VIRY.CZ

Zpráva

Empair · #1 Příspěvek od **Empair** » 06 Lis 2014 21:31

Z neznámého důvodu mi začal silně bláznit výkon počítače, prosil bych o kontrolu logu

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Empair (administrator) on DELL_XSP_EMP on 06-11-2014 21:22:52
Running from C:\Users\Empair\Desktop
Loaded Profile: Empair (Available profiles: Empair)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(SoftThinks SAS) C:\Program Files (x86)\Dell DataSafe Local Backup\SftService.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
() C:\Program Files (x86)\Dell DataSafe Local Backup\Components\Scheduler\STService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Empair\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2370856 2010-09-24] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [Creative SB Monitoring Utility] => RunDll32 sbavmon.dll,SBAVMonitor
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [mobilegeni daemon] => C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\Run: [GoogleChromeAutoLaunch_1F7CCA4BF3D9301BE28ED97C8467442B] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [854344 2014-10-22] (Google Inc.)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: F - F:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: {e9ec3c8a-814f-11e3-af8c-14feb5ba8337} - F:\_AUTORUN\AUTORUN.EXE
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - DefaultScope {710DFC85-10F0-48CD-87E6-92BC105FACA0} URL =
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-19]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www1.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId=B845000AE4E465E2"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Angry Birds) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-01-19]
CHR Extension: (Dokumenty Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-19]
CHR Extension: (Disk Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-19]
CHR Extension: (YouTube) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-19]
CHR Extension: (Vyhledávání Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-19]
CHR Extension: (IE Tab) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-06-05]
CHR Extension: (Skype Click to Call) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-01-21]
CHR Extension: (Peněženka Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-19]
CHR Extension: (Gmail) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-09]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-09] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-08-09] (AVAST Software)
S4 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2011-01-24] (Intel Corporation) [File not signed]
S4 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2011-01-24] (Intel Corporation) [File not signed]
S4 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [991296 2011-01-24] (Intel Corporation) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-03-16] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [728328 2014-04-11] (DEVGURU Co., LTD.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-09] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-08-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-09] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-08-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-09] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-09] ()
R3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1799808 2010-06-11] (AVerMedia TECHNOLOGIES, Inc.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-19] (Disc Soft Ltd)
R3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1588608 2011-09-13] (Creative Technology Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-06 21:22 - 2014-11-06 21:24 - 00022266 _____ () C:\Users\Empair\Desktop\FRST.txt
2014-11-06 21:22 - 2014-11-06 21:23 - 00000000 ____D () C:\FRST
2014-11-06 21:17 - 2014-11-06 21:17 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Desktop\FRSTLauncher.exe
2014-11-06 21:14 - 2014-11-06 21:14 - 02114560 _____ (Farbar) C:\Users\Empair\Desktop\FRST64.exe
2014-11-06 21:04 - 2014-11-06 21:04 - 24743106 _____ () C:\Users\Empair\Downloads\vlc-2.1.5-win32.exe
2014-11-06 20:39 - 2014-11-06 20:39 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-06 20:38 - 2014-10-30 01:56 - 00614728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-06 20:36 - 2014-11-06 20:38 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-06 20:36 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-06 20:36 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-06 20:36 - 2014-10-27 01:34 - 04066553 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-06 20:34 - 2014-10-30 05:53 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-06 20:34 - 2014-10-30 05:53 - 00060744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 01540424 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 00452416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys
2014-11-06 20:24 - 2014-10-30 09:56 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-11-06 20:24 - 2014-10-30 09:56 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-06 20:24 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434460.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434460.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-06 18:40 - 2014-11-06 18:41 - 332108781 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_385_1080p_7A1CA065.mkv
2014-11-06 10:33 - 2014-11-06 10:33 - 00000000 _____ () C:\Users\Empair\Desktop\Nový textový dokument (4).txt
2014-11-05 10:29 - 2014-11-05 10:30 - 00000025 _____ () C:\Users\Empair\Desktop\c++.txt
2014-11-05 09:59 - 2014-11-05 10:00 - 00000000 ____D () C:\Users\Empair\Downloads\Projekt
2014-11-05 09:59 - 2014-11-05 09:59 - 00916211 _____ () C:\Users\Empair\Downloads\hrt0012.zip
2014-11-04 22:43 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-04 22:43 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-04 09:19 - 2014-11-04 09:19 - 00021283 _____ () C:\Users\Empair\Downloads\BVE - otázky a odpovědi - 04.11.2014.rar
2014-11-04 09:16 - 2014-11-04 09:16 - 00661695 _____ () C:\Users\Empair\Downloads\BVE - Otázky s odpověďmi - 04.11.2014.zip
2014-11-04 09:14 - 2014-11-04 09:14 - 00367531 _____ () C:\Users\Empair\Downloads\BVE - otázky a odpovědi všech otázek (90), které se mohou objevit v - 04.11.2014.zip
2014-11-03 23:57 - 2014-11-04 00:00 - 1978290176 _____ () C:\Users\Empair\Downloads\Konečná - 2013.avi
2014-11-03 22:01 - 2014-11-03 22:05 - 737624064 _____ () C:\Users\Empair\Downloads\Krotitele duchu 2.avi
2014-11-03 19:56 - 2014-11-03 20:02 - 972886388 _____ () C:\Users\Empair\Downloads\Krotitelé duchů 2 (1989).avi
2014-11-03 19:56 - 2007-02-17 12:53 - 1468010496 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).avi
2014-11-03 19:49 - 2014-11-03 19:54 - 1000000000 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).part1.rar
2014-11-03 19:49 - 2014-11-03 19:51 - 455550621 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).part2.rar
2014-11-01 13:10 - 2014-11-01 13:10 - 00000776 _____ () C:\Users\Empair\Downloads\sdfsdfd.cpp
2014-11-01 13:09 - 2014-11-01 13:09 - 00000938 _____ () C:\Users\Empair\Downloads\main.cpp
2014-10-31 18:08 - 2014-10-31 18:11 - 1442978144 _____ () C:\Users\Empair\Downloads\The Salvation 2014 DVDRip XviD AC3-ULTRAS.avi
2014-10-31 15:34 - 2014-10-31 15:35 - 746989568 _____ () C:\Users\Empair\Downloads\Benga.v.zaloze.2010.DVDRip.XviD.CZ.MY.avi
2014-10-31 08:17 - 2014-10-31 08:17 - 00297225 _____ () C:\Users\Empair\Desktop\bezpečnost 2013.html
2014-10-31 08:17 - 2014-10-31 08:17 - 00000000 ____D () C:\Users\Empair\Desktop\bezpečnost 2013_files
2014-10-30 21:16 - 2014-10-30 21:31 - 264183574 _____ () C:\Users\Empair\Downloads\[CNT]_Naruto_Shippuuden_384_[F00E18C9].mkv
2014-10-29 17:54 - 2014-10-29 17:54 - 00031099 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E06.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:54 - 2014-10-29 17:54 - 00028147 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E05.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:54 - 2014-10-29 17:54 - 00027098 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E04.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:53 - 2014-10-29 17:53 - 134809176 _____ () C:\Users\Empair\Downloads\the.big.bang.theory.804.hdtv-lol.mp4
2014-10-29 17:53 - 2014-10-29 17:53 - 123953373 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E05.HDTV.x264-LOL.mp4
2014-10-29 17:53 - 2014-10-29 17:53 - 121862569 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E06.HDTV.x264-LOL.mp4
2014-10-29 15:57 - 2014-10-29 15:57 - 00039960 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E05 - A Hen in the Wolf House (KILLERS+720p+FUM+AFG).srt
2014-10-29 15:57 - 2014-10-29 15:57 - 00035785 _____ () C:\Users\Empair\Downloads\Agents-of-SHIELD-S02E05-A-Hen-in-the-Wolf-House.zip
2014-10-29 15:50 - 2014-10-29 15:51 - 254502912 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x10.Akvarium.plne.sklenenych.oci.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:50 - 2014-10-29 15:51 - 253431808 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x12.Muj.bratr.je.gorila.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:50 - 2014-10-29 15:51 - 240838656 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x11.Krasna.pristavaci.draha.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:49 - 2014-10-29 15:51 - 254531584 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x08.Diky.za.skvely.xyx.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:49 - 2014-10-29 15:51 - 254486528 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x09.Frodo.avi
2014-10-29 15:48 - 2014-10-29 15:49 - 230301696 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x07.Sikovne.japonske.toalety.avi
2014-10-29 15:31 - 2014-10-29 15:32 - 252393472 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x06.Mezi.nami.devcaty.avi
2014-10-26 21:43 - 2014-10-26 21:45 - 1575865522 _____ () C:\Users\Empair\Downloads\Robin Hood.avi
2014-10-26 21:39 - 2014-10-26 21:41 - 1179827260 _____ () C:\Users\Empair\Downloads\Fack.ju.Göhte.2013.BRRip.XviD.MP3.CZ.avi
2014-10-26 21:02 - 2014-10-26 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-24 16:29 - 2014-10-24 16:30 - 445573988 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_383_1080p_DC2DB309.mkv
2014-10-22 20:48 - 2014-10-22 21:24 - 241917952 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x05.Neni.nad.uprimnost.avi
2014-10-22 17:18 - 2014-10-22 17:40 - 134217728 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x04.Devet.kouzelnych.prstu.avi
2014-10-22 16:05 - 2014-10-22 16:47 - 240822272 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x03.Velke.holky.s.jidlem.nehazeji (1).avi
2014-10-22 16:04 - 2014-10-22 16:05 - 00548883 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x03.Velke.holky.s.jidlem.nehazeji.avi
2014-10-20 19:14 - 2014-10-12 15:47 - 00038014 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (LOL+DIMENSION).srt
2014-10-20 19:14 - 2014-10-12 15:47 - 00038013 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (WEB-DL).srt
2014-10-20 19:14 - 2014-10-12 15:46 - 00038014 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (2HD).srt
2014-10-20 19:11 - 2014-10-20 19:11 - 00050626 _____ () C:\Users\Empair\Downloads\Agents-of-SHIELD-S02E03-Making-Friends-and-Influencing-People.zip
2014-10-20 19:11 - 2014-10-20 19:11 - 00037509 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E04 - Face My Enemy (KILLERS+720p+FUM+AFG).srt
2014-10-20 19:10 - 2014-10-20 19:10 - 00040825 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E01 - Shadows (KILLERS+720p+FUM).srt
2014-10-20 19:10 - 2014-10-20 19:10 - 00039018 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E02 - Heavy is the Head (KILLERS+720p+FUM).srt
2014-10-20 17:34 - 2014-10-20 17:34 - 255545344 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x02.Lide.milujici.kukatka.XviD.DVB-HyKR.CZ.avi
2014-10-20 17:28 - 2014-10-20 17:28 - 254486528 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x01.Tesi.me.Waldene.Schmidte.XviD.DVB-HyKR.CZ.avi
2014-10-19 13:24 - 2014-10-19 14:35 - 00000000 ____D () C:\Users\Empair\Downloads\KungFu
2014-10-18 20:30 - 2014-10-18 20:33 - 939587584 _____ () C:\Users\Empair\Downloads\Warrior.CZ.2011.avi
2014-10-18 06:27 - 2014-10-18 06:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2014-10-17 08:36 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-17 08:36 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-17 08:36 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-17 08:36 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 08:36 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-17 08:36 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 08:36 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-17 08:36 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-17 08:36 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-17 08:36 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 08:36 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 08:36 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 08:36 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-17 08:36 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-17 08:36 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 08:36 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-17 08:36 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 08:36 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-17 08:36 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-17 08:36 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 08:36 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 08:36 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 08:36 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-17 08:36 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 08:36 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-17 08:36 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-17 08:36 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-17 08:36 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-17 08:36 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-17 08:36 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 08:36 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-17 08:36 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-17 08:36 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 08:36 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-17 08:36 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 08:36 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-17 08:36 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-17 08:36 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-17 08:36 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-17 08:36 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-17 08:36 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-17 08:36 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 08:36 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 08:36 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-17 08:36 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-17 08:36 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 08:36 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-17 08:36 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-17 08:36 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-17 08:36 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 08:36 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-17 08:36 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-17 08:36 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-17 08:36 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-17 08:36 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-17 08:36 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-17 08:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 08:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 03722240 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 01118720 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-17 08:36 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-17 08:36 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-17 08:36 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 03221504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 01051136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-17 08:36 - 2014-07-17 02:39 - 00131584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-17 08:36 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-17 08:36 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-17 08:36 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-17 08:35 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 08:35 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 16:39 - 2014-10-16 16:39 - 454391166 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_382_1080p_64D6A19C.mkv
2014-10-16 12:55 - 2014-10-16 12:55 - 00073654 _____ () C:\Users\Empair\Downloads\ZEL - Jedno ze zadání testu 1 - 16.10.2014.zip
2014-10-16 12:53 - 2014-10-16 12:53 - 00044717 _____ () C:\Users\Empair\Downloads\the.flash.2014.s01e02.hdtv.x264-lol.srt
2014-10-16 12:52 - 2014-10-16 12:53 - 288170762 _____ () C:\Users\Empair\Downloads\The.Flash-2014-S01E02-WEB-DL-x264-FUM.mp4
2014-10-16 12:52 - 2014-10-16 12:53 - 234210401 _____ () C:\Users\Empair\Downloads\The.Flash.2014.S01E02.HDTV-x264.LOL.mp4
2014-10-16 12:01 - 2014-10-16 12:01 - 00042010 _____ () C:\Users\Empair\Downloads\the.flash.2014.s01e01.preair.720p.web-dl.x264-nogrp.srt
2014-10-16 12:01 - 2014-10-16 12:01 - 00041368 _____ () C:\Users\Empair\Downloads\the.flash.s01e01.hdtv.x264-lol.srt
2014-10-16 11:59 - 2014-10-16 12:00 - 503020951 _____ () C:\Users\Empair\Downloads\The-Flash-S01e01---Pilot.mp4
2014-10-15 18:54 - 2014-10-15 18:57 - 1152752422 _____ () C:\Users\Empair\Downloads\22 Jump Street.avi
2014-10-15 18:14 - 2014-10-15 18:17 - 1047527424 _____ () C:\Users\Empair\Downloads\22jum.part1.rar
2014-10-15 18:14 - 2014-10-15 18:16 - 854576756 _____ () C:\Users\Empair\Downloads\22jum.part2.rar
2014-10-10 10:52 - 2014-10-10 10:53 - 440280833 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_381_1080p_ED3D0DA8.mkv
2014-10-09 15:22 - 2014-10-09 15:23 - 952271550 _____ () C:\Users\Empair\Downloads\Americti-psanci.avi

