Zdravím! Bohužel jsem omylem spustil jednu přílohu a už to jelo :-/
Může prosím někdo jen mrknout na log? Avast je v koncích. Děkuji!
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by j.hal (administrator) on NTB-HAL on 24-03-2015 14:10:58
Running from C:\Users\Serifus\Desktop
Loaded Profiles: j.hal (Available profiles: balcom & j.hal)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(KVASER AB, Mölndal, SWEDEN) C:\Program Files\Kvaser\Drivers\32\KvEnumSrv.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\eLicense server\gehealth.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN Support Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Microsoft) C:\dell\DBRM\Reminder\DbrmTrayicon.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1894696 2010-01-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-04-07] (IDT, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4119920 2010-01-15] (Dell Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [727664 2010-10-01] ()
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [5712896 2011-01-18] (Dell Inc.)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [206336 2010-05-20] (Microsoft)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-23] (Avast Software s.r.o.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKLM\...\RunOnce: [DBRMTray] => C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-05] (Microsoft)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [YTDownloader] => "C:\Program Files (x86)\YTDownloader\YTDownloader.exe" /boot
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageMixer 3 SE Camera Monitor Ver.4.5.lnk
ShortcutTarget: ImageMixer 3 SE Camera Monitor Ver.4.5.lnk -> C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk
ShortcutTarget: Yawcam.lnk -> C:\Program Files (x86)\Yawcam\Yawcam.exe (No File)
Startup: C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
BootExecute: autocheck autochk * aswBoot.exe /M:6b302a96a /wow /dir:"C:\Program Files\AVAST Software\Avast"
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {4F711480-00A7-4072-BD0B-D306F8E1B083} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {C2DC31E2-7F36-4EED-8B85-9C450130ED3E} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-17] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-17] (Avast Software s.r.o.)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-23] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
Toolbar: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-10-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.20.1 193.85.1.100
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... XZ0KKTT3TT
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=10 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-03-24] (globalUpdate)
FF Plugin-x32: @staging.google.com/globalUpdate Update;version=4 -> C:\Program Files (x86)\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll [2015-03-24] (globalUpdate)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2013-08-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-18]
FF HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\firefoxext
Chrome:
=======
CHR Profile: C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-04]
CHR Extension: (Google Drive) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-04]
CHR Extension: (YouTube) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-04]
CHR Extension: (Google Search) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-04]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-02-24]
CHR Extension: (Avast Online Security) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-04]
CHR Extension: (Google Wallet) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-04]
CHR Extension: (CinemaP-1.8cV24.03) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp [2015-03-24]
CHR Extension: (Gmail) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-04]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe http://www.omniboxes.com/?type=sc&ts=14 ... XZ0KKTT3TT
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-17] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-17] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-17] (Avast Software)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5480296 2009-03-27] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2014-01-27] (Fork Ltd.) [File not signed]
R2 GE healthcare eLicense server; C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe [1423440 2012-06-12] (Macrovision Corporation) [File not signed]
S2 globalUpdate; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-24] (globalUpdate) [File not signed]
S3 globalUpdatem; C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [68608 2015-03-24] (globalUpdate) [File not signed]
R2 KvEnumSrv; C:\Program Files\Kvaser\Drivers\32\kvenumsrv.exe [173136 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation)
R2 MSSQL$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation)
S4 SQLAgent$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\STacSV64.exe [247808 2010-04-07] (IDT, Inc.)
S3 UNICORN HDA Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN HDA Service.exe [257368 2013-04-09] (GE Healthcare)
R2 UNICORN Support Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\Bin\UNICORN Support Service.exe [38232 2013-04-09] (GE Healthcare)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2011-01-18] (Dell Inc.) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-17] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-17] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-17] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-03-17] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-17] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-17] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-17] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-17] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-17] ()
R0 DevMng; C:\Windows\System32\Drivers\DevMng64.sys [16656 2014-03-07] ()
S3 fmusb; C:\Windows\System32\Drivers\fmusb64.sys [21904 2014-03-07] (Windows (R) Win 7 DDK provider)
S3 kcane; C:\Windows\System32\DRIVERS\kcane.sys [87120 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R3 kcanv; C:\Windows\System32\DRIVERS\kcanv.sys [66128 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S3 kvnet; C:\Windows\System32\DRIVERS\kvnet.sys [37424 2012-04-13] (Kerio Technologies Inc.)
R3 kvnetenum; C:\Windows\System32\DRIVERS\kvnetenum.sys [38992 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [322736 2014-07-10] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-17] (Avast Software)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [103224 2009-12-03] (WIBU-SYSTEMS AG)
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-24 14:10 - 2015-03-24 14:11 - 00028899 _____ () C:\Users\Serifus\Desktop\FRST.txt
2015-03-24 14:09 - 2015-03-24 14:10 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
2015-03-24 14:09 - 2015-03-24 14:09 - 02095616 _____ (Farbar) C:\Users\Serifus\Desktop\FRST64.exe
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Windows\SysWOW64\%LOCALAPPDATA%
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\AVAST Software
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\AVAST Software
2015-03-24 12:12 - 2015-03-24 12:12 - 00001278 _____ () C:\Users\Serifus\Desktop\Call of Duty Black Ops 2.lnk
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Call of Duty Black Ops 2
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-03-24 11:50 - 2015-03-24 11:50 - 00001029 _____ () C:\Users\Serifus\Desktop\SevenZip.lnk
2015-03-24 11:50 - 2015-03-24 11:50 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SevenZip 9.20
2015-03-24 11:50 - 2015-03-24 11:50 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-03-24 11:50 - 2015-03-24 11:50 - 00000000 ____D () C:\Program Files (x86)\SevenZip
2015-03-24 11:49 - 2015-03-24 13:56 - 00003108 _____ () C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5_user.job
2015-03-24 11:49 - 2015-03-24 11:49 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\omniboxes
2015-03-24 11:48 - 2015-03-24 13:56 - 00002764 _____ () C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5.job
2015-03-24 11:48 - 2015-03-24 13:55 - 00003114 _____ () C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-5_user.job
2015-03-24 11:48 - 2015-03-24 13:55 - 00002770 _____ () C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-5.job
2015-03-24 11:47 - 2015-03-24 14:07 - 00000000 ____D () C:\Program Files (x86)\Sense
2015-03-24 11:47 - 2015-03-24 13:56 - 00003448 _____ () C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-1-6.job
2015-03-24 11:47 - 2015-03-24 13:56 - 00001694 _____ () C:\Windows\Tasks\MDSGZQE.job
2015-03-24 11:47 - 2015-03-24 13:55 - 00005842 _____ () C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-6.job
2015-03-24 11:47 - 2015-03-24 13:55 - 00003454 _____ () C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-1-6.job
2015-03-24 11:47 - 2015-03-24 13:55 - 00002092 _____ () C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-10_user.job
2015-03-24 11:47 - 2015-03-24 12:37 - 00000000 ____D () C:\Program Files (x86)\Ge-Force
2015-03-24 11:47 - 2015-03-24 11:47 - 00000000 ____D () C:\Program Files (x86)\420b78f9-2573-4684-8851-cbbefa3e8b1f
2015-03-24 11:47 - 2015-03-24 11:47 - 00000000 ____D () C:\Program Files (x86)\391e11ef-df11-4ae4-8db0-b7168dbc965d
2015-03-24 11:46 - 2015-03-24 11:50 - 00000000 ____D () C:\Users\Serifus\AppData\Local\BrowserHelper
2015-03-24 11:46 - 2015-03-24 11:46 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-03-24 11:45 - 2015-03-24 11:45 - 00000000 ____D () C:\Users\Serifus\AppData\Local\CrashRpt
2015-03-24 11:44 - 2015-03-24 11:54 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Opera Software
2015-03-24 11:44 - 2015-03-24 11:54 - 00000000 ____D () C:\Users\Serifus\AppData\Local\Opera Software
2015-03-24 11:41 - 2015-03-24 11:54 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-24 11:40 - 2015-03-24 14:07 - 00000910 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job
2015-03-24 11:40 - 2015-03-24 13:56 - 00005518 _____ () C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-6.job
2015-03-24 11:40 - 2015-03-24 13:56 - 00002112 _____ () C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-10_user.job
2015-03-24 11:40 - 2015-03-24 13:56 - 00001346 _____ () C:\Windows\Tasks\VWSCP.job
2015-03-24 11:40 - 2015-03-24 13:55 - 00003138 _____ () C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-1-6.job
2015-03-24 11:40 - 2015-03-24 11:52 - 00000914 _____ () C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job
2015-03-24 11:40 - 2015-03-24 11:47 - 00003912 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineUA
2015-03-24 11:40 - 2015-03-24 11:47 - 00003658 _____ () C:\Windows\System32\Tasks\globalUpdateUpdateTaskMachineCore
2015-03-24 11:40 - 2015-03-24 11:40 - 00000000 ____D () C:\Users\Serifus\AppData\Local\globalUpdate
2015-03-24 11:40 - 2015-03-24 11:40 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2015-03-24 11:40 - 2015-03-24 11:40 - 00000000 ____D () C:\Program Files (x86)\45890455-9606-4495-a6e4-0f96abab56f1
2015-03-24 11:39 - 2015-03-24 12:23 - 00000000 ____D () C:\Program Files (x86)\CinemaP-1.8cV24.03
2015-03-20 11:59 - 2015-03-24 12:11 - 00001155 _____ () C:\Windows\DirectX.log
2015-03-20 11:19 - 2015-03-24 11:08 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2015-03-17 10:06 - 2015-03-17 10:06 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-03-17 10:06 - 2015-03-17 10:06 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-03-17 10:06 - 2015-03-17 10:06 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-16 17:53 - 2015-03-16 17:55 - 40118674 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.9l1jb9p.partial
2015-03-16 12:17 - 2015-03-16 12:17 - 00000000 ____D () C:\ProgramData\Western Digital
2015-03-16 12:00 - 2015-03-16 12:02 - 40117434 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.skkrm80.partial
2015-03-16 11:54 - 2015-03-24 13:43 - 40924332 _____ () C:\Users\Serifus\Downloads\TamoSoft-CommView-for-WiFi-v7-0-791-x86-x64-Incl-Keymaker-and-Patch-MAZE.rar.330xhpg.partial
2015-03-12 13:56 - 2015-03-12 13:56 - 00000197 _____ () C:\Windows\system32\2015-03-12-12-56-16.067-AvastVBoxSVC.exe-4884.log
2015-03-11 20:31 - 2015-03-11 20:31 - 00014464 _____ (Western Digital Technologies) C:\Windows\system32\Drivers\wdcsam64.sys
2015-03-11 16:28 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:28 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:28 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:25 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:25 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:25 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:25 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:25 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:25 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:25 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:25 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:22 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:22 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:21 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:21 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:20 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:20 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:20 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:20 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:20 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:19 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:19 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:18 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:18 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:18 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:17 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:17 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:17 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:17 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:17 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:17 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:17 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:17 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:17 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:17 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:17 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:17 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:17 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:17 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:17 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:17 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:17 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:17 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:17 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:17 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:17 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:17 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:17 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:17 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:17 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:17 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:17 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:17 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log
