINDOWS\system32\WMVDECOD.DLL
2014-09-14 11:54 - 2014-07-24 17:16 - 00211216 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVol.exe
2014-09-14 11:54 - 2014-07-24 17:07 - 02009920 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2014-09-14 11:54 - 2014-07-24 17:05 - 01660048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2014-09-14 11:54 - 2014-07-24 17:05 - 01519560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2014-09-14 11:54 - 2014-07-24 17:05 - 01488008 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2014-09-14 11:54 - 2014-07-24 17:05 - 01356840 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2014-09-14 11:54 - 2014-07-24 17:03 - 02141920 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2014-09-14 11:54 - 2014-07-24 17:03 - 00882136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2014-09-14 11:54 - 2014-07-24 17:03 - 00818624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2014-09-14 11:54 - 2014-07-24 17:03 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2014-09-14 11:54 - 2014-07-24 17:03 - 00233888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2014-09-14 11:54 - 2014-07-24 17:03 - 00205512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mftranscode.dll
2014-09-14 11:54 - 2014-07-24 16:57 - 02515264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2014-09-14 11:54 - 2014-07-24 16:57 - 00475968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netio.sys
2014-09-14 11:54 - 2014-07-24 15:48 - 02410976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WMVDECOD.DLL
2014-09-14 11:54 - 2014-07-24 15:46 - 00477200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SHCore.dll
2014-09-14 11:54 - 2014-07-24 15:36 - 02145472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2014-09-14 11:54 - 2014-07-24 15:36 - 00707536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2014-09-14 11:54 - 2014-07-24 15:36 - 00674512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2014-09-14 11:54 - 2014-07-24 15:36 - 00355800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2014-09-14 11:54 - 2014-07-24 15:36 - 00180720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mftranscode.dll
2014-09-14 11:54 - 2014-07-24 13:46 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\IPMIDrv.sys
2014-09-14 11:54 - 2014-07-24 13:45 - 00076800 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hdaudbus.sys
2014-09-14 11:54 - 2014-07-24 13:44 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2014-09-14 11:54 - 2014-07-24 13:43 - 00412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2014-09-14 11:54 - 2014-07-24 13:42 - 01200640 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthport.sys
2014-09-14 11:54 - 2014-07-24 13:42 - 00446976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2014-09-14 11:54 - 2014-07-24 13:42 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\NdisImPlatform.sys
2014-09-14 11:54 - 2014-07-24 13:05 - 00287232 _____ (Microsoft Corporation) C:\WINDOWS\system32\usbmon.dll
2014-09-14 11:54 - 2014-07-24 13:05 - 00226816 _____ (Microsoft Corporation) C:\WINDOWS\system32\WebClnt.dll
2014-09-14 11:54 - 2014-07-24 12:49 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersGPExt.dll
2014-09-14 11:54 - 2014-07-24 12:20 - 02050560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2014-09-14 11:54 - 2014-07-24 12:10 - 01844224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Display.dll
2014-09-14 11:54 - 2014-07-24 12:10 - 00834560 _____ (Microsoft Corporation) C:\WINDOWS\system32\osk.exe
2014-09-14 11:54 - 2014-07-24 12:10 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WebClnt.dll
2014-09-14 11:54 - 2014-07-24 12:09 - 01057280 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdvidcrl.dll
2014-09-14 11:54 - 2014-07-24 12:06 - 00438272 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiobj.dll
2014-09-14 11:54 - 2014-07-24 11:52 - 00621056 _____ (Microsoft Corporation) C:\WINDOWS\system32\comdlg32.dll
2014-09-14 11:54 - 2014-07-24 11:39 - 00770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkfoldersControl.dll
2014-09-14 11:54 - 2014-07-24 11:33 - 01741824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2014-09-14 11:54 - 2014-07-24 11:24 - 01817088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Display.dll
2014-09-14 11:54 - 2014-07-24 11:23 - 00328704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiobj.dll
2014-09-14 11:54 - 2014-07-24 11:12 - 00127488 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDisplay.dll
2014-09-14 11:54 - 2014-07-24 11:11 - 00356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\conhost.exe
2014-09-14 11:54 - 2014-07-24 11:10 - 00540672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comdlg32.dll
2014-09-14 11:54 - 2014-07-24 11:09 - 00116736 _____ (Microsoft Corporation) C:\WINDOWS\system32\httpprxm.dll
2014-09-14 11:54 - 2014-07-24 11:03 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\srvsvc.dll
2014-09-14 11:54 - 2014-07-24 11:02 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\profsvc.dll
2014-09-14 11:54 - 2014-07-24 10:53 - 01261056 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpsvc.dll
2014-09-14 11:54 - 2014-07-24 10:53 - 00449536 _____ (Microsoft Corporation) C:\WINDOWS\system32\defragsvc.dll
2014-09-14 11:54 - 2014-07-24 10:49 - 01287680 _____ (Microsoft Corporation) C:\WINDOWS\system32\mispace.dll
2014-09-14 11:54 - 2014-07-24 10:39 - 02397184 _____ (Microsoft Corporation) C:\WINDOWS\system32\storagewmi.dll
2014-09-14 11:54 - 2014-07-24 10:38 - 00371200 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanmsm.dll
2014-09-14 11:54 - 2014-07-24 10:32 - 01532416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2014-09-14 11:54 - 2014-07-24 10:30 - 00230400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanapi.dll
2014-09-14 11:54 - 2014-07-24 10:29 - 00439296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Devices.Bluetooth.dll
