Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz

Search protect

Máte problém s virem? Vložte sem log z FRST nebo RSIT.

Moderátor: Moderátoři

Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]

Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.

!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Zamčeno
Zpráva
Autor
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Search protect

#1 Příspěvek od mirekd »

Ahoj.Již podle názvu bude asi jasné v čem mám problém.Před několika dny se mi po spuštění pc vpravo dole začala objevovat ikonka Search protect. Po rozkliknutí nabízí výběr prohlížečů(co se bude dít po pokračování nevím,nezkoušel jsem)Co mě ale prudí je to že nejde nijak dostat z pc (odinstalace není možná-v programech na odinstalaci vůbec není).A hlavně se mi to neobjevuje pravidelně.Včera se mi třeba ikona vůbec neobjevila a dneska je zpět :-( (ve správci uloh po spuštění se taky nevyskytuje)
Co se týče pc tak s jeho chodem problém není.Používám jako antivir avast.Asi před týdnem jsem po uplné kontrole dával do truhly nějakej adware ale jak jsem psal pc běží v poho.
:?: písnite mi prosím někdo jakej mám volit postup.myslím z kterého programu mám log vložit tak aby mi to někdo skouknul jestli tam nemám ještě nějakou havět.Díkes za čas a trpělivost :)
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#2 Příspěvek od mirekd »

trochu to trvalo :-)
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by Miroslav (administrator) on MIREK on 17-04-2015 15:00:56
Running from C:\Users\Miroslav\Desktop+
Loaded Profiles: Miroslav (Available profiles: Miroslav)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(XTab system) C:\Program Files (x86)\XTab\ProtectService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\MountPoints2: {f5154064-a7a8-11e4-824e-806e6f6e6963} - "F:\Autorun.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.omniboxes.com/web/?type=dspp ... earchTerms}
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.omniboxes.com/?type=hppp&ts= ... XX5QF7P289
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.omniboxes.com/web/?type=dspp ... earchTerms}
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?type=ds&t ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> DefaultScope {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {0F0E16FF-8FD3-4350-B510-9B3EB30512C5} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {2234CED2-88B5-45FD-9504-F0A5E69F8BA0} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {2DCA91BD-0683-4534-BC8F-EDC3E970C61C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {661A0A36-83D1-4D44-89A0-8A9B09E6D2FF} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {753E5276-76EB-4343-A125-884424D3865C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {8133160A-5586-4287-A29B-55A21F7AA6E3} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {8CF06A3B-DF2A-4255-85CE-A5FB14BC637A} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {9A625A70-DF8F-4D96-96F8-C7BC0712F1C5} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {E623FF05-D14E-4DF0-85DB-D1FECF855AA7} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
SearchScopes: HKU\S-1-5-21-1734145228-1787166247-3967612736-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://www.omniboxes.com/web/?utm_sourc ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-12] (Avast Software s.r.o.)
BHO: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO: No Name -> {FCE3FA8B-BA81-467C-81D8-E43C00D1BC71} -> No File
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll [2015-04-02] (Thinknice Co. Limited)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12] (Avast Software s.r.o.)
BHO-x32: No Name -> {A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C} -> No File
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.omniboxes.com/?type=sc&ts=14 ... XX5QF7P289