2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log
2015-03-09 22:30 - 2015-03-24 12:53 - 00000385 _____ () C:\Users\Serifus\AppData\Roaming\VWSCP
2015-03-09 22:30 - 2015-03-24 12:52 - 00000385 _____ () C:\Users\Serifus\AppData\Roaming\MDSGZQE
2015-03-09 15:15 - 2015-03-09 15:15 - 00002791 _____ () C:\Users\Public\Desktop\Typhoon FLA 7000.lnk
2015-03-09 15:15 - 2015-03-09 15:15 - 00000000 ____D () C:\GE Healthcare
2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log
2015-03-05 10:52 - 2015-03-05 11:12 - 356817068 _____ () C:\Users\Serifus\Downloads\rammstein-made-in-germany-1995-2011-special-edition-2011-cover-peko.rar
2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log
2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log
2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log
2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log
2015-03-03 15:15 - 2015-03-03 15:15 - 00009008 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.1dxml
2015-03-03 15:10 - 2015-03-03 15:10 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.arx
2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log
2015-03-02 15:28 - 2015-03-02 15:28 - 01134989 _____ () C:\Users\Serifus\Documents\Kopie - EM_Install_Base_country_02032015.xlsx
2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log
2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log
2015-02-26 14:35 - 2015-02-26 14:35 - 00000098 _____ () C:\Users\Serifus\Desktop\Starcraft.bat
2015-02-26 07:29 - 2015-02-26 07:29 - 00000197 _____ () C:\Windows\system32\2015-02-26-06-29-07.015-AvastVBoxSVC.exe-4896.log
2015-02-25 19:11 - 2015-02-25 19:11 - 00000197 _____ () C:\Windows\system32\2015-02-25-18-11-32.029-AvastVBoxSVC.exe-4676.log
2015-02-25 16:56 - 2014-07-10 11:23 - 00083632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 16:56 - 2014-07-10 11:22 - 00089264 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 10:27 - 2015-02-25 10:27 - 00000197 _____ () C:\Windows\system32\2015-02-25-09-27-18.075-AvastVBoxSVC.exe-4704.log
2015-02-24 17:55 - 2015-02-24 17:55 - 00000197 _____ () C:\Windows\system32\2015-02-24-16-55-14.021-AvastVBoxSVC.exe-4552.log
2015-02-24 17:44 - 2012-06-29 01:22 - 00057288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 17:44 - 2012-06-29 01:17 - 00086984 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 15:34 - 2015-02-24 15:34 - 00000197 _____ () C:\Windows\system32\2015-02-24-14-34-01.062-AvastVBoxSVC.exe-4300.log
2015-02-24 13:41 - 2015-02-24 13:41 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2015-02-24 10:07 - 2015-02-24 10:07 - 00000197 _____ () C:\Windows\system32\2015-02-24-09-07-20.015-AvastVBoxSVC.exe-4688.log
2015-02-23 21:22 - 2015-03-03 16:05 - 00000219 _____ () C:\Windows\array.INI
2015-02-23 15:22 - 2015-02-23 15:22 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]tif.arx
2015-02-23 15:21 - 2015-03-09 15:16 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\GE Healthcare
2015-02-23 15:21 - 2015-03-03 15:45 - 00000086 _____ () C:\Windows\1d.INI
2015-02-23 15:04 - 2015-02-23 15:04 - 00495616 _____ (Simon Tatham) C:\Users\Serifus\Desktop\putty.exe
2015-02-23 13:41 - 2015-02-23 13:41 - 00000197 _____ () C:\Windows\system32\2015-02-23-12-41-05.018-AvastVBoxSVC.exe-4580.log
2015-02-23 12:38 - 2015-02-23 12:38 - 00351232 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.dll
2015-02-23 12:38 - 2015-02-23 12:38 - 00028160 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.exe
2015-02-23 12:38 - 2015-02-23 12:38 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Příslušenství
2015-02-23 09:21 - 2015-02-23 09:21 - 00000197 _____ () C:\Windows\system32\2015-02-23-08-21-52.076-AvastVBoxSVC.exe-4876.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-24 14:11 - 2015-02-17 13:51 - 00000000 ____D () C:\FRST
2015-03-24 14:07 - 2014-05-19 09:22 - 00000128 _____ () C:\Windows\system32\config\netlogon.ftl
2015-03-24 14:07 - 2014-01-27 13:45 - 00000000 ____D () C:\Users\Serifus\AppData\Local\LogMeIn Hamachi
2015-03-24 14:07 - 2009-07-14 06:10 - 02018511 _____ () C:\Windows\WindowsUpdate.log
2015-03-24 14:05 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-24 14:05 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-24 13:58 - 2012-08-15 16:17 - 00000029 _____ () C:\Windows\SysWOW64\TempWmicBatchFile.bat
2015-03-24 13:55 - 2014-11-26 14:49 - 00027014 _____ () C:\Windows\PFRO.log
2015-03-24 13:55 - 2014-11-25 15:11 - 00008840 _____ () C:\Windows\setupact.log
2015-03-24 13:55 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-24 11:56 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-03-24 11:54 - 2012-01-31 12:53 - 00001599 _____ () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-24 11:47 - 2012-02-10 12:12 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-24 11:46 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-24 11:40 - 2012-02-06 13:47 - 00000000 ____D () C:\Program Files (x86)\animech
2015-03-24 11:30 - 2012-06-26 10:56 - 00000000 ____D () C:\Users\Serifus\Documents\aniPart support
2015-03-24 11:30 - 2012-04-04 09:28 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-24 11:30 - 2012-02-06 13:52 - 00000000 ____D () C:\Program Files (x86)\anipart client
2015-03-23 11:29 - 2014-08-29 09:47 - 00000000 ____D () C:\Users\Serifus\AppData\Local\Adobe
2015-03-23 11:29 - 2012-04-04 09:28 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-23 11:29 - 2012-04-04 09:28 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-23 11:29 - 2012-02-02 14:36 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-23 10:11 - 2014-10-16 14:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-20 12:52 - 2012-07-23 07:42 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-03-17 10:06 - 2014-04-24 09:13 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-03-17 10:06 - 2014-01-13 12:02 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-03-17 10:06 - 2013-12-31 09:16 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00268640 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-03-17 10:06 - 2012-03-19 10:53 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00441728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-03-16 18:44 - 2013-07-29 09:08 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\uTorrent
2015-03-16 15:32 - 2009-07-14 16:18 - 00806522 _____ () C:\Windows\system32\perfh005.dat
2015-03-16 15:32 - 2009-07-14 16:18 - 00193978 _____ () C:\Windows\system32\perfc005.dat
2015-03-16 15:32 - 2009-07-14 06:13 - 01966174 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-16 15:20 - 2014-04-14 11:44 - 00000000 ____D () C:\Users\Serifus\Documents\Přednášky škola
2015-03-16 12:08 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-12 23:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 15:25 - 2012-02-27 22:06 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Media Player Classic
2015-03-12 13:58 - 2013-07-18 14:03 - 00000000 ___RD () C:\Users\Serifus\Virtual Machines
2015-03-12 13:53 - 2009-07-14 05:45 - 00449360 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 12:40 - 2014-04-25 09:59 - 00000000 ____D () C:\Users\Serifus\Documents\Protokoly
2015-03-11 12:29 - 2012-02-01 13:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-09 15:15 - 2014-04-03 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GE Healthcare
2015-03-09 15:15 - 2013-07-29 09:17 - 00000000 ____D () C:\Program Files (x86)\GE Healthcare
2015-03-09 14:25 - 2012-01-31 13:12 - 00000000 ____D () C:\Users\Serifus\Documents\AutoDELFIA
2015-03-05 10:29 - 2012-01-31 13:23 - 00023905 _____ () C:\Users\Serifus\Documents\Vyúčtování.xlsx
2015-03-04 16:04 - 2015-02-18 13:21 - 00000065 _____ () C:\Users\Serifus\Desktop\Delfia Brno výtah.txt
2015-03-04 11:11 - 2009-07-14 06:08 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-03 11:49 - 2012-01-31 13:23 - 00068228 _____ () C:\Users\Serifus\Documents\KILMON.xlsx
2015-03-02 15:23 - 2012-05-02 12:39 - 00000000 ____D () C:\Users\Serifus\Documents\Katalog přístrojů
2015-02-27 19:44 - 2012-02-01 13:33 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Skype
2015-02-25 20:19 - 2014-06-16 09:51 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Audacity
2015-02-25 16:52 - 2014-04-03 13:59 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-02-25 16:52 - 2013-02-21 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-02-25 11:30 - 2014-10-08 11:02 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-25 11:30 - 2014-10-08 11:02 - 00001092 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2015-02-24 17:43 - 2014-04-03 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
2015-02-24 17:36 - 2014-05-19 09:01 - 00000000 ____D () C:\Install
2015-02-24 16:47 - 2015-01-19 16:51 - 00000000 ____D () C:\Users\Serifus\Documents\SQL Server Management Studio
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-02-24 03:17 - 2012-01-31 13:11 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 21:25 - 2013-03-14 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-02-23 12:35 - 2014-02-04 16:20 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000985 _____ () C:\Users\Public\Desktop\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000000 ____D () C:\Program Files (x86)\WinSCP
==================== Files in the root of some directories =======
2015-03-09 22:30 - 2015-03-24 12:52 - 0000385 _____ () C:\Users\Serifus\AppData\Roaming\MDSGZQE
2015-03-09 22:30 - 2015-03-24 12:53 - 0000385 _____ () C:\Users\Serifus\AppData\Roaming\VWSCP
2014-02-04 16:23 - 2014-02-04 19:17 - 0000600 _____ () C:\Users\Serifus\AppData\Roaming\winscp.rnd
2012-02-01 09:54 - 2014-11-11 12:44 - 0003584 _____ () C:\Users\Serifus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-05-19 09:39 - 2014-05-19 09:40 - 0427840 _____ (ForensiT Limited) C:\ProgramData\UserProfileMigrationService.exe
Files to move or delete:
====================
C:\ProgramData\UserProfileMigrationService.exe
C:\Users\Serifus\tcc.exe
C:\Users\Serifus\tcc520.exe
C:\Users\Serifus\USBp950-Service.exe
C:\Users\Serifus\USBp950_drv_setup.exe
Some content of TEMP:
====================
C:\Users\Serifus\AppData\Local\Temp\bassmod.dll
C:\Users\Serifus\AppData\Local\Temp\tu17p84.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-03-15 00:40
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:453.66 GB) (Free:38.19 GB) NTFS
Drive e: (STARCRAFT) (CDROM) (Total:0.62 GB) (Free:0 GB) CDFS
Drive f: (BROODWAR) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS
Available physical RAM: 3388 MB
Total physical RAM: 5942.59 MB
Percentage of memory in use: 42%
==================== MBR and Partition Table ==================
Disk: 0 (Size: 465.8 GB) (Disk ID: 77E3ED41)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=12.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=453.7 GB) - (Type=07 NTFS)
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 132C2638)
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-1-6.job => C:\Program Files (x86)\Ge-Force\740c68d2-a36f-40f0-892b-8bc8d9aded79-1-6.exe
Task: C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-10_user.job => C:\Program Files (x86)\Ge-Force\740c68d2-a36f-40f0-892b-8bc8d9aded79-10.exeb/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-5.job => C:\Program Files (x86)\Ge-Force\740c68d2-a36f-40f0-892b-8bc8d9aded79-5.exe¶/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-5_user.job => C:\Program Files (x86)\Ge-Force\740c68d2-a36f-40f0-892b-8bc8d9aded79-5.exeb/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\740c68d2-a36f-40f0-892b-8bc8d9aded79-6.job => C:\Program Files (x86)\Ge-Force\740c68d2-a36f-40f0-892b-8bc8d9aded79-6.exe¶
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-1-6.job => C:\Program Files (x86)\CinemaP-1.8cV24.03\b7fb379f-0027-48b3-be20-e8a5d65f3852-1-6.exeb/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-10_user.job => C:\Program Files (x86)\CinemaP-1.8cV24.03\b7fb379f-0027-48b3-be20-e8a5d65f3852-10.exeb/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\b7fb379f-0027-48b3-be20-e8a5d65f3852-6.job => C:\Program Files (x86)\CinemaP-1.8cV24.03\b7fb379f-0027-48b3-be20-e8a5d65f3852-6.exe
Task: C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-1-6.job => C:\Program Files (x86)\Sense\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-1-6.exe
Task: C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5.job => C:\Program Files (x86)\Sense\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5.exe¶/rawdata=w4RS6cbRrYnGIT8QDj+rQ5Z2ukKtEC/sKmfxjXusVJsLugVJJNccfwf1dEudMod6tVIqKKOfotSbv9TiTKWmHFIAJbawGEs5NgihIOwalyUeLZ3JY1aveIiWV6ozx1o3SLSzDtrcYsWsrZ2ljjXs37S0whc2xu49JpjZZuIElEBP5PVBc+zsl/2LRS/NoFi/05Ibl4w9tS1tM9qHWz0FiS7fsgss0aczZkcOGON9Sm+sDt9dYZ1iD1Q0mCdxqxsrVpVDPVHmfJw7MArBcqRlq7u/cWBt6AgHtZeKHe+tT5HgpDCzanyde1DXlOi7jd1yeS5RNtsLQBPiwQMQNwOYdmvxgw8CzzI74IoG0ND0i6CMgDmXWcO7lsKr1fDJKuE3drCJyM+XOVbjeHkJzltfz71OiPVOOYqf13jg5/lOIZ4NuPzs0JabW84TRwZ3NQRQRrTm/0KSmpDROb7iCO6W/uEd4YHipxxr9UqgrYgnOErGgAbnjbfXeXIiktGgrzFlXrSjfE+hpdNYFS2hwJY29UoxqoaOJB1Mc5xbVfA01nALexoh27HfRv8ryXIR5iHIbjW1Hge2p81q85FTPacfi74KeLjUeRFby5Sd1CTETSnViGXcyGNiPF44rbsIhiaGe/ZA3qU2WhW7qtI72fv2Ehq1BPX4GZGP9clYgGgZ4ZKSXdjzULK3L/EvVE5S8ER1zUCOzMuLMRF00HWYWJ4xwluw8JpwpXCawIamMhp5z+R0owV4G6SI35q3q2NHE1/L9OqZBtQ5XdRyoVUV3WP9LXLQsvbOgDKd2phPeqSvTVP480We3J1Oee8G01/3glMQgZ8mMtOuOsRCHzSgIvJQhnao6QaxtRAG5jR8CFOrIAQTgbAXaSKNrucF01as+TGYecMNzIXXX0Pqa88ipvXhgzJl2pWpToXOksgvmUtw8qKwHe1KBhcZt0ZW93idr7ODPCFzYJnr3sO3SZsUoM27DD/dz1eTk6+PwrYPflB+Z7/0xvB9ixIKSG9HKjUOtCniexP+RXh5s8Gpb346ljjBOLgQpTcENHo8LqnvVe1F/zj0tuh+IBheNCLfecnIyahw3g4bP3Fskx178EIy+ua3Gbt+BvN2m6F7Djn4Dst8bBbJkBKpThfxYeseSO1slp0hL6Dme8uNqNkgHZnHaxF9k04qH7rFHyCFfNOxmhuu5bY= j.hal <==== ATTENTION
Task: C:\Windows\Tasks\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5_user.job => C:\Program Files (x86)\Sense\fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5.exeb/rawdata=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineCore.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe/c j.hal <==== ATTENTION
Task: C:\Windows\Tasks\globalUpdateUpdateTaskMachineUA.job => C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe/ua /installsource scheduler j.hal <==== ATTENTION
Task: C:\Windows\Tasks\MDSGZQE.job => C:\Users\Serifus\AppData\Roaming\MDSGZQE.exeş/infocmdline=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 j.hal <==== ATTENTION
Task: C:\Windows\Tasks\VWSCP.job => C:\Users\Serifus\AppData\Roaming\VWSCP.exe/infocmdline=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 j.hal <==== ATTENTION
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Serifus\Desktop" je 42 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Spousta virů :-(
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Spousta virů :-(
- Přílohy
-
- Addition.zip
- (24.45 KiB) Staženo 53 x
Re: Spousta virů :-(
Zdravim 
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner
- Ulozte nejlepe na plochu
- Ukoncete vsechny programy
- Po spusteni probehne stazeni databaze
- Kliknete na Scan a nasledne Clean
- Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte
Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu
- Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
- Do okna vlozte skript nize
Kód: Vybrat vše
autoclean; resethosts; emptyclsid; IEdefaults; FFdefaults; CHRdefaults; emptyIEcache; emptyFFcache; emptyCHRcache; emptyalltemp; emptyflash; emptyjava; emptyrecycle.bin;- Nasledne kliknete na Run Script
- PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen
od 1. února 2011.
