Prosím o kontrolu

Zpráva

jmeno1 · #1 Příspěvek od **jmeno1** » 31 bře 2015 22:58

Logfile of random's system information tool 1.10 (written by random/random)
Run by Keijei at 2015-03-31 23:56:55
Microsoft Windows 7 Home Premium Service Pack 1
System drive C: has 4 GB (7%) free of 61 GB
Total RAM: 6142 MB (66% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:56:56, on 31.3.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17689)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10.exe
C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-10.exe
C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe
C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe
C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\trend micro\Keijei.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 7_4ADAFA6D
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... 7_4ADAFA6D
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.mystartsearch.com/?type=hp&t ... 7_4ADAFA6D
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mystartsearch.com/?type=hp&t ... 7_4ADAFA6D
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: PDF Architect Helper - {3A2D5EBA-F86D-4BD3-A177-019765996711} - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll
O2 - BHO: Air Globe 1.0.0.7 - {4c54ce3d-6b7d-4f21-9e69-200632a98540} - C:\Program Files (x86)\Air Globe\AirGlobebho.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll
O2 - BHO: youtubeadblocker - {861b07aa-0b35-4a2e-8b19-e023bc8faade} - C:\Program Files (x86)\youtubeadblocker\3sbwGUMMy8pZ7U.dll
O2 - BHO: SAlePlus - {9705c6b5-ee6e-4977-993d-f01a303bac28} - C:\Program Files (x86)\SAlePlus\7XhTNmBr3JRjov.dll
O2 - BHO: ShopperProBHO - {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} - C:\ProgramData\ShopperPro\ShopperPro.dll
O2 - BHO: SalePlus - {bab6bf6f-54b4-483f-a8d0-f7d0a7885b52} - C:\Program Files (x86)\SalePlus\vtIMn03wvQlgKv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [ATICustomerCare] "C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [NUSB3MON] "C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
O4 - HKLM\..\Run: [RIMBBLaunchAgent.exe] C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
O4 - HKLM\..\Run: [RIM PeerManager] "C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe" MSRun
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Global Startup: Akcelerátor spuštění AutoCADu.lnk = C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000
O8 - Extra context menu item: E&xportovat do aplikace Microsoft Office Excel - res://C:\PROGRA~2\MICROS~1\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Od&eslat do aplikace OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105
O9 - Extra button: Zdroje informací - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\OFFICE11\REFIEBAR.DLL
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: AppleChargerSrv - Unknown owner - C:\Windows\system32\AppleChargerSrv.exe (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: BlackBerry Device Manager - Research In Motion Limited - C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe
O23 - Service: BrsHelper - Unknown owner - C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE
O23 - Service: Dragon Age: Prameny - aktualizace obsahu (DAUpdaterSvc) - BioWare - E:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: globalUpdate Update Service (globalUpdate) (globalUpdate) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: globalUpdate Update Service (globalUpdatem) (globalUpdatem) - globalUpdate - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: JMB36X - Unknown owner - C:\Windows\SysWOW64\XSrvSetup.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PDF Architect Helper Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\HelperService.exe
O23 - Service: PDF Architect Service - pdfforge GmbH - C:\Program Files (x86)\PDF Architect\ConversionService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: RIM MDNS - Apple Inc. - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe
O23 - Service: BlackBerry Link Communication Manager (RIM Tunnel Service) - Research In Motion Limited - C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: Sony PC Companion - Avanquest Software - C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
O23 - Service: ShopperPro Update (SPBIUpd) - ShopperPro - C:\Program Files\Common Files\ShopperPro\spbiu.exe
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 11552 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
winlogon.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs

C:\Windows\system32\svchost.exe -k NetworkService
atieclxx
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe"
C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE
"C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\SoftwarePlus\SoftwarePlus.dll",serv
"C:\Windows\system32\rundll32.exe" "c:\Program Files (x86)\SoftwarePlus\SoftwarePlus.dll",serv
"taskhost.exe"
taskeng.exe {02714154-9DC1-4E8F-B1F2-60A05FA125D4}
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
taskeng.exe {B1D7E3B5-7A54-4B02-AC59-9598DA9AEDC2}
"C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-6.exe" /rawdata=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
"C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10.exe" /rawdata=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
"C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-6.exe" /rawdata=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
"C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-6.exe" /rawdata=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
"C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-10.exe" /rawdata=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
"C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe"
"C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe" -s
"C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun
C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
"C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe"
"C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe"
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM" PriorityLow
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe" 0
C:\Windows\SysWOW64\XSrvSetup.exe
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
"C:\Program Files (x86)\PDF Architect\HelperService.exe"
"C:\Program Files (x86)\PDF Architect\ConversionService.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
"C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe"
"C:\Program Files\Common Files\ShopperPro\spbiu.exe" /service
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\SearchIndexer.exe /Embedding
C:\PROGRA~2\YTDOWN~1\BrowserHelper.exe
"C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
C:\Windows\System32\svchost.exe -k secsvcs
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.omniboxes.com/?type=sc&ts=14 ... 7_4ADAFA6D
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" http://www.omniboxes.com/?type=sc&ts=14 ... 7_4ADAFA6D
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=gpu-process --channel="4632.0.1081039809\1950953423" --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,18,40 --gpu-vendor-id=0x1002 --gpu-device-id=0x6898 --gpu-driver-vendor="Advanced Micro Devices, Inc." --gpu-driver-version=13.251.0.0 --ignored=" --type=renderer " /prefetch:822062411
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/PP_Ethersuggest_A5_Stable_R8/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4632 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4632.2.250363587\867625745" /prefetch:673131151
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/PP_Ethersuggest_A5_Stable_R8/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4632 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4632.3.481205955\173147236" /prefetch:673131151
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/PP_Ethersuggest_A5_Stable_R8/PasswordGeneration/Disabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --extension-process --enable-webrtc-hw-h264-encoding --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4632 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4632.6.32817049\126889816" /prefetch:673131151
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=ppapi --channel="4632.7.598993572\320276594" --ppapi-flash-args=enable_hw_video_decode=1 --lang=cs --ignored=" --type=renderer " /prefetch:-632637702
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/PP_Ethersuggest_A5_Stable_R8/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4632 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4632.9.1805599960\518299669" /prefetch:673131151
"C:\Users\Keijei\Downloads\RSITx64.exe"
C:\Windows\system32\wbem\wmiprvse.exe
"C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe" --type=renderer --enable-deferred-image-decoding --lang=cs --force-fieldtrials="BrowserBlacklist/Enabled/CTRequiredForEVTrial/RequirementEnforced/ChromeSuggestions/Default/DomRel-Enable/enable/EmbeddedSearch/Group7 pct:10g stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/EnhancedBookmarks/Default/ExtensionContentVerification/Enforce/ExtensionInstallVerification/Enforce/GoogleNow/Enable/NewProfileManagement/Enabled/OmniboxBundledExperimentV1/PP_Ethersuggest_A5_Stable_R8/PasswordGeneration/Disabled/PrerenderFromOmnibox/OmniboxPrerenderEnabled/QUIC/NoIdForLargePopulation/RememberCertificateErrorDecisions/Default/SRTPromptFieldTrial/Default/SafeBrowsingIncidentReportingService/Default/SettingsEnforcement/enforce_always_with_extensions_and_dse/ShowAppLauncherPromo/ShowPromoUntilDismissed/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-Population-Restrict/normal/UMA-Uniformity-Trial-1-Percent/group_78/UMA-Uniformity-Trial-10-Percent/group_04/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_14/UMA-Uniformity-Trial-50-Percent/default/UwSInterstitialStatus/On/VoiceTrigger/Install/WebRTC-IPv6Default/Disabled/" --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --device-scale-factor=1 --font-cache-shared-mem-suffix=4632 --enable-pinch-virtual-viewport --enable-delegated-renderer --num-raster-threads=2 --channel="4632.11.790442376\1347215231" /prefetch:673131151
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
C:\Windows\system32\DllHost.exe /Processid:{E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}
"C:\Users\Keijei\Downloads\RSITx64.exe"

======Scheduled tasks folder======

C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-6.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-6.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-7.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-7.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10_user.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-3.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-3.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5_user.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-6.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-6.exe /rawdata=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
C:\Windows\tasks\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-7.job - C:\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-7.exe /rawdata=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
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-6.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-6.exe /rawdata=b+RNy4Q83IaFLeT0+ZRqvhqKFV89JUGzpoUNSDVutK4YtFs6yEAn2LW1Ep45LKN6E4Xi7RavdAHU1xMDWueVr17ig4c/v+W9QRCHZXwfTRs2fz/bDU5v79KFOZApE+TYYapDTLDx3psEASMgwanp2DG0IO8sxsr/f7nj19fv3xyTLz4EdSttf0JzAVekTt64B5cEqQy9h0Pr62IuR5eT1U5/XKV8i2XD+OIDeYF1iOoL1XxniuLhxI1Bfdaam3mN23zZUgRL2WFz0YxHs3voJtgNKJ2+/GRIupV3xvJMS8JdIvI7s/g1cG+/u7IEskeb5eGC0hi0CywKx9Q9anl4C1Ld73S4gSqbWmCnERwRrEGo7quj3tuVtXklvxMdk2hJaDWrwKeVII4bRbuNSn6NbA1FxVfyYuozu84RVdWyKux3tagJccKT34royY85f2UAnmi7kTNqHECbVlmfCXkv158Db81dxLFiKxV6TpYTB7CmAvDrayeZfzm7d/QQwJVOLdQ/FDxZtNOFuvdskIetCV3jkhrOna1Y/vOlCVIP19aroNBwyF+0gm3RTJihxHWPmYYHk/WCFAKvSmQuRt0YFAoRpohwzaRwLxT5Fn2LbnsTHPvohl/M1v3ETPxBw72nr33tqTBdzbT1NLiFhFL8f4c3CnAH6jZ0EVD9OikQzHKymq2zNjiNDulOkrErxxtDjOQkWdUhp7/TjKBIfPNAz0WgDiGDj0niDfYCcb0ncuEiY5Sla8nzcjegVxhHNHphdKeL/WkgN9mcajhUeBbshSLzCx7L3OVSrWWbn9ohuukCQWP/RYhxYqzec2hA1shAaMYMTE35Jwc6BXPJIpskVr+FNzfLunQ/xNcA9l4nKwvCI0Pk0e4Afci3HvtjNECOktrv0Tllw2L6/jWwQJTRSwfb2ugbGJ6j+FoWuQ+ihtYpCZOUZTCCY7KUgOijmz8N+iU73Nndt96O9ROphbuCUQc89DvrhFFUH06OrfhzFZACocKd1pgk4vs1oZH1n5T9QfI1N6ht2U39F/sAgpF1GNlW56V9Lgcoorsf55tBSCcF5WFBaV7mcpbI3Gf0ugoU5kNjorN8l5DEmy5vWc6ZImG63hLVWANzd7rRc/36o9VxPrdkWQnDJNwbEcKqs6x1OP8/877lEQNqRrnl+MzDQW35YXUXG8awb0EBh2Z7IfN5Ghtf+t5HLjluyCiEXmyx2SHWg1A5EEdcgD2OKNZzOxJzXRzySAdqFY4lvhbZg59wKeKPFNUdF60LeDw/rAxTqADu2737DQimxcf4t0w6fWjrKy4T//2H7vlCHMW4kwNH6C7+CbrE4Vpgpert/EF4jgQI8FDKtLr0+rUL6CgqtUZMYm2nC2w7G1GOOno62CLcz+rpRunEQxZg9ZiAt4bMeUQHPRef9N6534BKZ4IshH8MRtKe8B23VyRGYRKRPvhlRjKvUeZQmnf5TwLpGhWXfSJObg/IgAnj2Rf1K8Ed5EVMoRT/Uz+EkfrUaNyNhG7KQCnwYXTqSu42uYbaZ52E
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-7.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-7.exe /rawdata=g83tfzS0wFKhe5wbVWOmEOpjXFpZF8iXEd29htyjgEolCVmz+NxHRGcRomYa26zwzObHnPx/oa++CT92m7ZCol5zD+JcYeBdY9GfmuX9ksh8o2BcpH2ilTzr4FrGReUt8gjHmH1AjfTDGF6qXuHezwhQaKP2aONRhxuUHypKNMqE26w/bm8s2bIJE2nPmNXJ3yOkhb8lFTo+gT687BH7kKjJuF4iIxy57bMUysFF7PEP4A2+aYY6yeXj3A7CCfq2zphX3YkwJLLzhkrE9elVpAkEMmcvhPmhLK5GJuZUak6jV8zLUT4dtr3gYWLObuwA2ue/aoLIoU4AaqSeAFDudAyflBqLl8Vhezqa9Ju+bq6UPPuWPxdA2GY/I+8+YKXQwOknSDu0KrU6nawP90b81CQu/p8VgdI1ubIalRnpuVB8Ma6LHKLisgI/h4mkHlxqxEAi/51zM/QIPCRE+uFATlSVvMmLkJ/3piKSkoxMRBTaUt1ZJffNjD9uB0Prn2OFiYl8F1f9DvrBuVIYKYRw/DhmyT7Li2MyX//6WWXsjubRYF+zJHQSuDSrUftS+CxijzkOuxy8ZzdlpU40Lj0j4GMn8BZN4fBMzfFlDrkNZu+TG7c7vmyZ/TPqWLLEPIDCurs6GjU5G2OICVw8LhoEynZy04K+SJco/GTplkwmOZa4Ss+wqVQyPBlkzcV8Zi+SOZMHOSWUVGAb6LrxyfttVTvdKu2yhIyttzmeKkaOm8a3XjVo2/dOVltqcWyp1V79NjMw7B6oOC43smxKKel1ENTNL23MihAIHbn6qcOTWhqvXUaBhQpJOT5+3FJbuk8dMpNA6J/F5XhZcPzEtuVbQiTcGbLFH8pix4DtfRWNkRssTPoWO9o7yi5u6UmptSARd6f8nAm3q4ChnW7h+SyhOszRcs9k3B6U+KgVirHul6RlPXfHXCQo57HH/cVet2hRbGfhD62tzJkLiwQGaiMS/2GiS6zxKheRlE9s2CXpYzYaipNVctFOyJAWiQ+AY04AwdWqMEDwY3CwwhOJ4SGdvfV4LuwJGT1HTEStAR2OMfZ5gQ5nr/J1nRtUUPY4Ge1ZnPgfyLCEoi1usbpKpvyB9oy9vGexwYB6Lc3o43+Y/6Kq1kDX3oyc2tz/Ejv69thulPEiXkL7v6WDPhWbn99+D+fChozrg8aGUB1GUJXDN/ErDBTtEXDJW1c0BXWqYSAEkII+Qd9Q5QcIN/JGSWBl5d6B/dhb9P1v7lAd4X1bL0sTHrv1B8MBarUESL7ZGUojEZJxmbujtmwbj24r2+eNXUnXYR92ouCLaSDL0nAXokczlMwlUpNeQoCuIzD0rEf25JuwScR0wkcceqOFN2exvVrDChR6g+YHLLAmGC7Gr9gN1VGuaT80FzwN87KVQrevVX9B4Y3i/W4BLHQU/Se5XQyG1y2Vx0ncUAVwwI+/GqhOHRon4odE11cUA5t9Hzd5bFpjXKVrpXkYeu7lMHJht7zg3pdRTAdrcwe08zgvvl/UpHEbK8KYBHaE6LBEjHIUlwoW7pGkD3cF+VgeUcpJOZgr4FJFb7g+EmCxaKlV2rNrElEYsCiA+EnOJw3Ji645fYPKIYm69ZixPVSt1IY/f8/mhGYu6N7J/dKVswDmsK/BCHdrs06d+M82/sntQA8CFrwISFqx+Mb2r1//qXmjWz6ZWMPF4aDoFNBg3cdU4Kw=
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-11.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-11.exe /rawdata=ThI4AXKAMU/VmvDfnxGIxfndYsWjR1c/ZI9gDq1ARq9SwxT5RRQVHpD7/2Et7zhLyF9GY2gYHyaz8UuLi2FWYNzPyjvFwigYWN1OlJmTtdqyxmmB1W+GDW1pvi8mruxCirRhV4zz1zH/qNbfrlReUBgFgB2TXcd1JkGJPF0zlxK7pQoxs7i99hdob3vncR3YJK9SXHd4/8rdIkPVZqOK4oIvq0LpC5bLsvPTjeHjYRBkZ4/7pKd48rLaQg2lqIlVG6LYOq3AcrrYzJQksgsVYD6to5fgQMDFoeMFJeicSgsyo0EKbwfAZTuLZ3vqyeX/aVURHfcJaSFowa1qWSO3iEIsgxvo4Tvbhc2lXylMki0o6ucmyFRRZJ18fHt5a3/f2J6Exul9rrtMxYb4d8JwgSyG/ASBshxpA8UAe4pcRigqbvWxOlOaVHViTtzh0sSo/gqT2+74agDAB3nb0RhZWKznU5fs6Dh82YCSU+x04FBcU/uiljgfR9GFm3qeMbQSPonP/6qlQSLdmPbVVg85E7QeuMbtwm462X86Vk9yWZF6VcpE1P6Te7+4m7y3PrMtjWs7GRmWkcd+HN6ypkAaho0AUjVsjXRjz7clExiocj9DShJTy6Z9jZZ/8GqoMi2FiP5d9iakCi/3xbv5eel2SH0lzfTymPwaL0XzGF8ti+67FJZY+y9ScXYQqvs4sRet+xLG4O7FJ2aCPkdS8j6zPqUdxJwmfxzVMATP6MgoC78gSFhi0IkNzgiPXNsHHvxquPK5m9HK19zijQiiNePKhG7cGtNWyso7/EAXBdLnO72lqpyW58RX/nZ8QzOH+kdTNM7QIGUynZxjzmpPlJhL/piotL3ZRMe+RmD+A/zmA6q6mNwT04EkKHOLvP4AhJcgcOjXThQGTKuvtH4n6ZkLuMhbqFO46dVkd7nBaI2/TOkcV+K5qn40ZuVYWONgwqVbthnUfmCiGqvkTNoSGVHYbnjWbWr1TMr90nd2+HKfD718hOSS1XcEduU95jBn/G7CdtFcGuFnnK1kYMeH0TGs+7jKgtK6QJTbrijjLr36DfawiWRSViWK2DaAw5H0iiR1DPqQSS6ngBN4JOcLEKLPV0ZMBl9/C59ZIlJXfLonPM9zDCm0nCkAgBCvBK4cQj8BAkM/l1jikjXlmwdTOkABY2QvmrDFrXc1dd5Q77XlDcSdgqcRGs/9z60z+jjpwPzQ/m/Ck0SFtCDg80satQl+6Ez/QZ7tP2SW98/BRRqHlgDgH2536nd8cPT5dMfWZN3adtbWW0f6jnSz2jvrhqBPNKXY54IEge99bnSg/XYJ6Rmi+pB6JEBgxIVj4OO/Rdc2Zz4G2Q/DkOdN3eGdqFBNpkYT/zoNNn5Nd3GchsRhtfqKMEzxUe/gicDy/iF53FlgtVe9ec3W9MsyEWe1htzpcyNhZQaI5b4ZeEl26Va8Cs6EjvmZ9EHh5Ui9bTarcExdFCj6bQBBUhA2SXCgXq7nPB47Z+kFsOxdYbP7978amuweOVave2BddYOyIOpZyc27ABjWAv2fHtXajXh7Y2nPHl7D2SaCnSQv3amjclH5vzaImVzznDiQgFuf+Rzmu0yrKwYAEPwkQ2+5lZeTEbBG6qNPQba6JRIwXELiWNFDK0BeCqyPFgTTJVaZuje+jxeRLTafWV4NuIGYHqgIC8x1rFbRT3dN3lCb9vJ179uFv0is9AO0Ug0MK7DSGHZ4b0wH+d1fzsSRttF5N9MKP6Wo9Yp5Aehyd8DUR1iGxrrWGAQjquH8hzwlMwNeS3IDLRjnFMCRH734hGvmh8y+dH5FsZFbAJeNznfij3v3ApDwa0PILZtRh5qqwBLjpx8PAQ1KH1DelwEu0oYL0WsPkw0ZzoJaOO6pptSdS8P3KdPFZSItIcG8fu2QPhaM/Ylx3BcOEBqxhwWlQHUCfZkBGcPMx1se4f6ZtrLuBKUJHOjvJyXuARQvRhqcgYVtru2p0aYG1dBnG908ApzZK+WOLZehBz8aK2DVl0BX5oEBk4A/dmND4m20kQgw36ing0rX0RTod6ikjlpmfN71ON6HTdCjAi8iKvzTpyvbVDqwsdGyyhuWIcgOuTzT0b6PYDbDN4kSYox3lgczSgQQrU+v2HaHk7qhbIitklYWoGRIN2Ihq3SPmDCkSwbiPwiC3ut6bUC1fSwTs+dOWl1pjOrFO1qOB2ntR+JEtXRpW6ivR5PxfxZp3vOx2af4ZV/2zZ2e63Tv8jhdKa5Sqd0jOCkn0z+BrMi2rxucH/leoo9O3YBA3qwrR1ar6VPpdnXyoN2RXkFr+/ossyLuCOyUL+Mtw+kJlfalPouVUjpYiVqYCxWYOqH6eLwAZDxo24wSNZuVOyeFOY+2TqvgUXATWFGGyW2XaxImmntemVaKQ3GowUDMk2sdT9r9EXdp72DD724FjhWgqV4BiVp0t8pmNxh8MvUd7h9Dnuh/ehyQQYtIExo6UDNG6DePQD5Yoy1rTUG9jSa/c6miAyylVWAWQyVRFD9xOWUm1jQhKxpRYPiUHNWC5Oug0XvOHV0TX9ESg05t2BBo
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-5.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-5.exe /rawdata=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
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-5_user.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-5.exe /rawdata=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
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-6.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-6.exe /rawdata=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
C:\Windows\tasks\647b9fae-beeb-4f69-a7a1-916eb3ddc680-7.job - C:\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-7.exe /rawdata=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
C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-6.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-6.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-7.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-7.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-10_user.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-10.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-11.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-11.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-5.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-5.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-5_user.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-5.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-6.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-6.exe /rawdata=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
C:\Windows\tasks\c51d90b4-7a94-47a4-a67f-b27f2d62d468-7.job - C:\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-7.exe /rawdata=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
C:\Windows\tasks\GHXZTJN.job - C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe /infocmdline=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
C:\Windows\tasks\globalUpdateUpdateTaskMachineCore.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /c
C:\Windows\tasks\globalUpdateUpdateTaskMachineUA.job - C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000Core.job - C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000UA.job - C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\VSINHF.job - C:\Users\Keijei\AppData\Roaming\VSINHF.exe /infocmdline=NI8WXO4sOBGcVfHsviBJUqrF4MSW2Q2g0WtSFTp9itESRVOAao27RX+oWbdbcvKQHglsBzuf9KUxKOcwZS3LpUolYpabK7b018c45DNS/yvcI7C4nBIHjtumkOlzhUwctGj9qLjncAATDzCPRV1zFFVb4++pP2oXCZzJHbmPI4CBf/oF8JyaFH6Y7xXRq1CjcUq2ONSEljDUHF7vViDxHjQueT1ooXcTMLXj0UMX27gsSAU6stgvzU68uQSwQew5hqOKlMU4A47tQWxiKxL6XPkM7GlGYwfOiUGQspxnyE1NjXTDDU1K9lYNWSb7BsQYkBLOIPE1hzHaDeta7OQVrbzotF7BNeI2AoIBZwk9l32Z4p87l4cfPd9EtIsNURjr1eYNz8cEQgOKL/1lqvOWKHglKlfMrlC3J8xOVYhPVFmWn3fpgbZjwDkSkqoSAyPTJRHoW7ddOjdWmFcOPvnaI4r2Tu0jq1g1DYE7wlD7AIJgu2d3DN+4HhpPr6rTaChz