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-06 21:16 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-06 21:16 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-06 21:12 - 2014-01-29 18:00 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-06 21:06 - 2014-04-15 17:59 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-11-06 20:58 - 2014-01-19 21:48 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\vlc
2014-11-06 20:45 - 2011-07-24 05:04 - 01834826 _____ () C:\Windows\WindowsUpdate.log
2014-11-06 20:41 - 2010-11-21 10:27 - 00672372 _____ () C:\Windows\system32\perfh005.dat
2014-11-06 20:41 - 2010-11-21 10:27 - 00143028 _____ () C:\Windows\system32\perfc005.dat
2014-11-06 20:41 - 2009-07-14 06:13 - 01593258 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-06 20:39 - 2011-07-24 05:14 - 00000000 ____D () C:\Temp
2014-11-06 20:38 - 2014-02-06 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-06 20:38 - 2014-02-06 17:35 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-06 20:37 - 2014-01-19 20:54 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-06 20:37 - 2009-07-14 05:51 - 00121460 _____ () C:\Windows\setupact.log
2014-11-06 20:36 - 2011-07-23 21:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-06 20:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-11-06 20:34 - 2011-07-23 21:53 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-06 20:15 - 2011-02-15 08:08 - 01568908 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-06 19:15 - 2014-01-19 21:37 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-06 19:14 - 2014-01-19 20:54 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-06 19:14 - 2011-07-24 05:13 - 00000000 ____D () C:\Program Files (x86)\Dell DataSafe Local Backup
2014-11-06 19:14 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-06 19:12 - 2014-10-05 11:34 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\CodeBlocks
2014-11-06 18:14 - 2014-01-21 21:35 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\Skype
2014-11-03 13:08 - 2014-01-29 18:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-03 13:08 - 2014-01-29 18:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-03 13:08 - 2014-01-29 18:00 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-31 19:38 - 2014-06-08 19:47 - 00002044 _____ () C:\Users\Public\Desktop\Google Slides.lnk
2014-10-31 19:38 - 2014-06-08 19:47 - 00002042 _____ () C:\Users\Public\Desktop\Google Sheets.lnk
2014-10-31 19:38 - 2014-06-08 19:47 - 00002032 _____ () C:\Users\Public\Desktop\Google Docs.lnk
2014-10-31 19:38 - 2014-06-08 19:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-10-29 16:09 - 2014-01-19 22:01 - 00000000 ____D () C:\Users\Empair\AppData\Local\JDownloader v2.0
2014-10-28 06:34 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-26 21:02 - 2011-07-24 05:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-10-26 21:02 - 2011-07-24 05:15 - 00000000 ____D () C:\ProgramData\Skype
2014-10-20 12:04 - 2014-02-07 16:40 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LINE.lnk
2014-10-20 12:04 - 2014-02-07 16:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LINE
2014-10-19 22:59 - 2014-01-19 23:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-19 22:59 - 2014-01-19 22:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-19 20:50 - 2011-07-24 05:03 - 00002480 _____ () C:\freefallprotection.log
2014-10-19 20:40 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-19 20:34 - 2014-01-19 17:59 - 00111520 _____ () C:\Users\Empair\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 13:46 - 2014-04-18 14:40 - 00000000 ____D () C:\Users\Empair\Downloads\JDownlander
2014-10-18 11:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-10-18 10:57 - 2009-07-14 05:45 - 00433816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 10:55 - 2014-05-06 21:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 06:38 - 2009-07-14 03:34 - 00000510 _____ () C:\Windows\win.ini
2014-10-17 22:19 - 2014-01-19 18:30 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-17 22:19 - 2014-01-19 18:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 13:32 - 2014-01-19 20:54 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-17 13:32 - 2014-01-19 20:54 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Some content of TEMP:
====================
C:\Users\Empair\AppData\Local\Temp\bitool.dll
C:\Users\Empair\AppData\Local\Temp\CloudBackup332.exe
C:\Users\Empair\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpamhxgv.dll
C:\Users\Empair\AppData\Local\Temp\DTLite4481-0347.exe
C:\Users\Empair\AppData\Local\Temp\Keygen__5551_il1249355.exe
C:\Users\Empair\AppData\Local\Temp\MSN8538.exe
C:\Users\Empair\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Empair\AppData\Local\Temp\nvStInst.exe
C:\Users\Empair\AppData\Local\Temp\ose00000.exe
C:\Users\Empair\AppData\Local\Temp\proxy_vole357375369239533787.dll
C:\Users\Empair\AppData\Local\Temp\vcredist_x64.exe
C:\Users\Empair\AppData\Local\Temp\vlc-2.1.3-win32.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Empair\Desktop" je 5824 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#2 Příspěvek od **vyosek** » 06 Lis 2014 21:52