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1734145228-1787166247-3967612736-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Miroslav\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-02-24] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-28]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://s101-cz.ogame.gameforge.com/game/index.php?page=overview", "https://www.seznam.cz/?clid=22668", "https://www.seznam.cz/?clid=22668", "hxxp://www.omniboxes.com/?type=hp&ts=142815027 ... XX5QF7P289", "hxxp://www.omniboxes.com/?type=hppp&ts=1428150 ... XX5QF7P289"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-28]
CHR Extension: (Google Drive) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-28]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-28]
CHR Extension: (Google Search) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-28]
CHR Extension: (Google Sheets) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-28]
CHR Extension: (AntiGameOrigin) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2015-03-18]
CHR Extension: (Google Wallet) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-28]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-23]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-12] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-23] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [158816 2015-04-02] (XTab system)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-10] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [493712 2015-04-04] (SysTool PasSame LIMITED)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-12] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-12] ()
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2015-02-07] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-29] (Disc Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-02-07] (Duplex Secure Ltd.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-23] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-11-21] (Microsoft Corporation)
S3 xhunter1; \??\C:\WINDOWS\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 15:00 - 2015-04-17 15:01 - 00025655 _____ () C:\Users\Miroslav\Desktop\FRST.txt
2015-04-17 15:00 - 2015-04-17 15:00 - 00000000 ____D () C:\FRST
2015-04-17 14:58 - 2015-04-17 14:58 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher.exe
2015-04-17 14:50 - 2015-04-17 14:50 - 00000000 ____D () C:\Users\Miroslav\SupTab
2015-04-17 14:42 - 2015-04-17 14:42 - 02097664 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2015-04-16 08:06 - 2015-04-16 08:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:23 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 17:23 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-15 17:23 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 17:23 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 17:23 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-15 17:23 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 17:22 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-15 17:22 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-15 17:22 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-15 17:22 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-15 17:22 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 17:22 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 17:22 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-15 17:22 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-15 17:22 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 17:22 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 17:22 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 17:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-15 17:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-15 17:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-15 17:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 17:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 17:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-15 17:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-15 17:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 17:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-15 17:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 17:22 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 17:22 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-15 17:22 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 17:22 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-15 17:22 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-14 12:59 - 2015-04-14 12:59 - 00002164 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-04-14 12:59 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-04-14 12:55 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-04-14 12:55 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00849552 _____ () C:\WINDOWS\system32\nvmcumd.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-04-12 20:40 - 2015-04-12 20:40 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-12 20:40 - 2015-04-12 20:40 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-07 15:12 - 2015-04-07 15:42 - 286932445 _____ () C:\Users\Miroslav\Downloads\Sony-Vegas-Pro-13-Plná-verze.zip
2015-04-07 15:04 - 2015-04-07 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-04-07 15:04 - 2012-09-02 00:12 - 02777920 _____ (Beepa Pty Ltd) C:\Users\Miroslav\Downloads\Fraps 3.5.9.exe
2015-04-07 14:12 - 2013-05-29 19:37 - 00000000 ____D () C:\Users\Miroslav\Downloads\Lego Star Wars 3 The Clone Wars
2015-04-04 18:25 - 2015-04-04 18:25 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-04-04 14:38 - 2015-04-04 14:38 - 00003150 _____ () C:\WINDOWS\System32\Tasks\{6D4B4A1D-E5B0-491B-8CB1-056909B4FF42}
2015-04-04 14:25 - 2015-04-04 14:26 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Prompt Downloader
2015-04-04 14:25 - 2015-04-04 14:25 - 00000000 ____D () C:\ProgramData\IHProtectUpDate
2015-04-04 14:24 - 2015-04-04 14:25 - 00000000 ____D () C:\Program Files (x86)\XTab
2015-04-04 14:24 - 2015-04-04 14:24 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect
2015-04-03 12:01 - 2015-04-03 12:01 - 00353888 _____ () C:\WINDOWS\Minidump\040315-57421-01.dmp
2015-04-03 11:45 - 2015-04-03 11:58 - 00000000 ____D () C:\Users\Miroslav\AppData\Temp
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\Documents\ArcSoft ToGo
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\ArcSoft
2015-04-03 11:44 - 2015-04-03 12:08 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\ArcSoft
2015-04-03 11:44 - 2015-04-03 11:44 - 00000000 ____D () C:\ProgramData\ArcSoft
2015-04-03 11:44 - 2006-11-14 11:31 - 00022784 _____ (Arcsoft, Inc.) C:\WINDOWS\SysWOW64\Drivers\afc.sys
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-04-03 11:41 - 2007-12-26 21:57 - 00445952 _____ () C:\WINDOWS\afaunist.exe
2015-04-03 11:41 - 2007-10-26 11:26 - 00000224 _____ () C:\WINDOWS\system32\AF15IRTBL.bin
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\PAYDAY
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\ProgramData\RELOADED
2015-04-02 17:32 - 2015-04-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Payday The Heist
2015-04-02 10:46 - 2015-04-02 10:46 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Mama's_Little_Bakery
2015-04-02 10:33 - 2015-04-02 10:34 - 00000000 ____D () C:\Users\Miroslav\Downloads\common
2015-04-02 10:33 - 2015-04-02 10:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\J-Runner
2015-03-30 15:28 - 2015-03-30 15:28 - 00044296 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2015-03-28 21:04 - 2015-03-28 21:04 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Wargaming.net
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2015-03-27 20:32 - 2015-03-27 20:41 - 00000000 ____D () C:\Program Files (x86)\Oddworld - New 'n' Tasty
2015-03-26 16:08 - 2015-03-26 17:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\BlackHole
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ____D () C:\ProgramData\CanonIJ
2015-03-26 12:29 - 2015-03-26 12:30 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Canon
2015-03-26 12:29 - 2015-03-26 12:29 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2015-03-24 09:42 - 2015-03-03 15:17 - 00295552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-03-23 10:02 - 2015-03-23 10:02 - 00002009 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-03-20 07:46 - 2015-04-09 02:58 - 00029329 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-03-20 07:46 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434788.dll
2015-03-20 07:46 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434788.dll
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Terasoft
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\Program Files (x86)\Terasoft
2015-03-19 16:47 - 2005-04-15 19:58 - 01351392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00440352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHFLXGD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00416528 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\COMCT332.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00260880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFLXGRD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00212240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RICHTX32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00200224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCI32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00167968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMASK32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00084512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PICCLP32.OCX
2015-03-19 16:47 - 2004-02-23 20:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-03-19 16:47 - 2000-02-25 11:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CTL3D32.$$A
2015-03-19 16:47 - 1999-08-11 14:21 - 00129024 _____ (Visual Design Softscape AB) C:\WINDOWS\SysWOW64\VDGT.ocx
2015-03-19 16:47 - 1999-06-01 17:20 - 00924432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC40.$$A
2015-03-19 16:47 - 1998-06-26 21:22 - 00205848 _____ (Sheridan Software Systems, Inc.) C:\WINDOWS\SysWOW64\threed32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00094744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grid32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00084000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoutl32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00068640 _____ (MicroHelp, Inc.) C:\WINDOWS\SysWOW64\gauge32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00057880 _____ (Outrider Systems, Inc.) C:\WINDOWS\SysWOW64\spin32.ocx
2015-03-19 16:47 - 1998-06-23 20:57 - 00067376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SYSINFO.OCX
2015-03-19 16:47 - 1997-10-30 13:53 - 00138240 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxshp432.ocx
2015-03-19 16:47 - 1997-05-20 13:35 - 00130984 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxvid432.ocx
2015-03-19 16:47 - 1997-05-20 13:34 - 00033712 _____ (ImageFX) C:\WINDOWS\SysWOW64\FXTmr432.ocx
2015-03-19 16:47 - 1997-05-20 13:33 - 00090536 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxsnd432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00122800 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxrtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00098216 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxmtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:31 - 00134056 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxlbl432.ocx
2015-03-19 16:47 - 1997-05-20 13:30 - 00248744 _____ (ImageFX) C:\WINDOWS\SysWOW64\fximg432.ocx
2015-03-19 16:47 - 1997-04-10 14:08 - 00142752 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxpic432.ocx
2015-03-19 16:47 - 1997-04-02 13:11 - 00107008 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxtls432.dll
2015-03-19 16:47 - 1996-10-07 08:42 - 00070144 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1313.DLL
2015-03-19 16:47 - 1996-10-07 08:38 - 00075776 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1113.DLL
2015-03-19 16:47 - 1996-10-07 08:35 - 00030208 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN13.DLL
2015-03-18 20:12 - 2015-03-18 20:12 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Unity
2015-03-18 19:42 - 2015-03-18 19:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Unity