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{861b07aa-0b35-4a2e-8b19-e023bc8faade}]
youtubeadblocker - C:\Program Files (x86)\youtubeadblocker\3sbwGUMMy8pZ7U.x64.dll [2015-03-31 913920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9705c6b5-ee6e-4977-993d-f01a303bac28}]
SAlePlus - C:\Program Files (x86)\SAlePlus\7XhTNmBr3JRjov.x64.dll [2015-03-31 913920]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
Shopper Pro - C:\ProgramData\ShopperPro\ShopperPro64.dll [2015-03-30 501024]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}]
SalePlus - C:\Program Files (x86)\SalePlus\vtIMn03wvQlgKv.x64.dll [2015-03-31 913920]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04 63912]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3A2D5EBA-F86D-4BD3-A177-019765996711}]
PDF Architect Helper - C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08 92208]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4c54ce3d-6b7d-4f21-9e69-200632a98540}]
Air Globe 1.0.0.7 - C:\Program Files (x86)\Air Globe\AirGlobebho.dll [2015-03-31 269040]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25 460712]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{861b07aa-0b35-4a2e-8b19-e023bc8faade}]
youtubeadblocker - C:\Program Files (x86)\youtubeadblocker\3sbwGUMMy8pZ7U.dll [2015-03-31 842240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9705c6b5-ee6e-4977-993d-f01a303bac28}]
SAlePlus - C:\Program Files (x86)\SAlePlus\7XhTNmBr3JRjov.dll [2015-03-31 842240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}]
Shopper Pro - C:\ProgramData\ShopperPro\ShopperPro.dll [2015-03-30 420640]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}]
SalePlus - C:\Program Files (x86)\SalePlus\vtIMn03wvQlgKv.dll [2015-03-31 842240]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25 172968]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Internet Explorer\Toolbar]
{E0E899AB-F487-11D5-8D29-0050BA6940E3}

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"CanonSolutionMenu"=C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [2007-05-14 644696]
"WrtMon.exe"=C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [2006-09-20 20480]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2012-06-11 12503184]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"DAEMON Tools Pro Agent"=C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [2011-08-17 4527424]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe [2014-10-21 107912]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OpwareSE4]
C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [2007-02-04 79400]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSpeedUp]
C:\Program Files (x86)\Zrychleni Pocitace\PCSUNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]
C:\Program Files (x86)\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe [2008-11-14 305064]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\YTDownloader]
C:\Program Files (x86)\YTDownloader\YTDownloader.exe [2015-03-30 1988528]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Keijei^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Download.lnk]
C:\PROGRA~3\{BC9B5~1\Download.exe [2014-03-31 463560]

[HKEY_LOCAL_MACHINE\Software\wow6432node\Microsoft\Windows\CurrentVersion\Run]
"JMB36X IDE Setup"=C:\Windows\RaidTool\xInsIDE.exe [2010-01-19 43632]
"ATICustomerCare"=C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [2010-03-04 311296]
"Adobe ARM"=C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2012-01-03 843712]
"NUSB3MON"=C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [2010-11-17 113288]
""= []
"RIMBBLaunchAgent.exe"=C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [2013-09-09 443408]
"RIM PeerManager"=C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [2013-11-28 4465152]
"StartCCC"=C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [2013-12-06 766208]

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
Akcelerátor spuštění AutoCADu.lnk - C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_DLLs"=" "

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=5
"ConsentPromptBehaviorUser"=3
"EnableUIADesktopToggle"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe"="C:\Program Files (x86)\FlashGet Network\FlashGet 3\FlashGet3.exe:*:Enabled:Flashget3"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"vidc.uyvy"=msyuv.dll
"vidc.yuy2"=msyuv.dll
"vidc.yvyu"=msyuv.dll
"vidc.iyuv"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"vidc.yvu9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"aux1"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*
.scr - open - "C:\Windows\system32\NOTEPAD.EXE" "%1"
.scr - install -
.scr - config -

jmeno1 · #2 Příspěvek od **jmeno1** » 31 bře 2015 22:58

======List of files/folders created in the last 1 month======

2015-03-31 23:55:31 ----D---- C:\rsit
2015-03-31 18:12:16 ----D---- C:\Windows\pss
2015-03-31 18:05:53 ----D---- C:\ProgramData\egbolkfehgdfokgelfecknpajiofdldk
2015-03-31 18:04:57 ----D---- C:\Program Files (x86)\SoftwarePlus
2015-03-31 18:04:33 ----D---- C:\Program Files (x86)\Raven Internet Marketing Tools
2015-03-31 18:04:00 ----D---- C:\Program Files (x86)\youtubeadblocker
2015-03-31 18:03:57 ----D---- C:\Program Files (x86)\Air Globe
2015-03-31 18:03:46 ----D---- C:\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637
2015-03-31 18:03:45 ----D---- C:\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7
2015-03-31 18:03:43 ----D---- C:\Program Files (x86)\SalePlus
2015-03-31 18:03:37 ----D---- C:\Program Files (x86)\Ge-Force
2015-03-31 18:03:37 ----A---- C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-31 18:03:36 ----D---- C:\Program Files (x86)\Sense
2015-03-31 18:03:32 ----D---- C:\ProgramData\14987379731272139608
2015-03-31 18:03:32 ----D---- C:\Program Files (x86)\SalePPluus
2015-03-31 18:03:08 ----D---- C:\ProgramData\hlmkhkcohdiiinlliooaohkcbknjcekp
2015-03-31 18:02:39 ----D---- C:\ProgramData\{bc9b538a-dd37-8840-bc9b-b538add34e2b}
2015-03-31 18:01:44 ----D---- C:\Program Files\Common Files\ShopperPro
2015-03-31 18:01:43 ----D---- C:\Users\Keijei\AppData\Roaming\QuickScan
2015-03-31 18:01:28 ----D---- C:\ProgramData\ShopperPro
2015-03-31 18:01:27 ----D---- C:\Program Files (x86)\ShopperPro
2015-03-31 18:01:22 ----D---- C:\ProgramData\WindowsMangerProtect
2015-03-31 18:00:52 ----D---- C:\Program Files (x86)\YTDownloader
2015-03-31 18:00:50 ----D---- C:\Users\Keijei\AppData\Roaming\Opera Software
2015-03-31 18:00:33 ----D---- C:\Users\Keijei\AppData\Roaming\omniboxes
2015-03-31 17:59:33 ----D---- C:\Program Files (x86)\Microsoft Silverlight
2015-03-31 17:58:52 ----D---- C:\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e
2015-03-31 17:58:51 ----A---- C:\Users\Keijei\AppData\Roaming\VSINHF.exe
2015-03-31 17:58:48 ----D---- C:\Program Files (x86)\globalUpdate
2015-03-31 17:58:46 ----D---- C:\Program Files (x86)\CinemaP-1.8cV31.03
2015-03-11 17:40:07 ----A---- C:\Windows\SYSWOW64\lpk.dll
2015-03-11 17:40:07 ----A---- C:\Windows\SYSWOW64\fontsub.dll
2015-03-11 17:40:07 ----A---- C:\Windows\SYSWOW64\dciman32.dll
2015-03-11 17:40:07 ----A---- C:\Windows\SYSWOW64\atmlib.dll
2015-03-11 17:40:07 ----A---- C:\Windows\SYSWOW64\atmfd.dll
2015-03-11 17:40:07 ----A---- C:\Windows\system32\lpk.dll
2015-03-11 17:40:07 ----A---- C:\Windows\system32\fontsub.dll
2015-03-11 17:40:07 ----A---- C:\Windows\system32\dciman32.dll
2015-03-11 17:40:07 ----A---- C:\Windows\system32\atmlib.dll
2015-03-11 17:40:07 ----A---- C:\Windows\system32\atmfd.dll
2015-03-11 17:40:05 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-03-11 17:40:05 ----A---- C:\Windows\SYSWOW64\mf.dll
2015-03-11 17:40:05 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-03-11 17:40:04 ----A---- C:\Windows\system32\crypt32.dll
2015-03-11 17:40:03 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-03-11 17:40:03 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-03-11 17:40:03 ----A---- C:\Windows\SYSWOW64\crypt32.dll
2015-03-11 17:40:03 ----A---- C:\Windows\system32\wmp.dll
2015-03-11 17:40:03 ----A---- C:\Windows\system32\mf.dll
2015-03-11 17:40:03 ----A---- C:\Windows\system32\drivers\mountmgr.sys
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\wintrust.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\quartz.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\qdvd.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\drmv2clt.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\cryptui.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\cryptnet.dll
2015-03-11 17:40:02 ----A---- C:\Windows\SYSWOW64\blackbox.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\wmdrmsdk.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\wintrust.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\winload.exe
2015-03-11 17:40:02 ----A---- C:\Windows\system32\srcore.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\quartz.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\pcasvc.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\msscp.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\drmv2clt.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\cryptui.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\cryptnet.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\blackbox.dll
2015-03-11 17:40:02 ----A---- C:\Windows\system32\audiosrv.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\wmdrmsdk.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\rrinstaller.exe
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\msscp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\msnetobj.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\mfps.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\mfpmp.exe
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\mfplat.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\evr.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\drmmgrtn.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\cryptsvc.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\cryptsp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\AudioSes.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\AUDIOKSE.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\AudioEng.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\appidapi.dll
2015-03-11 17:40:01 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\srclient.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\spwmp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\smss.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\setbcdlocale.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\rstrui.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\rrinstaller.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\qdvd.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\pcawrk.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\pcalua.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\pcaevts.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\pcadm.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\msnetobj.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\msmmsp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\mfps.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\mfpmp.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\mfplat.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\evr.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\EncDump.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\dxmasf.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\drmmgrtn.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\drivers\PEAuth.sys
2015-03-11 17:40:01 ----A---- C:\Windows\system32\drivers\appid.sys
2015-03-11 17:40:01 ----A---- C:\Windows\system32\csrsrv.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\cryptsvc.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\cryptsp.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\AudioSes.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\AUDIOKSE.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\AudioEng.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\audiodg.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\appidsvc.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 17:40:01 ----A---- C:\Windows\system32\appidapi.dll
2015-03-11 17:40:01 ----A---- C:\Windows\system32\apisetschema.dll
2015-03-11 17:40:00 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-03-11 17:40:00 ----A---- C:\Windows\SYSWOW64\mferror.dll
2015-03-11 17:40:00 ----A---- C:\Windows\system32\wmploc.DLL
2015-03-11 17:40:00 ----A---- C:\Windows\system32\mferror.dll
2015-03-11 17:39:52 ----A---- C:\Windows\SYSWOW64\ubpm.dll
2015-03-11 17:39:52 ----A---- C:\Windows\system32\ubpm.dll
2015-03-11 17:39:49 ----A---- C:\Windows\SYSWOW64\shell32.dll
2015-03-11 17:39:49 ----A---- C:\Windows\system32\shell32.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-03-11 17:39:47 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\wdigest.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\TSpkg.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\sspisrv.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\sspicli.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\schannel.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\secur32.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\ncrypt.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\msv1_0.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\msobjs.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\msaudite.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\lsass.exe
2015-03-11 17:39:47 ----A---- C:\Windows\system32\lsasrv.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\kerberos.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-03-11 17:39:47 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-03-11 17:39:47 ----A---- C:\Windows\system32\drivers\cng.sys
2015-03-11 17:39:47 ----A---- C:\Windows\system32\credssp.dll
2015-03-11 17:39:47 ----A---- C:\Windows\system32\auditpol.exe
2015-03-11 17:39:47 ----A---- C:\Windows\system32\adtschema.dll
2015-03-11 17:39:45 ----A---- C:\Windows\SYSWOW64\WindowsCodecs.dll
2015-03-11 17:39:45 ----A---- C:\Windows\SYSWOW64\msctf.dll
2015-03-11 17:39:45 ----A---- C:\Windows\system32\WindowsCodecs.dll
2015-03-11 17:39:45 ----A---- C:\Windows\system32\msctf.dll
2015-03-11 17:39:44 ----A---- C:\Windows\system32\win32k.sys
2015-03-11 17:39:43 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-03-11 17:39:43 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-03-11 17:39:43 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-03-11 17:39:43 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-03-11 17:39:43 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-03-11 17:39:43 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-03-11 17:39:42 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-03-11 17:39:42 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 17:39:42 ----A---- C:\Windows\system32\iernonce.dll
2015-03-11 17:39:42 ----A---- C:\Windows\system32\ie4uinit.exe
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-03-11 17:39:41 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-03-11 17:39:41 ----A---- C:\Windows\system32\urlmon.dll
2015-03-11 17:39:41 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 17:39:41 ----A---- C:\Windows\system32\msfeeds.dll
2015-03-11 17:39:41 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 17:39:41 ----A---- C:\Windows\system32\iedkcs32.dll
2015-03-11 17:39:41 ----A---- C:\Windows\system32\dxtrans.dll
2015-03-11 17:39:40 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-03-11 17:39:40 ----A---- C:\Windows\system32\iesetup.dll
2015-03-11 17:39:40 ----A---- C:\Windows\system32\ieapfltr.dll
2015-03-11 17:39:39 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-03-11 17:39:39 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-03-11 17:39:39 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-03-11 17:39:39 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-03-11 17:39:39 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-03-11 17:39:39 ----A---- C:\Windows\system32\jsproxy.dll
2015-03-11 17:39:39 ----A---- C:\Windows\system32\ieUnatt.exe
2015-03-11 17:39:39 ----A---- C:\Windows\system32\iertutil.dll
2015-03-11 17:39:38 ----A---- C:\Windows\system32\mshtmled.dll
2015-03-11 17:39:38 ----A---- C:\Windows\system32\ieui.dll
2015-03-11 17:39:38 ----A---- C:\Windows\system32\ieframe.dll
2015-03-11 17:39:38 ----A---- C:\Windows\system32\dxtmsft.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\wininet.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\vbscript.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\jscript9diag.dll
2015-03-11 17:39:37 ----A---- C:\Windows\system32\jscript9.dll
2015-03-11 17:39:36 ----A---- C:\Windows\system32\msrating.dll
2015-03-11 17:39:36 ----A---- C:\Windows\system32\mshtml.dll
2015-03-11 17:39:35 ----A---- C:\Windows\SYSWOW64\WMPhoto.dll
2015-03-11 17:39:35 ----A---- C:\Windows\system32\WMPhoto.dll
2015-03-06 23:32:00 ----D---- C:\Games