Zdravim

To bude tim bordelem co tam je

Stahnete Junkware Removal Tool http://thisisudax.org/downloads/JRT.exe

Ulozte nejlepe na plochu
Po spusteni se zobrazi licencni podminky, stisknete libovolnou klavesu
Probehne vytvoreni zalohy a nasledne prohledavani
Probehne skenovani a pak se objevi log, pripadne bude ulozen v c:\JRT jako JRT.txt, ten sem vlozte

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

Ulozte nejlepe na plochu
Ukoncete vsechny programy
Po spusteni probehne stazeni databaze
Kliknete na Scan a nasledne Clean
Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Empair · #3 Příspěvek od **Empair** » 07 Lis 2014 13:02

Předem díky za pomoc

Log JRT

Kód: Vybrat vše

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 6.3.6 (11.05.2014:1)
OS: Windows 7 Home Premium x64
Ran by Empair on p  07.11.2014 at 12:45:10,99
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values



~~~ Registry Keys



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Users\Empair\AppData\Roaming\newnext.me"
Successfully deleted: [Folder] "C:\Users\Empair\AppData\Roaming\opencandy"
Successfully deleted: [Folder] "C:\Users\Empair\appdata\local\genienext"
Successfully deleted: [Folder] "C:\Users\Empair\appdata\local\mobogenie"
Successfully deleted: [Folder] "C:\Users\Empair\AppData\Roaming\microsoft\windows\start menu\programs\mobogenie"



~~~ Event Viewer Logs were cleared





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on p  07.11.2014 at 12:51:48,45
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log AdwCleaner

Kód: Vybrat vše

# AdwCleaner v3.311 - Report created 07/11/2014 at 12:58:19
# Updated 30/09/2014 by Xplode
# Operating System : Windows 7 Home Premium Service Pack 1 (64 bits)
# Username : Empair - DELL_XSP_EMP
# Running from : C:\Users\Empair\Desktop\adwcleaner_3.311.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\Users\Empair\Documents\Mobogenie
File Deleted : C:\Users\Empair\daemonprocess.txt

***** [ Scheduled Tasks ] *****

Task Deleted : LaunchSignup

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\MobogenieAdd
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [mobilegeni daemon]
Key Deleted : HKCU\Software\InstallCore

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Google Chrome v38.0.2125.111

[ File : C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : hxxp://www1.delta-search.com/?q={searchTerms}&affID=119294&babsrc=SP_ss&mntrId=B845000AE4E465E2
Deleted [Search Provider] : hxxp://startsear.ch/?aff=2&src=sp&cf=d49148c3-1e66-11e1-b79f-ac72893b8732&q={searchTerms}
Deleted [Search Provider] : hxxp://start.facemoods.com/?a=ddrnw&s={searchTerms}&f=4
Deleted [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}

*************************

AdwCleaner[R0].txt - [1193 octets] - [07/11/2014 12:54:01]
AdwCleaner[S0].txt - [1478 octets] - [07/11/2014 12:58:19]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1538 octets] ##########

#4 Příspěvek od **vyosek** » 07 Lis 2014 13:07

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
Do okna vlozte skript nize

Kód: Vybrat vše

autoclean;
emptyclsid;
iedefaults;
FFdefaults;
CHRdefaults;
emptyalltemp;
resethosts;

Nasledne kliknete na Run Script
PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

Empair · #5 Příspěvek od **Empair** » 07 Lis 2014 14:18

Log Zoek

Kód: Vybrat vše

Zoek.exe v5.0.0.0 Updated 06-November-2014
Tool run by Empair on p  07.11.2014 at 13:29:57,74.
Microsoft Windows 7 Home Premium  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Empair\Desktop\zoek.com [Scan all users] [Script inserted] 