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#3 Příspěvek od mirekd »

# AdwCleaner v4.201 - Log vytvořen 17/04/2015 v 15:18:25
# Aktualizováno 08/04/2015 by Xplode
# Databáze : 2015-04-15.1 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : Miroslav - MIREK
# Spuštěno z : C:\Users\Miroslav\Desktop\adwcleaner_4.201.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : IHProtect Service
[#] Služba Smazáno : WindowsMangerProtect

***** [ Soubory / Složky ] *****

Složka Smazáno : C:\ProgramData\WindowsMangerProtect
Složka Smazáno : C:\ProgramData\IHProtectUpDate
Složka Smazáno : C:\Program Files (x86)\globalUpdate
Složka Smazáno : C:\Program Files (x86)\XTab
Složka Smazáno : C:\Users\Miroslav\SupTab
Složka Smazáno : C:\Users\Miroslav\AppData\Local\globalUpdate
Složka Smazáno : C:\Users\Miroslav\AppData\Local\Prompt Downloader

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\AppID\ShopperPro.DLL
Klíč Smazáno : HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application\WindowsMangerProtect
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Klíč Smazáno : HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klíč Smazáno : HKLM\SOFTWARE\Classes\TypeLib\{968EDCE0-C10A-47BB-B3B6-FDF09F2A417D}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Klíč Smazáno : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Classes\Interface\{917CAAE9-DD47-4025-936E-1414F07DF5B8}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A5A51D2A-505A-4D84-AFC6-E0FA87E47B8C}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{FCE3FA8B-BA81-467C-81D8-E43C00D1BC71}
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0F0E16FF-8FD3-4350-B510-9B3EB30512C5}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2234CED2-88B5-45FD-9504-F0A5E69F8BA0}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2DCA91BD-0683-4534-BC8F-EDC3E970C61C}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{661A0A36-83D1-4D44-89A0-8A9B09E6D2FF}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{753E5276-76EB-4343-A125-884424D3865C}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8133160A-5586-4287-A29B-55A21F7AA6E3}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{8CF06A3B-DF2A-4255-85CE-A5FB14BC637A}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9A625A70-DF8F-4D96-96F8-C7BC0712F1C5}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E623FF05-D14E-4DF0-85DB-D1FECF855AA7}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Klíč Smazáno : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíč Smazáno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
Klíč Smazáno : HKCU\Software\GlobalUpdate
Klíč Smazáno : HKCU\Software\Goobzo
Klíč Smazáno : HKLM\SOFTWARE\GlobalUpdate
Klíč Smazáno : HKLM\SOFTWARE\Goobzo
Klíč Smazáno : HKLM\SOFTWARE\SupDp
Klíč Smazáno : HKLM\SOFTWARE\SupTab
Klíč Smazáno : HKLM\SOFTWARE\IHProtect
Klíč Smazáno : HKLM\SOFTWARE\omniboxesSoftware
Klíč Smazáno : HKU\.DEFAULT\Software\Goobzo
Klíč Smazáno : HKU\.DEFAULT\Software\iWebar-nv
Klíč Smazáno : [x64] HKLM\SOFTWARE\ShopperPro
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\omniboxes.com