======List of files/folders modified in the last 1 month======

2015-03-31 23:56:55 ----D---- C:\Windows\Temp
2015-03-31 23:56:55 ----D---- C:\Program Files\trend micro
2015-03-31 23:51:42 ----RD---- C:\Program Files (x86)
2015-03-31 23:41:39 ----D---- C:\Users\Keijei\AppData\Roaming\Media Player Classic
2015-03-31 18:29:45 ----D---- C:\Windows\system32\config
2015-03-31 18:22:24 ----D---- C:\Windows\System32
2015-03-31 18:22:24 ----D---- C:\Windows\inf
2015-03-31 18:22:24 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-03-31 18:16:13 ----AD---- C:\Windows
2015-03-31 18:10:50 ----D---- C:\Windows\system32\Tasks
2015-03-31 18:10:35 ----SHD---- C:\Windows\SYSWOW64\AI_RecycleBin
2015-03-31 18:10:35 ----SHD---- C:\Windows\Installer
2015-03-31 18:10:32 ----SHD---- C:\System Volume Information
2015-03-31 18:10:15 ----D---- C:\Windows\SoftwareDistribution
2015-03-31 18:10:15 ----D---- C:\Users\Keijei\AppData\Roaming\TS3Client
2015-03-31 18:10:15 ----D---- C:\Users\Keijei\AppData\Roaming\DAEMON Tools Pro
2015-03-31 18:10:15 ----D---- C:\Program Files (x86)\Steam
2015-03-31 18:10:06 ----D---- C:\Windows\Logs
2015-03-31 18:10:06 ----D---- C:\Windows\debug
2015-03-31 18:07:10 ----D---- C:\Windows\SysWOW64
2015-03-31 18:05:53 ----HD---- C:\ProgramData
2015-03-31 18:05:44 ----D---- C:\Windows\Tasks
2015-03-31 18:04:26 ----D---- C:\Program Files\Common Files\System
2015-03-31 18:03:53 ----D---- C:\Program Files (x86)\AMD APP
2015-03-31 18:03:53 ----D---- C:\Program Files (x86)\Adobe
2015-03-31 18:01:44 ----D---- C:\Program Files\Common Files
2015-03-31 17:59:48 ----SD---- C:\ProgramData\Microsoft
2015-03-31 17:55:16 ----D---- C:\Users\Keijei\AppData\Roaming\Downloaded Installations
2015-03-15 02:28:54 ----D---- C:\Program Files\TeamSpeak 3 Client
2015-03-13 19:21:43 ----D---- C:\Windows\rescache
2015-03-12 07:29:10 ----D---- C:\Windows\winsxs
2015-03-12 07:27:59 ----D---- C:\Windows\SYSWOW64\Dism
2015-03-12 07:27:59 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-03-12 07:27:59 ----D---- C:\Windows\system32\drivers
2015-03-12 07:27:59 ----D---- C:\Windows\system32\Dism
2015-03-12 07:27:59 ----D---- C:\Program Files\Windows Media Player
2015-03-12 07:27:59 ----D---- C:\Program Files (x86)\Windows Media Player
2015-03-12 07:27:58 ----D---- C:\Windows\SYSWOW64\en-US
2015-03-12 07:27:58 ----D---- C:\Windows\system32\en-US
2015-03-12 07:27:58 ----D---- C:\Windows\system32\cs-CZ
2015-03-12 07:27:58 ----D---- C:\Windows\system32\Boot
2015-03-12 07:27:58 ----D---- C:\Program Files\Internet Explorer
2015-03-12 07:27:57 ----D---- C:\Program Files (x86)\Internet Explorer
2015-03-11 19:53:03 ----D---- C:\Windows\system32\MRT
2015-03-11 19:50:56 ----A---- C:\Windows\system32\MRT.exe
2015-03-11 17:39:19 ----D---- C:\Windows\system32\catroot2
2015-03-08 21:19:47 ----D---- C:\Windows\system32\wdi
2015-03-07 19:21:49 ----D---- C:\ProgramData\DVD Shrink

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 JRAID;JRAID; C:\Windows\system32\DRIVERS\jraid.sys [2010-01-27 115312]
R0 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R1 AppleCharger;AppleCharger; C:\Windows\system32\DRIVERS\AppleCharger.sys [2010-04-22 21544]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2011-10-29 271424]
R1 ElbyCDIO;ElbyCDIO Driver; C:\Windows\System32\Drivers\ElbyCDIO.sys [2009-02-17 31400]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2011-07-30 42696]
R2 sbmntr;SBMNTR; \??\C:\PROGRA~2\YTDOWN~1\sbmntr.sys [2015-03-30 58520]
R3 amdkmdag;amdkmdag; C:\Windows\system32\DRIVERS\atikmdag.sys [2013-12-06 13207552]
R3 amdkmdap;amdkmdap; C:\Windows\system32\DRIVERS\atikmpag.sys [2013-12-06 626176]
R3 AtiHDAudioService;AMD Function Driver for HD Audio Service; C:\Windows\system32\drivers\AtihdW76.sys [2013-09-24 94208]
R3 ElbyCDFL;ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [2007-02-16 40648]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-19 4065296]
R3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver; C:\Windows\system32\DRIVERS\nusb3hub.sys [2010-11-19 80384]
R3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver; C:\Windows\system32\DRIVERS\nusb3xhc.sys [2010-11-19 181248]
R3 RimVSerPort;RIM Virtual Serial Port v2; C:\Windows\system32\DRIVERS\RimSerial_AMD64.sys [2012-12-10 44544]
R3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\Windows\System32\Drivers\RootMdm.sys [2009-07-14 11264]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2010-03-04 346144]
R3 SPBIUpdd;ShopperPro UpdateD; \??\C:\Program Files\Common Files\ShopperPro\spbiw.sys [2015-03-30 41624]
S2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2011-07-30 310984]
S2 SPDRIVER_1.39.1.10466;SPDRIVER_1.39.1.10466; .\JSDriver\1.39.1.10466\jsdrv.sys []
S3 cpuz130;cpuz130; \??\C:\Users\Keijei\AppData\Local\Temp\cpuz130\cpuz_x64.sys []
S3 gdrv;gdrv; \??\C:\Windows\gdrv.sys [2010-09-11 25640]
S3 RimUsb;zařízení BlackBerry Smartphone; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [2013-06-27 79872]
S3 rimvndis;BlackBerry Virtual Private Network; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [2013-11-28 17920]
S3 RTHDMIAzAudService;Service for HDMI; C:\Windows\system32\drivers\RtHDMIVX.sys [2012-06-05 237968]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2010-11-20 59392]
S3 usbrndis6;Adaptér USB RNDIS6; C:\Windows\system32\DRIVERS\usb80236.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\drivers\usbscan.sys [2013-07-03 42496]
S3 usbser;Ovladač modemu USB; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 WinUsb;WinUsb; C:\Windows\system32\DRIVERS\WinUsb.sys [2010-11-20 41984]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2012-01-03 63928]
R2 AMD External Events Utility;AMD External Events Utility; C:\Windows\system32\atiesrxx.exe [2013-12-06 239616]
R2 BrsHelper;BrsHelper; C:\PROGRA~2\YTDOWN~1\BROWSE~2.EXE [2015-03-30 112560]
R2 JMB36X;JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [2010-01-19 72304]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE [2003-06-19 322120]
R2 PDF Architect Helper Service;PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [2013-04-08 1320496]
R2 PDF Architect Service;PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [2013-04-08 799280]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-06-12 76888]
R2 RIM MDNS;RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [2013-11-28 389632]
R2 SPBIUpd;ShopperPro Update; C:\Program Files\Common Files\ShopperPro\spbiu.exe [2015-03-30 2345248]
R3 BlackBerry Device Manager;BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [2013-09-09 585728]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2014-04-12 103608]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2014-04-11 124088]
S2 ec9c17f1;SoftwarePlus; C:\Windows\syswow64\rundll32.exe [2009-07-14 44544]
S2 globalUpdate;globalUpdate Update Service (globalUpdate); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-03-31 68608]
S2 RIM Tunnel Service;BlackBerry Link Communication Manager; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [2013-11-28 1304064]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-02-05 267440]
S3 AppleChargerSrv;AppleChargerSrv; C:\Windows\system32\AppleChargerSrv.exe [2010-04-06 31272]
S3 Autodesk Licensing Service;Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [2013-05-25 77944]
S3 DAUpdaterSvc;Dragon Age: Prameny - aktualizace obsahu; E:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [2009-07-26 25832]
S3 globalUpdatem;globalUpdate Update Service (globalUpdatem); C:\Program Files (x86)\globalUpdate\Update\GoogleUpdate.exe [2015-03-31 68608]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-02-20 114688]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2003-07-28 89136]
S3 Sony PC Companion;Sony PC Companion; C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe [2013-02-04 155824]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2014-09-23 833728]
S3 WatAdminSvc;@%SystemRoot%\system32\Wat\WatUX.exe,-601; C:\Windows\system32\Wat\WatAdminSvc.exe [2010-09-13 1255736]
S4 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2014-04-11 50864]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetPipeActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8197; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]
S4 NetTcpActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8199; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2014-04-12 139944]

-----------------EOF-----------------

#3 Příspěvek od **altrok** » 01 dub 2015 07:11

Zdravim

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

jmeno1 · #4 Příspěvek od **jmeno1** » 01 dub 2015 13:05

# AdwCleaner v4.200 - Log vytvooen 01/04/2015 v 14:08:14
# Aktualizováno 29/03/2015 by Xplode
# Databáze : 2015-03-29.1 [Server]
# Operaení system : Windows 7 Home Premium Service Pack 1 (x64)
# Uživatelské jméno : Keijei - KEIJEI-PC
# Spuštino z : C:\Users\Keijei\Desktop\Cisteni\adwcleaner_4.200.exe
# Nastavení : Eištiní

***** [ Služby ] *****

[#] Služba Smazáno : BrsHelper
[#] Služba Smazáno : globalUpdate
[#] Služba Smazáno : globalUpdatem
Služba Smazáno : sbmntr
[#] Služba Smazáno : SPBIUpd
Služba Smazáno : SPBIUpdd
[#] Služba Smazáno : ec9c17f1
[#] Služba Smazáno : SPDRIVER_1.39.1.10466

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\ShopperPro
Složka Smazáno : C:\ProgramData\WindowsMangerProtect
Složka Smazáno : C:\Program Files (x86)\globalUpdate
Složka Smazáno : C:\Program Files (x86)\Sense
Složka Smazáno : C:\Program Files (x86)\ShopperPro
Složka Smazáno : C:\Program Files (x86)\YTDownloader
Složka Smazáno : C:\Program Files (x86)\Ge-Force
Složka Smazáno : C:\Program Files (x86)\SalePlus
Složka Smazáno : C:\Program Files (x86)\SalePPluus
Složka Smazáno : C:\Program Files (x86)\youtubeadblocker
Složka Smazáno : C:\Program Files (x86)\CinemaP-1.8cV31.03
Složka Smazáno : C:\Users\Keijei\AppData\Local\globalUpdate
Složka Smazáno : C:\Users\Keijei\AppData\Local\BrowserHelper
Složka Smazáno : C:\Users\Keijei\AppData\Roaming\omniboxes
Složka Smazáno : C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YTDownloader
Soubor Smazáno : C:\Users\Keijei\Desktop\YTDownloader.lnk