2014-09-14 11:54 - 2014-07-24 10:27 - 00907776 _____ (Microsoft Corporation) C:\WINDOWS\system32\iphlpsvc.dll
2014-09-14 11:54 - 2014-07-24 10:23 - 01404416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\storagewmi.dll
2014-09-14 11:54 - 2014-07-24 10:22 - 00487936 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2014-09-14 11:54 - 2014-07-24 10:21 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2014-09-14 11:54 - 2014-07-24 10:21 - 00302080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wlanmsm.dll
2014-09-14 11:54 - 2014-07-24 10:19 - 00388608 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2014-09-14 11:54 - 2014-07-24 10:18 - 00795136 _____ (Microsoft Corporation) C:\WINDOWS\system32\spoolsv.exe
2014-09-14 11:54 - 2014-07-24 10:16 - 00505344 _____ (Microsoft Corporation) C:\WINDOWS\system32\VAN.dll
2014-09-14 11:54 - 2014-07-24 10:16 - 00084480 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2014-09-14 11:54 - 2014-07-24 10:15 - 00828416 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2014-09-14 11:54 - 2014-07-24 10:10 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\system32\localspl.dll
2014-09-14 11:54 - 2014-07-24 10:10 - 00889344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2014-09-14 11:54 - 2014-07-24 10:10 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32spl.dll
2014-09-14 11:54 - 2014-07-24 10:10 - 00371712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2014-09-14 11:54 - 2014-07-24 10:04 - 00667136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2014-09-14 11:54 - 2014-07-24 10:02 - 03465216 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2014-09-14 11:54 - 2014-07-24 10:01 - 05833216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Search.dll
2014-09-14 11:54 - 2014-07-24 10:01 - 01992192 _____ (Microsoft Corporation) C:\WINDOWS\system32\XpsPrint.dll
2014-09-14 11:54 - 2014-07-24 09:50 - 01182208 _____ (Microsoft Corporation) C:\WINDOWS\system32\printui.dll
2014-09-14 11:54 - 2014-07-24 09:49 - 00263680 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafPrintProvider.dll
2014-09-14 11:54 - 2014-07-24 09:47 - 00576512 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2014-09-14 11:54 - 2014-07-24 09:44 - 01057792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\printui.dll
2014-09-14 11:54 - 2014-07-24 09:43 - 02696704 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers.dll
2014-09-14 11:54 - 2014-07-24 09:33 - 03360768 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2014-09-14 11:54 - 2014-07-24 09:28 - 01600000 _____ (Microsoft Corporation) C:\WINDOWS\system32\workfolderssvc.dll
2014-09-14 11:54 - 2014-07-24 06:11 - 00513544 _____ () C:\WINDOWS\SysWOW64\locale.nls
2014-09-14 11:54 - 2014-07-24 06:11 - 00513544 _____ () C:\WINDOWS\system32\locale.nls
2014-09-14 11:54 - 2014-07-12 07:55 - 00268288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wisp.dll
2014-09-14 11:54 - 2014-07-12 06:58 - 00210944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wisp.dll
2014-09-14 11:54 - 2014-07-12 06:13 - 01417216 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2014-09-14 11:54 - 2014-07-04 12:29 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSip.dll
2014-09-14 11:54 - 2014-07-04 11:30 - 00544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxPackaging.dll
2014-09-14 11:54 - 2014-07-04 11:27 - 00474112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxPackaging.dll
2014-09-14 11:54 - 2014-06-27 08:22 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srvnet.sys
2014-09-14 11:54 - 2014-06-26 02:32 - 01029632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2014-09-14 11:54 - 2014-06-20 01:37 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2014-09-14 11:54 - 2014-06-19 04:13 - 00310080 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volsnap.sys
2014-09-14 11:54 - 2014-06-14 07:46 - 02071552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll
2014-09-14 11:54 - 2014-06-05 16:00 - 01118040 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ndis.sys
2014-09-14 11:54 - 2014-06-05 12:18 - 01018368 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2014-09-14 11:54 - 2014-06-05 11:42 - 00889856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2014-09-14 11:54 - 2014-05-31 07:00 - 01463808 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsecedit.dll
2014-09-14 11:54 - 2014-05-29 08:23 - 00427008 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2014-09-14 11:54 - 2014-05-29 07:25 - 00313856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2014-09-14 11:54 - 2014-05-10 12:12 - 00387896 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcryptprimitives.dll
2014-09-14 11:54 - 2014-05-10 10:46 - 00335680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcryptprimitives.dll
2014-09-14 11:54 - 2014-05-06 06:41 - 00486744 _____ (Microsoft Corporation) C:\WINDOWS\system32\netcfgx.dll
2014-09-14 11:54 - 2014-05-06 02:55 - 00391000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\netcfgx.dll
2014-09-14 11:54 - 2014-03-25 04:27 - 00160600 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmmbase.dll
2014-09-14 11:54 - 2014-03-25 04:27 - 00123920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmm.dll
2014-09-14 11:54 - 2014-03-25 03:20 - 00127544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmmbase.dll
2014-09-14 11:53 - 2014-07-24 17:28 - 00280384 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2014-09-14 11:53 - 2014-07-24 17:25 - 00054752 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2014-09-14 11:53 - 2014-07-24 17:23 - 00125472 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmapi.dll
2014-09-14 11:53 - 2014-07-24 17:20 - 00263400 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlows.exe
2014-09-14 11:53 - 2014-07-24 15:50 - 00098048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmapi.dll
2014-09-14 11:53 - 2014-07-24 15:48 - 00180208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SndVol.exe