Člen
od 1. února 2011.Re: Spousta virů :-(
# AdwCleaner v4.113 - Logfile created 24/03/2015 at 14:59:47
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : j.hal - NTB-HAL
# Running from : C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
# Option : Cleaning
***** [ Services ] *****
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\Sense
Folder Deleted : C:\Program Files (x86)\Ge-Force
Folder Deleted : C:\Program Files (x86)\CinemaP-1.8cV24.03
Folder Deleted : C:\Users\Serifus\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Serifus\AppData\Local\BrowserHelper
Folder Deleted : C:\Users\Serifus\AppData\Roaming\omniboxes
***** [ Scheduled tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-1-6
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-10_user
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-5
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-5_user
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-6
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-1-6
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-10_user
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-6
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-1-6
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5_user
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (64-bit).lnk
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Key Deleted : HKLM\SOFTWARE\3eb2405d-d42c-40dd-ace3-83e2dae98cef
Key Deleted : HKLM\SOFTWARE\465ab2dd-70a0-4988-96d7-f82695e3c3cc
Key Deleted : HKLM\SOFTWARE\fa4034dd-0876-4f5c-aa83-8235bdc70363
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Appscion
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\Sense
Key Deleted : HKLM\SOFTWARE\ShopperPro
Key Deleted : HKLM\SOFTWARE\omniboxesSoftware
Key Deleted : HKLM\SOFTWARE\CinemaP-1.8cV24.03
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sense
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\omniboxes uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.8cV24.03
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17689
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v41.0.2272.101
*************************
AdwCleaner[R1].txt - [11793 bytes] - [24/03/2015 14:52:47]
AdwCleaner[S1].txt - [11151 bytes] - [24/03/2015 14:59:47]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [11211 bytes] ##########
# Updated 22/03/2015 by Xplode
# Database : 2015-03-23.1 [Server]
# Operating system : Windows 7 Professional Service Pack 1 (x64)
# Username : j.hal - NTB-HAL
# Running from : C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
# Option : Cleaning
***** [ Services ] *****
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
***** [ Files / Folders ] *****
Folder Deleted : C:\ProgramData\WindowsMangerProtect
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\Sense
Folder Deleted : C:\Program Files (x86)\Ge-Force
Folder Deleted : C:\Program Files (x86)\CinemaP-1.8cV24.03
Folder Deleted : C:\Users\Serifus\AppData\Local\globalUpdate
Folder Deleted : C:\Users\Serifus\AppData\Local\BrowserHelper
Folder Deleted : C:\Users\Serifus\AppData\Roaming\omniboxes
***** [ Scheduled tasks ] *****
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-1-6
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-10_user
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-5
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-5_user
Task Deleted : 740c68d2-a36f-40f0-892b-8bc8d9aded79-6
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-1-6
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-10_user
Task Deleted : b7fb379f-0027-48b3-be20-e8a5d65f3852-6
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-1-6
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5
Task Deleted : fcd301d4-fe51-42ac-86fe-07472e0d5ed5-5_user
***** [ Shortcuts ] *****
Shortcut Disinfected : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome (2).lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
Shortcut Disinfected : C:\Users\Serifus\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Internet Explorer (64-bit).lnk
***** [ Registry ] *****
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho
Key Deleted : HKLM\SOFTWARE\Classes\protector_dll.protectorbho.1
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Value Deleted : HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [YTDownloader]
Key Deleted : HKLM\SOFTWARE\3eb2405d-d42c-40dd-ace3-83e2dae98cef
Key Deleted : HKLM\SOFTWARE\465ab2dd-70a0-4988-96d7-f82695e3c3cc
Key Deleted : HKLM\SOFTWARE\fa4034dd-0876-4f5c-aa83-8235bdc70363
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{F126C9FC-9299-40F2-BD42-C59023AD1E7F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{2318C2B1-4965-11D4-9B18-009027A5CD4F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{237FDFDB-3722-470E-8BA8-90196DABE967}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Value Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{2318C2B1-4965-11D4-9B18-009027A5CD4F}]
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\Appscion
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\Sense
Key Deleted : HKLM\SOFTWARE\ShopperPro
Key Deleted : HKLM\SOFTWARE\omniboxesSoftware
Key Deleted : HKLM\SOFTWARE\CinemaP-1.8cV24.03
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sense
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\omniboxes uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.8cV24.03
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\ShopperPro
***** [ Web browsers ] *****
-\\ Internet Explorer v11.0.9600.17689
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v41.0.2272.101
*************************
AdwCleaner[R1].txt - [11793 bytes] - [24/03/2015 14:52:47]
AdwCleaner[S1].txt - [11151 bytes] - [24/03/2015 14:59:47]
########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [11211 bytes] ##########
Re: Spousta virů :-(
Pokracujte Zoek-em
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Spousta virů :-(
Zoek.exe v5.0.0.0 Updated 23-March-2015
Tool run by j.hal on Łt 24.03.2015 at 16:19:09,99.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Serifus\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
24.3.2015 16:20:55 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\Program Files\Common Files\Adobe deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Copernic deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\Users\Serifus\AppData\Roaming\Creative deleted successfully
C:\Users\Serifus\AppData\Roaming\Opera Software deleted successfully
C:\Users\Serifus\AppData\Roaming\TP deleted successfully
C:\Users\Serifus\AppData\Local\NokiaAccount deleted successfully
C:\Users\Serifus\AppData\Local\Opera Software deleted successfully
C:\Users\Serifus\AppData\Local\Windows Live deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default\prefs.js:
Added to C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default\prefs.js:
==== Deleting Files \ Folders ======================
C:\PROGRA~2\391e11ef-df11-4ae4-8db0-b7168dbc965d deleted
C:\Program Files (x86)\Adobe\4cbf6bb0-c0c1-41fa-8a62-a4d69e5dac7f.dll deleted
C:\Program Files (x86)\Adobe\391e11ef-df11-4ae4-8db0-b7168dbc965d.dll deleted
C:\Users\Serifus\.android deleted
C:\PROGRA~2\Universal Extractor deleted
C:\PROGRA~2\420b78f9-2573-4684-8851-cbbefa3e8b1f deleted
C:\PROGRA~2\45890455-9606-4495-a6e4-0f96abab56f1 deleted
C:\Program Files\Common Files\System\SysMenu.dll deleted
C:\Program Files\Common Files\System\SysMenu64.dll deleted
C:\Users\Public\Documents\ShopperPro deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\Serifus\tcc.exe deleted
C:\Users\Serifus\tcc520.exe deleted
C:\Users\Serifus\USBp950-Service.exe deleted
C:\Users\Serifus\USBp950_drv_setup.exe deleted
C:\PROGRA~3\UserProfileMigrationService.exe deleted
"C:\Windows\Installer\d7417b.msi" deleted
"C:\Users\Serifus\AppData\Roaming\MDSGZQE" deleted
"C:\Windows\tasks\MDSGZQE.job" deleted
"C:\Users\Serifus\AppData\Roaming\VWSCP" deleted
"C:\Windows\tasks\VWSCP.job" deleted
"C:\Users\Serifus\AppData\Local\CrashRpt" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"web2pdfextension@web2pdf.adobedotcom"="C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn" [18.02.2015 16:57]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"otis@digitalpersona.com"="C:\Program Files (x86)\DigitalPersona\Bin\firefoxext" [14.08.2013 10:22]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default
- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com
==== Firefox Plugins ======================
==== Chromium Look ======================
Google Chrome Version: 41.0.2272.101 (Latest Stable version: 41.0.2272.101)
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx[12.09.2014 10:43]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[17.03.2015 10:06]
Avast Online Security - Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
CinemaP-1.8cV24.03 - Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
==== Chromium Startpages ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT",
==== Chromium Fix ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{B034CC1E-D79E-4E48-A09D-A81F3D3D03D4}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{B034CC1E-D79E-4E48-A09D-A81F3D3D03D4} Google Url="http://www.google.com/search?q={searchT ... ing?}&rlz="
==== Reset Google Chrome ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\005F937216661354F82366B26B5B5298 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2739F500-6661-4531-8F32-662BB6B52589} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\005F937216661354F82366B26B5B5298 deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Serifus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Serifus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=324 folders=31 57148306 bytes)
==== Empty Temp Folders ======================
C:\Users\balcom\AppData\Local\Temp emptied successfully
C:\Users\Dana\AppData\Local\Temp emptied successfully
C:\Users\Dana.Serifus-PC\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Serifus\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Serifus\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on Łt 24.03.2015 at 16:58:49,51 ======================
Tool run by j.hal on Łt 24.03.2015 at 16:19:09,99.