***** [ Naplánované úlohy ] *****

Úloha Smazáno : globalUpdateUpdateTaskMachineCore
Úloha Smazáno : globalUpdateUpdateTaskMachineUA
Úloha Smazáno : ShopperProJSUpd
Úloha Smazáno : SMupdate1
Úloha Smazáno : Your File Updater
Úloha Smazáno : YTDownloader
Úloha Smazáno : YTDownloaderUpd
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-6
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-7
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10_user
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-3
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5_user
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-6
Úloha Smazáno : 34a30f59-3e26-43ce-b0f9-a37ab88e63b0-7
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-6
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-7
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-11
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-5
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-5_user
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-6
Úloha Smazáno : 647b9fae-beeb-4f69-a7a1-916eb3ddc680-7
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-6
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-7
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-10_user
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-11
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-5
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-5_user
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-6
Úloha Smazáno : c51d90b4-7a94-47a4-a67f-b27f2d62d468-7

***** [ Zástupci ] *****

Zástupce Vyléeeno : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 2 (CZ)\Spustit hru The Witcher 2 (CZ).lnk
Zástupce Vyléeeno : C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
Zástupce Vyléeeno : C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome\Google Chrome.lnk
Zástupce Vyléeeno : C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
Zástupce Vyléeeno : C:\Users\Keijei\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
Zástupce Vyléeeno : C:\Users\Keijei\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk

***** [ Registry ] *****

Klíe Smazáno : HKCU\Software\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.superfish.com
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Klíe Smazáno : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Klíe Smazáno : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO
Klíe Smazáno : HKLM\SOFTWARE\Classes\ShopperPro.ShopperProBHO.1
Klíe Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Klíe Smazáno : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Klíe Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ShopperPro.exe
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\YTDownloader.exe
Klíe Smazáno : HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\SysMenuExt
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL
Klíe Smazáno : HKLM\SOFTWARE\Classes\P861b07aa_0b35_4a2e_8b19_e023bc8faade_.P861b07aa_0b35_4a2e_8b19_e023bc8faade_
Klíe Smazáno : HKLM\SOFTWARE\Classes\P861b07aa_0b35_4a2e_8b19_e023bc8faade_.P861b07aa_0b35_4a2e_8b19_e023bc8faade_.9
Klíe Smazáno : HKLM\SOFTWARE\Classes\P9705c6b5_ee6e_4977_993d_f01a303bac28_.P9705c6b5_ee6e_4977_993d_f01a303bac28_
Klíe Smazáno : HKLM\SOFTWARE\Classes\P9705c6b5_ee6e_4977_993d_f01a303bac28_.P9705c6b5_ee6e_4977_993d_f01a303bac28_.9
Klíe Smazáno : HKLM\SOFTWARE\Classes\Pbab6bf6f_54b4_483f_a8d0_f7d0a7885b52_.Pbab6bf6f_54b4_483f_a8d0_f7d0a7885b52_
Klíe Smazáno : HKLM\SOFTWARE\Classes\Pbab6bf6f_54b4_483f_a8d0_f7d0a7885b52_.Pbab6bf6f_54b4_483f_a8d0_f7d0a7885b52_.9
Klíe Smazáno : HKLM\SOFTWARE\103eb353-945c-44c1-9115-6c3722c61fd0
Klíe Smazáno : HKLM\SOFTWARE\6ec0cd88-e2d5-4a46-bcb7-b11a17d0b513
Klíe Smazáno : HKLM\SOFTWARE\8ce58d4b-7ee4-1c8f-21e9-cfcc907b7d27
Klíe Smazáno : HKLM\SOFTWARE\e674c1c2-e259-45b4-a028-f16127d9d35a
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{ec9c17f1}
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{58FDA6AF-67D8-4198-B7CD-94B17532C8D5}
Klíe Smazáno : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : HKLM\SOFTWARE\Classes\CLSID\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Klíe Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{8FB1A663-2820-468B-95C4-5060A4C5F413}
Klíe Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{6580C08D-FED3-41DE-95A2-EC319EECB9DB}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E0E899AB-F487-11D5-8D29-0050BA6940E3}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Hodnota Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [{E0E899AB-F487-11D5-8D29-0050BA6940E3}]
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\CLSID\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{03C0AC00-86DE-4B55-81BA-2E7CD61C51B1}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{861b07aa-0b35-4a2e-8b19-e023bc8faade}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9705c6b5-ee6e-4977-993d-f01a303bac28}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bab6bf6f-54b4-483f-a8d0-f7d0a7885b52}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{4974BDCC-0FB7-4C0B-A058-AC6108A881C9}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíe Smazáno : HKCU\Software\GlobalUpdate
Klíe Smazáno : HKCU\Software\InstalledBrowserExtensions
Klíe Smazáno : HKCU\Software\YTDownloader
Klíe Smazáno : HKCU\Software\CinemaP-1.8cV31.03
Klíe Smazáno : HKCU\Software\Ge-Force
Klíe Smazáno : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíe Smazáno : HKCU\Software\AppDataLow\Software\Crossrider
Klíe Smazáno : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
Klíe Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíe Smazáno : HKLM\SOFTWARE\InstalledBrowserExtensions
Klíe Smazáno : HKLM\SOFTWARE\Sense
Klíe Smazáno : HKLM\SOFTWARE\ShopperPro
Klíe Smazáno : HKLM\SOFTWARE\Trymedia Systems
Klíe Smazáno : HKLM\SOFTWARE\YTDownloader
Klíe Smazáno : HKLM\SOFTWARE\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}
Klíe Smazáno : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Klíe Smazáno : HKLM\SOFTWARE\omniboxesSoftware
Klíe Smazáno : HKLM\SOFTWARE\CinemaP-1.8cV31.03
Klíe Smazáno : HKLM\SOFTWARE\Ge-Force
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4820778D-AB0D-6D18-C316-52A6A0E1D507}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Sense
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShopperPro
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\YTDownloader
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\omniboxes uninstall
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B696F285-F54E-2524-58B1-E06A70ABE6BE}
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaP-1.8cV31.03
Klíe Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Ge-Force
Klíe Smazáno : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Klíe Smazáno : [x64] HKLM\SOFTWARE\ShopperPro
Klíe Smazáno : [x64] HKLM\SOFTWARE\YTDownloader
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0CFE535C35F99574E8340BFA75BF92C2
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0E12F736682067FDE4D1158D5940A82E
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1A24B5BB8521B03E0C8D908F5ABC0AE6
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\261F213D1F55267499B1F87D0CC3BCF7
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2B0D56C4F4C46D844A57FFED6F0D2852
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\49D4375FE41653242AEA4C969E4E65E0
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AA0923513360135B272E8289C5F13FA
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6F7467AF8F29C134CBBAB394ECCFDE96
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\741B4ADF27276464790022C965AB6DA8
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7DE196B10195F5647A2B21B761F3DE01
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\922525DCC5199162F8935747CA3D8E59
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9D4F5849367142E4685ED8C25E44C5ED
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5875B04372C19545BEB90D4D606C472
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A876D9E80B896EC44A8620248CC79296
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B66FFAB725B92594C986DE826A867888
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BCDA179D619B91648538E3394CAC94CC
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D677B1A9671D4D4004F6F2A4469E86EA
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DD1402A9DD4215A43ABDE169A41AFA0E
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E36E114A0EAD2AD46B381D23AD69CDDF
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EF8E618DB3AEDFBB384561B5C548F65E
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Klíe Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\F928123A039649549966D4C29D35B1C9

***** [ Prohlížeee ] *****

-\\ Internet Explorer v11.0.9600.17689

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v

[C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : aaaaojmikegpiepcfdkkjaplodkpfmlo
[C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : hxxp://www.mystartsearch.com/?type=hp&ts=14278 ... 7_4ADAFA6D
[C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Default_Search_Provider_Data] : {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMarginParameter}{google:contextualSearchVersion}ie={inputEncoding}",
"usage_count": 0
}
},
"extensions": {
"known_disabled": null,
"settings": {
"aaaaojmikegpiepcfdkkjaplodkpfmlo": {
"active_permissions": {
"api": [ "bookmarks", "contextMenus", "cookies", "geolocation", "history", "idle", "management", "notifications", "plugin", "tabs", "unlimitedStorage" ],
"explicit_host": [ "chrome://favicon/*", "hxxp://*/*", "hxxps://*/*" ],
"scriptable_host": [ "*://*.ask.com/

*************************

AdwCleaner[R1].txt - [24964 bytu] - [01/04/2015 14:03:17]
AdwCleaner[S1].txt - [22535 bytu] - [01/04/2015 14:08:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [22594 bytu] ##########

#5 Příspěvek od **altrok** » 01 dub 2015 17:07

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

jmeno1 · #6 Příspěvek od **jmeno1** » 01 dub 2015 17:24

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by Keijei (administrator) on KEIJEI-PC on 01-04-2015 18:23:45
Running from C:\Users\Keijei\Desktop\Cisteni
Loaded Profiles: Keijei (Available profiles: Keijei)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7Debug\MDM.EXE
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\HelperService.exe
(pdfforge GmbH) C:\Program Files (x86)\PDF Architect\ConversionService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\mDNSResponder.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtMon.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(DT Soft Ltd) C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe
() C:\Windows\System32\spool\drivers\x64\3\WrtProc.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\RIMBBLaunchAgent.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research in Motion\Tunnel Manager\PeerManager.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Research In Motion Limited) C:\Program Files (x86)\Common Files\Research in Motion\USB Drivers\BbDevMgr.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(Microsoft Corporation) C:\Windows\Temp\KMSAct\cscript.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [CanonSolutionMenu] => C:\Program Files (x86)\Canon\SolutionMenu\CNSLMAIN.exe [644696 2007-05-14] (CANON INC.)
HKLM\...\Run: [WrtMon.exe] => C:\Windows\system32\spool\drivers\x64\3\WrtMon.exe [20480 2006-09-20] ()
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [ATICustomerCare] => C:\Program Files (x86)\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-03-04] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [RIMBBLaunchAgent.exe] => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe [443408 2013-09-09] (Research In Motion Limited)
HKLM-x32\...\Run: [RIM PeerManager] => C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\PeerManager.exe [4465152 2013-11-28] (Research In Motion Limited)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc.)
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [4527424 2011-08-17] (DT Soft Ltd)
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {0e201b14-9580-11e3-9c7c-6cf049ef00a6} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\start.exe
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {f175effa-bde3-11df-84f5-806e6f6e6963} - D:\Run.exe
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\AvastSS.scr
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Akcelerátor spuštění AutoCADu.lnk
ShortcutTarget: Akcelerátor spuštění AutoCADu.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\acstart17.exe (Autodesk, Inc)
ShellIconOverlayIdentifiers-x32: [Správa překryvné ikony digitálních podpisů AutoCADu ] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\SysWOW64\AcSignIcon.dll (Autodesk)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
URLSearchHook: HKU\S-1-5-21-479058040-2999119020-3636915712-1000 - (No Name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-479058040-2999119020-3636915712-1000 -> {34A75CB9-DAAC-45e6-8449-AD169B8A7782} URL = http://uk.search.yahoo.com/search?p={se ... &type=IEBD
SearchScopes: HKU\S-1-5-21-479058040-2999119020-3636915712-1000 -> {516D2A07-A579-4b96-800F-EF22B3FB39F0} URL = http://www.google.com/custom?client=pub ... earchTerms}
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: PDF Architect Helper -> {3A2D5EBA-F86D-4BD3-A177-019765996711} -> C:\Program Files (x86)\PDF Architect\PDFIEHelper.dll [2013-04-08] (pdfforge GmbH)
BHO-x32: Air Globe 1.0.0.7 -> {4c54ce3d-6b7d-4f21-9e69-200632a98540} -> C:\Program Files (x86)\Air Globe\AirGlobebho.dll [2015-03-31] (Air Globe)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-25] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-25] (Oracle Corporation)
DPF: HKLM {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/s ... wflash.cab
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_16_0_0_305.dll [2015-02-05] ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_16_0_0_305.dll [2015-02-05] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-25] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @RIM.com/WebSLLauncher,version=1.0 -> C:\Program Files (x86)\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll [2013-11-13] ()
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-479058040-2999119020-3636915712-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Keijei\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-479058040-2999119020-3636915712-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Keijei\AppData\Local\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin HKU\S-1-5-21-479058040-2999119020-3636915712-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Keijei\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-05-21] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-479058040-2999119020-3636915712-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-12-27] ()
FF HKLM-x32\...\Firefox\Extensions: [FFPDFArchitectConverter@pdfarchitect.com] - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt
FF Extension: PDF Architect Converter For Firefox - C:\Program Files (x86)\PDF Architect\FFPDFArchitectExt [2013-06-03]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Unity Player) - C:\Users\Keijei\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
CHR Plugin: (Google Update) - C:\Users\Keijei\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Profile: C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default
StartMenuInternet: Google Chrome - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\chrome.exe

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
S3 Autodesk Licensing Service; C:\Program Files (x86)\Common Files\Autodesk Shared\Service\AdskScSrv.exe [77944 2013-05-25] (Autodesk)
R3 BlackBerry Device Manager; C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\BbDevMgr.exe [585728 2013-09-09] (Research In Motion Limited) [File not signed]
S3 DAUpdaterSvc; E:\Games\Dragon Age\bin_ship\DAUpdaterSvc.Service.exe [25832 2009-07-26] (BioWare)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
R2 PDF Architect Helper Service; C:\Program Files (x86)\PDF Architect\HelperService.exe [1320496 2013-04-08] (pdfforge GmbH)
R2 PDF Architect Service; C:\Program Files (x86)\PDF Architect\ConversionService.exe [799280 2013-04-08] (pdfforge GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-06-12] ()
R2 RIM MDNS; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\mDNSResponder.exe [389632 2013-11-28] (Apple Inc.) [File not signed]
S2 RIM Tunnel Service; C:\Program Files (x86)\Common Files\Research In Motion\Tunnel Manager\tunmgr.exe [1304064 2013-11-28] (Research In Motion Limited) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-22] ()
S2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [310984 2011-07-30] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [271424 2011-10-29] (DT Soft Ltd)
R3 ElbyCDFL; C:\Windows\System32\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40648 2007-02-16] (SlySoft, Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [42696 2011-07-30] ()
S3 RimUsb; C:\Windows\System32\Drivers\RimUsb_AMD64.sys [79872 2013-06-27] (Research In Motion Limited)
S3 rimvndis; C:\Windows\System32\Drivers\rimvndis6_AMD64.sys [17920 2013-11-28] (Research in Motion Limited)
R3 RimVSerPort; C:\Windows\System32\DRIVERS\RimSerial_AMD64.sys [44544 2012-12-10] (Research in Motion Ltd)
S3 usbrndis6; C:\Windows\System32\DRIVERS\usb80236.sys [19968 2013-02-12] (Microsoft Corporation)
S3 cpuz130; \??\C:\Users\Keijei\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)