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17416

Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Google Chrome v41.0.2272.118

[C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : hxxp://s101-cz.ogame.gameforge.com/game/index.php?page=overview", "hxxps://www.seznam.cz/?clid=22668", "hxxps://www.seznam.cz/?clid=22668", "hxxp://www.omniboxes.com/?type=hp&ts=142815027 ... XX5QF7P289

*************************

AdwCleaner[R0].txt - [9654 bytů] - [17/04/2015 15:16:47]
AdwCleaner[S0].txt - [6326 bytů] - [17/04/2015 15:18:25]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [6384 bytů] ##########
druhej log za moment
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#4 Příspěvek od mirekd »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by Miroslav (administrator) on MIREK on 17-04-2015 15:30:58
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available profiles: Miroslav)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\MountPoints2: {f5154064-a7a8-11e4-824e-806e6f6e6963} - "F:\Autorun.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-12] (Avast Software s.r.o.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12] (Avast Software s.r.o.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1734145228-1787166247-3967612736-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Miroslav\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-02-24] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-28]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://s101-cz.ogame.gameforge.com/game/index.php?page=overview", "https://www.seznam.cz/?clid=22668", "https://www.seznam.cz/?clid=22668", "hxxp://www.omniboxes.com/?type=hp&ts=142815027 ... XX5QF7P289", "hxxp://www.omniboxes.com/?type=hppp&ts=1428150 ... XX5QF7P289"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-01-28]
CHR Extension: (Google Drive) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-01-28]
CHR Extension: (YouTube) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-01-28]
CHR Extension: (Google Search) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-01-28]
CHR Extension: (Google Sheets) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-01-28]
CHR Extension: (AntiGameOrigin) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2015-03-18]
CHR Extension: (Google Wallet) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-28]
CHR Extension: (Gmail) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-01-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-23]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-12] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-23] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-10] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-12] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-12] ()
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2015-02-07] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-29] (Disc Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-02-07] (Duplex Secure Ltd.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-23] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-11-21] (Microsoft Corporation)
S3 xhunter1; \??\C:\WINDOWS\xhunter1.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 15:30 - 2015-04-17 15:31 - 00018364 _____ () C:\Users\Miroslav\Desktop\FRST.txt
2015-04-17 15:30 - 2015-04-17 15:30 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher (1).exe
2015-04-17 15:29 - 2015-04-17 15:29 - 00001536 _____ () C:\Users\Miroslav\Desktop\FRST2.txt
2015-04-17 15:27 - 2015-04-17 15:27 - 00014942 _____ () C:\Users\Miroslav\Downloads\FRSTLauncher.exe
2015-04-17 15:16 - 2015-04-17 15:18 - 00000000 ____D () C:\AdwCleaner
2015-04-17 15:15 - 2015-04-17 15:15 - 02217984 _____ () C:\Users\Miroslav\Desktop\adwcleaner_4.201.exe
2015-04-17 15:00 - 2015-04-17 15:31 - 00000000 ____D () C:\FRST
2015-04-17 14:42 - 2015-04-17 14:42 - 02097664 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2015-04-16 08:06 - 2015-04-16 08:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:23 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 17:23 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-15 17:23 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 17:23 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 17:23 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-15 17:23 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 17:22 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-15 17:22 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-15 17:22 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-15 17:22 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-15 17:22 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 17:22 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 17:22 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-15 17:22 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-15 17:22 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 17:22 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 17:22 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 17:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-15 17:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-15 17:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-15 17:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 17:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 17:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-15 17:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-15 17:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 17:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-15 17:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 17:22 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 17:22 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-15 17:22 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 17:22 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-15 17:22 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-14 12:59 - 2015-04-14 12:59 - 00002164 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-04-14 12:59 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-04-14 12:55 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-04-14 12:55 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00849552 _____ () C:\WINDOWS\system32\nvmcumd.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-04-12 20:40 - 2015-04-12 20:40 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-12 20:40 - 2015-04-12 20:40 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-07 15:12 - 2015-04-07 15:42 - 286932445 _____ () C:\Users\Miroslav\Downloads\Sony-Vegas-Pro-13-Plná-verze.zip