2014-09-14 11:53 - 2014-07-24 13:51 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRUM.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDYAK.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTT102.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDTAT.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU1.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDBASH.DLL
2014-09-14 11:53 - 2014-07-24 13:51 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\KBDRU.DLL
2014-09-14 11:53 - 2014-07-24 13:47 - 00132608 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2014-09-14 11:53 - 2014-07-24 13:41 - 00118272 ____C (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bthpan.sys
2014-09-14 11:53 - 2014-07-24 13:41 - 00115712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\bridge.sys
2014-09-14 11:53 - 2014-07-24 13:33 - 00059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2014-09-14 11:53 - 2014-07-24 13:33 - 00050688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2014-09-14 11:53 - 2014-07-24 13:22 - 00308736 _____ (Microsoft Corporation) C:\WINDOWS\system32\compstui.dll
2014-09-14 11:53 - 2014-07-24 13:06 - 00220160 _____ (Microsoft Corporation) C:\WINDOWS\system32\iasnap.dll
2014-09-14 11:53 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDYAK.DLL
2014-09-14 11:53 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTT102.DLL
2014-09-14 11:53 - 2014-07-24 12:52 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDTAT.DLL
2014-09-14 11:53 - 2014-07-24 12:51 - 00008192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRUM.DLL
2014-09-14 11:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU1.DLL
2014-09-14 11:53 - 2014-07-24 12:51 - 00007168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDBASH.DLL
2014-09-14 11:53 - 2014-07-24 12:51 - 00006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KBDRU.DLL
2014-09-14 11:53 - 2014-07-24 12:33 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2014-09-14 11:53 - 2014-07-24 12:32 - 00207360 _____ (Microsoft Corporation) C:\WINDOWS\system32\powercfg.cpl
2014-09-14 11:53 - 2014-07-24 12:18 - 01089024 _____ (Microsoft Corporation) C:\WINDOWS\system32\gpedit.dll
2014-09-14 11:53 - 2014-07-24 12:12 - 00878592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActionCenter.dll
2014-09-14 11:53 - 2014-07-24 12:10 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iasnap.dll
2014-09-14 11:53 - 2014-07-24 12:05 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\WorkFoldersShell.dll
2014-09-14 11:53 - 2014-07-24 11:53 - 00215552 _____ (Microsoft Corporation) C:\WINDOWS\system32\prnntfy.dll
2014-09-14 11:53 - 2014-07-24 11:42 - 00206336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\powercfg.cpl
2014-09-14 11:53 - 2014-07-24 11:40 - 00557056 _____ (Microsoft Corporation) C:\WINDOWS\system32\PrintDialogs.dll
2014-09-14 11:53 - 2014-07-24 11:32 - 01048064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gpedit.dll
2014-09-14 11:53 - 2014-07-24 11:27 - 00855552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdvidcrl.dll
2014-09-14 11:53 - 2014-07-24 11:27 - 00779264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\osk.exe
2014-09-14 11:53 - 2014-07-24 11:25 - 00832512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActionCenter.dll
2014-09-14 11:53 - 2014-07-24 11:21 - 00134144 _____ (Microsoft Corporation) C:\WINDOWS\system32\browser.dll
2014-09-14 11:53 - 2014-07-24 11:18 - 00018432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvcpal.dll
2014-09-14 11:53 - 2014-07-24 11:14 - 00443904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2014-09-14 11:53 - 2014-07-24 11:13 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\prnntfy.dll
2014-09-14 11:53 - 2014-07-24 11:11 - 00063488 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshbth.dll
2014-09-14 11:53 - 2014-07-24 11:04 - 00492032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintDialogs.dll
2014-09-14 11:53 - 2014-07-24 11:04 - 00183808 _____ (Microsoft Corp.) C:\WINDOWS\system32\Defrag.exe
2014-09-14 11:53 - 2014-07-24 10:58 - 00105472 _____ (Microsoft Corporation) C:\WINDOWS\system32\BluetoothApis.dll
2014-09-14 11:53 - 2014-07-24 10:49 - 01361408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2014-09-14 11:53 - 2014-07-24 10:49 - 00296960 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlanapi.dll
2014-09-14 11:53 - 2014-07-24 10:49 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\adhsvc.dll
2014-09-14 11:53 - 2014-07-24 10:48 - 00659968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Devices.Bluetooth.dll
2014-09-14 11:53 - 2014-07-24 10:47 - 00102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2014-09-14 11:53 - 2014-07-24 10:43 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshbth.dll
2014-09-14 11:53 - 2014-07-24 10:36 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BluetoothApis.dll
2014-09-14 11:53 - 2014-07-24 10:28 - 00595456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.dll
2014-09-14 11:53 - 2014-07-24 10:24 - 00249344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-14 11:53 - 2014-07-24 10:20 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\puiapi.dll
2014-09-14 11:53 - 2014-07-24 10:18 - 01144320 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2014-09-14 11:53 - 2014-07-24 10:18 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2014-09-14 11:53 - 2014-07-24 10:15 - 00721408 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2014-09-14 11:53 - 2014-07-24 10:15 - 00432128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.dll
2014-09-14 11:53 - 2014-07-24 10:13 - 00226304 _____ (Microsoft Corporation) C:\WINDOWS\system32\SndVolSSO.dll
2014-09-14 11:53 - 2014-07-24 10:12 - 00189952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.Store.TestingFramework.dll
2014-09-14 11:53 - 2014-07-24 10:08 - 00321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\stobject.dll