==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-01 18:23 - 2015-04-01 18:23 - 00000000 ____D () C:\FRST
2015-04-01 14:03 - 2015-04-01 14:08 - 00000000 ____D () C:\AdwCleaner
2015-04-01 14:02 - 2015-04-01 18:23 - 00000000 ____D () C:\Users\Keijei\Desktop\Cisteni
2015-04-01 07:10 - 2015-04-01 07:10 - 00000566 _____ () C:\Windows\PFRO.log
2015-03-31 23:55 - 2015-03-31 23:55 - 01222144 _____ () C:\Users\Keijei\Downloads\RSITx64.exe
2015-03-31 23:55 - 2015-03-31 23:55 - 00000000 ____D () C:\rsit
2015-03-31 18:16 - 2015-04-01 14:09 - 00000168 _____ () C:\Windows\setupact.log
2015-03-31 18:16 - 2015-03-31 18:16 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-31 18:12 - 2015-03-31 18:12 - 00000000 ____D () C:\Windows\pss
2015-03-31 18:10 - 2015-03-31 18:10 - 00000000 __SHD () C:\Users\Keijei\AppData\Local\EmieBrowserModeList
2015-03-31 18:07 - 2015-04-01 14:00 - 00000004 _____ () C:\Windows\SysWOW64\029B560A371F4E00AB32838EBC01B9E7
2015-03-31 18:05 - 2015-03-31 18:05 - 00000000 ____D () C:\ProgramData\egbolkfehgdfokgelfecknpajiofdldk
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\SoftwarePlus
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\Raven Internet Marketing Tools
2015-03-31 18:03 - 2015-04-01 18:05 - 00001688 _____ () C:\Windows\Tasks\GHXZTJN.job
2015-03-31 18:03 - 2015-03-31 18:05 - 01959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-31 18:03 - 2015-03-31 18:05 - 00004718 _____ () C:\Windows\System32\Tasks\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\Air Globe
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\hlmkhkcohdiiinlliooaohkcbknjcekp
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\14987379731272139608
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637
2015-03-31 18:02 - 2015-03-31 18:07 - 00000000 ____D () C:\ProgramData\{bc9b538a-dd37-8840-bc9b-b538add34e2b}
2015-03-31 18:01 - 2015-03-31 18:07 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:05 - 00004240 _____ () C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_333530313136313536312d575b323478415a45375a456c
2015-03-31 18:01 - 2015-03-31 18:01 - 00003028 _____ () C:\Windows\System32\Tasks\UNELEVATE_27624
2015-03-31 18:01 - 2015-03-31 18:01 - 00003028 _____ () C:\Windows\System32\Tasks\UNELEVATE_27572
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\QuickScan
2015-03-31 18:00 - 2015-03-31 18:10 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\Opera Software
2015-03-31 18:00 - 2015-03-31 18:10 - 00000000 ____D () C:\Users\Keijei\AppData\Local\Opera Software
2015-03-31 18:00 - 2015-03-31 18:00 - 00000000 ____D () C:\Users\Keijei\AppData\Local\CrashRpt
2015-03-31 17:59 - 2015-03-31 17:59 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-03-31 17:59 - 2015-03-31 17:59 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-03-31 17:58 - 2015-04-01 17:59 - 00001342 _____ () C:\Windows\Tasks\VSINHF.job
2015-03-31 17:58 - 2015-03-31 17:59 - 01959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe
2015-03-31 17:58 - 2015-03-31 17:59 - 00004372 _____ () C:\Windows\System32\Tasks\VSINHF
2015-03-31 17:58 - 2015-03-31 17:58 - 00000000 ____D () C:\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e
2015-03-31 17:54 - 2015-03-31 17:55 - 03695984 _____ () C:\Users\Keijei\Downloads\pngplt_std.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN
2015-03-13 22:28 - 2015-03-13 22:28 - 00000000 ____D () C:\Users\Keijei\AppData\Local\Smellyriver
2015-03-11 17:40 - 2015-02-20 06:41 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-03-11 17:40 - 2015-02-20 06:40 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-03-11 17:40 - 2015-02-20 06:40 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-03-11 17:40 - 2015-02-20 06:40 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-03-11 17:40 - 2015-02-20 06:13 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-03-11 17:40 - 2015-02-20 06:13 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-03-11 17:40 - 2015-02-20 06:13 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-03-11 17:40 - 2015-02-20 06:12 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-03-11 17:40 - 2015-02-20 05:29 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-03-11 17:40 - 2015-02-20 05:09 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-03-11 17:40 - 2015-02-03 05:34 - 05554104 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-03-11 17:40 - 2015-02-03 05:34 - 00693176 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-03-11 17:40 - 2015-02-03 05:34 - 00094656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mountmgr.sys
2015-03-11 17:40 - 2015-02-03 05:33 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-03-11 17:40 - 2015-02-03 05:31 - 14632960 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 04121600 _____ (Microsoft Corporation) C:\Windows\system32\mf.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 01574400 _____ (Microsoft Corporation) C:\Windows\system32\quartz.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00782848 _____ (Microsoft Corporation) C:\Windows\system32\wmdrmsdk.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00641024 _____ (Microsoft Corporation) C:\Windows\system32\msscp.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00500224 _____ (Microsoft Corporation) C:\Windows\system32\AUDIOKSE.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00432128 _____ (Microsoft Corporation) C:\Windows\system32\mfplat.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00325632 _____ (Microsoft Corporation) C:\Windows\system32\msnetobj.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00206848 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\pcasvc.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\pcadm.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\msmmsp.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-03-11 17:40 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-03-11 17:40 - 2015-02-03 05:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-03-11 17:40 - 2015-02-03 05:30 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 01202176 _____ (Microsoft Corporation) C:\Windows\system32\drmv2clt.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 01069056 _____ (Microsoft Corporation) C:\Windows\system32\cryptui.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00842240 _____ (Microsoft Corporation) C:\Windows\system32\blackbox.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00680960 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00631808 _____ (Microsoft Corporation) C:\Windows\system32\evr.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00497664 _____ (Microsoft Corporation) C:\Windows\system32\drmmgrtn.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00296448 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00284672 _____ (Microsoft Corporation) C:\Windows\system32\EncDump.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00187904 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00146944 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00126464 _____ (Microsoft Corporation) C:\Windows\system32\audiodg.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00082432 _____ (Microsoft Corporation) C:\Windows\system32\cryptsp.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00055808 _____ (Microsoft Corporation) C:\Windows\system32\rrinstaller.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-03-11 17:40 - 2015-02-03 05:30 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\mfpmp.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00011264 _____ (Microsoft Corporation) C:\Windows\system32\pcawrk.exe
2015-03-11 17:40 - 2015-02-03 05:30 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\pcalua.exe
2015-03-11 17:40 - 2015-02-03 05:29 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\pcaevts.dll
2015-03-11 17:40 - 2015-02-03 05:28 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-03-11 17:40 - 2015-02-03 05:28 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\mferror.dll
2015-03-11 17:40 - 2015-02-03 05:19 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\PEAuth.sys
2015-03-11 17:40 - 2015-02-03 05:16 - 03973048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-03-11 17:40 - 2015-02-03 05:16 - 03917760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-03-11 17:40 - 2015-02-03 05:12 - 11411968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 03209728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 01329664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 01005056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptui.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00988160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmv2clt.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00744960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\blackbox.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00617984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmdrmsdk.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msscp.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00489984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\evr.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00442880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AUDIOKSE.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00406016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\drmmgrtn.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00374784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00354816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfplat.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00265216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msnetobj.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00195584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00103424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfps.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00081408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsp.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-03-11 17:40 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-03-11 17:40 - 2015-02-03 05:12 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-03-11 17:40 - 2015-02-03 05:11 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-03-11 17:40 - 2015-02-03 05:11 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rrinstaller.exe
2015-03-11 17:40 - 2015-02-03 05:11 - 00023040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfpmp.exe
2015-03-11 17:40 - 2015-02-03 05:09 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mferror.dll
2015-03-11 17:40 - 2015-02-03 05:08 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-03-11 17:40 - 2015-02-03 04:32 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-03-11 17:40 - 2014-11-01 00:24 - 00619056 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2015-03-11 17:39 - 2015-03-06 07:56 - 00155576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-03-11 17:39 - 2015-03-06 07:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-03-11 17:39 - 2015-03-06 07:42 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-03-11 17:39 - 2015-03-06 07:42 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-03-11 17:39 - 2015-03-06 07:41 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-03-11 17:39 - 2015-03-06 07:41 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-03-11 17:39 - 2015-03-06 07:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-03-11 17:39 - 2015-03-06 07:38 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-03-11 17:39 - 2015-03-06 07:36 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-03-11 17:39 - 2015-03-06 07:10 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-03-11 17:39 - 2015-03-06 07:09 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-03-11 17:39 - 2015-03-06 07:09 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-03-11 17:39 - 2015-03-06 07:07 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-03-11 17:39 - 2015-03-06 07:07 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-03-11 17:39 - 2015-03-06 07:06 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-03-11 17:39 - 2015-02-26 05:25 - 03204096 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-03-11 17:39 - 2015-02-24 05:15 - 00389800 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-03-11 17:39 - 2015-02-24 04:32 - 00342696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-03-11 17:39 - 2015-02-21 03:16 - 25021440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-03-11 17:39 - 2015-02-21 02:41 - 12827648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-03-11 17:39 - 2015-02-21 02:27 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-03-11 17:39 - 2015-02-21 02:27 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-03-11 17:39 - 2015-02-21 02:25 - 19720192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-03-11 17:39 - 2015-02-21 01:58 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-03-11 17:39 - 2015-02-21 01:32 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-03-11 17:39 - 2015-02-20 05:06 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-03-11 17:39 - 2015-02-20 05:05 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-03-11 17:39 - 2015-02-20 04:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-03-11 17:39 - 2015-02-20 04:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-03-11 17:39 - 2015-02-20 04:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-03-11 17:39 - 2015-02-20 04:48 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-03-11 17:39 - 2015-02-20 04:47 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-03-11 17:39 - 2015-02-20 04:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-03-11 17:39 - 2015-02-20 04:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-03-11 17:39 - 2015-02-20 04:36 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-03-11 17:39 - 2015-02-20 04:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-03-11 17:39 - 2015-02-20 04:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-03-11 17:39 - 2015-02-20 04:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-03-11 17:39 - 2015-02-20 04:32 - 06035456 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-03-11 17:39 - 2015-02-20 04:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-03-11 17:39 - 2015-02-20 04:22 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-03-11 17:39 - 2015-02-20 04:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-03-11 17:39 - 2015-02-20 04:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-03-11 17:39 - 2015-02-20 04:09 - 00503296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-03-11 17:39 - 2015-02-20 04:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-03-11 17:39 - 2015-02-20 04:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-03-11 17:39 - 2015-02-20 04:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-03-11 17:39 - 2015-02-20 04:06 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-03-11 17:39 - 2015-02-20 04:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-03-11 17:39 - 2015-02-20 04:03 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-03-11 17:39 - 2015-02-20 04:01 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-03-11 17:39 - 2015-02-20 04:00 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-03-11 17:39 - 2015-02-20 03:58 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-03-11 17:39 - 2015-02-20 03:56 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-03-11 17:39 - 2015-02-20 03:56 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-03-11 17:39 - 2015-02-20 03:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-03-11 17:39 - 2015-02-20 03:49 - 00718848 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-03-11 17:39 - 2015-02-20 03:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-03-11 17:39 - 2015-02-20 03:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-03-11 17:39 - 2015-02-20 03:43 - 14398976 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-03-11 17:39 - 2015-02-20 03:41 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-03-11 17:39 - 2015-02-20 03:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-03-11 17:39 - 2015-02-20 03:30 - 04300288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-03-11 17:39 - 2015-02-20 03:28 - 02358784 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-03-11 17:39 - 2015-02-20 03:24 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-03-11 17:39 - 2015-02-20 03:24 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-03-11 17:39 - 2015-02-20 03:23 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-03-11 17:39 - 2015-02-20 03:16 - 01548288 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-03-11 17:39 - 2015-02-20 03:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-03-11 17:39 - 2015-02-20 03:01 - 01888256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-03-11 17:39 - 2015-02-20 02:57 - 01311232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-03-11 17:39 - 2015-02-20 02:55 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-03-11 17:39 - 2015-02-13 07:26 - 12875264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2015-03-11 17:39 - 2015-02-13 07:22 - 14177280 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2015-03-11 17:39 - 2015-02-04 05:16 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2015-03-11 17:39 - 2015-02-04 04:54 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2015-03-11 17:39 - 2015-02-03 05:31 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2015-03-11 17:39 - 2015-02-03 05:31 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2015-03-11 17:39 - 2015-02-03 05:12 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2015-03-11 17:39 - 2015-02-03 05:12 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ubpm.dll
2015-03-11 17:39 - 2015-01-31 01:56 - 00459336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-03-11 17:39 - 2015-01-17 04:48 - 01067520 _____ (Microsoft Corporation) C:\Windows\system32\msctf.dll
2015-03-11 17:39 - 2015-01-17 04:30 - 00828928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msctf.dll
2015-03-06 23:32 - 2015-03-06 23:33 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\World of Tanks
2015-03-06 23:32 - 2015-03-06 23:32 - 00000000 ____D () C:\Games
2015-03-06 21:01 - 2015-03-06 21:02 - 01219386 _____ () C:\Users\Keijei\Downloads\TOP_GamU_-E-25.rar
2015-03-06 20:21 - 2015-03-06 21:10 - 00000083 _____ () C:\Users\Keijei\AppData\Local\WOTStarter.ini
2015-03-06 20:17 - 2015-03-06 20:18 - 23059687 _____ () C:\Users\Keijei\Downloads\Mody_9.6+WOTstarter.rar
2015-03-06 17:44 - 2015-03-06 17:44 - 00066409 _____ () C:\Users\Keijei\Downloads\battle_assistant_0.9.6_1.2.5.zip

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-01 17:55 - 2013-03-14 07:38 - 00000914 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-01 17:30 - 2010-09-11 18:13 - 00000966 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000UA.job
2015-04-01 17:13 - 2013-05-11 20:36 - 01511651 _____ () C:\Windows\WindowsUpdate.log
2015-04-01 14:16 - 2009-07-14 06:45 - 00023264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-01 14:16 - 2009-07-14 06:45 - 00023264 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-01 14:15 - 2009-07-14 17:18 - 00668882 _____ () C:\Windows\system32\perfh005.dat
2015-04-01 14:15 - 2009-07-14 17:18 - 00141542 _____ () C:\Windows\system32\perfc005.dat
2015-04-01 14:15 - 2009-07-14 07:13 - 01584626 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-01 14:09 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-01 14:08 - 2011-05-26 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 2 (CZ)
2015-04-01 14:08 - 2010-09-11 18:15 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-04-01 14:08 - 2010-09-11 17:38 - 00000971 _____ () C:\Users\Keijei\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-03-31 23:56 - 2014-02-11 16:02 - 00000000 ____D () C:\Program Files\trend micro
2015-03-31 23:41 - 2011-07-14 06:37 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\Media Player Classic
2015-03-31 18:10 - 2014-03-12 20:26 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin
2015-03-31 18:10 - 2013-07-16 22:24 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\TS3Client
2015-03-31 18:10 - 2012-10-03 13:11 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-03-31 18:10 - 2011-10-29 07:39 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\DAEMON Tools Pro
2015-03-31 18:04 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\System
2015-03-31 18:03 - 2013-01-24 20:36 - 00000000 ____D () C:\Program Files (x86)\AMD APP
2015-03-31 18:03 - 2011-06-18 06:39 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-03-31 17:55 - 2014-03-12 20:25 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\Downloaded Installations
2015-03-22 01:18 - 2014-06-23 22:49 - 00000000 ____D () C:\Users\Keijei\Documents\Dungeon Siege
2015-03-21 14:30 - 2010-09-11 18:13 - 00000914 _____ () C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000Core.job
2015-03-15 02:28 - 2013-07-16 22:22 - 00000000 ____D () C:\Program Files\TeamSpeak 3 Client
2015-03-13 19:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2015-03-12 07:29 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-03-12 07:29 - 2009-07-14 06:45 - 00470816 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-03-12 07:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2015-03-12 07:27 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism
2015-03-11 19:53 - 2013-08-14 22:19 - 00000000 ____D () C:\Windows\system32\MRT
2015-03-11 19:50 - 2010-09-29 06:51 - 122905848 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-03-07 19:21 - 2010-11-23 21:05 - 00000000 ____D () C:\ProgramData\DVD Shrink
2015-03-07 07:42 - 2010-09-11 19:18 - 00000000 ____D () C:\Users\Keijei\Desktop\Games
2015-03-06 22:24 - 2015-02-24 18:21 - 00000150 _____ () C:\Users\Keijei\Desktop\skvido.txt

==================== Files in the root of some directories =======

2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 1959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2012-03-10 09:24 - 2012-03-21 22:02 - 0000216 _____ () C:\Users\Keijei\AppData\Roaming\trueburner.ini
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-31 17:58 - 2015-03-31 17:59 - 1959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe
2012-06-24 11:02 - 2014-02-24 19:06 - 0001057 _____ () C:\Users\Keijei\AppData\Roaming\vso_ts_preview.xml
2015-03-06 20:21 - 2015-03-06 21:10 - 0000083 _____ () C:\Users\Keijei\AppData\Local\WOTStarter.ini
2010-01-01 00:08 - 2010-01-01 00:08 - 0000041 ___SH () C:\ProgramData\.zreglib

Some content of TEMP:
====================
C:\Users\Keijei\AppData\Local\Temp\clrvu.exe
C:\Users\Keijei\AppData\Local\Temp\Download.exe
C:\Users\Keijei\AppData\Local\Temp\ins.exe
C:\Users\Keijei\AppData\Local\Temp\Quarantine.exe
C:\Users\Keijei\AppData\Local\Temp\sqlite3.dll

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-03-29 14:40

==================== End Of Log ============================

http://ulozto.cz/xZXZEgnZ/addition-txt

#7 Příspěvek od **altrok** » 02 dub 2015 13:12

Je tento OS legalni?