2015-04-07 15:04 - 2015-04-07 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-04-07 15:04 - 2012-09-02 00:12 - 02777920 _____ (Beepa Pty Ltd) C:\Users\Miroslav\Downloads\Fraps 3.5.9.exe
2015-04-07 14:12 - 2013-05-29 19:37 - 00000000 ____D () C:\Users\Miroslav\Downloads\Lego Star Wars 3 The Clone Wars
2015-04-04 18:25 - 2015-04-04 18:25 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-04-04 14:38 - 2015-04-04 14:38 - 00003150 _____ () C:\WINDOWS\System32\Tasks\{6D4B4A1D-E5B0-491B-8CB1-056909B4FF42}
2015-04-03 12:01 - 2015-04-03 12:01 - 00353888 _____ () C:\WINDOWS\Minidump\040315-57421-01.dmp
2015-04-03 11:45 - 2015-04-03 11:58 - 00000000 ____D () C:\Users\Miroslav\AppData\Temp
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\Documents\ArcSoft ToGo
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\ArcSoft
2015-04-03 11:44 - 2015-04-03 12:08 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\ArcSoft
2015-04-03 11:44 - 2015-04-03 11:44 - 00000000 ____D () C:\ProgramData\ArcSoft
2015-04-03 11:44 - 2006-11-14 11:31 - 00022784 _____ (Arcsoft, Inc.) C:\WINDOWS\SysWOW64\Drivers\afc.sys
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-04-03 11:41 - 2007-12-26 21:57 - 00445952 _____ () C:\WINDOWS\afaunist.exe
2015-04-03 11:41 - 2007-10-26 11:26 - 00000224 _____ () C:\WINDOWS\system32\AF15IRTBL.bin
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\PAYDAY
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\ProgramData\RELOADED
2015-04-02 17:32 - 2015-04-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Payday The Heist
2015-04-02 10:46 - 2015-04-02 10:46 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Mama's_Little_Bakery
2015-04-02 10:33 - 2015-04-02 10:34 - 00000000 ____D () C:\Users\Miroslav\Downloads\common
2015-04-02 10:33 - 2015-04-02 10:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\J-Runner
2015-03-30 15:28 - 2015-03-30 15:28 - 00044296 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2015-03-28 21:04 - 2015-03-28 21:04 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Wargaming.net
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2015-03-27 20:32 - 2015-03-27 20:41 - 00000000 ____D () C:\Program Files (x86)\Oddworld - New 'n' Tasty
2015-03-26 16:08 - 2015-03-26 17:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\BlackHole
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ____D () C:\ProgramData\CanonIJ
2015-03-26 12:29 - 2015-03-26 12:30 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Canon
2015-03-26 12:29 - 2015-03-26 12:29 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2015-03-24 09:42 - 2015-03-03 15:17 - 00295552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-03-23 10:02 - 2015-03-23 10:02 - 00002009 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-03-20 07:46 - 2015-04-09 02:58 - 00029329 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-03-20 07:46 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434788.dll
2015-03-20 07:46 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434788.dll
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Terasoft
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\Program Files (x86)\Terasoft
2015-03-19 16:47 - 2005-04-15 19:58 - 01351392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00440352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHFLXGD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00416528 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\COMCT332.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00260880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFLXGRD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00212240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RICHTX32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00200224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCI32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00167968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMASK32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00084512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PICCLP32.OCX
2015-03-19 16:47 - 2004-02-23 20:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-03-19 16:47 - 2000-02-25 11:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CTL3D32.$$A
2015-03-19 16:47 - 1999-08-11 14:21 - 00129024 _____ (Visual Design Softscape AB) C:\WINDOWS\SysWOW64\VDGT.ocx
2015-03-19 16:47 - 1999-06-01 17:20 - 00924432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC40.$$A
2015-03-19 16:47 - 1998-06-26 21:22 - 00205848 _____ (Sheridan Software Systems, Inc.) C:\WINDOWS\SysWOW64\threed32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00094744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grid32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00084000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoutl32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00068640 _____ (MicroHelp, Inc.) C:\WINDOWS\SysWOW64\gauge32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00057880 _____ (Outrider Systems, Inc.) C:\WINDOWS\SysWOW64\spin32.ocx
2015-03-19 16:47 - 1998-06-23 20:57 - 00067376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SYSINFO.OCX
2015-03-19 16:47 - 1997-10-30 13:53 - 00138240 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxshp432.ocx
2015-03-19 16:47 - 1997-05-20 13:35 - 00130984 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxvid432.ocx
2015-03-19 16:47 - 1997-05-20 13:34 - 00033712 _____ (ImageFX) C:\WINDOWS\SysWOW64\FXTmr432.ocx
2015-03-19 16:47 - 1997-05-20 13:33 - 00090536 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxsnd432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00122800 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxrtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00098216 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxmtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:31 - 00134056 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxlbl432.ocx
2015-03-19 16:47 - 1997-05-20 13:30 - 00248744 _____ (ImageFX) C:\WINDOWS\SysWOW64\fximg432.ocx
2015-03-19 16:47 - 1997-04-10 14:08 - 00142752 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxpic432.ocx
2015-03-19 16:47 - 1997-04-02 13:11 - 00107008 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxtls432.dll
2015-03-19 16:47 - 1996-10-07 08:42 - 00070144 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1313.DLL
2015-03-19 16:47 - 1996-10-07 08:38 - 00075776 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1113.DLL
2015-03-19 16:47 - 1996-10-07 08:35 - 00030208 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN13.DLL
2015-03-18 20:12 - 2015-03-18 20:12 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Unity
2015-03-18 19:42 - 2015-03-18 19:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Unity