2014-09-14 11:53 - 2014-07-24 10:08 - 00162816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\puiapi.dll
2014-09-14 11:53 - 2014-07-24 10:07 - 01705472 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2014-09-14 11:53 - 2014-07-24 10:06 - 00080896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2014-09-14 11:53 - 2014-07-24 10:05 - 00448000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VAN.dll
2014-09-14 11:53 - 2014-07-24 10:01 - 01126912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SearchFolder.dll
2014-09-14 11:53 - 2014-07-24 10:00 - 02100736 _____ (Microsoft Corporation) C:\WINDOWS\system32\SystemSettingsAdminFlowUI.dll
2014-09-14 11:53 - 2014-07-24 09:58 - 00432640 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2014-09-14 11:53 - 2014-07-24 09:58 - 00288768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\stobject.dll
2014-09-14 11:53 - 2014-07-24 09:54 - 01290752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XpsPrint.dll
2014-09-14 11:53 - 2014-07-24 09:50 - 00923136 _____ (Microsoft Corporation) C:\WINDOWS\system32\WSShared.dll
2014-09-14 11:53 - 2014-07-24 09:43 - 00756224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WSShared.dll
2014-09-14 11:53 - 2014-07-24 09:43 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafPrintProvider.dll
2014-09-14 11:53 - 2014-07-24 09:41 - 00459264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2014-09-14 11:53 - 2014-07-12 07:23 - 00436224 _____ (Microsoft Corporation) C:\WINDOWS\system32\certcli.dll
2014-09-14 11:53 - 2014-07-12 06:33 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\certcli.dll
2014-09-14 11:53 - 2014-07-10 01:19 - 00387391 _____ () C:\WINDOWS\system32\ApnDatabase.xml
2014-09-14 11:53 - 2014-07-04 14:59 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ks.sys
2014-09-14 11:53 - 2014-07-04 12:20 - 01656832 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2014-09-14 11:53 - 2014-07-04 12:06 - 00095232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxSip.dll
2014-09-14 11:53 - 2014-07-04 12:00 - 01351168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2014-09-14 11:53 - 2014-06-26 02:29 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\dab.dll
2014-09-14 11:53 - 2014-06-07 14:46 - 00216368 _____ (Microsoft Corporation) C:\WINDOWS\system32\rsaenh.dll
2014-09-14 11:53 - 2014-06-07 12:20 - 00189016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rsaenh.dll
2014-09-14 11:53 - 2014-05-31 06:18 - 01319936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsecedit.dll
2014-09-14 11:53 - 2014-05-29 07:20 - 00427520 _____ (Microsoft Corporation) C:\WINDOWS\system32\schannel.dll
2014-09-14 11:53 - 2014-05-29 06:36 - 00344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\schannel.dll
2014-09-14 11:53 - 2014-05-26 09:26 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxSysprep.dll
2014-09-14 11:53 - 2014-03-25 03:20 - 00128568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmm.dll
2014-09-14 11:41 - 2014-08-15 02:36 - 00146752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msgpioclx.sys
2014-09-13 14:31 - 2014-09-13 14:31 - 00000000 ____D () C:\Users\Filip\Documents\Holotech
2014-09-13 14:20 - 2014-09-13 14:20 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2014-09-13 14:18 - 2014-09-13 14:18 - 00000656 _____ () C:\Users\Public\Desktop\FaceRig.exe.lnk
2014-09-13 14:16 - 2014-09-13 14:18 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FaceRig v0.69b (Build 271)
2014-09-11 21:21 - 2014-09-11 21:21 - 00045483 _____ () C:\Users\Filip\Downloads\47-Ronin(0000233840).srt
2014-09-11 17:43 - 2014-09-05 04:36 - 00097280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll
2014-09-11 17:43 - 2014-09-05 04:31 - 00527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2014-09-11 17:43 - 2014-09-05 02:48 - 00738816 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2014-09-11 17:29 - 2014-08-16 04:40 - 23591424 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2014-09-11 17:29 - 2014-08-16 04:04 - 17455104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2014-09-11 17:29 - 2014-08-16 04:00 - 05833728 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2014-09-11 17:29 - 2014-08-16 04:00 - 02793984 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2014-09-11 17:29 - 2014-08-16 03:56 - 00547328 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2014-09-11 17:29 - 2014-08-16 03:54 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\MshtmlDac.dll
2014-09-11 17:29 - 2014-08-16 03:45 - 04232704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2014-09-11 17:29 - 2014-08-16 03:43 - 00758272 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll
2014-09-11 17:29 - 2014-08-16 03:32 - 00446464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtmsft.dll
2014-09-11 17:29 - 2014-08-16 03:25 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\JavaScriptCollectionAgent.dll
2014-09-11 17:29 - 2014-08-16 03:22 - 00454656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2014-09-11 17:29 - 2014-08-16 03:20 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MshtmlDac.dll
2014-09-11 17:29 - 2014-08-16 03:19 - 00085504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2014-09-11 17:29 - 2014-08-16 03:18 - 02185728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2014-09-11 17:29 - 2014-08-16 03:18 - 00289280 _____ (Microsoft Corporation) C:\WINDOWS\system32\dxtrans.dll
2014-09-11 17:29 - 2014-08-16 03:11 - 00597504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll
2014-09-11 17:29 - 2014-08-16 03:06 - 00359424 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2014-09-11 17:29 - 2014-08-16 03:05 - 00727040 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2014-09-11 17:29 - 2014-08-16 03:05 - 00707072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2014-09-11 17:29 - 2014-08-16 03:03 - 02104832 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2014-09-11 17:29 - 2014-08-16 03:03 - 00365056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtmsft.dll