Microsoft Windows 7 Professional 6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Serifus\Desktop\zoek.exe [Scan all users] [Script inserted]
==== System Restore Info ======================
24.3.2015 16:20:55 Zoek.exe System Restore Point Created Successfully.
==== Reset Hosts File ======================
# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost
==== Empty Folders Check ======================
C:\Program Files\Common Files\Adobe deleted successfully
C:\PROGRA~3\Canon IJ Network Tool deleted successfully
C:\PROGRA~3\Copernic deleted successfully
C:\PROGRA~3\Oracle deleted successfully
C:\Users\Serifus\AppData\Roaming\Creative deleted successfully
C:\Users\Serifus\AppData\Roaming\Opera Software deleted successfully
C:\Users\Serifus\AppData\Roaming\TP deleted successfully
C:\Users\Serifus\AppData\Local\NokiaAccount deleted successfully
C:\Users\Serifus\AppData\Local\Opera Software deleted successfully
C:\Users\Serifus\AppData\Local\Windows Live deleted successfully
==== Deleting CLSID Registry Keys ======================
==== Deleting CLSID Registry Values ======================
==== Deleting Services ======================
==== FireFox Fix ======================
Deleted from C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default\prefs.js:
Added to C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default\prefs.js:
==== Deleting Files \ Folders ======================
C:\PROGRA~2\391e11ef-df11-4ae4-8db0-b7168dbc965d deleted
C:\Program Files (x86)\Adobe\4cbf6bb0-c0c1-41fa-8a62-a4d69e5dac7f.dll deleted
C:\Program Files (x86)\Adobe\391e11ef-df11-4ae4-8db0-b7168dbc965d.dll deleted
C:\Users\Serifus\.android deleted
C:\PROGRA~2\Universal Extractor deleted
C:\PROGRA~2\420b78f9-2573-4684-8851-cbbefa3e8b1f deleted
C:\PROGRA~2\45890455-9606-4495-a6e4-0f96abab56f1 deleted
C:\Program Files\Common Files\System\SysMenu.dll deleted
C:\Program Files\Common Files\System\SysMenu64.dll deleted
C:\Users\Public\Documents\ShopperPro deleted
C:\Windows\SysNative\config\systemprofile\Searches deleted
C:\windows\SysNative\GroupPolicy\Machine deleted
C:\windows\SysNative\GroupPolicy\User deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted
C:\Windows\Syswow64\GroupPolicy\gpt.ini deleted
C:\Users\Serifus\tcc.exe deleted
C:\Users\Serifus\tcc520.exe deleted
C:\Users\Serifus\USBp950-Service.exe deleted
C:\Users\Serifus\USBp950_drv_setup.exe deleted
C:\PROGRA~3\UserProfileMigrationService.exe deleted
"C:\Windows\Installer\d7417b.msi" deleted
"C:\Users\Serifus\AppData\Roaming\MDSGZQE" deleted
"C:\Windows\tasks\MDSGZQE.job" deleted
"C:\Users\Serifus\AppData\Roaming\VWSCP" deleted
"C:\Windows\tasks\VWSCP.job" deleted
"C:\Users\Serifus\AppData\Local\CrashRpt" deleted
==== Firefox Extensions Registry ======================
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"web2pdfextension@web2pdf.adobedotcom"="C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn" [18.02.2015 16:57]
[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"otis@digitalpersona.com"="C:\Program Files (x86)\DigitalPersona\Bin\firefoxext" [14.08.2013 10:22]
==== Firefox Extensions ======================
ProfilePath: C:\Users\Serifus\AppData\Roaming\TomTom\HOME\Profiles\sqqp1pxc.default
- Map status indicator - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com
- TomTom HOME default theme - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\baseTheme@tomtom.com
==== Firefox Plugins ======================
==== Chromium Look ======================
Google Chrome Version: 41.0.2272.101 (Latest Stable version: 41.0.2272.101)
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
efaidnbmnnnibpcajpcglclefindmkaj - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx[12.09.2014 10:43]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[17.03.2015 10:06]
Avast Online Security - Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki
CinemaP-1.8cV24.03 - Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
==== Chromium Startpages ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.omniboxes.com/?type=hp&ts=14 ... XZ0KKTT3TT",
==== Chromium Fix ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp deleted successfully
==== Set IE to Default ======================
Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.seznam.cz/"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.google.com"
"Search Page"="http://www.google.com"
New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.seznam.cz/"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
==== All HKCU SearchScopes ======================
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{B034CC1E-D79E-4E48-A09D-A81F3D3D03D4}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"
{B034CC1E-D79E-4E48-A09D-A81F3D3D03D4} Google Url="http://www.google.com/search?q={searchT ... ing?}&rlz="
==== Reset Google Chrome ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
==== Deleting Registry Keys ======================
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\005F937216661354F82366B26B5B5298 deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2739F500-6661-4531-8F32-662BB6B52589} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Products\005F937216661354F82366B26B5B5298 deleted successfully
==== Empty IE Cache ======================
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Serifus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Serifus\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
==== Empty FireFox Cache ======================
No FireFox Profiles found
==== Empty Chrome Cache ======================
C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully
==== Empty All Flash Cache ======================
Flash Cache Emptied Successfully
==== Empty All Java Cache ======================
Java Cache cleared successfully
==== C:\zoek_backup content ======================
C:\zoek_backup (files=324 folders=31 57148306 bytes)
==== Empty Temp Folders ======================
C:\Users\balcom\AppData\Local\Temp emptied successfully
C:\Users\Dana\AppData\Local\Temp emptied successfully
C:\Users\Dana.Serifus-PC\AppData\Local\Temp emptied successfully
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\Serifus\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\Temp will be emptied at reboot
==== After Reboot ======================
==== Empty Temp Folders ======================
C:\Windows\Temp successfully emptied
C:\Users\Serifus\AppData\Local\Temp successfully emptied
==== Empty Recycle Bin ======================
C:\$RECYCLE.BIN successfully emptied
==== EOF on Łt 24.03.2015 at 16:58:49,51 ======================
Re: Spousta virů :-(
Poprosim o novy log z FRST
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Spousta virů :-(
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by j.hal (administrator) on NTB-HAL on 25-03-2015 08:33:36
Running from C:\Users\Serifus\Desktop
Loaded Profiles: j.hal (Available profiles: balcom & j.hal)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(KVASER AB, Mölndal, SWEDEN) C:\Program Files\Kvaser\Drivers\32\KvEnumSrv.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\eLicense server\gehealth.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN Support Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Microsoft) C:\dell\DBRM\Reminder\DbrmTrayicon.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1894696 2010-01-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-04-07] (IDT, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4119920 2010-01-15] (Dell Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [727664 2010-10-01] ()
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [5712896 2011-01-18] (Dell Inc.)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [206336 2010-05-20] (Microsoft)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-23] (Avast Software s.r.o.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [DBRMTray] => C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-05] (Microsoft)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageMixer 3 SE Camera Monitor Ver.4.5.lnk
ShortcutTarget: ImageMixer 3 SE Camera Monitor Ver.4.5.lnk -> C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk
ShortcutTarget: Yawcam.lnk -> C:\Program Files (x86)\Yawcam\Yawcam.exe (No File)
Startup: C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM -> {4F711480-00A7-4072-BD0B-D306F8E1B083} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {C2DC31E2-7F36-4EED-8B85-9C450130ED3E} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-17] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-17] (Avast Software s.r.o.)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-23] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-10-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.20.1 193.85.1.100
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2013-08-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-18]
FF HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\firefoxext
Chrome:
=======
CHR Profile: C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-04]
CHR Extension: (Google Drive) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-04]
CHR Extension: (YouTube) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-04]
CHR Extension: (Google Search) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-04]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-02-24]
CHR Extension: (Avast Online Security) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-04]
CHR Extension: (Google Wallet) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-04]
CHR Extension: (Gmail) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-04]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-17] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-17] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-17] (Avast Software)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5480296 2009-03-27] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2014-01-27] (Fork Ltd.) [File not signed]
R2 GE healthcare eLicense server; C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe [1423440 2012-06-12] (Macrovision Corporation) [File not signed]
R2 KvEnumSrv; C:\Program Files\Kvaser\Drivers\32\kvenumsrv.exe [173136 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation)
R2 MSSQL$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation)
S4 SQLAgent$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\STacSV64.exe [247808 2010-04-07] (IDT, Inc.)
S3 UNICORN HDA Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN HDA Service.exe [257368 2013-04-09] (GE Healthcare)
R2 UNICORN Support Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\Bin\UNICORN Support Service.exe [38232 2013-04-09] (GE Healthcare)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2011-01-18] (Dell Inc.) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-17] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-17] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-17] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-03-17] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-17] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-17] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-17] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-17] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-17] ()
R0 DevMng; C:\Windows\System32\Drivers\DevMng64.sys [16656 2014-03-07] ()
S3 fmusb; C:\Windows\System32\Drivers\fmusb64.sys [21904 2014-03-07] (Windows (R) Win 7 DDK provider)
S3 kcane; C:\Windows\System32\DRIVERS\kcane.sys [87120 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R3 kcanv; C:\Windows\System32\DRIVERS\kcanv.sys [66128 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S3 kvnet; C:\Windows\System32\DRIVERS\kvnet.sys [37424 2012-04-13] (Kerio Technologies Inc.)