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 15:26 - 2015-01-29 13:56 - 00000000 ____D () C:\Users\Miroslav\OneDrive
2015-04-17 15:26 - 2015-01-28 18:41 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1734145228-1787166247-3967612736-1001
2015-04-17 15:22 - 2015-01-28 18:45 - 00000968 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-17 15:20 - 2015-01-29 13:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-17 15:20 - 2013-08-22 16:46 - 00311665 _____ () C:\WINDOWS\setupact.log
2015-04-17 15:20 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-17 15:19 - 2015-01-29 13:24 - 01590364 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-17 15:19 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-17 15:18 - 2015-01-29 13:32 - 00000000 ____D () C:\Users\Miroslav
2015-04-17 15:14 - 2015-02-15 17:20 - 00003970 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DF002838-4A77-4B12-9D81-559A5DBAA6BE}
2015-04-17 15:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-17 14:59 - 2015-01-29 09:19 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-17 14:58 - 2015-01-29 14:24 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Skype
2015-04-17 14:55 - 2015-01-28 18:45 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-17 13:07 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-17 13:00 - 2014-11-21 06:54 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-17 13:00 - 2014-11-21 06:10 - 00738682 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-17 13:00 - 2014-11-21 06:10 - 00151404 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-17 09:03 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-16 17:38 - 2015-01-31 18:00 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:13 - 2015-02-15 17:30 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\.minecraft
2015-04-16 09:59 - 2014-11-20 21:43 - 00040328 _____ () C:\WINDOWS\PFRO.log
2015-04-16 08:06 - 2015-01-29 15:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-16 08:05 - 2015-01-29 15:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-16 08:04 - 2013-08-22 15:25 - 00000167 _____ () C:\WINDOWS\win.ini
2015-04-16 08:02 - 2015-01-28 20:02 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-16 07:57 - 2015-01-28 20:02 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-16 07:48 - 2015-01-28 23:12 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-16 07:48 - 2014-11-21 14:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-15 16:59 - 2015-01-29 09:19 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-15 16:05 - 2015-01-28 18:52 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-14 16:24 - 2015-03-04 19:02 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-04-14 12:59 - 2015-01-29 13:24 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-14 12:59 - 2015-01-28 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-14 12:52 - 2015-01-28 19:18 - 00001408 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-12 20:40 - 2015-02-01 15:17 - 00028144 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00271200 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00136752 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00088408 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-12 16:03 - 2015-03-16 13:43 - 00000000 ____D () C:\Program Files (x86)\FastShare
2015-04-10 17:40 - 2015-02-12 10:32 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\abgx360
2015-04-10 16:06 - 2015-01-29 15:51 - 00000000 ____D () C:\ProgramData\Origin
2015-04-10 16:05 - 2015-01-29 15:51 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-09 11:14 - 2015-01-29 14:23 - 00000000 ____D () C:\ProgramData\Skype
2015-04-09 02:58 - 2015-01-28 19:23 - 17176128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 14617288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 12689592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 03317344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-04-09 02:58 - 2015-01-28 18:44 - 00078480 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-04-09 02:58 - 2015-01-28 18:44 - 00066704 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 06841488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 03478344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 00936264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-04-08 23:30 - 2015-01-29 13:24 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-04-08 19:52 - 2015-01-29 13:24 - 04336074 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-04-07 15:22 - 2015-02-20 19:39 - 00000000 ____D () C:\Program Files (x86)\Fraps
2015-04-04 15:23 - 2015-01-29 13:52 - 00001437 _____ () C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-04 15:23 - 2015-01-28 18:46 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-03 12:01 - 2015-02-10 20:24 - 552809807 _____ () C:\WINDOWS\MEMORY.DMP
2015-04-03 12:01 - 2015-02-10 20:24 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-03 11:49 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-02 16:12 - 2015-01-31 18:39 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-28 21:54 - 2015-02-24 20:18 - 00347464 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-03-28 21:38 - 2015-02-03 18:57 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\PunkBuster
2015-03-28 21:38 - 2015-02-03 18:50 - 00281288 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-03-28 21:36 - 2015-01-31 16:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\NVIDIA
2015-03-28 21:30 - 2015-01-29 19:50 - 00546600 _____ () C:\WINDOWS\DirectX.log
2015-03-28 20:19 - 2014-07-24 15:42 - 00000000 ____D () C:\games
2015-03-28 05:44 - 2015-01-28 19:17 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-01-28 19:17 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-01-28 19:17 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-01-28 19:17 - 01570672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-03-27 20:45 - 2015-01-28 18:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\VirtualStore
2015-03-26 16:04 - 2015-01-31 17:59 - 00000000 ____D () C:\Users\Miroslav\Desktop\mirdáskovi věci
2015-03-26 13:23 - 2015-01-29 12:17 - 00001088 _____ () C:\Users\Miroslav\AppData\Local\MRDownloader.nast
2015-03-26 12:54 - 2015-01-29 15:51 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-03-24 14:43 - 2015-01-28 18:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Packages
2015-03-23 10:02 - 2015-01-28 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-03-22 08:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-20 07:52 - 2015-01-29 13:24 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-20 07:49 - 2015-01-29 13:24 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