==== System Restore Info ======================

7.11.2014 13:31:55 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp. 
# 
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows. 
# 
# This file contains the mappings of IP addresses to host names. Each 
# entry should be kept on an individual line. The IP address should 
# be placed in the first column followed by the corresponding host name. 
# The IP address and the host name should be separated by at least one 
# space. 
# 
# Additionally, comments (such as these) may be inserted on individual 
# lines or following the machine name denoted by a '#' symbol. 
# 
# For example: 
# 
#      102.54.94.97     rhino.acme.com          # source server 
#       38.25.63.10     x.acme.com              # x client host 
 
# localhost name resolution is handle within DNS itself. 
127.0.0.1       localhost 
::1             localhost 

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DCB7100-DF86-4384-8842-8FA844297B3F} deleted successfully
HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{8DCB7100-DF86-4384-8842-8FA844297B3F} deleted successfully
HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B} deleted successfully
HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6EBF7485-159F-4BFF-A14F-B9E3AAC4465B} deleted successfully
HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully
HKEY_USERS\S-1-5-21-1572388576-1806119407-3699164354-1001\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D2CE3E00-F94A-4740-988E-03DC2F38C34F} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

"C:\$RECYCLE.BIN\S-1-5-18\$RJEFO60.ru_canon_i-sensys_mf4120" not found
C:\Users\Empair\.android deleted
C:\Users\Empair\AppData\Local\cache deleted
C:\Users\Empair\Downloads\iLividSetup-r484-n-bc (1).exe deleted
C:\Users\Empair\Downloads\iLividSetup-r484-n-bc.exe deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\Users\Empair\Desktop\Continue installation  - Key Generator Installation.lnk deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\L7601ENx.exe" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\MF4100-Series_Vista_EN.exe" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\www.x-drivers.ru.url" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\Readme_FAX.txt" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\Readme_SG.txt" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\Readme_UFRIILT.txt" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\Setup.exe" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\Setup.ini" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\CNCIDD16.DLL" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\cncidd32.dll" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\DelDrv.exe" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\DelDrv.ini" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\DelDrvRes.dll" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\IstDrvRes.dll" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\License.txt" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc\SetupRes.ini" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\cnlb0k.cat" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\CNLB0K.INF" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\cnxrpkw2.cat" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\CNXRPKW2.inf" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\fax.cab" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\mf23scn.cat" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\MF23SCN.INF" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\scan.cab" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista\ufriilt.cab" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120" deleted
"C:\Users\Empair\AppData\Roaming\rmi" deleted
"C:\Users\Empair\AppData\Roaming\Roxio" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\misc" deleted
"C:\$RECYCLE.BIN\S-1-5-21-1572388576-1806119407-3699164354-1001\$RJEFO60.ru_canon_i-sensys_mf4120\Canon\uk_eng\win2k_vista" deleted

==== Registry Search Results for "$RJEFO60.ru_canon_i-sensys_mf4120" ======================

No instances of string "$RJEFO60.ru_canon_i-sensys_mf4120" found.

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [09.08.2014 10:42]

==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[09.08.2014 10:42]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14.07.2014 17:22]

Angry Birds - Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj
IE Tab - Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd
Skype Click to Call - Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Chromium Fix ======================

C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage deleted successfully
C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_services.hearstmags.com_0.localstorage-journal deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www1.euro.dell.com/content/default.aspx?c=cz&l=cs&s=bsd"
"Default_Page_URL"="http://www1.euro.dell.com/content/default.aspx?c=cz&l=cs&s=bsd"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www1.euro.dell.com/content/default.aspx?c=cz&l=cs&s=bsd"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google  Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Empair\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Empair\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=35 folders=10 50618100 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Empair\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Empair\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on p  07.11.2014 at 14:16:08,78 ======================