2014-09-11 17:29 - 2014-08-16 02:58 - 00060416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JavaScriptCollectionAgent.dll
2014-09-11 17:29 - 2014-08-16 02:56 - 02310656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2014-09-11 17:29 - 2014-08-16 02:53 - 13588480 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2014-09-11 17:29 - 2014-08-16 02:53 - 00243200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dxtrans.dll
2014-09-11 17:29 - 2014-08-16 02:53 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtmled.dll
2014-09-11 17:29 - 2014-08-16 02:51 - 11769856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2014-09-11 17:29 - 2014-08-16 02:45 - 00603136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2014-09-11 17:29 - 2014-08-16 02:44 - 02014208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2014-09-11 17:29 - 2014-08-16 02:44 - 00312320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2014-09-11 17:29 - 2014-08-16 02:34 - 01447424 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2014-09-11 17:29 - 2014-08-16 02:20 - 01812992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2014-09-11 17:29 - 2014-08-16 02:18 - 00775168 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2014-09-11 17:29 - 2014-08-16 02:14 - 01190400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2014-09-11 17:29 - 2014-08-16 02:12 - 00678400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2014-09-11 17:29 - 2014-05-30 11:28 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2014-09-11 17:29 - 2014-05-30 10:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iesetup.dll
2014-09-11 17:29 - 2014-02-06 13:30 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2014-09-11 17:29 - 2014-02-06 13:30 - 00004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollectorres.dll
2014-09-11 17:29 - 2014-02-06 13:07 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2014-09-11 17:29 - 2014-02-06 13:06 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwproxystub.dll
2014-09-11 17:29 - 2014-02-06 12:56 - 00033792 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2014-09-11 17:29 - 2014-02-06 12:49 - 00139264 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieUnatt.exe
2014-09-11 17:29 - 2014-02-06 12:48 - 00111616 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieetwcollector.exe
2014-09-11 17:29 - 2014-02-06 12:20 - 02724864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2014-09-11 17:29 - 2014-02-06 12:17 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\system32\msrating.dll
2014-09-11 17:29 - 2014-02-06 12:00 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieetwproxystub.dll
2014-09-11 17:29 - 2014-02-06 11:52 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2014-09-11 17:29 - 2014-02-06 11:52 - 00032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iernonce.dll
2014-09-11 17:29 - 2014-02-06 11:47 - 00112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieUnatt.exe
2014-09-11 17:29 - 2014-02-06 11:25 - 00164864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msrating.dll
2014-09-11 11:55 - 2014-08-02 02:18 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2014-09-11 11:54 - 2014-07-24 05:20 - 00875688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr120_clr0400.dll
2014-09-11 11:54 - 2014-07-24 05:20 - 00869544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr120_clr0400.dll
2014-09-10 21:32 - 2014-09-10 21:32 - 00061682 _____ () C:\Users\Filip\Downloads\Elysium(0000227830).srt
2014-09-09 18:22 - 2014-09-09 18:22 - 00109363 _____ () C:\Users\Filip\Downloads\Neighbors(0000240883).srt
2014-09-09 13:54 - 2014-09-09 13:54 - 01035960 _____ (Microsoft Corporation) C:\Users\Filip\Downloads\Setup.X86.cs-CZ_O365HomePremRetail_edc11186-50e4-4083-86b7-49625b3cf397_TX_DB_.exe
2014-09-08 22:47 - 2014-09-08 22:47 - 00110621 _____ () C:\Users\Filip\Downloads\A-Million-Ways-to-Die-in-the-West(0000238743).srt
2014-09-08 18:54 - 2014-09-08 18:54 - 00001830 _____ () C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\avast! antivirus.lnk
2014-09-08 18:40 - 2014-09-08 19:33 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Battle.net
2014-09-07 22:26 - 2014-09-09 13:51 - 00000000 ____D () C:\Users\Filip\Desktop\Trash
2014-09-04 19:45 - 2014-09-29 10:10 - 00004978 _____ () C:\WINDOWS\System32\Tasks\Microsoft Office 15 Sync Maintenance for NTB-FILIP-Filip ntb-Filip
2014-09-04 19:45 - 2014-09-04 19:45 - 00003098 _____ () C:\WINDOWS\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2940038897-2106135158-3134801606-1002
2014-09-04 19:11 - 2014-09-04 19:11 - 01035960 _____ (Microsoft Corporation) C:\Users\Filip\Downloads\Setup.X86.cs-CZ_O365HomePremRetail_64bf64b4-4336-4adc-983b-57566018318b_TX_DB_.exe
2014-09-03 14:39 - 2014-09-03 14:39 - 00073398 _____ () C:\Users\Filip\Downloads\How-to-Train-Your-Dragon-2(0000241176).srt
2014-09-02 20:42 - 2014-09-02 20:42 - 00033452 _____ () C:\Users\Filip\Downloads\[kickass.to]how.to.train.your.dragon.2.2014.1080p.web.dl.aac2.0.h264.rarbg.torrent
2014-08-30 13:57 - 2014-08-30 13:57 - 00248388 _____ () C:\Users\Filip\Downloads\AdiBags-v1.4.7.1.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-09-29 10:16 - 2013-12-24 19:45 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2940038897-2106135158-3134801606-1002
2014-09-29 10:13 - 2014-01-16 11:32 - 00003974 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{194E2AC8-EC91-446C-9C44-818E83D90A65}
2014-09-29 10:13 - 2012-09-10 16:54 - 00000739 _____ () C:\WINDOWS\SysWOW64\bscs.ini
2014-09-29 10:10 - 2014-01-07 19:53 - 01218273 _____ () C:\WINDOWS\WindowsUpdate.log
2014-09-29 10:10 - 2013-12-24 20:51 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Skype
2014-09-29 10:10 - 2013-11-07 14:46 - 00004268 _____ () C:\WINDOWS\SysWOW64\LOCALSERVICE.INI
2014-09-29 10:10 - 2013-11-07 14:46 - 00000043 _____ () C:\WINDOWS\SysWOW64\LOCALDEVICE.INI