==================== Files in the root of some directories =======

2015-02-15 17:20 - 2015-02-17 09:42 - 0000034 _____ () C:\Users\Miroslav\AppData\Roaming\mskkofit.dat
2015-02-15 17:20 - 2015-02-15 17:20 - 0009061 _____ () C:\Users\Miroslav\AppData\Roaming\mswbrbq.dat
2015-02-07 17:06 - 2015-03-10 12:55 - 0006719 _____ () C:\Users\Miroslav\AppData\Local\MRDownloader.err
2015-01-29 12:17 - 2015-03-26 13:23 - 0001088 _____ () C:\Users\Miroslav\AppData\Local\MRDownloader.nast

Some content of TEMP:
====================
C:\Users\Miroslav\AppData\Local\Temp\3c76886110e67a8dd08fc0268cd89241.dll
C:\Users\Miroslav\AppData\Local\Temp\7db34a2b130ee010d570f65c3e739ed2.dll
C:\Users\Miroslav\AppData\Local\Temp\downloader.dll
C:\Users\Miroslav\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Miroslav\AppData\Local\Temp\drm_dyndata_7390005.dll
C:\Users\Miroslav\AppData\Local\Temp\drm_dyndata_7400005.dll
C:\Users\Miroslav\AppData\Local\Temp\ed6e8e8c4b588010c8f64663407c6196.dll
C:\Users\Miroslav\AppData\Local\Temp\MSETUP4.EXE
C:\Users\Miroslav\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Miroslav\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Miroslav\AppData\Local\Temp\nvStInst.exe
C:\Users\Miroslav\AppData\Local\Temp\Quarantine.exe
C:\Users\Miroslav\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Miroslav\AppData\Local\Temp\sonarinst.exe
C:\Users\Miroslav\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================


Available physical RAM: 4456.82 MB
Total physical RAM: 6143.36 MB
Percentage of memory in use: 27%

==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData\TEMP:56E2E879
AlternateDataStreams: C:\Users\Miroslav\OneDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Miroslav\Desktop" je 1712 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#5 Příspěvek od mirekd »

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 15-04-2015 04
Ran by Miroslav at 2015-04-17 16:03:04 Run:1
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available profiles: Miroslav)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
Start
CloseProcesses:


CHR StartupUrls: Default -> "hxxp://s101-cz.ogame.gameforge.com/game/index.php?page=overview", "https://www.seznam.cz/?clid=22668", "https://www.seznam.cz/?clid=22668", "hxxp://www.omniboxes.com/?type=hp&ts=142815027 ... XX5QF7P289", "hxxp://www.omniboxes.com/?type=hppp&ts=1428150 ... XX5QF7P289"


S3 xhunter1; \??\C:\WINDOWS\xhunter1.sys [X]
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879


2015-02-15 17:20 - 2015-02-17 09:42 - 0000034 _____ () C:\Users\Miroslav\AppData\Roaming\mskkofit.dat
2015-02-15 17:20 - 2015-02-15 17:20 - 0009061 _____ () C:\Users\Miroslav\AppData\Roaming\mswbrbq.dat
2015-02-07 17:06 - 2015-03-10 12:55 - 0006719 _____ () C:\Users\Miroslav\AppData\Local\MRDownloader.err
2015-01-29 12:17 - 2015-03-26 13:23 - 0001088 _____ () C:\Users\Miroslav\AppData\Local\MRDownloader.nast

EmptyTemp:
Reboot:
End
*****************

Processes closed successfully.
Chrome StartupUrls deleted successfully.
xhunter1 => Service deleted successfully.
C:\ProgramData\TEMP => ":56E2E879" ADS removed successfully.
C:\Users\Miroslav\AppData\Roaming\mskkofit.dat => Moved successfully.
C:\Users\Miroslav\AppData\Roaming\mswbrbq.dat => Moved successfully.
C:\Users\Miroslav\AppData\Local\MRDownloader.err => Moved successfully.
C:\Users\Miroslav\AppData\Local\MRDownloader.nast => Moved successfully.
EmptyTemp: => Removed 3.1 GB temporary data.


The system needed a reboot.

==== End of Fixlog 16:03:55 ====
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#6 Příspěvek od mirekd »