#6 Příspěvek od **vyosek** » 07 Lis 2014 16:48

Nedavejte logy do code

Dejte novy log z FRST

Empair · #7 Příspěvek od **Empair** » 07 Lis 2014 17:28

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 04-11-2014
Ran by Empair (administrator) on DELL_XSP_EMP on 07-11-2014 17:25:54
Running from C:\Users\Empair\Desktop
Loaded Profile: Empair (Available profiles: Empair)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\WINDOWS\System32\nvvsvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\WINDOWS\System32\rundll32.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Creative Technology Ltd) C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(VideoLAN) C:\Program Files (x86)\VideoLAN\VLC\vlc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(LINE Corporation) C:\Program Files (x86)\Naver\LINE\Line.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Blackfish Software) C:\Users\Empair\AppData\Local\IE Tab\7.11.3.1\ietabhelper.exe
(Blackfish Software) C:\Users\Empair\AppData\Local\IE Tab\7.11.3.1\ietabhelper.exe
(forum.viry.cz) C:\Users\Empair\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2370856 2010-09-24] (Synaptics Incorporated)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6611048 2011-02-19] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2188904 2011-01-18] (Realtek Semiconductor)
HKLM\...\Run: [BTMTrayAgent] => rundll32.exe "C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll",TrayApp
HKLM\...\Run: [QuickSet] => c:\Program Files\Dell\QuickSet\QuickSet.exe [4479648 2011-01-25] (Dell Inc.)
HKLM\...\Run: [IntelTBRunOnce] => wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs"
HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2460488 2014-09-17] (NVIDIA Corporation)
HKLM\...\Run: [Creative SB Monitoring Utility] => RunDll32 sbavmon.dll,SBAVMonitor
HKLM-x32\...\Run: [Dell Webcam Central] => C:\Program Files (x86)\Dell Webcam\Dell Webcam Central\WebcamDell2.exe [503942 2011-04-13] (Creative Technology Ltd)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-09] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: F - F:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: {e9ec3c8a-814f-11e3-af8c-14feb5ba8337} - F:\_AUTORUN\AUTORUN.EXE
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Empair\AppData\Roaming\Dropbox\bin\DropboxExt.22.dll (Dropbox, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
SearchScopes: HKCU - DefaultScope {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
SearchScopes: HKCU - {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office15\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/JavaPlugin -> C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~2\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @java.com/DTPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.67.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3508.1109 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-01-19]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www1.delta-search.com/?affID=119294&babsrc=HP_ss&mntrId=B845000AE4E465E2"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Prezentace Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-11-07]
CHR Extension: (Angry Birds) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aknpkdffaafgjchaibgeefbgmgeghloj [2014-01-19]
CHR Extension: (Dokumenty Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-01-19]
CHR Extension: (Disk Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-01-19]
CHR Extension: (YouTube) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-19]
CHR Extension: (Vyhledávání Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-01-19]
CHR Extension: (Tabulky Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-11-07]
CHR Extension: (IE Tab) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\hehijbfgiekmjfkfjpbkbammjbdenadd [2014-06-05]
CHR Extension: (Peněženka Google) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-01-19]
CHR Extension: (Gmail) - C:\Users\Empair\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-01-19]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-08-09]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-08-09] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [106488 2014-08-09] (AVAST Software)
S4 Bluetooth Device Monitor; C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe [901184 2011-01-24] (Intel Corporation) [File not signed]
S4 Bluetooth Media Service; C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe [1298496 2011-01-24] (Intel Corporation) [File not signed]
S4 Bluetooth OBEX Service; C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe [991296 2011-01-24] (Intel Corporation) [File not signed]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-11-07] (Creative Labs) [File not signed]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [286720 2010-02-12] (Creative Technology Ltd) [File not signed]
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-09-17] (NVIDIA Corporation)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [340240 2010-12-17] ()
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-09-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-09-17] (NVIDIA Corporation)
R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [728328 2014-04-11] (DEVGURU Co., LTD.)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-08-09] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28184 2014-08-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-08-09] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [448400 2014-08-09] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-08-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-08-09] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-08-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-09] (AVAST Software)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-08-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-08-09] ()
S3 AVer7231_x64; C:\Windows\System32\DRIVERS\AVer7231_x64.sys [1799808 2010-06-11] (AVerMedia TECHNOLOGIES, Inc.) [File not signed]
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-01-19] (Disc Soft Ltd)
R3 ksaud; C:\Windows\System32\drivers\ksaud.sys [1588608 2011-09-13] (Creative Technology Ltd.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-09-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 17:25 - 2014-11-07 17:26 - 00020512 _____ () C:\Users\Empair\Desktop\FRST.txt
2014-11-07 17:25 - 2014-11-07 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Desktop\FRSTLauncher.exe
2014-11-07 17:24 - 2014-11-07 17:24 - 00428576 _____ (Blackfish Software) C:\Users\Empair\Downloads\ietabhelper.exe
2014-11-07 17:24 - 2014-11-07 17:24 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 873246.crdownload
2014-11-07 17:24 - 2014-11-07 17:24 - 00000000 ____D () C:\Users\Empair\AppData\Local\IE Tab
2014-11-07 17:23 - 2014-11-07 17:23 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 782223.crdownload
2014-11-07 17:23 - 2014-11-07 17:23 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 762000.crdownload
2014-11-07 15:59 - 2014-11-07 15:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Creative
2014-11-07 15:58 - 2014-11-07 15:58 - 00000000 ____D () C:\Program Files\Creative
2014-11-07 15:52 - 2014-11-07 15:52 - 28261480 _____ (Creative Technology Ltd) C:\Users\Empair\Desktop\XFXATHX_PCDRV_LB_1_02_0062.exe
2014-11-07 15:50 - 2014-11-07 15:52 - 28261480 _____ (Creative Technology Ltd) C:\Users\Empair\Downloads\XFXATHX_PCDRV_LB_1_02_0062.exe
2014-11-07 15:45 - 2014-11-07 15:44 - 00046452 _____ () C:\RPSetup.exe.log
2014-11-07 14:31 - 2014-11-07 14:33 - 1795632568 _____ () C:\Users\Empair\Downloads\The_Exp3.avi
2014-11-07 14:31 - 2014-11-07 14:31 - 00065586 _____ () C:\Users\Empair\Downloads\The-Expendables-30000244327.srt
2014-11-07 14:13 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-07 13:31 - 2014-11-07 14:16 - 00012158 _____ () C:\zoek-results.log
2014-11-07 13:30 - 2014-11-07 13:29 - 01294848 _____ () C:\Users\Empair\Desktop\zoek.exe
2014-11-07 13:29 - 2014-11-07 14:15 - 00000000 ____D () C:\zoek_backup
2014-11-07 13:29 - 2014-11-07 13:29 - 01294848 _____ () C:\Users\Empair\Downloads\zoek (1).exe
2014-11-07 13:27 - 2014-11-07 13:28 - 04255653 _____ () C:\Users\Empair\Downloads\zoek.rar
2014-11-07 13:27 - 2014-11-07 13:27 - 04109386 _____ () C:\Users\Empair\Downloads\zoek.zip
2014-11-07 13:25 - 2014-11-07 13:26 - 01266577 _____ () C:\Users\Empair\Downloads\zoek.exe
2014-11-07 12:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-11-07 12:53 - 2014-11-07 12:58 - 00000000 ____D () C:\AdwCleaner
2014-11-07 12:51 - 2014-11-07 12:51 - 00001049 _____ () C:\Users\Empair\Desktop\JRT.txt
2014-11-07 12:45 - 2014-11-07 12:45 - 00000000 ____D () C:\Windows\ERUNT
2014-11-07 12:44 - 2014-11-07 12:44 - 01375089 _____ () C:\Users\Empair\Downloads\adwcleaner_3.311.exe
2014-11-07 12:44 - 2014-11-07 12:44 - 01375089 _____ () C:\Users\Empair\Desktop\adwcleaner_3.311.exe
2014-11-07 12:44 - 2014-11-07 12:43 - 01706939 _____ (Thisisu) C:\Users\Empair\Desktop\JRT.exe
2014-11-07 12:43 - 2014-11-07 12:43 - 01706939 _____ (Thisisu) C:\Users\Empair\Downloads\JRT.exe
2014-11-06 21:29 - 2014-11-06 21:29 - 00004831 _____ () C:\Users\Empair\Desktop\Addition.rar
2014-11-06 21:22 - 2014-11-07 17:25 - 00000000 ____D () C:\FRST
2014-11-06 21:14 - 2014-11-06 21:14 - 02114560 _____ (Farbar) C:\Users\Empair\Desktop\FRST64.exe
2014-11-06 21:04 - 2014-11-06 21:04 - 24743106 _____ () C:\Users\Empair\Downloads\vlc-2.1.5-win32.exe
2014-11-06 20:39 - 2014-11-06 20:39 - 00000000 ____D () C:\Program Files (x86)\AGEIA Technologies
2014-11-06 20:38 - 2014-10-30 01:56 - 00614728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2014-11-06 20:36 - 2014-11-07 16:00 - 00000000 ____D () C:\ProgramData\NVIDIA
2014-11-06 20:36 - 2014-10-30 03:10 - 06880968 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 03533632 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 02558792 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 00935232 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2014-11-06 20:36 - 2014-10-30 03:10 - 00385352 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2014-11-06 20:36 - 2014-10-30 03:10 - 00061640 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2014-11-06 20:36 - 2014-10-27 01:34 - 04066553 _____ () C:\Windows\system32\nvcoproc.bin
2014-11-06 20:34 - 2014-10-30 05:53 - 00073872 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2014-11-06 20:34 - 2014-10-30 05:53 - 00060744 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 01540424 _____ (NVIDIA Corporation) C:\Windows\system32\nvir3dgenco64.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 01538880 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2014-11-06 20:24 - 2014-10-30 09:56 - 00452416 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvstusb.sys
2014-11-06 20:24 - 2014-10-30 09:56 - 00197408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2014-11-06 20:24 - 2014-10-30 09:56 - 00031520 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 31890064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 24554824 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 20966504 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 20922696 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 19966856 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 18497600 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 17258696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 16886168 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 14029400 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 13942368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 13189832 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2014-11-06 20:24 - 2014-10-30 05:53 - 11395672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 11333848 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 04289856 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 04011840 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 03237528 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 02849224 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 01876296 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6434460.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 01539272 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6434460.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00961224 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00932168 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00922944 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00896144 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2014-11-06 20:24 - 2014-10-30 05:53 - 00027024 _____ () C:\Windows\system32\nvinfo.pb
2014-11-06 20:18 - 2013-10-02 03:22 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbFlt.sys
2014-11-06 20:18 - 2013-10-02 03:11 - 00013824 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyControl.exe
2014-11-06 20:18 - 2013-10-02 03:08 - 00012800 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2014-11-06 20:18 - 2013-10-02 02:48 - 00056832 _____ (Microsoft Corporation) C:\Windows\system32\MsRdpWebAccess.dll
2014-11-06 20:18 - 2013-10-02 02:48 - 00018944 _____ (Microsoft Corporation) C:\Windows\system32\wksprtPS.dll
2014-11-06 20:18 - 2013-10-02 02:29 - 00062976 _____ (Microsoft Corporation) C:\Windows\system32\tsgqec.dll
2014-11-06 20:18 - 2013-10-02 02:10 - 00044544 _____ (Microsoft Corporation) C:\Windows\system32\TsUsbGDCoInstaller.dll
2014-11-06 20:18 - 2013-10-02 01:15 - 01057280 _____ (Microsoft Corporation) C:\Windows\system32\rdvidcrl.dll
2014-11-06 20:18 - 2013-10-02 01:14 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MsRdpWebAccess.dll
2014-11-06 20:18 - 2013-10-02 01:14 - 00017920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wksprtPS.dll
2014-11-06 20:18 - 2013-10-02 01:08 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\TSWbPrxy.exe
2014-11-06 20:18 - 2013-10-02 01:01 - 00420864 _____ (Microsoft Corporation) C:\Windows\system32\wksprt.exe
2014-11-06 20:18 - 2013-10-02 00:58 - 00053248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tsgqec.dll