R3 kvnetenum; C:\Windows\System32\DRIVERS\kvnetenum.sys [38992 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [322736 2014-07-10] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-17] (Avast Software)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [103224 2009-12-03] (WIBU-SYSTEMS AG)
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 08:31 - 2015-03-25 08:31 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
2015-03-24 16:46 - 2015-03-24 16:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-24 16:20 - 2015-03-24 16:58 - 00011005 _____ () C:\zoek-results.log
2015-03-24 16:19 - 2015-03-24 16:43 - 00000000 ____D () C:\zoek_backup
2015-03-24 16:18 - 2015-03-24 16:18 - 01305600 _____ () C:\Users\Serifus\Desktop\zoek.exe
2015-03-24 14:52 - 2015-03-24 14:59 - 00000000 ____D () C:\AdwCleaner
2015-03-24 14:36 - 2015-03-24 14:36 - 02168320 _____ () C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
2015-03-24 14:17 - 2015-03-24 14:17 - 00025041 _____ () C:\Users\Serifus\Desktop\Addition.zip
2015-03-24 14:10 - 2015-03-25 08:34 - 00025176 _____ () C:\Users\Serifus\Desktop\FRST.txt
2015-03-24 14:09 - 2015-03-24 14:09 - 02095616 _____ (Farbar) C:\Users\Serifus\Desktop\FRST64.exe
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Windows\SysWOW64\%LOCALAPPDATA%
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\AVAST Software
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\AVAST Software
2015-03-24 12:12 - 2015-03-24 12:12 - 00001278 _____ () C:\Users\Serifus\Desktop\Call of Duty Black Ops 2.lnk
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Call of Duty Black Ops 2
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-03-24 11:41 - 2015-03-24 11:54 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-20 11:59 - 2015-03-24 12:11 - 00001155 _____ () C:\Windows\DirectX.log
2015-03-20 11:19 - 2015-03-24 11:08 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2015-03-17 10:06 - 2015-03-17 10:06 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-03-17 10:06 - 2015-03-17 10:06 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-03-17 10:06 - 2015-03-17 10:06 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-16 17:53 - 2015-03-16 17:55 - 40118674 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.9l1jb9p.partial
2015-03-16 12:17 - 2015-03-16 12:17 - 00000000 ____D () C:\ProgramData\Western Digital
2015-03-16 12:00 - 2015-03-16 12:02 - 40117434 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.skkrm80.partial
2015-03-16 11:54 - 2015-03-24 13:43 - 40924332 _____ () C:\Users\Serifus\Downloads\TamoSoft-CommView-for-WiFi-v7-0-791-x86-x64-Incl-Keymaker-and-Patch-MAZE.rar.330xhpg.partial
2015-03-12 13:56 - 2015-03-12 13:56 - 00000197 _____ () C:\Windows\system32\2015-03-12-12-56-16.067-AvastVBoxSVC.exe-4884.log
2015-03-11 20:31 - 2015-03-11 20:31 - 00014464 _____ (Western Digital Technologies) C:\Windows\system32\Drivers\wdcsam64.sys
2015-03-11 16:28 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:28 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:28 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:25 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:25 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:25 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:25 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:25 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:25 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:25 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:25 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:22 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:22 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:21 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:21 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:20 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:20 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:20 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:20 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:20 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:19 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:19 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:18 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:18 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:18 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:17 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:17 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:17 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:17 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:17 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:17 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:17 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:17 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:17 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:17 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:17 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:17 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:17 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:17 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:17 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:17 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:17 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:17 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:17 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:17 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:17 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:17 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:17 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:17 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:17 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:17 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:17 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:17 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log
2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log
2015-03-09 15:15 - 2015-03-09 15:15 - 00002791 _____ () C:\Users\Public\Desktop\Typhoon FLA 7000.lnk
2015-03-09 15:15 - 2015-03-09 15:15 - 00000000 ____D () C:\GE Healthcare
2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log
2015-03-05 10:52 - 2015-03-05 11:12 - 356817068 _____ () C:\Users\Serifus\Downloads\rammstein-made-in-germany-1995-2011-special-edition-2011-cover-peko.rar
2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log
2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log
2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log
2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log
2015-03-03 15:15 - 2015-03-03 15:15 - 00009008 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.1dxml
2015-03-03 15:10 - 2015-03-03 15:10 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.arx
2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log
2015-03-02 15:28 - 2015-03-02 15:28 - 01134989 _____ () C:\Users\Serifus\Documents\Kopie - EM_Install_Base_country_02032015.xlsx
2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log
2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log
2015-02-26 14:35 - 2015-02-26 14:35 - 00000098 _____ () C:\Users\Serifus\Desktop\Starcraft.bat
2015-02-26 07:29 - 2015-02-26 07:29 - 00000197 _____ () C:\Windows\system32\2015-02-26-06-29-07.015-AvastVBoxSVC.exe-4896.log
2015-02-25 19:11 - 2015-02-25 19:11 - 00000197 _____ () C:\Windows\system32\2015-02-25-18-11-32.029-AvastVBoxSVC.exe-4676.log
2015-02-25 16:56 - 2014-07-10 11:23 - 00083632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 16:56 - 2014-07-10 11:22 - 00089264 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 10:27 - 2015-02-25 10:27 - 00000197 _____ () C:\Windows\system32\2015-02-25-09-27-18.075-AvastVBoxSVC.exe-4704.log
2015-02-24 17:55 - 2015-02-24 17:55 - 00000197 _____ () C:\Windows\system32\2015-02-24-16-55-14.021-AvastVBoxSVC.exe-4552.log
2015-02-24 17:44 - 2012-06-29 01:22 - 00057288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 17:44 - 2012-06-29 01:17 - 00086984 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 15:34 - 2015-02-24 15:34 - 00000197 _____ () C:\Windows\system32\2015-02-24-14-34-01.062-AvastVBoxSVC.exe-4300.log
2015-02-24 13:41 - 2015-02-24 13:41 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2015-02-24 10:07 - 2015-02-24 10:07 - 00000197 _____ () C:\Windows\system32\2015-02-24-09-07-20.015-AvastVBoxSVC.exe-4688.log
2015-02-23 21:22 - 2015-03-03 16:05 - 00000219 _____ () C:\Windows\array.INI
2015-02-23 15:22 - 2015-02-23 15:22 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]tif.arx
2015-02-23 15:21 - 2015-03-09 15:16 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\GE Healthcare
2015-02-23 15:21 - 2015-03-03 15:45 - 00000086 _____ () C:\Windows\1d.INI
2015-02-23 15:04 - 2015-02-23 15:04 - 00495616 _____ (Simon Tatham) C:\Users\Serifus\Desktop\putty.exe
2015-02-23 13:41 - 2015-02-23 13:41 - 00000197 _____ () C:\Windows\system32\2015-02-23-12-41-05.018-AvastVBoxSVC.exe-4580.log
2015-02-23 12:38 - 2015-02-23 12:38 - 00351232 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.dll
2015-02-23 12:38 - 2015-02-23 12:38 - 00028160 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.exe
2015-02-23 12:38 - 2015-02-23 12:38 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Příslušenství
2015-02-23 09:21 - 2015-02-23 09:21 - 00000197 _____ () C:\Windows\system32\2015-02-23-08-21-52.076-AvastVBoxSVC.exe-4876.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 08:33 - 2015-02-17 13:51 - 00000000 ____D () C:\FRST
2015-03-25 08:30 - 2012-04-04 09:28 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-25 08:27 - 2014-05-19 09:22 - 00000128 _____ () C:\Windows\system32\config\netlogon.ftl
2015-03-25 08:27 - 2014-01-27 13:45 - 00000000 ____D () C:\Users\Serifus\AppData\Local\LogMeIn Hamachi
2015-03-25 08:27 - 2009-07-14 06:10 - 02078689 _____ () C:\Windows\WindowsUpdate.log
2015-03-25 08:27 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-25 08:27 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-25 08:20 - 2012-08-15 16:17 - 00000029 _____ () C:\Windows\SysWOW64\TempWmicBatchFile.bat
2015-03-25 08:17 - 2014-11-25 15:11 - 00009008 _____ () C:\Windows\setupact.log
2015-03-25 08:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-24 16:48 - 2014-11-26 14:49 - 00027350 _____ () C:\Windows\PFRO.log
2015-03-24 16:42 - 2012-02-10 12:12 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-24 16:42 - 2012-01-31 12:50 - 00000000 ____D () C:\Users\Serifus
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-24 15:08 - 2012-06-26 10:56 - 00000000 ____D () C:\Users\Serifus\Documents\aniPart support
2015-03-24 15:08 - 2012-02-06 13:52 - 00000000 ____D () C:\Program Files (x86)\anipart client
2015-03-24 14:59 - 2014-01-20 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-24 14:59 - 2012-01-31 12:53 - 00000935 _____ () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-24 11:40 - 2012-02-06 13:47 - 00000000 ____D () C:\Program Files (x86)\animech
2015-03-23 11:29 - 2014-08-29 09:47 - 00000000 ____D () C:\Users\Serifus\AppData\Local\Adobe
2015-03-23 11:29 - 2012-04-04 09:28 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-23 11:29 - 2012-04-04 09:28 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-23 11:29 - 2012-02-02 14:36 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-23 10:11 - 2014-10-16 14:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-20 12:52 - 2012-07-23 07:42 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-03-17 10:06 - 2014-04-24 09:13 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-03-17 10:06 - 2014-01-13 12:02 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-03-17 10:06 - 2013-12-31 09:16 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00268640 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-03-17 10:06 - 2012-03-19 10:53 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00441728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-03-16 18:44 - 2013-07-29 09:08 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\uTorrent
2015-03-16 15:32 - 2009-07-14 16:18 - 00806522 _____ () C:\Windows\system32\perfh005.dat
2015-03-16 15:32 - 2009-07-14 16:18 - 00193978 _____ () C:\Windows\system32\perfc005.dat
2015-03-16 15:32 - 2009-07-14 06:13 - 01966174 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-16 15:20 - 2014-04-14 11:44 - 00000000 ____D () C:\Users\Serifus\Documents\Přednášky škola
2015-03-16 12:08 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-12 23:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 15:25 - 2012-02-27 22:06 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Media Player Classic
2015-03-12 13:58 - 2013-07-18 14:03 - 00000000 ___RD () C:\Users\Serifus\Virtual Machines
2015-03-12 13:53 - 2009-07-14 05:45 - 00449360 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 12:40 - 2014-04-25 09:59 - 00000000 ____D () C:\Users\Serifus\Documents\Protokoly
2015-03-11 12:29 - 2012-02-01 13:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-09 15:15 - 2014-04-03 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GE Healthcare
2015-03-09 15:15 - 2013-07-29 09:17 - 00000000 ____D () C:\Program Files (x86)\GE Healthcare
2015-03-09 14:25 - 2012-01-31 13:12 - 00000000 ____D () C:\Users\Serifus\Documents\AutoDELFIA
2015-03-05 10:29 - 2012-01-31 13:23 - 00023905 _____ () C:\Users\Serifus\Documents\Vyúčtování.xlsx
2015-03-04 16:04 - 2015-02-18 13:21 - 00000065 _____ () C:\Users\Serifus\Desktop\Delfia Brno výtah.txt
2015-03-04 11:11 - 2009-07-14 06:08 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-03 11:49 - 2012-01-31 13:23 - 00068228 _____ () C:\Users\Serifus\Documents\KILMON.xlsx
2015-03-02 15:23 - 2012-05-02 12:39 - 00000000 ____D () C:\Users\Serifus\Documents\Katalog přístrojů
2015-02-27 19:44 - 2012-02-01 13:33 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Skype
2015-02-25 20:19 - 2014-06-16 09:51 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Audacity
2015-02-25 16:52 - 2014-04-03 13:59 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-02-25 16:52 - 2013-02-21 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-02-25 11:30 - 2014-10-08 11:02 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-25 11:30 - 2014-10-08 11:02 - 00001092 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2015-02-24 17:43 - 2014-04-03 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
2015-02-24 17:36 - 2014-05-19 09:01 - 00000000 ____D () C:\Install
2015-02-24 16:47 - 2015-01-19 16:51 - 00000000 ____D () C:\Users\Serifus\Documents\SQL Server Management Studio
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-02-24 03:17 - 2012-01-31 13:11 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 21:25 - 2013-03-14 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-02-23 12:35 - 2014-02-04 16:20 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000985 _____ () C:\Users\Public\Desktop\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000000 ____D () C:\Program Files (x86)\WinSCP
==================== Files in the root of some directories =======
2014-02-04 16:23 - 2014-02-04 19:17 - 0000600 _____ () C:\Users\Serifus\AppData\Roaming\winscp.rnd
2012-02-01 09:54 - 2014-11-11 12:44 - 0003584 _____ () C:\Users\Serifus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:453.66 GB) (Free:37.05 GB) NTFS
Drive e: (STARCRAFT) (CDROM) (Total:0.62 GB) (Free:0 GB) CDFS
Drive f: (BROODWAR) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS
Drive g: (My Book AV) (Fixed) (Total:931.51 GB) (Free:8.56 GB) NTFS
Available physical RAM: 3630.3 MB
Total physical RAM: 5942.59 MB
Percentage of memory in use: 38%
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Serifus\Desktop" je 46 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
Ran by j.hal (administrator) on NTB-HAL on 25-03-2015 08:33:36
Running from C:\Users\Serifus\Desktop
Loaded Profiles: j.hal (Available profiles: balcom & j.hal)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\stacsv64.exe
(Validity Sensors, Inc.) C:\Windows\System32\vcsFPService.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRYSVC.EXE
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\BCMWLTRY.EXE
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpHostW.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(KVASER AB, Mölndal, SWEDEN) C:\Program Files\Kvaser\Drivers\32\KvEnumSrv.exe
(Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(CANON INC.) C:\Program Files\Canon\DIAS\CnxDIAS.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Fork Ltd.) C:\Prey\platform\windows\cronsvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(Macrovision Corporation) C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\eLicense server\gehealth.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(TomTom) C:\Program Files (x86)\TomTom HOME 2\TomTomHOMEService.exe
(GE Healthcare) C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN Support Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(DigitalPersona, Inc.) C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Dell Inc.) C:\Program Files\Dell\DW WLAN Card\WLTRAY.EXE
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Microsoft) C:\dell\DBRM\Reminder\DbrmTrayicon.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(PowerISO Computing, Inc.) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(PIXELA CORPORATION) C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe
(CANON INC.) C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(WIBU-SYSTEMS AG) C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE
(DigitalPersona, Inc.) C:\Program Files\DigitalPersona\Bin\DpAgent.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BluetoothHeadsetProxy.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\outlook.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1894696 2010-01-08] (Synaptics Incorporated)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [487424 2010-04-07] (IDT, Inc.)
HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [4119920 2010-01-15] (Dell Inc.)
HKLM\...\Run: [FreeFallProtection] => C:\Program Files (x86)\STMicroelectronics\AccelerometerP11\FF_Protection.exe [727664 2010-10-01] ()
HKLM\...\Run: [NvCplDaemon] => RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Dell\DW WLAN Card\WLTRAY.exe [5712896 2011-01-18] (Dell Inc.)
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [508312 2009-12-15] (CANON INC.)