Defender na sedmickach zajistuje pouze funkci antispywaru, takze nainstalujte nejaky antivir.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [4527424 2011-08-17] (DT Soft Ltd)
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {0e201b14-9580-11e3-9c7c-6cf049ef00a6} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\start.exe
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {f175effa-bde3-11df-84f5-806e6f6e6963} - D:\Run.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

URLSearchHook: HKU\S-1-5-21-479058040-2999119020-3636915712-1000 - (No Name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Native Client) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Users\Keijei\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

S3 cpuz130; \??\C:\Users\Keijei\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

2015-04-01 14:03 - 2015-04-01 14:08 - 00000000 ____D () C:\AdwCleaner
2015-04-01 07:10 - 2015-04-01 07:10 - 00000566 _____ () C:\Windows\PFRO.log
2015-03-31 23:55 - 2015-03-31 23:55 - 01222144 _____ () C:\Users\Keijei\Downloads\RSITx64.exe
2015-03-31 23:55 - 2015-03-31 23:55 - 00000000 ____D () C:\rsit
2015-03-31 18:16 - 2015-04-01 14:09 - 00000168 _____ () C:\Windows\setupact.log
2015-03-31 18:16 - 2015-03-31 18:16 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-31 18:05 - 2015-03-31 18:05 - 00000000 ____D () C:\ProgramData\egbolkfehgdfokgelfecknpajiofdldk
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\SoftwarePlus
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\Raven Internet Marketing Tools
2015-03-31 18:03 - 2015-04-01 18:05 - 00001688 _____ () C:\Windows\Tasks\GHXZTJN.job
2015-03-31 18:03 - 2015-03-31 18:05 - 01959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-31 18:03 - 2015-03-31 18:05 - 00004718 _____ () C:\Windows\System32\Tasks\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\Air Globe
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\hlmkhkcohdiiinlliooaohkcbknjcekp
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\14987379731272139608
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637
2015-03-31 18:02 - 2015-03-31 18:07 - 00000000 ____D () C:\ProgramData\{bc9b538a-dd37-8840-bc9b-b538add34e2b}
2015-03-31 18:01 - 2015-03-31 18:07 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\QuickScan
2015-03-31 17:58 - 2015-04-01 17:59 - 00001342 _____ () C:\Windows\Tasks\VSINHF.job
2015-03-31 17:58 - 2015-03-31 17:59 - 01959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe
2015-03-31 17:58 - 2015-03-31 17:59 - 00004372 _____ () C:\Windows\System32\Tasks\VSINHF
2015-03-31 17:58 - 2015-03-31 17:58 - 00000000 ____D () C:\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e
2015-03-31 17:54 - 2015-03-31 17:55 - 03695984 _____ () C:\Users\Keijei\Downloads\pngplt_std.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN

2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 1959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-31 17:58 - 2015-03-31 17:59 - 1959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe

Task: {086B8630-6EF0-4098-947F-21BABFEA7E21} - System32\Tasks\{D67AC97C-32B1-4CE2-A797-287BCDDE679C} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {0C90D23F-9A5C-444B-9985-BF55C56AFAAC} - System32\Tasks\{4DD8A26B-863D-4425-99B6-64EB93ED514D} => E:\Games\Serious_Sam_2\Bin\SeriousSam.exe
Task: {1040A4B2-8902-49E0-A7BC-64F9FB1544F4} - System32\Tasks\{928EB37F-17FD-4229-A76D-8472E9DB0FDC} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {34775AAB-4035-403F-80B7-EA0FC62623D1} - System32\Tasks\{83F36DF2-CE9C-457A-BE52-2A2B9B33A4B4} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {4CC93209-3553-40A8-9509-BD9C5CDCEBE3} - System32\Tasks\{B26E84B6-C9C9-486A-A723-93711726C765} => pcalua.exe -a E:\Games\Borderlands\Borderlands.exe -d E:\Games\Borderlands
Task: {53E85752-F2E9-493B-981A-BE964955B915} - System32\Tasks\{E3475693-6026-4CBA-B94F-4A38E4337BC3} => E:\Games\Dungeon_Siege\DungeonSiege.exe [2010-12-14] (Gas Powered Games)
Task: {6FC2CD53-4D46-42F6-9CE0-5E353343E95E} - System32\Tasks\GHXZTJN => C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe [2015-03-31] (Sense+) <==== ATTENTION
Task: {8DA992CD-6E04-4688-B962-E08A425288CC} - System32\Tasks\{B4DD97F6-4F68-48CC-9070-41F6C149F53C} => E:\AutoCAD_07\acad.exe [2006-03-05] (Autodesk, Inc.)
Task: {8F5B3DA9-B57E-4BA0-8189-79C4DCD5B589} - System32\Tasks\{61A994FB-7624-414E-93F9-2279563C5EE3} => E:\Games\Dungeon_Siege\DungeonSiege.exe [2010-12-14] (Gas Powered Games)
Task: {ABC49780-8AC4-4513-8814-451E9B5F468F} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B4B9FEBD-401F-4DF1-8445-ADA6112E725E} - System32\Tasks\VSINHF => C:\Users\Keijei\AppData\Roaming\VSINHF.exe [2015-03-31] (Cinema PlusV31.03) <==== ATTENTION
Task: {BF977471-6119-4493-AF6E-22BD6BE9BFE6} - System32\Tasks\UNELEVATE_27624 => .\JSDriver\1.39.1.10466\jsdrv.exe
Task: {D3C43B75-C64C-4773-B4F1-0586A7D8FBC3} - System32\Tasks\UNELEVATE_27572 => .\JSDriver\1.39.1.10466\jsdrv.exe
Task: {DB5C022F-CE1E-47C2-B4A0-A6BCC2328C55} - System32\Tasks\{9F39D94A-415F-43C6-801C-6F19215B98F7} => E:\Games\Serious_Sam_2\Bin\SeriousSam.exe
Task: {EA796769-B491-4FFD-B182-30342DC1D819} - System32\Tasks\KMS Activation for Office => C:\Windows\KMSAct.exe [2010-07-07] ()
Task: {EDF6D077-F5AB-4DD9-A992-3F892C4602DC} - System32\Tasks\{25A4AF55-6108-4DEA-A09A-CA02F382C58C} => E:\Games\AoE_III\age3.exe [2009-06-11] (Ensemble Studios)
Task: {F099AA52-9FE5-4FB7-8A53-18A7F57E6487} - System32\Tasks\SPBIW_UpdateTask_Time_333530313136313536312d575b323478415a45375a456c => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {F5E6ADFF-E880-4C0E-9543-1F9A02F23EAB} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
C:\Windows\KMSAct.exe
Task: C:\Windows\Tasks\GHXZTJN.job => C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000Core.job => C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000UA.job => C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\VSINHF.job => C:\Users\Keijei\AppData\Roaming\VSINHF.exe <==== ATTENTION

AlternateDataStreams: C:\Windows:AAF9B14AAE222137
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
Hosts:
EmptyTemp:
End

jmeno1 · #8 Příspěvek od **jmeno1** » 02 dub 2015 14:29

Ano, systém je legální.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 11-03-2015
Ran by Keijei at 2015-04-02 15:27:08 Run:1
Running from C:\Users\Keijei\Desktop\Cisteni
Loaded Profiles: Keijei (Available profiles: Keijei)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:
CreateRestorePoint:
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-01-03] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe [4527424 2011-08-17] (DT Soft Ltd)
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {0e201b14-9580-11e3-9c7c-6cf049ef00a6} - C:\Windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL H:\start.exe
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\...\MountPoints2: {f175effa-bde3-11df-84f5-806e6f6e6963} - D:\Run.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

URLSearchHook: HKU\S-1-5-21-479058040-2999119020-3636915712-1000 - (No Name) - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - No File
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Plugin: (Native Client) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll No File
CHR Plugin: (Shockwave Flash) - C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\gcswf32.dll No File
CHR Plugin: (Java(TM) Platform SE 6 U31) - C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll No File
CHR Plugin: (Google Update) - C:\Users\Keijei\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File

S3 cpuz130; \??\C:\Users\Keijei\AppData\Local\Temp\cpuz130\cpuz_x64.sys [X]

2015-04-01 14:03 - 2015-04-01 14:08 - 00000000 ____D () C:\AdwCleaner
2015-04-01 07:10 - 2015-04-01 07:10 - 00000566 _____ () C:\Windows\PFRO.log
2015-03-31 23:55 - 2015-03-31 23:55 - 01222144 _____ () C:\Users\Keijei\Downloads\RSITx64.exe
2015-03-31 23:55 - 2015-03-31 23:55 - 00000000 ____D () C:\rsit
2015-03-31 18:16 - 2015-04-01 14:09 - 00000168 _____ () C:\Windows\setupact.log
2015-03-31 18:16 - 2015-03-31 18:16 - 00000000 _____ () C:\Windows\setuperr.log
2015-03-31 18:05 - 2015-03-31 18:05 - 00000000 ____D () C:\ProgramData\egbolkfehgdfokgelfecknpajiofdldk
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\SoftwarePlus
2015-03-31 18:04 - 2015-03-31 18:04 - 00000000 ____D () C:\Program Files (x86)\Raven Internet Marketing Tools
2015-03-31 18:03 - 2015-04-01 18:05 - 00001688 _____ () C:\Windows\Tasks\GHXZTJN.job
2015-03-31 18:03 - 2015-03-31 18:05 - 01959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-31 18:03 - 2015-03-31 18:05 - 00004718 _____ () C:\Windows\System32\Tasks\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\Air Globe
2015-03-31 18:03 - 2015-03-31 18:05 - 00000000 ____D () C:\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\hlmkhkcohdiiinlliooaohkcbknjcekp
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\ProgramData\14987379731272139608
2015-03-31 18:03 - 2015-03-31 18:03 - 00000000 ____D () C:\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637
2015-03-31 18:02 - 2015-03-31 18:07 - 00000000 ____D () C:\ProgramData\{bc9b538a-dd37-8840-bc9b-b538add34e2b}
2015-03-31 18:01 - 2015-03-31 18:07 - 00000000 ____D () C:\Program Files\Common Files\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Public\Documents\ShopperPro
2015-03-31 18:01 - 2015-03-31 18:01 - 00000000 ____D () C:\Users\Keijei\AppData\Roaming\QuickScan
2015-03-31 17:58 - 2015-04-01 17:59 - 00001342 _____ () C:\Windows\Tasks\VSINHF.job
2015-03-31 17:58 - 2015-03-31 17:59 - 01959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe
2015-03-31 17:58 - 2015-03-31 17:59 - 00004372 _____ () C:\Windows\System32\Tasks\VSINHF
2015-03-31 17:58 - 2015-03-31 17:58 - 00000000 ____D () C:\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e
2015-03-31 17:54 - 2015-03-31 17:55 - 03695984 _____ () C:\Users\Keijei\Downloads\pngplt_std.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-26 21:14 - 2015-03-26 21:14 - 00005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN

2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\GHXZTJN
2015-03-31 18:03 - 2015-03-31 18:05 - 1959936 _____ (Sense+) C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe
2015-03-26 21:14 - 2015-03-26 21:14 - 0005542 _____ () C:\Users\Keijei\AppData\Roaming\VSINHF
2015-03-31 17:58 - 2015-03-31 17:59 - 1959936 _____ (Cinema PlusV31.03) C:\Users\Keijei\AppData\Roaming\VSINHF.exe

Task: {086B8630-6EF0-4098-947F-21BABFEA7E21} - System32\Tasks\{D67AC97C-32B1-4CE2-A797-287BCDDE679C} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {0C90D23F-9A5C-444B-9985-BF55C56AFAAC} - System32\Tasks\{4DD8A26B-863D-4425-99B6-64EB93ED514D} => E:\Games\Serious_Sam_2\Bin\SeriousSam.exe
Task: {1040A4B2-8902-49E0-A7BC-64F9FB1544F4} - System32\Tasks\{928EB37F-17FD-4229-A76D-8472E9DB0FDC} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {34775AAB-4035-403F-80B7-EA0FC62623D1} - System32\Tasks\{83F36DF2-CE9C-457A-BE52-2A2B9B33A4B4} => E:\Games\Caesar_IV\CaesarIV.exe
Task: {4CC93209-3553-40A8-9509-BD9C5CDCEBE3} - System32\Tasks\{B26E84B6-C9C9-486A-A723-93711726C765} => pcalua.exe -a E:\Games\Borderlands\Borderlands.exe -d E:\Games\Borderlands
Task: {53E85752-F2E9-493B-981A-BE964955B915} - System32\Tasks\{E3475693-6026-4CBA-B94F-4A38E4337BC3} => E:\Games\Dungeon_Siege\DungeonSiege.exe [2010-12-14] (Gas Powered Games)
Task: {6FC2CD53-4D46-42F6-9CE0-5E353343E95E} - System32\Tasks\GHXZTJN => C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe [2015-03-31] (Sense+) <==== ATTENTION
Task: {8DA992CD-6E04-4688-B962-E08A425288CC} - System32\Tasks\{B4DD97F6-4F68-48CC-9070-41F6C149F53C} => E:\AutoCAD_07\acad.exe [2006-03-05] (Autodesk, Inc.)
Task: {8F5B3DA9-B57E-4BA0-8189-79C4DCD5B589} - System32\Tasks\{61A994FB-7624-414E-93F9-2279563C5EE3} => E:\Games\Dungeon_Siege\DungeonSiege.exe [2010-12-14] (Gas Powered Games)
Task: {ABC49780-8AC4-4513-8814-451E9B5F468F} - System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update3 <==== ATTENTION
Task: {B4B9FEBD-401F-4DF1-8445-ADA6112E725E} - System32\Tasks\VSINHF => C:\Users\Keijei\AppData\Roaming\VSINHF.exe [2015-03-31] (Cinema PlusV31.03) <==== ATTENTION
Task: {BF977471-6119-4493-AF6E-22BD6BE9BFE6} - System32\Tasks\UNELEVATE_27624 => .\JSDriver\1.39.1.10466\jsdrv.exe
Task: {D3C43B75-C64C-4773-B4F1-0586A7D8FBC3} - System32\Tasks\UNELEVATE_27572 => .\JSDriver\1.39.1.10466\jsdrv.exe
Task: {DB5C022F-CE1E-47C2-B4A0-A6BCC2328C55} - System32\Tasks\{9F39D94A-415F-43C6-801C-6F19215B98F7} => E:\Games\Serious_Sam_2\Bin\SeriousSam.exe
Task: {EA796769-B491-4FFD-B182-30342DC1D819} - System32\Tasks\KMS Activation for Office => C:\Windows\KMSAct.exe [2010-07-07] ()
Task: {EDF6D077-F5AB-4DD9-A992-3F892C4602DC} - System32\Tasks\{25A4AF55-6108-4DEA-A09A-CA02F382C58C} => E:\Games\AoE_III\age3.exe [2009-06-11] (Ensemble Studios)
Task: {F099AA52-9FE5-4FB7-8A53-18A7F57E6487} - System32\Tasks\SPBIW_UpdateTask_Time_333530313136313536312d575b323478415a45375a456c => Wscript.exe //B "C:\ProgramData\ShopperPro\spbihe.js" spbiu.exe /invoke /f:check_services /l:0 <==== ATTENTION
Task: {F5E6ADFF-E880-4C0E-9543-1F9A02F23EAB} - System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Rundll32.exe C:\PROGRA~1\COMMON~1\System\SysMenu.dll ,Command701 update2 <==== ATTENTION
C:\Windows\KMSAct.exe
Task: C:\Windows\Tasks\GHXZTJN.job => C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000Core.job => C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000UA.job => C:\Users\Keijei\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\VSINHF.job => C:\Users\Keijei\AppData\Roaming\VSINHF.exe <==== ATTENTION

AlternateDataStreams: C:\Windows:AAF9B14AAE222137
CMD: dir "C:\PROGRA~1"
CMD: dir "C:\PROGRA~2"
CMD: dir "C:\PROGRA~3"
CMD: dir "%localappdata%"
CMD: dir "%appdata%"
Hosts:
EmptyTemp:
End
*****************