2014-11-06 20:18 - 2013-10-02 00:31 - 01147392 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-11-06 20:18 - 2013-10-02 00:08 - 00855552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdvidcrl.dll
2014-11-06 20:18 - 2013-10-01 23:34 - 01068544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-11-06 20:18 - 2013-10-01 21:57 - 06578176 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-11-06 20:18 - 2013-10-01 21:55 - 05698048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-11-06 20:16 - 2012-08-23 15:13 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2014-11-06 20:16 - 2012-08-23 15:10 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpvideominiport.sys
2014-11-06 20:16 - 2012-08-23 15:08 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\TsUsbGD.sys
2014-11-06 20:16 - 2012-08-23 14:24 - 00015360 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-11-06 20:16 - 2012-08-23 12:12 - 00192000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpendp_winip.dll
2014-11-06 20:16 - 2012-08-23 11:51 - 00228864 _____ (Microsoft Corporation) C:\Windows\system32\rdpendp_winip.dll
2014-11-06 20:16 - 2012-08-23 10:51 - 03174912 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-11-06 18:40 - 2014-11-06 18:41 - 332108781 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_385_1080p_7A1CA065.mkv
2014-11-06 10:33 - 2014-11-06 10:33 - 00000000 _____ () C:\Users\Empair\Desktop\Nový textový dokument (4).txt
2014-11-05 10:29 - 2014-11-05 10:30 - 00000025 _____ () C:\Users\Empair\Desktop\c++.txt
2014-11-05 09:59 - 2014-11-05 10:00 - 00000000 ____D () C:\Users\Empair\Downloads\Projekt
2014-11-05 09:59 - 2014-11-05 09:59 - 00916211 _____ () C:\Users\Empair\Downloads\hrt0012.zip
2014-11-04 22:43 - 2014-09-04 20:14 - 00038048 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2014-11-04 22:43 - 2014-09-04 20:14 - 00032416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2014-11-04 09:19 - 2014-11-04 09:19 - 00021283 _____ () C:\Users\Empair\Downloads\BVE - otázky a odpovědi - 04.11.2014.rar
2014-11-04 09:16 - 2014-11-04 09:16 - 00661695 _____ () C:\Users\Empair\Downloads\BVE - Otázky s odpověďmi - 04.11.2014.zip
2014-11-04 09:14 - 2014-11-04 09:14 - 00367531 _____ () C:\Users\Empair\Downloads\BVE - otázky a odpovědi všech otázek (90), které se mohou objevit v - 04.11.2014.zip
2014-11-03 23:57 - 2014-11-04 00:00 - 1978290176 _____ () C:\Users\Empair\Downloads\Konečná - 2013.avi
2014-11-03 22:01 - 2014-11-03 22:05 - 737624064 _____ () C:\Users\Empair\Downloads\Krotitele duchu 2.avi
2014-11-03 19:56 - 2014-11-03 20:02 - 972886388 _____ () C:\Users\Empair\Downloads\Krotitelé duchů 2 (1989).avi
2014-11-03 19:56 - 2007-02-17 12:53 - 1468010496 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).avi
2014-11-03 19:49 - 2014-11-03 19:54 - 1000000000 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).part1.rar
2014-11-03 19:49 - 2014-11-03 19:51 - 455550621 _____ () C:\Users\Empair\Downloads\Krotitelé duchů (1984).part2.rar
2014-11-01 13:10 - 2014-11-01 13:10 - 00000776 _____ () C:\Users\Empair\Downloads\sdfsdfd.cpp
2014-11-01 13:09 - 2014-11-01 13:09 - 00000938 _____ () C:\Users\Empair\Downloads\main.cpp
2014-10-31 18:08 - 2014-10-31 18:11 - 1442978144 _____ () C:\Users\Empair\Downloads\The Salvation 2014 DVDRip XviD AC3-ULTRAS.avi
2014-10-31 15:34 - 2014-10-31 15:35 - 746989568 _____ () C:\Users\Empair\Downloads\Benga.v.zaloze.2010.DVDRip.XviD.CZ.MY.avi
2014-10-31 08:17 - 2014-10-31 08:17 - 00297225 _____ () C:\Users\Empair\Desktop\bezpečnost 2013.html
2014-10-31 08:17 - 2014-10-31 08:17 - 00000000 ____D () C:\Users\Empair\Desktop\bezpečnost 2013_files
2014-10-30 21:16 - 2014-10-30 21:31 - 264183574 _____ () C:\Users\Empair\Downloads\[CNT]_Naruto_Shippuuden_384_[F00E18C9].mkv
2014-10-29 17:54 - 2014-10-29 17:54 - 00031099 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E06.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:54 - 2014-10-29 17:54 - 00028147 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E05.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:54 - 2014-10-29 17:54 - 00027098 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E04.720p.HDTV.X264-DIMENSION.srt
2014-10-29 17:53 - 2014-10-29 17:53 - 134809176 _____ () C:\Users\Empair\Downloads\the.big.bang.theory.804.hdtv-lol.mp4
2014-10-29 17:53 - 2014-10-29 17:53 - 123953373 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E05.HDTV.x264-LOL.mp4
2014-10-29 17:53 - 2014-10-29 17:53 - 121862569 _____ () C:\Users\Empair\Downloads\The.Big.Bang.Theory.S08E06.HDTV.x264-LOL.mp4
2014-10-29 15:57 - 2014-10-29 15:57 - 00039960 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E05 - A Hen in the Wolf House (KILLERS+720p+FUM+AFG).srt
2014-10-29 15:57 - 2014-10-29 15:57 - 00035785 _____ () C:\Users\Empair\Downloads\Agents-of-SHIELD-S02E05-A-Hen-in-the-Wolf-House.zip
2014-10-29 15:50 - 2014-10-29 15:51 - 254502912 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x10.Akvarium.plne.sklenenych.oci.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:50 - 2014-10-29 15:51 - 253431808 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x12.Muj.bratr.je.gorila.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:50 - 2014-10-29 15:51 - 240838656 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x11.Krasna.pristavaci.draha.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:49 - 2014-10-29 15:51 - 254531584 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x08.Diky.za.skvely.xyx.XviD.DVB-HyKR.CZ.avi
2014-10-29 15:49 - 2014-10-29 15:51 - 254486528 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x09.Frodo.avi
2014-10-29 15:48 - 2014-10-29 15:49 - 230301696 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x07.Sikovne.japonske.toalety.avi
2014-10-29 15:31 - 2014-10-29 15:32 - 252393472 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x06.Mezi.nami.devcaty.avi
2014-10-26 21:43 - 2014-10-26 21:45 - 1575865522 _____ () C:\Users\Empair\Downloads\Robin Hood.avi
2014-10-26 21:39 - 2014-10-26 21:41 - 1179827260 _____ () C:\Users\Empair\Downloads\Fack.ju.Göhte.2013.BRRip.XviD.MP3.CZ.avi
2014-10-26 21:02 - 2014-10-26 21:02 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2014-10-24 16:29 - 2014-10-24 16:30 - 445573988 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_383_1080p_DC2DB309.mkv
2014-10-22 20:48 - 2014-10-22 21:24 - 241917952 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x05.Neni.nad.uprimnost.avi
2014-10-22 17:18 - 2014-10-22 17:40 - 134217728 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x04.Devet.kouzelnych.prstu.avi
2014-10-22 16:05 - 2014-10-22 16:47 - 240822272 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x03.Velke.holky.s.jidlem.nehazeji (1).avi
2014-10-22 16:04 - 2014-10-22 16:05 - 00548883 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x03.Velke.holky.s.jidlem.nehazeji.avi
2014-10-20 19:14 - 2014-10-12 15:47 - 00038014 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (LOL+DIMENSION).srt
2014-10-20 19:14 - 2014-10-12 15:47 - 00038013 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (WEB-DL).srt
2014-10-20 19:14 - 2014-10-12 15:46 - 00038014 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E03 - Making Friends and Influencing People (2HD).srt
2014-10-20 19:11 - 2014-10-20 19:11 - 00050626 _____ () C:\Users\Empair\Downloads\Agents-of-SHIELD-S02E03-Making-Friends-and-Influencing-People.zip
2014-10-20 19:11 - 2014-10-20 19:11 - 00037509 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E04 - Face My Enemy (KILLERS+720p+FUM+AFG).srt
2014-10-20 19:10 - 2014-10-20 19:10 - 00040825 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E01 - Shadows (KILLERS+720p+FUM).srt
2014-10-20 19:10 - 2014-10-20 19:10 - 00039018 _____ () C:\Users\Empair\Downloads\Agents of SHIELD S02E02 - Heavy is the Head (KILLERS+720p+FUM).srt
2014-10-20 17:34 - 2014-10-20 17:34 - 255545344 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x02.Lide.milujici.kukatka.XviD.DVB-HyKR.CZ.avi
2014-10-20 17:28 - 2014-10-20 17:28 - 254486528 _____ () C:\Users\Empair\Downloads\Dva.a.pul.chlapa.9x01.Tesi.me.Waldene.Schmidte.XviD.DVB-HyKR.CZ.avi
2014-10-19 13:24 - 2014-10-19 14:35 - 00000000 ____D () C:\Users\Empair\Downloads\KungFu
2014-10-18 20:30 - 2014-10-18 20:33 - 939587584 _____ () C:\Users\Empair\Downloads\Warrior.CZ.2011.avi
2014-10-18 06:27 - 2014-10-18 06:27 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2014-10-17 08:36 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-17 08:36 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-17 08:36 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-17 08:36 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-17 08:36 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-17 08:36 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-17 08:36 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-17 08:36 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-17 08:36 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-17 08:36 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-17 08:36 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-17 08:36 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-17 08:36 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-17 08:36 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-17 08:36 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-17 08:36 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-17 08:36 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-17 08:36 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-17 08:36 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-17 08:36 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-17 08:36 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-17 08:36 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-17 08:36 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-17 08:36 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-17 08:36 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-17 08:36 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-17 08:36 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-17 08:36 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-17 08:36 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-17 08:36 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-17 08:36 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-17 08:36 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-17 08:36 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-17 08:36 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-17 08:36 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-17 08:36 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-17 08:36 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-17 08:36 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-17 08:36 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-17 08:36 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-17 08:36 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-17 08:36 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-17 08:36 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-17 08:36 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-17 08:36 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-17 08:36 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-17 08:36 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-17 08:36 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-17 08:36 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-17 08:36 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-17 08:36 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-17 08:36 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-17 08:36 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-17 08:36 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-17 08:36 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-17 08:36 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-17 08:36 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-17 08:36 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-17 08:36 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-17 08:36 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-17 08:36 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-17 08:36 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-17 08:36 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-17 08:36 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-17 08:36 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-17 08:36 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-17 08:36 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-17 08:36 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-17 08:35 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-17 08:35 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-16 16:39 - 2014-10-16 16:39 - 454391166 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_382_1080p_64D6A19C.mkv
2014-10-16 12:55 - 2014-10-16 12:55 - 00073654 _____ () C:\Users\Empair\Downloads\ZEL - Jedno ze zadání testu 1 - 16.10.2014.zip
2014-10-16 12:53 - 2014-10-16 12:53 - 00044717 _____ () C:\Users\Empair\Downloads\the.flash.2014.s01e02.hdtv.x264-lol.srt
2014-10-16 12:52 - 2014-10-16 12:53 - 288170762 _____ () C:\Users\Empair\Downloads\The.Flash-2014-S01E02-WEB-DL-x264-FUM.mp4
2014-10-16 12:52 - 2014-10-16 12:53 - 234210401 _____ () C:\Users\Empair\Downloads\The.Flash.2014.S01E02.HDTV-x264.LOL.mp4
2014-10-16 12:01 - 2014-10-16 12:01 - 00042010 _____ () C:\Users\Empair\Downloads\the.flash.2014.s01e01.preair.720p.web-dl.x264-nogrp.srt
2014-10-16 12:01 - 2014-10-16 12:01 - 00041368 _____ () C:\Users\Empair\Downloads\the.flash.s01e01.hdtv.x264-lol.srt
2014-10-16 11:59 - 2014-10-16 12:00 - 503020951 _____ () C:\Users\Empair\Downloads\The-Flash-S01e01---Pilot.mp4
2014-10-15 18:54 - 2014-10-15 18:57 - 1152752422 _____ () C:\Users\Empair\Downloads\22 Jump Street.avi
2014-10-15 18:14 - 2014-10-15 18:17 - 1047527424 _____ () C:\Users\Empair\Downloads\22jum.part1.rar
2014-10-15 18:14 - 2014-10-15 18:16 - 854576756 _____ () C:\Users\Empair\Downloads\22jum.part2.rar
2014-10-10 10:52 - 2014-10-10 10:53 - 440280833 _____ () C:\Users\Empair\Downloads\CNT_Naruto_Shippuuden_381_1080p_ED3D0DA8.mkv
2014-10-09 15:22 - 2014-10-09 15:23 - 952271550 _____ () C:\Users\Empair\Downloads\Americti-psanci.avi