2014-09-29 10:10 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2014-09-28 23:36 - 2014-06-29 15:11 - 00000000 ___RD () C:\Users\Filip\Dropbox
2014-09-28 23:36 - 2014-04-06 10:01 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Dropbox
2014-09-28 23:36 - 2014-02-15 12:35 - 00000000 ___DO () C:\Users\Filip\SkyDrive
2014-09-28 23:35 - 2014-02-10 15:08 - 00000970 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-09-28 23:34 - 2014-02-10 15:08 - 00000966 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2014-09-28 23:34 - 2013-12-24 19:39 - 00000062 _____ () C:\Users\Filip\AppData\Roaming\sp_data.sys
2014-09-28 23:33 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2014-09-28 23:28 - 2013-12-24 21:08 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-09-28 23:06 - 2013-12-30 17:40 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\TS3Client
2014-09-28 20:34 - 2014-01-08 22:46 - 00000000 ____D () C:\Users\Filip\AppData\Local\Akamai
2014-09-28 16:21 - 2014-05-05 19:46 - 00000000 ____D () C:\WINDOWS\Minidump
2014-09-28 16:15 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2014-09-28 16:04 - 2014-01-07 20:00 - 00000000 ____D () C:\Users\Filip
2014-09-28 15:24 - 2013-12-29 13:55 - 00293376 ___SH () C:\Users\Filip\Desktop\Thumbs.db
2014-09-28 14:39 - 2014-08-27 16:19 - 00000000 ____D () C:\Users\Filip\Documents\ArcheAge
2014-09-28 12:00 - 2014-08-17 12:02 - 00003474 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update1
2014-09-28 12:00 - 2013-11-07 14:50 - 00003464 _____ () C:\WINDOWS\System32\Tasks\ASUS Live Update2
2014-09-28 11:04 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2014-09-27 13:40 - 2013-11-07 14:25 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-09-27 13:36 - 2014-06-29 10:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Catalyst
2014-09-27 12:08 - 2013-12-25 21:20 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\vlc
2014-09-27 01:24 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\rescache
2014-09-26 15:53 - 2014-04-27 15:01 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2014-09-25 22:56 - 2013-12-29 14:54 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2014-09-25 21:35 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2014-09-25 21:24 - 2013-12-24 21:01 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-09-25 21:14 - 2014-01-14 15:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2014-09-25 21:13 - 2014-08-16 22:21 - 00000000 ____D () C:\Users\Filip\Documents\BioWare
2014-09-25 19:02 - 2013-12-26 12:44 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Azureus
2014-09-25 16:17 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2014-09-23 12:21 - 2013-12-24 21:11 - 00000000 ____D () C:\ProgramData\Oracle
2014-09-22 19:12 - 2013-12-24 21:21 - 00000000 ____D () C:\Users\Filip\AppData\Local\Warframe
2014-09-22 18:51 - 2013-11-14 14:40 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2014-09-22 18:51 - 2013-11-14 14:24 - 00739924 _____ () C:\WINDOWS\system32\perfh005.dat
2014-09-22 18:51 - 2013-11-14 14:24 - 00151610 _____ () C:\WINDOWS\system32\perfc005.dat
2014-09-20 15:16 - 2013-08-22 17:36 - 00000000 ___HD () C:\WINDOWS\system32\GroupPolicy
2014-09-20 15:16 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\GroupPolicy
2014-09-20 15:12 - 2014-02-15 11:34 - 00000000 ____D () C:\Users\Filip\.gimp-2.8
2014-09-20 11:47 - 2014-07-18 15:38 - 00000000 ____D () C:\Users\Filip\AppData\Local\gtk-2.0
2014-09-19 12:49 - 2014-06-29 15:11 - 00001072 _____ () C:\Users\Filip\Desktop\Dropbox.lnk
2014-09-19 12:49 - 2014-04-06 10:01 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2014-09-19 10:36 - 2013-12-24 20:50 - 00000000 ____D () C:\ProgramData\Skype
2014-09-18 13:26 - 2014-01-14 16:43 - 00000000 ____D () C:\Users\Filip\AppData\Local\SKIDROW
2014-09-17 23:01 - 2013-12-30 20:24 - 00000000 ____D () C:\Users\Filip\AppData\Roaming\Tunngle
2014-09-17 23:01 - 2013-12-30 20:24 - 00000000 ____D () C:\ProgramData\Tunngle
2014-09-15 12:58 - 2013-12-24 22:31 - 00000000 ____D () C:\Users\Filip\AppData\Local\Skyrim
2014-09-15 12:01 - 2013-08-22 16:44 - 00584128 _____ () C:\WINDOWS\system32\FNTCACHE.DAT
2014-09-14 18:11 - 2013-12-24 20:28 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2014-09-14 17:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ToastData
2014-09-14 17:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-09-14 17:41 - 2013-08-22 17:36 - 00000000 ___RD () C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2014-09-14 17:40 - 2014-07-14 20:07 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2014-09-14 17:40 - 2013-11-14 14:26 - 00000000 ____D () C:\Program Files\Windows Journal
2014-09-14 17:40 - 2013-08-22 17:36 - 00000000 ___RD () C:\WINDOWS\ImmersiveControlPanel
2014-09-14 17:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\WinStore
2014-09-14 17:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\setup
2014-09-14 17:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\SysWOW64\InputMethod
2014-09-14 17:40 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\setup
2014-09-14 17:40 - 2013-08-22 15:36 - 00000000 ____D () C:\WINDOWS\system32\oobe
2014-09-14 17:39 - 2014-01-03 12:19 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-09-14 17:30 - 2014-01-03 12:19 - 101694776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-09-13 23:21 - 2014-04-27 15:01 - 00000864 _____ () C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2014-09-13 23:20 - 2014-04-27 15:01 - 00000000 ____D () C:\Program Files\Nexus Mod Manager
2014-09-10 11:48 - 2014-04-03 19:06 - 00000000 ____D () C:\Users\Filip\Desktop\Hry
2014-09-09 22:28 - 2013-12-24 21:08 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2014-09-09 13:56 - 2014-03-23 15:15 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-09-08 19:52 - 2013-12-24 21:16 - 00000000 ____D () C:\Users\Filip\AppData\Local\Battle.net