Processes closed successfully.
Restore point was successfully created.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Adobe ARM => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Pro Agent => value deleted successfully.
"HKU\S-1-5-21-479058040-2999119020-3636915712-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0e201b14-9580-11e3-9c7c-6cf049ef00a6}" => Key deleted successfully.
HKCR\CLSID\{0e201b14-9580-11e3-9c7c-6cf049ef00a6} => Key not found.
"HKU\S-1-5-21-479058040-2999119020-3636915712-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{f175effa-bde3-11df-84f5-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{f175effa-bde3-11df-84f5-806e6f6e6963} => Key not found.
"HKLM\SOFTWARE\Policies\Google" => Key deleted successfully.
HKU\S-1-5-21-479058040-2999119020-3636915712-1000\Software\Microsoft\Internet Explorer\URLSearchHooks\\{BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} => value deleted successfully.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => Key deleted successfully.
CHR dev: Chrome dev build detected! <======= ATTENTION => Error: No automatic fix found for this entry.
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\ppGoogleNaClPluginChrome.dll not found.
C:\Users\Keijei\AppData\Local\Google\Chrome\Application\41.0.2272.101\gcswf32.dll not found.
C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll not found.
C:\Users\Keijei\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll not found.
cpuz130 => Service deleted successfully.
C:\AdwCleaner => Moved successfully.
C:\Windows\PFRO.log => Moved successfully.
C:\Users\Keijei\Downloads\RSITx64.exe => Moved successfully.
C:\rsit => Moved successfully.
C:\Windows\setupact.log => Moved successfully.
C:\Windows\setuperr.log => Moved successfully.
C:\ProgramData\egbolkfehgdfokgelfecknpajiofdldk => Moved successfully.
C:\Program Files (x86)\SoftwarePlus => Moved successfully.
C:\Program Files (x86)\Raven Internet Marketing Tools => Moved successfully.
C:\Windows\Tasks\GHXZTJN.job => Moved successfully.
C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe => Moved successfully.
C:\Windows\System32\Tasks\GHXZTJN => Moved successfully.
C:\Program Files (x86)\Air Globe => Moved successfully.
C:\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7 => Moved successfully.
C:\ProgramData\hlmkhkcohdiiinlliooaohkcbknjcekp => Moved successfully.
C:\ProgramData\14987379731272139608 => Moved successfully.
C:\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637 => Moved successfully.
C:\ProgramData\{bc9b538a-dd37-8840-bc9b-b538add34e2b} => Moved successfully.
C:\Program Files\Common Files\ShopperPro => Moved successfully.
C:\Users\Public\Documents\ShopperPro => Moved successfully.
C:\Users\Keijei\AppData\Roaming\QuickScan => Moved successfully.
C:\Windows\Tasks\VSINHF.job => Moved successfully.
C:\Users\Keijei\AppData\Roaming\VSINHF.exe => Moved successfully.
C:\Windows\System32\Tasks\VSINHF => Moved successfully.
C:\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e => Moved successfully.
C:\Users\Keijei\Downloads\pngplt_std.exe => Moved successfully.
C:\Users\Keijei\AppData\Roaming\VSINHF => Moved successfully.
C:\Users\Keijei\AppData\Roaming\GHXZTJN => Moved successfully.
"C:\Users\Keijei\AppData\Roaming\GHXZTJN" => File/Directory not found.
"C:\Users\Keijei\AppData\Roaming\GHXZTJN.exe" => File/Directory not found.
"C:\Users\Keijei\AppData\Roaming\VSINHF" => File/Directory not found.
"C:\Users\Keijei\AppData\Roaming\VSINHF.exe" => File/Directory not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{086B8630-6EF0-4098-947F-21BABFEA7E21}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{086B8630-6EF0-4098-947F-21BABFEA7E21}" => Key deleted successfully.
C:\Windows\System32\Tasks\{D67AC97C-32B1-4CE2-A797-287BCDDE679C} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D67AC97C-32B1-4CE2-A797-287BCDDE679C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0C90D23F-9A5C-444B-9985-BF55C56AFAAC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C90D23F-9A5C-444B-9985-BF55C56AFAAC}" => Key deleted successfully.
C:\Windows\System32\Tasks\{4DD8A26B-863D-4425-99B6-64EB93ED514D} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{4DD8A26B-863D-4425-99B6-64EB93ED514D}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1040A4B2-8902-49E0-A7BC-64F9FB1544F4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1040A4B2-8902-49E0-A7BC-64F9FB1544F4}" => Key deleted successfully.
C:\Windows\System32\Tasks\{928EB37F-17FD-4229-A76D-8472E9DB0FDC} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{928EB37F-17FD-4229-A76D-8472E9DB0FDC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{34775AAB-4035-403F-80B7-EA0FC62623D1}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{34775AAB-4035-403F-80B7-EA0FC62623D1}" => Key deleted successfully.
C:\Windows\System32\Tasks\{83F36DF2-CE9C-457A-BE52-2A2B9B33A4B4} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{83F36DF2-CE9C-457A-BE52-2A2B9B33A4B4}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{4CC93209-3553-40A8-9509-BD9C5CDCEBE3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4CC93209-3553-40A8-9509-BD9C5CDCEBE3}" => Key deleted successfully.
C:\Windows\System32\Tasks\{B26E84B6-C9C9-486A-A723-93711726C765} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B26E84B6-C9C9-486A-A723-93711726C765}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{53E85752-F2E9-493B-981A-BE964955B915}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{53E85752-F2E9-493B-981A-BE964955B915}" => Key deleted successfully.
C:\Windows\System32\Tasks\{E3475693-6026-4CBA-B94F-4A38E4337BC3} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E3475693-6026-4CBA-B94F-4A38E4337BC3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{6FC2CD53-4D46-42F6-9CE0-5E353343E95E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6FC2CD53-4D46-42F6-9CE0-5E353343E95E}" => Key deleted successfully.
C:\Windows\System32\Tasks\GHXZTJN not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GHXZTJN" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8DA992CD-6E04-4688-B962-E08A425288CC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8DA992CD-6E04-4688-B962-E08A425288CC}" => Key deleted successfully.
C:\Windows\System32\Tasks\{B4DD97F6-4F68-48CC-9070-41F6C149F53C} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B4DD97F6-4F68-48CC-9070-41F6C149F53C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{8F5B3DA9-B57E-4BA0-8189-79C4DCD5B589}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{8F5B3DA9-B57E-4BA0-8189-79C4DCD5B589}" => Key deleted successfully.
C:\Windows\System32\Tasks\{61A994FB-7624-414E-93F9-2279563C5EE3} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{61A994FB-7624-414E-93F9-2279563C5EE3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{ABC49780-8AC4-4513-8814-451E9B5F468F}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ABC49780-8AC4-4513-8814-451E9B5F468F}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Multimedia\SMupdate3 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{B4B9FEBD-401F-4DF1-8445-ADA6112E725E}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B4B9FEBD-401F-4DF1-8445-ADA6112E725E}" => Key deleted successfully.
C:\Windows\System32\Tasks\VSINHF not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\VSINHF" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BF977471-6119-4493-AF6E-22BD6BE9BFE6}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BF977471-6119-4493-AF6E-22BD6BE9BFE6}" => Key deleted successfully.
C:\Windows\System32\Tasks\UNELEVATE_27624 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UNELEVATE_27624" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{D3C43B75-C64C-4773-B4F1-0586A7D8FBC3}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3C43B75-C64C-4773-B4F1-0586A7D8FBC3}" => Key deleted successfully.
C:\Windows\System32\Tasks\UNELEVATE_27572 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UNELEVATE_27572" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DB5C022F-CE1E-47C2-B4A0-A6BCC2328C55}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DB5C022F-CE1E-47C2-B4A0-A6BCC2328C55}" => Key deleted successfully.
C:\Windows\System32\Tasks\{9F39D94A-415F-43C6-801C-6F19215B98F7} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{9F39D94A-415F-43C6-801C-6F19215B98F7}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EA796769-B491-4FFD-B182-30342DC1D819}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EA796769-B491-4FFD-B182-30342DC1D819}" => Key deleted successfully.
C:\Windows\System32\Tasks\KMS Activation for Office => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\KMS Activation for Office" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EDF6D077-F5AB-4DD9-A992-3F892C4602DC}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDF6D077-F5AB-4DD9-A992-3F892C4602DC}" => Key deleted successfully.
C:\Windows\System32\Tasks\{25A4AF55-6108-4DEA-A09A-CA02F382C58C} => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{25A4AF55-6108-4DEA-A09A-CA02F382C58C}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F099AA52-9FE5-4FB7-8A53-18A7F57E6487}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F099AA52-9FE5-4FB7-8A53-18A7F57E6487}" => Key deleted successfully.
C:\Windows\System32\Tasks\SPBIW_UpdateTask_Time_333530313136313536312d575b323478415a45375a456c => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SPBIW_UpdateTask_Time_333530313136313536312d575b323478415a45375a456c" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F5E6ADFF-E880-4C0E-9543-1F9A02F23EAB}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F5E6ADFF-E880-4C0E-9543-1F9A02F23EAB}" => Key deleted successfully.
C:\Windows\System32\Tasks\Microsoft\Windows\Maintenance\SMupdate2 => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2" => Key deleted successfully.
C:\Windows\KMSAct.exe => Moved successfully.
C:\Windows\Tasks\GHXZTJN.job not found.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000Core.job => Moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-479058040-2999119020-3636915712-1000UA.job => Moved successfully.
C:\Windows\Tasks\VSINHF.job not found.
C:\Windows => ":AAF9B14AAE222137" ADS removed successfully.

========= dir "C:\PROGRA~1" =========

Svazek v jednotce C nem� ��dnou jmenovku.
S�riov� ��slo svazku je 4ADA-FA6D.

V�pis adres��e C:\PROGRA~1

03.01.2015 15:15 <DIR> .
03.01.2015 15:15 <DIR> ..
16.09.2010 18:47 <DIR> Alwil Software
03.01.2015 15:15 <DIR> AMD
11.09.2010 17:58 <DIR> ATI
03.01.2015 15:16 <DIR> ATI Technologies
02.04.2015 15:27 <DIR> Common Files
25.02.2014 16:44 <DIR> Defraggler
14.07.2011 03:52 <DIR> DVD Maker
25.03.2011 09:19 <DIR> DVDFab 8
11.09.2010 17:42 <DIR> GIGABYTE
12.03.2015 07:27 <DIR> Internet Explorer
14.07.2009 17:37 <DIR> Microsoft Games
14.07.2009 07:32 <DIR> MSBuild
11.09.2010 17:41 <DIR> Realtek
14.07.2009 07:32 <DIR> Reference Assemblies
04.10.2014 13:54 <DIR> Rockers Team
15.03.2015 02:28 <DIR> TeamSpeak 3 Client
31.03.2015 23:56 <DIR> trend micro
12.07.2013 05:51 <DIR> Windows Defender
10.07.2014 21:23 <DIR> Windows Journal
14.07.2011 03:52 <DIR> Windows Mail
12.03.2015 07:27 <DIR> Windows Media Player
11.09.2010 17:37 <DIR> Windows NT
14.07.2011 03:52 <DIR> Windows Photo Viewer
14.07.2011 03:52 <DIR> Windows Portable Devices
14.07.2011 03:52 <DIR> Windows Sidebar
11.09.2010 18:37 <DIR> WinRAR
Soubor�: 0, Bajt�: 0
Adres��: 28, Voln�ch bajt�: 4�031�369�216

========= End of CMD: =========

========= dir "C:\PROGRA~2" =========

Svazek v jednotce C nem� ��dnou jmenovku.
S�riov� ��slo svazku je 4ADA-FA6D.

V�pis adres��e C:\PROGRA~2

02.04.2015 15:27 <DIR> .
02.04.2015 15:27 <DIR> ..
31.03.2015 18:03 <DIR> Adobe
31.03.2015 18:03 <DIR> AMD APP
03.01.2015 15:16 <DIR> AMD AVT
25.05.2013 07:52 <DIR> AnswerWorks 4.0
18.11.2010 19:50 <DIR> Anti-Blaxx
21.07.2013 22:13 <DIR> Anti-Vibrate Oscar Editor
07.11.2010 09:19 <DIR> ArcSoft
10.03.2012 00:13 <DIR> Ashampoo
11.09.2010 17:58 <DIR> ATI
04.12.2011 08:27 <DIR> ATI Technologies
25.05.2013 07:49 <DIR> Autodesk
14.08.2013 18:54 <DIR> Avanquest update
07.11.2010 09:18 <DIR> Canon
10.02.2014 23:16 <DIR> CCleaner
25.01.2015 10:42 <DIR> Common Files
29.10.2011 07:40 <DIR> DAEMON Tools Pro
23.11.2010 21:05 <DIR> DVD Shrink
10.01.2012 16:59 <DIR> FileFactory Turbo
28.02.2014 18:02 <DIR> FlashGet
11.09.2010 20:13 <DIR> FlashGet Network
11.09.2010 18:05 <DIR> GIGABYTE
11.09.2010 17:40 <DIR> Intel
12.03.2015 07:27 <DIR> Internet Explorer
25.01.2015 10:42 <DIR> Java
11.09.2010 18:34 <DIR> K-Lite Codec Pack
11.09.2010 17:42 <DIR> Marvell
28.02.2014 18:01 <DIR> Microsoft
01.05.2011 11:34 <DIR> Microsoft Games for Windows - LIVE
25.05.2013 07:52 <DIR> Microsoft Office
31.03.2015 17:59 <DIR> Microsoft Silverlight
14.09.2010 14:48 <DIR> Microsoft Visual Studio
14.09.2010 14:48 <DIR> Microsoft Works
29.09.2010 07:03 <DIR> Microsoft.NET
09.11.2010 17:43 <DIR> MSBuild
15.04.2012 16:34 <DIR> MSECache
31.10.2010 03:00 <DIR> MSXML 4.0
07.11.2010 09:21 <DIR> NewSoft
16.04.2011 12:13 <DIR> NVIDIA Corporation
10.12.2011 15:44 <DIR> OpenAL
21.07.2013 22:12 <DIR> OscarX7H
03.06.2013 11:27 <DIR> PDF Architect
10.02.2014 23:16 <DIR> PDFCreator
23.09.2013 19:19 <DIR> RapidShareManager
15.09.2013 10:54 <DIR> Realtek
14.07.2009 07:32 <DIR> Reference Assemblies
27.12.2012 14:19 <DIR> Renesas Electronics
14.02.2014 18:15 <DIR> Research In Motion
19.09.2013 08:29 <DIR> Rockstar Games
07.11.2010 09:20 <DIR> ScanSoft
01.01.2010 00:06 <DIR> SlySoft
03.06.2012 19:00 <DIR> Sony
31.03.2015 18:10 <DIR> Steam
16.07.2013 22:21 <DIR> TS Notifier
30.10.2010 17:24 <DIR> Ubisoft
24.06.2012 11:02 <DIR> VSO
12.07.2013 05:51 <DIR> Windows Defender
14.07.2011 03:52 <DIR> Windows Mail
12.03.2015 07:27 <DIR> Windows Media Player
14.07.2009 07:32 <DIR> Windows NT
14.07.2011 03:52 <DIR> Windows Photo Viewer
14.07.2011 03:52 <DIR> Windows Portable Devices
14.07.2011 03:52 <DIR> Windows Sidebar
Soubor�: 0, Bajt�: 0
Adres��: 64, Voln�ch bajt�: 4�031�365�120

========= End of CMD: =========

========= dir "C:\PROGRA~3" =========

Svazek v jednotce C nem� ��dnou jmenovku.
S�riov� ��slo svazku je 4ADA-FA6D.

V�pis adres��e C:\PROGRA~3

26.02.2013 17:53 <DIR> Adobe
28.10.2010 07:51 <DIR> Age of Empires 3
16.09.2010 18:47 <DIR> Alwil Software
03.01.2015 15:16 <DIR> AMD
16.09.2010 19:06 <DIR> ashampoo
03.01.2015 15:18 <DIR> ATI
25.05.2013 07:54 <DIR> Autodesk
14.08.2013 18:54 <DIR> Avanquest
12.09.2010 08:17 <DIR> BioWare
14.08.2013 18:57 <DIR> BVRP Software
07.01.2014 18:36 <DIR> Codemasters
11.09.2010 18:25 <DIR> DAEMON Tools Net
29.10.2011 07:39 <DIR> DAEMON Tools Pro
07.03.2015 19:21 <DIR> DVD Shrink
11.09.2010 17:42 <DIR> InstallShield
10.07.2012 16:06 <DIR> McAfee
30.07.2011 07:26 <DIR> Media Center Programs
09.11.2010 17:43 <DIR> Microsoft Help
25.01.2015 10:43 <DIR> Oracle
12.06.2014 18:42 <DIR> Orbit
03.01.2015 15:15 <DIR> Package Cache
14.02.2014 18:15 <DIR> Research In Motion
07.11.2010 09:20 <DIR> ScanSoft
03.06.2012 19:00 <DIR> Sony
24.03.2012 07:07 <DIR> Sun
19.01.2014 10:37 <DIR> TrackMania
24.06.2012 11:47 <DIR> vsosdk
10.02.2013 13:24 <DIR> WarThunder
Soubor�: 0, Bajt�: 0
Adres��: 28, Voln�ch bajt�: 4�031�361�024

========= End of CMD: =========

========= dir "%localappdata%" =========

Svazek v jednotce C nem� ��dnou jmenovku.
S�riov� ��slo svazku je 4ADA-FA6D.