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-11-07 17:12 - 2014-01-29 18:00 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-11-07 16:37 - 2014-01-19 20:54 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-11-07 16:08 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-11-07 16:08 - 2009-07-14 05:45 - 00032064 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-11-07 16:05 - 2011-07-24 05:04 - 01993974 _____ () C:\Windows\WindowsUpdate.log
2014-11-07 16:01 - 2014-01-19 20:54 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-11-07 16:01 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-11-07 16:01 - 2009-07-14 05:51 - 00123178 _____ () C:\Windows\setupact.log
2014-11-07 15:59 - 2014-03-16 18:21 - 00000284 ___RH () C:\Windows\ctfile.rfc
2014-11-07 15:58 - 2011-07-24 05:19 - 00000000 ____D () C:\Program Files (x86)\Creative
2014-11-07 15:57 - 2011-07-24 05:02 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-11-07 15:55 - 2014-01-19 21:37 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-11-07 15:54 - 2010-11-21 04:47 - 00264516 _____ () C:\Windows\PFRO.log
2014-11-07 15:53 - 2014-01-19 20:54 - 00000000 ____D () C:\Users\Empair\AppData\Local\Google
2014-11-07 15:53 - 2014-01-19 20:54 - 00000000 ____D () C:\Program Files (x86)\Google
2014-11-07 15:53 - 2011-07-24 05:16 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-11-07 15:51 - 2014-09-22 16:23 - 00000000 ____D () C:\ProgramData\Blueberry
2014-11-07 15:51 - 2014-09-22 16:20 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\Blueberry
2014-11-07 15:51 - 2014-04-06 13:14 - 00000000 ____D () C:\Program Files\KMSnano
2014-11-07 15:51 - 2011-07-24 05:10 - 00000000 ____D () C:\Windows\Driver Cache
2014-11-07 15:47 - 2014-01-21 21:36 - 00000000 ____D () C:\ProgramData\Creative
2014-11-07 15:44 - 2011-07-24 05:15 - 00046452 _____ () C:\Windows\RPSETUP.EXE.LOG
2014-11-07 15:32 - 2014-01-19 21:48 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\vlc
2014-11-07 14:04 - 2014-01-19 17:59 - 00000000 ____D () C:\Users\Empair
2014-11-07 09:22 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2014-11-06 21:49 - 2009-07-14 04:20 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-11-06 21:47 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-11-06 21:06 - 2014-04-15 17:59 - 00001072 _____ () C:\Users\Public\Desktop\VLC media player.lnk
2014-11-06 20:41 - 2010-11-21 10:27 - 00672372 _____ () C:\Windows\system32\perfh005.dat
2014-11-06 20:41 - 2010-11-21 10:27 - 00143028 _____ () C:\Windows\system32\perfc005.dat
2014-11-06 20:41 - 2009-07-14 06:13 - 01593258 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-11-06 20:38 - 2014-02-06 17:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2014-11-06 20:38 - 2014-02-06 17:35 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2014-11-06 20:36 - 2011-07-23 21:53 - 00000000 ____D () C:\Program Files\NVIDIA Corporation
2014-11-06 20:36 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\Help
2014-11-06 20:34 - 2011-07-23 21:53 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2014-11-06 20:15 - 2011-02-15 08:08 - 01568908 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-11-06 19:12 - 2014-10-05 11:34 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\CodeBlocks
2014-11-06 18:14 - 2014-01-21 21:35 - 00000000 ____D () C:\Users\Empair\AppData\Roaming\Skype
2014-11-03 13:08 - 2014-01-29 18:00 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-11-03 13:08 - 2014-01-29 18:00 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-11-03 13:08 - 2014-01-29 18:00 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-29 16:09 - 2014-01-19 22:01 - 00000000 ____D () C:\Users\Empair\AppData\Local\JDownloader v2.0
2014-10-28 06:34 - 2010-11-21 04:27 - 00275080 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-10-26 21:02 - 2011-07-24 05:15 - 00000000 ____D () C:\ProgramData\Skype
2014-10-20 12:04 - 2014-02-07 16:40 - 00001069 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\LINE.lnk
2014-10-20 12:04 - 2014-02-07 16:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LINE
2014-10-19 22:59 - 2014-01-19 23:31 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2014-10-19 22:59 - 2014-01-19 22:57 - 00000000 ____D () C:\ProgramData\Microsoft Help
2014-10-19 20:50 - 2011-07-24 05:03 - 00002480 _____ () C:\freefallprotection.log
2014-10-19 20:40 - 2009-07-14 04:20 - 00000000 __RHD () C:\Users\Public\Libraries
2014-10-19 20:34 - 2014-01-19 17:59 - 00111520 _____ () C:\Users\Empair\AppData\Local\GDIPFONTCACHEV1.DAT
2014-10-19 13:46 - 2014-04-18 14:40 - 00000000 ____D () C:\Users\Empair\Downloads\JDownlander
2014-10-18 10:57 - 2009-07-14 05:45 - 00433816 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 10:55 - 2014-05-06 21:44 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 06:38 - 2009-07-14 03:34 - 00000510 _____ () C:\Windows\win.ini
2014-10-17 22:19 - 2014-01-19 18:30 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-17 22:19 - 2014-01-19 18:30 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-17 13:32 - 2014-01-19 20:54 - 00003948 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-17 13:32 - 2014-01-19 20:54 - 00003696 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