HKLM\...\Run: [DBRMTray] => C:\Dell\DBRM\Reminder\DbrmTrayIcon.exe [206336 2010-05-20] (Microsoft)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-23] (Avast Software s.r.o.)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [453736 2013-02-19] (CANON INC.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [DBRMTray] => C:\Dell\DBRM\Reminder\TrayApp.exe [7168 2010-02-05] (Microsoft)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\DigitalPersona\Bin\DPAgent.exe,
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ImageMixer 3 SE Camera Monitor Ver.4.5.lnk
ShortcutTarget: ImageMixer 3 SE Camera Monitor Ver.4.5.lnk -> C:\Program Files (x86)\PIXELA\ImageMixer 3 SE Ver.4.5\Transfer Utility\CameraMonitor.exe (PIXELA CORPORATION)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Network Server.lnk
ShortcutTarget: Network Server.lnk -> C:\Program Files (x86)\WIBUKEY\Server\WkSvMgr.exe (WIBU-SYSTEMS AG)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk
ShortcutTarget: Yawcam.lnk -> C:\Program Files (x86)\Yawcam\Yawcam.exe (No File)
Startup: C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Odeslat do OneNote.lnk
ShortcutTarget: Odeslat do OneNote.lnk -> C:\Program Files\Microsoft Office 15\root\office15\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.seznam.cz/
SearchScopes: HKLM -> {4F711480-00A7-4072-BD0B-D306F8E1B083} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKLM-x32 -> {C2DC31E2-7F36-4EED-8B85-9C450130ED3E} URL = http://www.bing.com/search?q={searchTer ... -SearchBox
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-03-17] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-03-04] (Google Inc.)
BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\OCHelper.dll [2015-02-10] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-17] (Avast Software s.r.o.)
BHO-x32: Pomocná služba pro přihlášení ke službě Windows Live ID -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2010-09-21] (Microsoft Corp.)
BHO-x32: Windows Live Messenger Companion Helper -> {9FDDE16B-836F-4806-AB1F-1455CBEFF289} -> C:\Program Files (x86)\Windows Live\Companion\companioncore.dll [2010-09-23] (Microsoft Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-03-04] (Google Inc.)
BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\URLREDIR.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\GROOVEEX.DLL [2015-02-10] (Microsoft Corporation)
BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3883227779-2708345459-3382469968-1164 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\x64\AcroIEFavClient.dll [2014-09-12] (Adobe Systems Incorporated)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
DPF: HKLM-x32 {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/tri ... /wrc32.ocx
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2014-10-16] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.20.1 193.85.1.100
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-06] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-06] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Microsoft Office\Office15\NPSPWRAP.DLL [2014-10-16] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2010-09-23] (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin -> C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll [2013-10-02] ( )
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-06] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll [2014-09-12] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt
FF Extension: DigitalPersona Extension - C:\Program Files (x86)\DigitalPersona\Bin\FirefoxExt [2013-08-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2015-02-18]
FF HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Firefox\Extensions: [otis@digitalpersona.com] - C:\Program Files (x86)\DigitalPersona\Bin\firefoxext
Chrome:
=======
CHR Profile: C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-02-04]
CHR Extension: (Google Drive) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-02-04]
CHR Extension: (YouTube) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-02-04]
CHR Extension: (Google Search) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-02-04]
CHR Extension: (Adobe Acrobat - Create PDF) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2015-02-24]
CHR Extension: (Avast Online Security) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2014-02-04]
CHR Extension: (Google Wallet) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-02-04]
CHR Extension: (Gmail) - C:\Users\Serifus\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-02-04]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Browser\WCChromeExtn\WCChromeExtn.crx [2014-09-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\AESTSr64.exe [89600 2009-03-03] (Andrea Electronics Corporation)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-17] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-03-17] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-17] (Avast Software)
R2 Canon Driver Information Assist Service; C:\Program Files\Canon\DIAS\CnxDIAS.exe [5480296 2009-03-27] (CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2714800 2015-02-10] (Microsoft Corporation)
R2 CronService; C:\Prey\platform\windows\cronsvc.exe [23552 2014-01-27] (Fork Ltd.) [File not signed]
R2 GE healthcare eLicense server; C:\Program Files (x86)\GE Healthcare\eLicense server\lmgrd.exe [1423440 2012-06-12] (Macrovision Corporation) [File not signed]
R2 KvEnumSrv; C:\Program Files\Kvaser\Drivers\32\kvenumsrv.exe [173136 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-02-16] (LogMeIn, Inc.)
R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [62379184 2014-07-10] (Microsoft Corporation)
R2 MSSQL$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\sqlservr.exe [62111072 2011-06-17] (Microsoft Corporation)
S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10_50.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [442536 2014-07-10] (Microsoft Corporation)
S4 SQLAgent$UNICORN; c:\Program Files\Microsoft SQL Server\MSSQL10_50.UNICORN\MSSQL\Binn\SQLAGENT.EXE [431456 2011-06-17] (Microsoft Corporation)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_d550fa1f2cf8996d\STacSV64.exe [247808 2010-04-07] (IDT, Inc.)
S3 UNICORN HDA Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\bin\UNICORN HDA Service.exe [257368 2013-04-09] (GE Healthcare)
R2 UNICORN Support Service; C:\Program Files (x86)\GE Healthcare\UNICORN\UNICORN 6.3\Bin\UNICORN Support Service.exe [38232 2013-04-09] (GE Healthcare)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Dell\DW WLAN Card\bcmwltry.exe [5088256 2011-01-18] (Dell Inc.) [File not signed]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-03-17] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-03-17] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-03-17] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-03-17] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-03-17] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-03-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-03-17] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [441728 2015-03-17] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-03-17] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [268640 2015-03-17] ()
R0 DevMng; C:\Windows\System32\Drivers\DevMng64.sys [16656 2014-03-07] ()
S3 fmusb; C:\Windows\System32\Drivers\fmusb64.sys [21904 2014-03-07] (Windows (R) Win 7 DDK provider)
S3 kcane; C:\Windows\System32\DRIVERS\kcane.sys [87120 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
R3 kcanv; C:\Windows\System32\DRIVERS\kcanv.sys [66128 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S3 kvnet; C:\Windows\System32\DRIVERS\kvnet.sys [37424 2012-04-13] (Kerio Technologies Inc.)
R3 kvnetenum; C:\Windows\System32\DRIVERS\kvnetenum.sys [38992 2011-10-19] (KVASER AB, Mölndal, SWEDEN)
S4 RsFx0153; C:\Windows\System32\DRIVERS\RsFx0153.sys [322736 2014-07-10] (Microsoft Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-17] (Avast Software)
R2 WIBUKEY; C:\Windows\System32\DRIVERS\WibuKey64.sys [103224 2009-12-03] (WIBU-SYSTEMS AG)
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 08:31 - 2015-03-25 08:31 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
2015-03-24 16:46 - 2015-03-24 16:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-24 16:20 - 2015-03-24 16:58 - 00011005 _____ () C:\zoek-results.log
2015-03-24 16:19 - 2015-03-24 16:43 - 00000000 ____D () C:\zoek_backup
2015-03-24 16:18 - 2015-03-24 16:18 - 01305600 _____ () C:\Users\Serifus\Desktop\zoek.exe
2015-03-24 14:52 - 2015-03-24 14:59 - 00000000 ____D () C:\AdwCleaner
2015-03-24 14:36 - 2015-03-24 14:36 - 02168320 _____ () C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
2015-03-24 14:17 - 2015-03-24 14:17 - 00025041 _____ () C:\Users\Serifus\Desktop\Addition.zip
2015-03-24 14:10 - 2015-03-25 08:34 - 00025176 _____ () C:\Users\Serifus\Desktop\FRST.txt
2015-03-24 14:09 - 2015-03-24 14:09 - 02095616 _____ (Farbar) C:\Users\Serifus\Desktop\FRST64.exe
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Windows\SysWOW64\%LOCALAPPDATA%
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default\AppData\Roaming\AVAST Software
2015-03-24 12:15 - 2015-03-24 12:15 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\AVAST Software
2015-03-24 12:12 - 2015-03-24 12:12 - 00001278 _____ () C:\Users\Serifus\Desktop\Call of Duty Black Ops 2.lnk
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Call of Duty Black Ops 2
2015-03-24 12:12 - 2015-03-24 12:12 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2015-03-24 11:41 - 2015-03-24 11:54 - 00000000 ____D () C:\Program Files (x86)\Opera
2015-03-20 11:59 - 2015-03-24 12:11 - 00001155 _____ () C:\Windows\DirectX.log
2015-03-20 11:19 - 2015-03-24 11:08 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics
2015-03-17 10:06 - 2015-03-17 10:06 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-03-17 10:06 - 2015-03-17 10:06 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-03-17 10:06 - 2015-03-17 10:06 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-16 17:53 - 2015-03-16 17:55 - 40118674 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.9l1jb9p.partial
2015-03-16 12:17 - 2015-03-16 12:17 - 00000000 ____D () C:\ProgramData\Western Digital
2015-03-16 12:00 - 2015-03-16 12:02 - 40117434 _____ () C:\Users\Serifus\Downloads\CommView-for-WiFi-7-FULL.zip.skkrm80.partial
2015-03-16 11:54 - 2015-03-24 13:43 - 40924332 _____ () C:\Users\Serifus\Downloads\TamoSoft-CommView-for-WiFi-v7-0-791-x86-x64-Incl-Keymaker-and-Patch-MAZE.rar.330xhpg.partial
2015-03-12 13:56 - 2015-03-12 13:56 - 00000197 _____ () C:\Windows\system32\2015-03-12-12-56-16.067-AvastVBoxSVC.exe-4884.log
2015-03-11 20:31 - 2015-03-11 20:31 - 00014464 _____ (Western Digital Technologies) C:\Windows\system32\Drivers\wdcsam64.sys
2015-03-11 16:28 - 2015-02-20 05:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 16:28 - 2015-02-20 05:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 16:28 - 2015-02-20 05:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 16:28 - 2015-02-20 04:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 16:28 - 2015-02-20 04:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 16:25 - 2015-02-03 04:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 16:25 - 2015-02-03 04:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 16:25 - 2015-02-03 04:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 16:25 - 2015-02-03 04:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 16:25 - 2015-02-03 04:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 16:25 - 2015-02-03 04:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 16:25 - 2015-02-03 04:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 04:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 16:25 - 2015-02-03 04:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 16:25 - 2015-02-03 04:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 16:25 - 2015-02-03 04:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 16:25 - 2015-02-03 04:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 16:25 - 2015-02-03 04:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 16:25 - 2015-02-03 04:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 16:25 - 2015-02-03 04:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 16:25 - 2015-02-03 04:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 16:25 - 2015-02-03 04:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 16:25 - 2015-02-03 03:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 16:25 - 2014-10-31 23:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 16:22 - 2015-02-03 04:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 16:22 - 2015-02-03 04:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 16:21 - 2015-02-13 06:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 16:21 - 2015-02-13 06:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 16:20 - 2015-03-06 06:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 16:20 - 2015-03-06 06:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 16:20 - 2015-03-06 06:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 16:20 - 2015-03-06 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 16:20 - 2015-03-06 06:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 16:20 - 2015-03-06 06:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 16:20 - 2015-03-06 06:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 16:20 - 2015-03-06 06:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 16:20 - 2015-03-06 06:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 16:20 - 2015-01-31 00:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 16:19 - 2015-01-17 03:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 16:19 - 2015-01-17 03:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-11 16:18 - 2015-02-26 04:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 16:18 - 2015-02-03 04:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 16:18 - 2015-02-03 04:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 16:17 - 2015-02-24 04:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 16:17 - 2015-02-24 03:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 16:17 - 2015-02-21 02:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 