Files to move or delete:
====================
C:\ProgramData\SetStretch.exe

Some content of TEMP:
====================
C:\Users\Filip\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmp4jvtqb.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Filip\Desktop" je 8323 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR"=dword:00000000
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#8 Příspěvek od **vyosek** » 29 Zář 2014 11:36

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Battle.net] => D:\Battle.net\Battle.net Launcher.exe [2869808 2014-09-08] (Blizzard Entertainment)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7763736 2014-09-10] (SUPERAntiSpyware)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Policies\Explorer: [] 
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\MountPoints2: {a9486f97-77c6-11e3-824f-34238719aa68} - "F:\setup.exe" 
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

2014-09-29 10:17 - 2014-09-29 10:17 - 00022734 _____ () C:\Users\Filip\Desktop\FRST.txt
2014-09-29 10:15 - 2014-09-29 10:15 - 00112640 _____ (forum.viry.cz) C:\Users\Filip\Desktop\FRSTLauncher.exe
2014-09-28 23:27 - 2014-09-28 23:32 - 00000079 _____ () C:\folders.log
2014-09-28 23:08 - 2014-09-28 23:32 - 00007959 _____ () C:\zoek-results.log
2014-09-28 23:06 - 2014-09-28 23:29 - 00000000 ____D () C:\zoek_backup
2014-09-28 23:05 - 2014-09-28 23:05 - 01290752 _____ () C:\Users\Filip\Desktop\zoek.exe
2014-09-28 18:31 - 2014-09-28 23:33 - 00000646 _____ () C:\WINDOWS\PFRO.log
2014-09-28 18:28 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-28 18:26 - 2014-09-28 18:30 - 00000000 ____D () C:\AdwCleaner
2014-09-28 18:25 - 2014-09-28 18:25 - 01373475 _____ () C:\Users\Filip\Desktop\adwcleaner_3.310.exe
2014-09-28 18:24 - 2014-09-28 18:24 - 00001086 _____ () C:\Users\Filip\Desktop\JRT.txt
2014-09-28 18:17 - 2014-09-28 18:17 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-09-28 18:16 - 2014-09-28 18:16 - 01699276 _____ (Thisisu) C:\Users\Filip\Desktop\JRT.exe
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\rsit
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\Program Files\trend micro
2014-09-28 17:02 - 2014-09-28 17:02 - 01222144 _____ () C:\Users\Filip\Downloads\RSITx64.exe
2014-09-28 16:45 - 2014-09-28 16:45 - 02347384 _____ (ESET) C:\Users\Filip\Downloads\esetsmartinstaller_enu.exe
2014-09-28 16:19 - 2014-09-28 16:19 - 01187896 _____ (Piriform Ltd) C:\Users\Filip\Downloads\ccleaner.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

Elsone · #9 Příspěvek od **Elsone** » 29 Zář 2014 11:53

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-09-2014 02
Ran by Filip at 2014-09-29 12:46:57 Run:1
Running from C:\Users\Filip\Desktop
Loaded Profile: Filip (Available profiles: Filip)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:

HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40312 2013-12-18] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RemoteControl10] => C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe [95192 2013-03-08] (CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Battle.net] => D:\Battle.net\Battle.net Launcher.exe [2869808 2014-09-08] (Blizzard Entertainment)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Akamai NetSession Interface] => C:\Users\Filip\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [22041192 2014-08-27] (Skype Technologies S.A.)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7763736 2014-09-10] (SUPERAntiSpyware)
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\Policies\Explorer: []
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\...\MountPoints2: {a9486f97-77c6-11e3-824f-34238719aa68} - "F:\setup.exe"
ShellIconOverlayIdentifiers: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive1 -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive2 -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => No File
ShellIconOverlayIdentifiers-x32: SkyDrive3 -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => No File

HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://asus13.msn.com
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK

S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]