==================== MBR and Partition Table ==================

v System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
v System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)
v System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy)
v System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

==================== Security Center ==================

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Empair\Desktop" je 5855 MB.

***** Startup Programs *****

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

#8 Příspěvek od **vyosek** » 08 Lis 2014 17:20

Tvorba fixlistu pro FRST

Spustte poznamkovy blok (Start-spustit-notepad)
Zkopirujte skript nize

Kód: Vybrat vše

Start
CloseProcesses:

HKLM\...\Run: [Nvtmru] => "C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe"
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [256896 2014-07-25] (Oracle Corporation)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: F - F:\_AUTORUN\AUTORUN.EXE
HKU\S-1-5-21-1572388576-1806119407-3699164354-1001\...\MountPoints2: {e9ec3c8a-814f-11e3-af8c-14feb5ba8337} - F:\_AUTORUN\AUTORUN.EXE

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.euro.dell.com/content/defau ... l=cs&s=bsd
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File

2014-11-07 17:25 - 2014-11-07 17:26 - 00020512 _____ () C:\Users\Empair\Desktop\FRST.txt
2014-11-07 17:25 - 2014-11-07 17:25 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Desktop\FRSTLauncher.exe
2014-11-07 17:24 - 2014-11-07 17:24 - 00428576 _____ (Blackfish Software) C:\Users\Empair\Downloads\ietabhelper.exe
2014-11-07 17:24 - 2014-11-07 17:24 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 873246.crdownload
2014-11-07 17:24 - 2014-11-07 17:24 - 00000000 ____D () C:\Users\Empair\AppData\Local\IE Tab
2014-11-07 17:23 - 2014-11-07 17:23 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 782223.crdownload
2014-11-07 17:23 - 2014-11-07 17:23 - 00112640 _____ (forum.viry.cz) C:\Users\Empair\Downloads\Nepotvrzeno 762000.crdownload
2014-11-07 14:13 - 2014-02-13 23:59 - 00024064 _____ () C:\Windows\zoek-delete.exe
2014-11-07 13:31 - 2014-11-07 14:16 - 00012158 _____ () C:\zoek-results.log
2014-11-07 13:30 - 2014-11-07 13:29 - 01294848 _____ () C:\Users\Empair\Desktop\zoek.exe
2014-11-07 13:29 - 2014-11-07 14:15 - 00000000 ____D () C:\zoek_backup
2014-11-07 13:29 - 2014-11-07 13:29 - 01294848 _____ () C:\Users\Empair\Downloads\zoek (1).exe
2014-11-07 13:27 - 2014-11-07 13:28 - 04255653 _____ () C:\Users\Empair\Downloads\zoek.rar
2014-11-07 13:27 - 2014-11-07 13:27 - 04109386 _____ () C:\Users\Empair\Downloads\zoek.zip
2014-11-07 13:25 - 2014-11-07 13:26 - 01266577 _____ () C:\Users\Empair\Downloads\zoek.exe
2014-11-07 12:55 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-11-07 12:53 - 2014-11-07 12:58 - 00000000 ____D () C:\AdwCleaner
2014-11-07 12:51 - 2014-11-07 12:51 - 00001049 _____ () C:\Users\Empair\Desktop\JRT.txt
2014-11-07 12:45 - 2014-11-07 12:45 - 00000000 ____D () C:\Windows\ERUNT
2014-11-07 12:44 - 2014-11-07 12:44 - 01375089 _____ () C:\Users\Empair\Downloads\adwcleaner_3.311.exe
2014-11-07 12:44 - 2014-11-07 12:44 - 01375089 _____ () C:\Users\Empair\Desktop\adwcleaner_3.311.exe
2014-11-07 12:44 - 2014-11-07 12:43 - 01706939 _____ (Thisisu) C:\Users\Empair\Desktop\JRT.exe
2014-11-07 12:43 - 2014-11-07 12:43 - 01706939 _____ (Thisisu) C:\Users\Empair\Downloads\JRT.exe
2014-11-06 21:29 - 2014-11-06 21:29 - 00004831 _____ () C:\Users\Empair\Desktop\Addition.rar

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Hosts:
EmptyTemp:
Reboot:
End

Ulozte vytvoreny TXT jako fixlist.txt
Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

Kliknete na Fix
Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt

VIRY.CZ

LOG

LOG

Re: LOG

Re: LOG

Re: LOG

Re: LOG

Re: LOG

Re: LOG

Re: LOG