16:17 - 2015-02-21 01:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 16:17 - 2015-02-21 01:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 16:17 - 2015-02-21 01:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 16:17 - 2015-02-21 00:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 16:17 - 2015-02-21 00:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 16:17 - 2015-02-20 04:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 04:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 16:17 - 2015-02-20 03:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 16:17 - 2015-02-20 03:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 16:17 - 2015-02-20 03:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 03:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 16:17 - 2015-02-20 03:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 03:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 16:17 - 2015-02-20 03:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 16:17 - 2015-02-20 03:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 16:17 - 2015-02-20 03:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 16:17 - 2015-02-20 03:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 03:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 16:17 - 2015-02-20 03:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 16:17 - 2015-02-20 03:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 16:17 - 2015-02-20 03:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 16:17 - 2015-02-20 03:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 16:17 - 2015-02-20 03:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 16:17 - 2015-02-20 03:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 16:17 - 2015-02-20 02:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 16:17 - 2015-02-20 02:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 16:17 - 2015-02-20 02:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 16:17 - 2015-02-20 02:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 16:17 - 2015-02-20 02:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 16:17 - 2015-02-20 02:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 16:17 - 2015-02-20 02:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 16:17 - 2015-02-20 02:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 16:17 - 2015-02-20 02:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 16:17 - 2015-02-20 02:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 16:17 - 2015-02-20 02:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 16:17 - 2015-02-20 02:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 16:17 - 2015-02-20 02:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 16:17 - 2015-02-20 02:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 16:17 - 2015-02-20 01:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 16:17 - 2015-02-20 01:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 16:17 - 2015-02-04 04:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 16:17 - 2015-02-04 03:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log
2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log
2015-03-09 15:15 - 2015-03-09 15:15 - 00002791 _____ () C:\Users\Public\Desktop\Typhoon FLA 7000.lnk
2015-03-09 15:15 - 2015-03-09 15:15 - 00000000 ____D () C:\GE Healthcare
2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log
2015-03-05 10:52 - 2015-03-05 11:12 - 356817068 _____ () C:\Users\Serifus\Downloads\rammstein-made-in-germany-1995-2011-special-edition-2011-cover-peko.rar
2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log
2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log
2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log
2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log
2015-03-03 15:15 - 2015-03-03 15:15 - 00009008 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.1dxml
2015-03-03 15:10 - 2015-03-03 15:10 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]gel.arx
2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log
2015-03-02 15:28 - 2015-03-02 15:28 - 01134989 _____ () C:\Users\Serifus\Documents\Kopie - EM_Install_Base_country_02032015.xlsx
2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log
2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log
2015-02-26 14:35 - 2015-02-26 14:35 - 00000098 _____ () C:\Users\Serifus\Desktop\Starcraft.bat
2015-02-26 07:29 - 2015-02-26 07:29 - 00000197 _____ () C:\Windows\system32\2015-02-26-06-29-07.015-AvastVBoxSVC.exe-4896.log
2015-02-25 19:11 - 2015-02-25 19:11 - 00000197 _____ () C:\Windows\system32\2015-02-25-18-11-32.029-AvastVBoxSVC.exe-4676.log
2015-02-25 16:56 - 2014-07-10 11:23 - 00083632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 16:56 - 2014-07-10 11:22 - 00089264 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL$SQLEXPRESS-sqlctr10.52.4033.0.dll
2015-02-25 10:27 - 2015-02-25 10:27 - 00000197 _____ () C:\Windows\system32\2015-02-25-09-27-18.075-AvastVBoxSVC.exe-4704.log
2015-02-24 17:55 - 2015-02-24 17:55 - 00000197 _____ () C:\Windows\system32\2015-02-24-16-55-14.021-AvastVBoxSVC.exe-4552.log
2015-02-24 17:44 - 2012-06-29 01:22 - 00057288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 17:44 - 2012-06-29 01:17 - 00086984 _____ (Microsoft Corporation) C:\Windows\system32\perf-MSSQL10_50.SQLEXPRESS-sqlagtctr.dll
2015-02-24 15:34 - 2015-02-24 15:34 - 00000197 _____ () C:\Windows\system32\2015-02-24-14-34-01.062-AvastVBoxSVC.exe-4300.log
2015-02-24 13:41 - 2015-02-24 13:41 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zařízení Bluetooth
2015-02-24 10:07 - 2015-02-24 10:07 - 00000197 _____ () C:\Windows\system32\2015-02-24-09-07-20.015-AvastVBoxSVC.exe-4688.log
2015-02-23 21:22 - 2015-03-03 16:05 - 00000219 _____ () C:\Windows\array.INI
2015-02-23 15:22 - 2015-02-23 15:22 - 00000796 _____ () C:\Users\Serifus\Desktop\SHADING785-[DY-781]tif.arx
2015-02-23 15:21 - 2015-03-09 15:16 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\GE Healthcare
2015-02-23 15:21 - 2015-03-03 15:45 - 00000086 _____ () C:\Windows\1d.INI
2015-02-23 15:04 - 2015-02-23 15:04 - 00495616 _____ (Simon Tatham) C:\Users\Serifus\Desktop\putty.exe
2015-02-23 13:41 - 2015-02-23 13:41 - 00000197 _____ () C:\Windows\system32\2015-02-23-12-41-05.018-AvastVBoxSVC.exe-4580.log
2015-02-23 12:38 - 2015-02-23 12:38 - 00351232 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.dll
2015-02-23 12:38 - 2015-02-23 12:38 - 00028160 _____ (Hilgraeve, Inc.) C:\Users\Serifus\Desktop\hypertrm.exe
2015-02-23 12:38 - 2015-02-23 12:38 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Příslušenství
2015-02-23 09:21 - 2015-02-23 09:21 - 00000197 _____ () C:\Windows\system32\2015-02-23-08-21-52.076-AvastVBoxSVC.exe-4876.log
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-03-25 08:33 - 2015-02-17 13:51 - 00000000 ____D () C:\FRST
2015-03-25 08:30 - 2012-04-04 09:28 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-03-25 08:27 - 2014-05-19 09:22 - 00000128 _____ () C:\Windows\system32\config\netlogon.ftl
2015-03-25 08:27 - 2014-01-27 13:45 - 00000000 ____D () C:\Users\Serifus\AppData\Local\LogMeIn Hamachi
2015-03-25 08:27 - 2009-07-14 06:10 - 02078689 _____ () C:\Windows\WindowsUpdate.log
2015-03-25 08:27 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-03-25 08:27 - 2009-07-14 05:45 - 00014256 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-03-25 08:20 - 2012-08-15 16:17 - 00000029 _____ () C:\Windows\SysWOW64\TempWmicBatchFile.bat
2015-03-25 08:17 - 2014-11-25 15:11 - 00009008 _____ () C:\Windows\setupact.log
2015-03-25 08:17 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-03-24 16:48 - 2014-11-26 14:49 - 00027350 _____ () C:\Windows\PFRO.log
2015-03-24 16:42 - 2012-02-10 12:12 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-24 16:42 - 2012-01-31 12:50 - 00000000 ____D () C:\Users\Serifus
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ___HD () C:\Windows\system32\GroupPolicy
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\GroupPolicy
2015-03-24 16:42 - 2009-07-14 04:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-24 15:08 - 2012-06-26 10:56 - 00000000 ____D () C:\Users\Serifus\Documents\aniPart support
2015-03-24 15:08 - 2012-02-06 13:52 - 00000000 ____D () C:\Program Files (x86)\anipart client
2015-03-24 14:59 - 2014-01-20 10:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-03-24 14:59 - 2012-01-31 12:53 - 00000935 _____ () C:\Users\Serifus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-24 11:40 - 2012-02-06 13:47 - 00000000 ____D () C:\Program Files (x86)\animech
2015-03-23 11:29 - 2014-08-29 09:47 - 00000000 ____D () C:\Users\Serifus\AppData\Local\Adobe
2015-03-23 11:29 - 2012-04-04 09:28 - 00778928 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-03-23 11:29 - 2012-04-04 09:28 - 00003852 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-03-23 11:29 - 2012-02-02 14:36 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-03-23 10:11 - 2014-10-16 14:35 - 00000000 ____D () C:\Program Files\Microsoft Office 15
2015-03-20 12:52 - 2012-07-23 07:42 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-03-17 10:06 - 2014-04-24 09:13 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-03-17 10:06 - 2014-01-13 12:02 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-03-17 10:06 - 2013-12-31 09:16 - 00136752 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00268640 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-03-17 10:06 - 2013-03-14 10:03 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-03-17 10:06 - 2012-03-19 10:53 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00441728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-03-17 10:06 - 2012-02-01 16:46 - 00088408 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-03-16 18:44 - 2013-07-29 09:08 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\uTorrent
2015-03-16 15:32 - 2009-07-14 16:18 - 00806522 _____ () C:\Windows\system32\perfh005.dat
2015-03-16 15:32 - 2009-07-14 16:18 - 00193978 _____ () C:\Windows\system32\perfc005.dat
2015-03-16 15:32 - 2009-07-14 06:13 - 01966174 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-03-16 15:20 - 2014-04-14 11:44 - 00000000 ____D () C:\Users\Serifus\Documents\Přednášky škola
2015-03-16 12:08 - 2009-07-14 05:57 - 00001547 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-03-12 23:05 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 15:25 - 2012-02-27 22:06 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Media Player Classic
2015-03-12 13:58 - 2013-07-18 14:03 - 00000000 ___RD () C:\Users\Serifus\Virtual Machines
2015-03-12 13:53 - 2009-07-14 05:45 - 00449360 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 13:50 - 2009-07-14 04:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 12:40 - 2014-04-25 09:59 - 00000000 ____D () C:\Users\Serifus\Documents\Protokoly
2015-03-11 12:29 - 2012-02-01 13:42 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-03-09 15:15 - 2014-04-03 13:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GE Healthcare
2015-03-09 15:15 - 2013-07-29 09:17 - 00000000 ____D () C:\Program Files (x86)\GE Healthcare
2015-03-09 14:25 - 2012-01-31 13:12 - 00000000 ____D () C:\Users\Serifus\Documents\AutoDELFIA
2015-03-05 10:29 - 2012-01-31 13:23 - 00023905 _____ () C:\Users\Serifus\Documents\Vyúčtování.xlsx
2015-03-04 16:04 - 2015-02-18 13:21 - 00000065 _____ () C:\Users\Serifus\Desktop\Delfia Brno výtah.txt
2015-03-04 11:11 - 2009-07-14 06:08 - 00032610 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2015-03-03 11:49 - 2012-01-31 13:23 - 00068228 _____ () C:\Users\Serifus\Documents\KILMON.xlsx
2015-03-02 15:23 - 2012-05-02 12:39 - 00000000 ____D () C:\Users\Serifus\Documents\Katalog přístrojů
2015-02-27 19:44 - 2012-02-01 13:33 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Skype
2015-02-25 20:19 - 2014-06-16 09:51 - 00000000 ____D () C:\Users\Serifus\AppData\Roaming\Audacity
2015-02-25 16:52 - 2014-04-03 13:59 - 00000000 ____D () C:\Program Files\Microsoft SQL Server
2015-02-25 16:52 - 2013-02-21 14:39 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server
2015-02-25 11:30 - 2014-10-08 11:02 - 00001104 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2015-02-25 11:30 - 2014-10-08 11:02 - 00001092 _____ () C:\Users\Public\Desktop\TeamViewer 9.lnk
2015-02-24 17:43 - 2014-04-03 14:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft SQL Server 2008 R2
2015-02-24 17:36 - 2014-05-19 09:01 - 00000000 ____D () C:\Install
2015-02-24 16:47 - 2015-01-19 16:51 - 00000000 ____D () C:\Users\Serifus\Documents\SQL Server Management Studio
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-02-24 10:04 - 2013-03-14 14:25 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-02-24 03:17 - 2012-01-31 13:11 - 00295552 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2015-02-23 21:25 - 2013-03-14 14:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-02-23 12:35 - 2014-02-04 16:20 - 00001043 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000985 _____ () C:\Users\Public\Desktop\WinSCP.lnk
2015-02-23 12:35 - 2014-02-04 16:20 - 00000000 ____D () C:\Program Files (x86)\WinSCP
==================== Files in the root of some directories =======
2014-02-04 16:23 - 2014-02-04 19:17 - 0000600 _____ () C:\Users\Serifus\AppData\Roaming\winscp.rnd
2012-02-01 09:54 - 2014-11-11 12:44 - 0003584 _____ () C:\Users\Serifus\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===
==================== Drive and Memory info ===================
Drive c: (OS) (Fixed) (Total:453.66 GB) (Free:37.05 GB) NTFS
Drive e: (STARCRAFT) (CDROM) (Total:0.62 GB) (Free:0 GB) CDFS
Drive f: (BROODWAR) (CDROM) (Total:0.61 GB) (Free:0 GB) CDFS
Drive g: (My Book AV) (Fixed) (Total:931.51 GB) (Free:8.56 GB) NTFS
Available physical RAM: 3630.3 MB
Total physical RAM: 5942.59 MB
Percentage of memory in use: 38%
==================== MBR and Partition Table ==================
==================== Scheduled Tasks (whitelisted) ==================
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Alternate Data Streams (whitelisted) ==================
==================== Security Center ==================
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)
***** Velikost "Plochy" *****
Velikost slozky "C:\Users\Serifus\Desktop" je 46 MB.