2014-09-29 10:17 - 2014-09-29 10:17 - 00022734 _____ () C:\Users\Filip\Desktop\FRST.txt
2014-09-29 10:15 - 2014-09-29 10:15 - 00112640 _____ (forum.viry.cz) C:\Users\Filip\Desktop\FRSTLauncher.exe
2014-09-28 23:27 - 2014-09-28 23:32 - 00000079 _____ () C:\folders.log
2014-09-28 23:08 - 2014-09-28 23:32 - 00007959 _____ () C:\zoek-results.log
2014-09-28 23:06 - 2014-09-28 23:29 - 00000000 ____D () C:\zoek_backup
2014-09-28 23:05 - 2014-09-28 23:05 - 01290752 _____ () C:\Users\Filip\Desktop\zoek.exe
2014-09-28 18:31 - 2014-09-28 23:33 - 00000646 _____ () C:\WINDOWS\PFRO.log
2014-09-28 18:28 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\WINDOWS\SysWOW64\sqlite3.dll
2014-09-28 18:26 - 2014-09-28 18:30 - 00000000 ____D () C:\AdwCleaner
2014-09-28 18:25 - 2014-09-28 18:25 - 01373475 _____ () C:\Users\Filip\Desktop\adwcleaner_3.310.exe
2014-09-28 18:24 - 2014-09-28 18:24 - 00001086 _____ () C:\Users\Filip\Desktop\JRT.txt
2014-09-28 18:17 - 2014-09-28 18:17 - 00000000 ____D () C:\WINDOWS\ERUNT
2014-09-28 18:16 - 2014-09-28 18:16 - 01699276 _____ (Thisisu) C:\Users\Filip\Desktop\JRT.exe
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\rsit
2014-09-28 17:03 - 2014-09-28 17:03 - 00000000 ____D () C:\Program Files\trend micro
2014-09-28 17:02 - 2014-09-28 17:02 - 01222144 _____ () C:\Users\Filip\Downloads\RSITx64.exe
2014-09-28 16:45 - 2014-09-28 16:45 - 02347384 _____ (ESET) C:\Users\Filip\Downloads\esetsmartinstaller_enu.exe
2014-09-28 16:19 - 2014-09-28 16:19 - 01187896 _____ (Piriform Ltd) C:\Users\Filip\Downloads\ccleaner.exe

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
Task: C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

Hosts:
EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe Reader Speed Launcher => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\RemoteControl10 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SunJavaUpdateSched => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Battle.net => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Akamai NetSession Interface => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Run\\Skype => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Run\\SUPERAntiSpyware => value deleted successfully.
HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\ => value deleted successfully.
"HKU\S-1-5-21-2940038897-2106135158-3134801606-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a9486f97-77c6-11e3-824f-34238719aa68}" => Key deleted successfully.
"HKCR\CLSID\{a9486f97-77c6-11e3-824f-34238719aa68}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1" => Key not found.
"HKCR\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2" => Key not found.
"HKCR\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" => Key not found.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3" => Key not found.
"HKCR\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}" => Key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive1" => Key not found.
"HKCR\Wow6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" => Key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive2" => Key not found.
"HKCR\Wow6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" => Key not found.
"HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SkyDrive3" => Key not found.
"HKCR\Wow6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}" => Key not found.
HKCU\Software\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => value deleted successfully.
"HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F}" => Key not found.
HKLM\Software\Wow6432Node\Mozilla\Thunderbird\Extensions\\msktbird@mcafee.com => value deleted successfully.
esgiguard => Service deleted successfully.
"C:\Users\Filip\Desktop\FRST.txt" => File/Directory not found.
C:\Users\Filip\Desktop\FRSTLauncher.exe => Moved successfully.
C:\folders.log => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Filip\Desktop\zoek.exe => Moved successfully.
C:\WINDOWS\PFRO.log => Moved successfully.
C:\WINDOWS\SysWOW64\sqlite3.dll => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Filip\Desktop\adwcleaner_3.310.exe => Moved successfully.
C:\Users\Filip\Desktop\JRT.txt => Moved successfully.
C:\WINDOWS\ERUNT => Moved successfully.
C:\Users\Filip\Desktop\JRT.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Program Files\trend micro => Moved successfully.
C:\Users\Filip\Downloads\RSITx64.exe => Moved successfully.
C:\Users\Filip\Downloads\esetsmartinstaller_enu.exe => Moved successfully.
C:\Users\Filip\Downloads\ccleaner.exe => Moved successfully.
C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task 3af490e6-ad19-4afb-a210-4749b55be86c.job => Moved successfully.
C:\WINDOWS\Tasks\SUPERAntiSpyware Scheduled Task ce70f61b-cf56-4a9e-a6e3-4aec25b537e8.job => Moved successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 613.3 MB temporary data.

The system needed a reboot.

==== End of Fixlog ====

#10 Příspěvek od **vyosek** » 29 Zář 2014 11:55

Tak jeste uklidime

T-Cleaner http://vyosek.tym.cz/pro_usery/T-Cleaner.exe

Stahnete a spustte
Pro potvrzeni volby mackejte A, Enter
Po pouziti utilitu smazte
Antiviry touhou utilitu chybne oznacit jako vir - jedna se o falesny poplach - takze v pohode stahnete (pripadne vypnete pri stahovani antivir)

OTC http://oldtimer.geekstogo.com/OTC.exe

Stahnete a spustte
Kliknete na CleanUp a potvrdte YES
Program uklidi a restartuje PC

TFC http://oldtimer.geekstogo.com/TFC.exe

Stahnete a spustte
Kliknete na Start a potvrdte OK
Program uklidi a restartuje pc
Po pouziti utilitu smazte

Stahnete Ccleaner http://forum.viry.cz/viewtopic.php?t=7478
Panel čistič

Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner

Panel registry

dejte Hledej problémy
nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
postup opakujte dokud nebude bez problemu - vetsinou cca 3x

Panel nástroje

Zde muzete odinstalovat nepotrebne programy

CCleaner doporucuji pouzivat cca jednou za tyden

A pokud nejsou problemy ci dotazy, je to z me strany vse

Elsone · #11 Příspěvek od **Elsone** » 29 Zář 2014 12:15

Všechno funguje tak jak má. Moc děkuji za pomoc a příště už si budu dávat větší pozor.

#12 Příspěvek od **vyosek** » 29 Zář 2014 12:33

Nemate zac, rad jsem pomohl

Zase nekdy Obrázek

A na zaklade Pravidla o zamykani temat

VIRY.CZ

Problém s gameharbor.org (Adverttraff.org)

Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)

Re: Problém s gameharbor.org (Adverttraff.org)