V�pis adres��e C:\Users\Keijei\AppData\Local

01.04.2015 14:08 <DIR> .
01.04.2015 14:08 <DIR> ..
01.02.2014 16:01 <DIR> Adobe
11.09.2010 18:13 <DIR> Apps
09.03.2012 19:41 <DIR> ashampoo
11.09.2010 17:59 <DIR> ATI
25.05.2013 07:52 <DIR> Autodesk
31.03.2015 18:00 <DIR> CrashRpt
28.02.2014 18:02 <DIR> Deployment
22.02.2015 15:16 <DIR> Diagnostics
10.01.2012 16:59 <DIR> Doubleclick_Industries
12.09.2010 07:13 <DIR> Electronic_Arts_Inc
01.07.2012 01:00 <DIR> ElevatedDiagnostics
16.09.2010 20:18 <DIR> Fallout3
25.08.2013 08:47 139�256 GDIPFONTCACHEV1.DAT
05.06.2011 08:13 <DIR> GHISLER
11.09.2010 18:15 <DIR> Google
31.03.2015 17:59 <DIR> Microsoft
02.10.2010 13:00 <DIR> Microsoft Games
03.10.2010 08:40 <DIR> Microsoft Help
01.01.2012 19:47 <DIR> NewSoft
31.03.2015 18:10 <DIR> Opera Software
03.06.2013 11:25 <DIR> Programs
12.06.2014 18:42 <DIR> PunkBuster
01.01.2012 16:14 <DIR> RapidSharing.eu
14.02.2014 18:15 <DIR> Research In Motion
22.09.2013 00:37 <DIR> Rockstar Games
07.11.2010 09:22 <DIR> Scansoft
25.05.2013 08:14 <DIR> SKIDROW
04.12.2011 08:50 <DIR> Skyrim
13.03.2015 22:28 <DIR> Smellyriver
25.05.2013 08:15 <DIR> SniperV2
14.08.2013 18:57 <DIR> Sony
02.04.2015 15:27 <DIR> Temp
02.08.2013 15:45 <DIR> The Witcher
26.05.2011 18:55 <DIR> The Witcher 2
24.04.2011 11:51 <DIR> Two Worlds II
26.08.2012 11:00 <DIR> Ubisoft Game Launcher
15.09.2012 14:49 <DIR> Unity
05.08.2012 14:38 <DIR> VirtualStore
10.02.2013 10:18 <DIR> WarThunder
06.03.2015 21:10 83 WOTStarter.ini
Soubor�: 2, Bajt�: 139�339
Adres��: 40, Voln�ch bajt�: 4�031�361�024

========= End of CMD: =========

========= dir "%appdata%" =========

Svazek v jednotce C nem� ��dnou jmenovku.
S�riov� ��slo svazku je 4ADA-FA6D.

V�pis adres��e C:\Users\Keijei\AppData\Roaming

02.04.2015 15:27 <DIR> .
02.04.2015 15:27 <DIR> ..
19.12.2012 13:42 <DIR> .minecraft
28.05.2011 08:20 <DIR> Adobe
07.11.2010 09:29 <DIR> ArcSoft
09.03.2012 19:41 <DIR> Ashampoo
11.09.2010 17:59 <DIR> ATI
25.05.2013 07:57 <DIR> Autodesk
11.09.2010 20:23 <DIR> BITS
20.05.2012 22:07 <DIR> Canon
12.09.2010 07:13 <DIR> Command and Conquer 4
11.09.2010 18:26 <DIR> DAEMON Tools Net
31.03.2015 18:10 <DIR> DAEMON Tools Pro
31.03.2015 17:55 <DIR> Downloaded Installations
07.05.2012 16:36 <DIR> FFSJ
10.01.2012 17:00 <DIR> FileFactory Turbo
12.09.2010 16:03 <DIR> FlashGet
11.09.2010 20:13 <DIR> FlashGetBHO
11.09.2010 18:17 <DIR> GHISLER
11.09.2010 17:37 <DIR> Identities
11.09.2010 18:40 <DIR> InstallShield
11.09.2010 18:16 <DIR> Macromedia
14.07.2009 17:36 <DIR> Media Center Programs
31.03.2015 23:41 <DIR> Media Player Classic
31.10.2014 21:09 <DIR> Might & Magic Heroes VI
19.09.2010 15:49 <DIR> My Battle for Middle-earth(tm) II Files
10.10.2010 16:28 <DIR> My The Lord of the Rings, The Rise of the Witch-king Files
01.01.2012 19:47 <DIR> NewSoft
31.03.2015 18:10 <DIR> Opera Software
04.10.2014 08:38 <DIR> Oracle
03.06.2013 11:28 <DIR> PDF Architect
14.02.2014 18:15 <DIR> Research In Motion
07.11.2010 09:20 <DIR> ScanSoft
04.02.2012 14:37 <DIR> Trine2
21.03.2012 22:02 216 trueburner.ini
31.03.2015 18:10 <DIR> TS3Client
16.07.2013 21:51 <DIR> TSNotifier
10.12.2011 12:29 <DIR> Unity
06.12.2014 10:13 <DIR> uTorrent
13.07.2013 08:31 <DIR> VitySoft
28.02.2014 18:05 <DIR> Vso
24.02.2014 19:06 1�057 vso_ts_preview.xml
19.04.2014 06:45 <DIR> Wargaming.net
12.09.2010 07:42 <DIR> WinRAR
Soubor�: 2, Bajt�: 1�273
Adres��: 42, Voln�ch bajt�: 4�031�356�928

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
EmptyTemp: => Removed 243.4 MB temporary data.

The system needed a reboot.

==== End of Fixlog 15:27:22 ====

#9 Příspěvek od **altrok** » 02 dub 2015 14:39

Nainstalujte MBAM a udelejte vlastni sken vsech disku - http://forum.viry.cz/viewtopic.php?f=29&t=137928

Upozorneni: tento sken zabere od 30 minut po nekolik hodin

jmeno1 · #10 Příspěvek od **jmeno1** » 02 dub 2015 15:44

Malwarebytes Anti-Malware
http://www.malwarebytes.org

Datum skenování: 2.4.2015
Čas skenování: 15:53:29
Protokol: log.txt
Správce: Ano

Verze: 2.01.4.1018
Databáze malwaru: v2015.04.02.04
Databáze rootkitů: v2015.03.31.01
Licence: Zkušební verze
Ochrana proti malwaru: Zapnuto
Ochrana proti škodlivým webovým stránkám: Zapnuto
Ochrana programu: Vypnuto

OS: Windows 7 Service Pack 1
CPU: x64
Souborový systém: NTFS
Uživatel: Keijei

Typ skenu: Vlastní sken
Výsledek: Dokončeno
Prohledaných objektů: 591884
Uplynulý čas: 48 min, 56 sek

Paměť: Zapnuto
Po spuštění: Zapnuto
Souborový systém: Zapnuto
Archivy: Zapnuto
Rootkity: Vypnuto
Heuristika: Zapnuto
PUP: Zapnuto
PUM: Zapnuto

Procesy: 0
(Nenalezeny žádné škodlivé položky)

Moduly: 0
(Nenalezeny žádné škodlivé položky)

Klíče registru: 0
(Nenalezeny žádné škodlivé položky)

Hodnoty registru: 0
(Nenalezeny žádné škodlivé položky)

Data registru: 0
(Nenalezeny žádné škodlivé položky)

Složky: 0
(Nenalezeny žádné škodlivé položky)

Soubory: 53
PUP.Optional.Somoto.A, C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000000, , [d4f82443becc79bd8b35eb6cd62fb749],
PUP.Optional.Somoto.A, C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000001, , [458761062565e74f417f82d50500f60a],
PUP.Optional.Somoto.A, C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000002, , [dbf166014e3cb38330901542ea1b02fe],
PUP.Optional.Somoto.A, C:\Users\Keijei\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000003, , [0dbfbaad553571c53090e96e3fc68779],
Trojan.Swisyn, C:\Users\Keijei\Downloads\Loader\Loader\autoloader_dt_loader_0.4.exe, , [824a2443ef9bbc7a3ca8bfe736cca957],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-6.exe.vir, , [e1eb4126810938fe77a235f525e1f907],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-1-7.exe.vir, , [03c935328bff8aacbd5c2ffb9670dd23],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-10.exe.vir, , [5f6dfb6c5e2c94a28e8bc763bc4a718f],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-3.exe.vir, , [3d8f3c2b4a4006305cbd45e5e026b14f],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-5.exe.vir, , [87456afda3e7e94d30e912187f8724dc],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-6.exe.vir, , [28a46ff8d2b822144ccdd4562adc26da],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-64.exe.vir, , [418bb7b04644082ebe5bc9619175718f],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\34a30f59-3e26-43ce-b0f9-a37ab88e63b0-7.exe.vir, , [e4e896d1dab043f379a025053bcb1fe1],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\e674c1c2-e259-45b4-a028-f16127d9d35a.dll.vir, , [b81469fe04863cfa851362abcd3539c7],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\UninstallBrw.exe.vir, , [af1d83e40f7b9b9b859473b76d99649c],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\CinemaP-1.8cV31.03\utils.exe.vir, , [47853a2d1377a98df326929859ad05fb],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\103eb353-945c-44c1-9115-6c3722c61fd0.dll.vir, , [0fbd92d5f09a41f5e2b611fcc53dc43c],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-6.exe.vir, , [8d3fd98e701a92a49211d46570925fa1],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-1-7.exe.vir, , [b319b2b5296189ad4261291057ab0af6],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-10.exe.vir, , [9339a3c4583243f3990aa594020041bf],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-11.exe.vir, , [a32978efa1e9cc6aa9fa1326e02239c7],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-5.exe.vir, , [f9d395d21f6b4fe73d663efbbe44d828],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-6.exe.vir, , [b715b0b78703da5ca20161d8c63c37c9],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-64.exe.vir, , [b7156304ed9d979ffda643f68a789f61],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\c51d90b4-7a94-47a4-a67f-b27f2d62d468-7.exe.vir, , [933945224f3bc76fe4bf62d735cd7987],
PUP.Optional.GeForce.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Ge-Force\utils.exe.vir, , [ad1fd39452386dc9247f2019956dae52],
PUP.Optional.Multiplug.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\SalePlus\7XhTNmBr3JRjov.exe.vir, , [5c70db8c137738fe23194ee2a35f8a76],
PUP.Optional.Multiplug.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\SalePlus\vtIMn03wvQlgKv.exe.vir, , [c705c7a0e7a354e28ab2a18f758dff01],
PUP.Optional.Multiplug.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\SalePPluus\SalePPluus.exe.vir, , [e4e88ed90b7fd95d82bad25e1fe325db],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-6.exe.vir, , [ece03433eb9f0036e77ff8232cd6a25e],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-1-7.exe.vir, , [7e4e5f08f49685b1aeb8bd5eb34fb050],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-11.exe.vir, , [7755bea94941e551d98d9e7dbb4734cc],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-5.exe.vir, , [a8245314afdbe2545b0bd744a1616799],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-6.exe.vir, , [5f6d501791f964d2234306154fb3b44c],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-64.exe.vir, , [9438b4b3a1e982b4da8c3dded9291ae6],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\647b9fae-beeb-4f69-a7a1-916eb3ddc680-7.exe.vir, , [89430c5b2862c57171f5f02b6d95c23e],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\6ec0cd88-e2d5-4a46-bcb7-b11a17d0b513.dll.vir, , [428a90d78ffbc6706c2c63aaec166f91],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\Sense\utils.exe.vir, , [12ba293e2a60e353c0a669b259a98d73],
PUP.Optional.Multiplug.A, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\Program Files (x86)\youtubeadblocker\3sbwGUMMy8pZ7U.exe.vir, , [6a626106fb8f5bdbd7658ea29a683bc5],
PUP.Optional.Protect, C:\FRST\Quarantine\C\AdwCleaner\Quarantine\C\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe.vir, , [e7e5a4c387038da977fe7f6bd035b749],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\Program Files (x86)\58298e2c-7ea9-4abc-a6d3-6a2ec62a5637\bebd86ae-7c88-4d7d-9e2a-6f91db0d0752.dll, , [5f6d8dda3d4d4fe73a5e28e54cb606fa],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7\a99aa2ac-d6a6-4708-94e0-b2bfd2c81597.dll, , [8b41c5a2b7d3e155c4d42fde62a029d7],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\Program Files (x86)\81d903de-f055-4ad8-9f5e-2cb56f7d79d7\c1213d86-06b8-49b6-9df0-201f0db87331.dll, , [1fad5611dab0d462c2d655b807fbe51b],
PUP.Optional.Nova.A, C:\FRST\Quarantine\C\Program Files (x86)\fbeabe8b-6cf8-4cdc-8bc7-2e56143ce58e\12324d5f-5a0f-4964-8353-423c8b9dad3d.dll, , [0bc1c7a05e2ca2944c4c18f5e31fde22],
PUP.Optional.Multiplug.A, C:\FRST\Quarantine\C\Program Files (x86)\Raven Internet Marketing Tools\Raven Internet Marketing Tools.exe, , [1daf2c3b622873c3e35936fa689a6e92],
PUP.Optional.Multiplug, C:\FRST\Quarantine\C\Program Files (x86)\SoftwarePlus\SoftwarePlus.dll, , [309cb5b29eec11252070c46b4db5ef11],
PUP.Optional.Sense.A, C:\FRST\Quarantine\C\Users\Keijei\AppData\Roaming\GHXZTJN.exe.xBAD, , [aa22b6b13753f145046264b731d17090],
PUP.Optional.CrossRider.A, C:\FRST\Quarantine\C\Users\Keijei\AppData\Roaming\VSINHF.exe.xBAD, , [36961057305a1c1a7c9d33f763a32fd1],
RiskWare.Tool.CK, C:\FRST\Quarantine\C\Windows\KMSAct.exe.xBAD, , [14b8f0776921072f2d8cf29f5da52cd4],
Malware.Packer.Krunchy, E:\Games\Serious_Sam_II_HD\Uninstall.exe, , [f7d53235800a69cd57f1d8a203fd9e62],
RiskWare.Tool.CK, E:\Games\Two_Worlds_2\Two Worlds II\rld-tw2k.exe, , [8c40f473404a0a2c4847f9b3d72bc23e],
RiskWare.Tool.CK, E:\Images\MS_Office_2010\Activate\Office 2010 Activation and Conversion Kit\Office 2010 Activation and Conversion Kit 1.5.exe, , [05c7f6718604fe3813a60d8441c19967],
Trojan.Agent.W, F:\pok\sources\$OEM$\$$\SETUP\SCRIPTS\Windows7Loader.exe, , [765626414842f73fa662ced05aab7a86],

Fyzické sektory: 0
(Nenalezeny žádné škodlivé položky)

(end)

#11 Příspěvek od **altrok** » 02 dub 2015 18:34

jmeno1 píše:Ano, systém je legální.

Proc tedy v PC mate crack na windows?

jmeno1 · #12 Příspěvek od **jmeno1** » 02 dub 2015 21:33

Nevím o žádném cracku a systém je legální. Co chceš jako důkaz??? Foto DVD, key, fotku pokojíku? Je to kurva legální!

jmeno1 · #13 Příspěvek od **jmeno1** » 02 dub 2015 21:37

Mám doma 3 PC a 2 NTB a žádný niemand jako ty mi nebude říkat, že mám něco nelegální. Proč to pak kurva platím???? Jeden systém nejde pod 2.400,- Kč a idiot mně osočí, že mám nelegální systém?

#14 Příspěvek od **altrok** » 03 dub 2015 03:59

Odmitam nadale spolupracovat.

Pro stiznosti vyuzijte sekci k tomu urcenou http://forum.viry.cz/viewforum.php?f=31 pripadne e-mail nektereho z mych nadrizenych (zeleni moderatori nebo cerveny site admin), ktery ma dotycny uvedeny v podpisu.

Preji hezky den.

#15 Příspěvek od **cernohous13** » 04 dub 2015 16:29

jmeno1 píše:Mám doma 3 PC a 2 NTB a žádný niemand jako ty mi nebude říkat, že mám něco nelegální. Proč to pak kurva platím???? Jeden systém nejde pod 2.400,- Kč a idiot mně osočí, že mám nelegální systém?

Když už ses tak hezky rozjel tak mi vychází, že za idiota jsi tu ty protože jsi zaplatil cracknuté Win - v legálních bys to nepotřeboval a je to tam dost jasně vidět

Systém sis instalovat sám nebo nějaký "odborník/firma"

VIRY.CZ

Prosím o kontrolu

Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu

Re: Prosím o kontrolu