***** Startup Programs *****
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
"C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
"C:\Program Files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" /WinStart [x]
***** Firewall rules *****
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
***** System Restore *****
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000
==================== End Of Log ==============================
- Přílohy
-
- Addition.zip
- (11.83 KiB) Staženo 48 x
Re: Spousta virů :-(
Tvorba fixlistu pro FRST
- Spustte poznamkovy blok (Start-spustit-notepad)
- Zkopirujte skript nize
Kód: Vybrat vše
Start CloseProcesses: CreateRestorePoint: HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.) HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.) HKLM-x32\...\Run: [] => [X] HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation) HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd) HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE -> HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE -> Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X] 2015-03-25 08:31 - 2015-03-25 08:31 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe 2015-03-24 16:46 - 2015-03-24 16:19 - 00024064 _____ () C:\Windows\zoek-delete.exe 2015-03-24 16:20 - 2015-03-24 16:58 - 00011005 _____ () C:\zoek-results.log 2015-03-24 16:19 - 2015-03-24 16:43 - 00000000 ____D () C:\zoek_backup 2015-03-24 16:18 - 2015-03-24 16:18 - 01305600 _____ () C:\Users\Serifus\Desktop\zoek.exe 2015-03-24 14:52 - 2015-03-24 14:59 - 00000000 ____D () C:\AdwCleaner 2015-03-24 14:36 - 2015-03-24 14:36 - 02168320 _____ () C:\Users\Serifus\Desktop\adwcleaner_4.113.exe 2015-03-24 14:17 - 2015-03-24 14:17 - 00025041 _____ () C:\Users\Serifus\Desktop\Addition.zip 2015-03-24 14:10 - 2015-03-25 08:34 - 00025176 _____ () C:\Users\Serifus\Desktop\FRST.txt 2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log 2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log 2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log 2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log 2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log 2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log 2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log 2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log 2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log 2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0 DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0 DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent Hosts: EmptyTemp: Reboot: End- Ulozte vytvoreny TXT jako fixlist.txt
- Presunte vytvoreny fixlist vedle FRST
Spustte znovu FRST.exe
- Kliknete na Fix
- Probehne oprava a vytvori log Fixlog.txt
Restart PC a dejte mi sem fixlog.txt"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Spousta virů :-(
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by j.hal at 2015-03-25 10:08:10 Run:2
Running from C:\Users\Serifus\Desktop
Loaded Profiles: j.hal (Available profiles: balcom & j.hal)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
2015-03-25 08:31 - 2015-03-25 08:31 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
2015-03-24 16:46 - 2015-03-24 16:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-24 16:20 - 2015-03-24 16:58 - 00011005 _____ () C:\zoek-results.log
2015-03-24 16:19 - 2015-03-24 16:43 - 00000000 ____D () C:\zoek_backup
2015-03-24 16:18 - 2015-03-24 16:18 - 01305600 _____ () C:\Users\Serifus\Desktop\zoek.exe
2015-03-24 14:52 - 2015-03-24 14:59 - 00000000 ____D () C:\AdwCleaner
2015-03-24 14:36 - 2015-03-24 14:36 - 02168320 _____ () C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
2015-03-24 14:17 - 2015-03-24 14:17 - 00025041 _____ () C:\Users\Serifus\Desktop\Addition.zip
2015-03-24 14:10 - 2015-03-25 08:34 - 00025176 _____ () C:\Users\Serifus\Desktop\FRST.txt
2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log
2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log
2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log
2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log
2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log
2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log
2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log
2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log
2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log
2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PWRISOVM.EXE => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Windows\CurrentVersion\Run\\RESTART_STICKY_NOTES => value deleted successfully.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E" => Key deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{815c9185-cbcd-11e4-9d2c-b083fe4c5e3c}" => Key deleted successfully.
HKCR\CLSID\{815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} => Key not found.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk => Moved successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
CtClsFlt => Service deleted successfully.
C:\Users\Serifus\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Serifus\Desktop\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Serifus\Desktop\adwcleaner_4.113.exe => Moved successfully.
C:\Users\Serifus\Desktop\Addition.zip => Moved successfully.
"C:\Users\Serifus\Desktop\FRST.txt" => File/Directory not found.
C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log => Moved successfully.
C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log => Moved successfully.
C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log => Moved successfully.
C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log => Moved successfully.
C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log => Moved successfully.
C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log => Moved successfully.
C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log => Moved successfully.
C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log => Moved successfully.
C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log => Moved successfully.
C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0 => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0 => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent => Key Deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 310.6 MB temporary data.
The system needed a reboot.
==== End of Fixlog 10:09:25 ====
Ran by j.hal at 2015-03-25 10:08:10 Run:2
Running from C:\Users\Serifus\Desktop
Loaded Profiles: j.hal (Available profiles: balcom & j.hal)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [180224 2009-03-15] (PowerISO Computing, Inc.)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-02-17] (LogMeIn Inc.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [6480664 2014-09-25] (Piriform Ltd)
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: E - E:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: F - F:\SETUP.EXE
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\...\MountPoints2: {815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} - "H:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
S3 CtClsFlt; system32\DRIVERS\CtClsFlt.sys [X]
2015-03-25 08:31 - 2015-03-25 08:31 - 00112640 _____ (forum.viry.cz) C:\Users\Serifus\Desktop\FRSTLauncher.exe
2015-03-24 16:46 - 2015-03-24 16:19 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-03-24 16:20 - 2015-03-24 16:58 - 00011005 _____ () C:\zoek-results.log
2015-03-24 16:19 - 2015-03-24 16:43 - 00000000 ____D () C:\zoek_backup
2015-03-24 16:18 - 2015-03-24 16:18 - 01305600 _____ () C:\Users\Serifus\Desktop\zoek.exe
2015-03-24 14:52 - 2015-03-24 14:59 - 00000000 ____D () C:\AdwCleaner
2015-03-24 14:36 - 2015-03-24 14:36 - 02168320 _____ () C:\Users\Serifus\Desktop\adwcleaner_4.113.exe
2015-03-24 14:17 - 2015-03-24 14:17 - 00025041 _____ () C:\Users\Serifus\Desktop\Addition.zip
2015-03-24 14:10 - 2015-03-25 08:34 - 00025176 _____ () C:\Users\Serifus\Desktop\FRST.txt
2015-03-11 11:04 - 2015-03-11 11:04 - 00000197 _____ () C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log
2015-03-10 09:18 - 2015-03-10 09:18 - 00000197 _____ () C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log
2015-03-09 08:24 - 2015-03-09 08:24 - 00000197 _____ () C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log
2015-03-05 07:17 - 2015-03-05 07:17 - 00000197 _____ () C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log
2015-03-04 11:16 - 2015-03-04 11:16 - 00000197 _____ () C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log
2015-03-04 10:30 - 2015-03-04 10:31 - 00000197 _____ () C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log
2015-03-03 20:31 - 2015-03-03 20:32 - 00000197 _____ () C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log
2015-03-03 11:14 - 2015-03-03 11:14 - 00000197 _____ () C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log
2015-03-02 10:05 - 2015-03-02 10:05 - 00000197 _____ () C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log
2015-02-27 14:07 - 2015-02-27 14:08 - 00000197 _____ () C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
DeleteKey: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent
Hosts:
EmptyTemp:
Reboot:
End
*****************
Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\PWRISOVM.EXE => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\LogMeIn Hamachi Ui => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Windows\CurrentVersion\Run\\RESTART_STICKY_NOTES => value deleted successfully.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E" => Key deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F" => Key deleted successfully.
"HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{815c9185-cbcd-11e4-9d2c-b083fe4c5e3c}" => Key deleted successfully.
HKCR\CLSID\{815c9185-cbcd-11e4-9d2c-b083fe4c5e3c} => Key not found.
HKU\S-1-5-21-3883227779-2708345459-3382469968-1164\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE => value deleted successfully.
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Yawcam.lnk => Moved successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
CtClsFlt => Service deleted successfully.
C:\Users\Serifus\Desktop\FRSTLauncher.exe => Moved successfully.
C:\Windows\zoek-delete.exe => Moved successfully.
C:\zoek-results.log => Moved successfully.
C:\zoek_backup => Moved successfully.
C:\Users\Serifus\Desktop\zoek.exe => Moved successfully.
C:\AdwCleaner => Moved successfully.
C:\Users\Serifus\Desktop\adwcleaner_4.113.exe => Moved successfully.
C:\Users\Serifus\Desktop\Addition.zip => Moved successfully.
"C:\Users\Serifus\Desktop\FRST.txt" => File/Directory not found.
C:\Windows\system32\2015-03-11-10-04-02.008-AvastVBoxSVC.exe-4448.log => Moved successfully.
C:\Windows\system32\2015-03-10-08-18-34.046-AvastVBoxSVC.exe-5032.log => Moved successfully.
C:\Windows\system32\2015-03-09-07-24-22.070-AvastVBoxSVC.exe-4520.log => Moved successfully.
C:\Windows\system32\2015-03-05-06-17-43.030-AvastVBoxSVC.exe-4664.log => Moved successfully.
C:\Windows\system32\2015-03-04-10-16-26.034-AvastVBoxSVC.exe-4772.log => Moved successfully.
C:\Windows\system32\2015-03-04-09-30-57.027-AvastVBoxSVC.exe-4784.log => Moved successfully.
C:\Windows\system32\2015-03-03-19-31-58.052-AvastVBoxSVC.exe-1688.log => Moved successfully.
C:\Windows\system32\2015-03-03-10-14-48.099-AvastVBoxSVC.exe-5028.log => Moved successfully.
C:\Windows\system32\2015-03-02-09-05-13.054-AvastVBoxSVC.exe-5108.log => Moved successfully.
C:\Windows\system32\2015-02-27-13-07-59.010-AvastVBoxSVC.exe-5012.log => Moved successfully.
C:\Windows\Tasks\Adobe Flash Player Updater.job => Moved successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0 => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0 => Key Deleted successfully.
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NBAgent => Key Deleted successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 310.6 MB temporary data.
The system needed a reboot.
==== End of Fixlog 10:09:25 ====
Re: Spousta virů :-(
Jak se chova PC??
"Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.Re: Spousta virů :-(
Velmi spořádaně.
Děkuji mnohokrát!!! Příště si dám sakra pozor
Děkuji mnohokrát!!! Příště si dám sakra pozor
Re: Spousta virů :-(
Tak jeste uklidime 
DelFix https://toolslib.net/downloads/finish/2/
Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standard
Panel čistič
A pokud nejsou problemy ci dotazy, je to z me strany vse 
DelFix https://toolslib.net/downloads/finish/2/
- Stahnete a spustte
- Ponechte zatrzitkou pouze u volby Remote disinfection tools
- Kliknete na Run
Stahnete Ccleaner https://www.piriform.com/ccleaner/download/standardPanel čistič
- Vse nechte jak je, jen dejte Analyzovat a pote Spustit CCleaner
- dejte Hledej problémy
- nasledne Opravit problémy - zalohu registru doporucuji udelat, opravte vsechny problemy
- postup opakujte dokud nebude bez problemu - vetsinou cca 3x
- Zde muzete odinstalovat nepotrebne programy
A pokud nejsou problemy ci dotazy, je to z me strany vse "Kdo víno má a nepije,kdo hrozny má a nejí je, kdo ženu má a nelíbá, kdo zábavě se vyhýbá, na toho vemte bič a hůl, to není člověk, to je vůl."
Člen od 1. února 2011.
Člen
od 1. února 2011.
Přispějete na provoz fóra?