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 15-04-2015 04
Ran by Miroslav (administrator) on MIREK on 17-04-2015 16:21:11
Running from C:\Users\Miroslav\Desktop
Loaded Profiles: Miroslav (Available profiles: Miroslav)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20689_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\szndesktop.exe
() C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\listicka-x64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-28] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (CANON INC.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5512912 2015-04-12] (Avast Software s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1022152 2014-12-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [seznam-listicka-distribuce] => C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe [1062472 2013-05-16] ()
HKLM-x32\...\Run: [IJNetworkScanUtility] => C:\Program Files (x86)\Canon\Canon IJ Network Scan Utility\CNMNSUT.exe [206240 2010-08-24] (CANON INC.)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (CANON INC.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-02-10] (Oracle Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.autoupdate] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\szninstall.exe [1062472 2013-05-16] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [cz.seznam.software.szndesktop] => C:\Users\Miroslav\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe [92664 2013-04-12] ()
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2889408 2015-04-14] (Valve Corporation)
HKU\S-1-5-21-1734145228-1787166247-3967612736-1001\...\MountPoints2: {f5154064-a7a8-11e4-824e-806e6f6e6963} - "F:\Autorun.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-12] (Avast Software s.r.o.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-07] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-12] (Avast Software s.r.o.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-07] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.)
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-07] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1734145228-1787166247-3967612736-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Miroslav\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-02-24] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: No Name - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-28]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.seznam.cz/
CHR StartupUrls: Default -> "hxxp://s101-cz.ogame.gameforge.com/game/index.php?page=overview", "https://www.seznam.cz/?clid=22668", "https://www.seznam.cz/?clid=22668", "hxxp://www.omniboxes.com/?type=hp&ts=142815027 ... XX5QF7P289", "hxxp://www.omniboxes.com/?type=hppp&ts=1428150 ... XX5QF7P289"
CHR Profile: C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Drive) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-17]
CHR Extension: (AntiGameOrigin) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldbahlcmhmlpomdepooifmhnalokdhgm [2015-04-17]
CHR Extension: (Google Wallet) - C:\Users\Miroslav\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-01-28]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-23]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-12] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4030800 2015-03-23] (Avast Software)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-11-21] (Microsoft Corporation)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-28] (NVIDIA Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-28] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-28] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-10] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-04-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [88408 2015-04-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-04-12] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [136752 2015-04-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [271200 2015-04-12] ()
U3 dtscsidrv; C:\Windows\System32\Drivers\dtscsidrv.sys [309248 2015-02-07] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-01-29] (Disc Soft Ltd)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-28] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2015-02-07] (Duplex Secure Ltd.)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-03-23] (Avast Software)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 xusb22; C:\Windows\System32\drivers\xusb22.sys [87040 2014-11-21] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 16:21 - 2015-04-17 16:21 - 00017172 _____ () C:\Users\Miroslav\Desktop\FRST.txt
2015-04-17 16:20 - 2015-04-17 16:20 - 00112640 _____ (forum.viry.cz) C:\Users\Miroslav\Desktop\FRSTLauncher (1).exe
2015-04-17 16:02 - 2015-04-17 16:02 - 00000622 _____ () C:\Users\Miroslav\Downloads\FixList.zip
2015-04-17 15:27 - 2015-04-17 15:27 - 00014942 _____ () C:\Users\Miroslav\Downloads\FRSTLauncher.exe
2015-04-17 15:16 - 2015-04-17 15:18 - 00000000 ____D () C:\AdwCleaner
2015-04-17 15:15 - 2015-04-17 15:15 - 02217984 _____ () C:\Users\Miroslav\Desktop\adwcleaner_4.201.exe
2015-04-17 15:00 - 2015-04-17 16:21 - 00000000 ____D () C:\FRST
2015-04-17 14:42 - 2015-04-17 14:42 - 02097664 _____ (Farbar) C:\Users\Miroslav\Desktop\FRST64.exe
2015-04-16 08:06 - 2015-04-16 08:06 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-15 17:23 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 17:23 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) C:\WINDOWS\system32\sechost.dll
2015-04-15 17:23 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 17:23 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 17:23 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2015-04-15 17:23 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64cpu.dll
2015-04-15 17:23 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) C:\WINDOWS\system32\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 17:23 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdh.dll
2015-04-15 17:23 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 17:22 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepdu.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll
2015-04-15 17:22 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-04-15 17:22 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-04-15 17:22 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2015-04-15 17:22 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2015-04-15 17:22 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-04-15 17:22 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 17:22 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 17:22 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wups.dll
2015-04-15 17:22 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapp.exe
2015-04-15 17:22 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) C:\WINDOWS\system32\storewuauth.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) C:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 17:22 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\system32\wudriver.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wucltux.dll
2015-04-15 17:22 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 17:22 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 17:22 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 17:22 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 17:22 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-04-15 17:22 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-04-15 17:22 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2015-04-15 17:22 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 17:22 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 17:22 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtmled.dll
2015-04-15 17:22 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 17:22 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 17:22 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-04-15 17:22 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) C:\WINDOWS\system32\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 17:22 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 17:22 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 17:22 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 17:22 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 17:22 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieapfltr.dll
2015-04-15 17:22 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 17:22 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 17:22 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 17:22 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 17:22 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\clfsw32.dll
2015-04-15 17:22 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 17:22 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\http.sys
2015-04-15 17:22 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsm.dll
2015-04-14 12:59 - 2015-04-14 12:59 - 00002164 _____ () C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-04-14 12:59 - 2015-04-08 22:32 - 00560968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-04-14 12:55 - 2015-04-09 02:58 - 31570064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 30397072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 25375048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 24053576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15818528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 15716232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 14006752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 12852784 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 11380728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 10423952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-04-14 12:55 - 2015-04-09 02:58 - 02935416 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02896528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 02573456 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01895568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435012.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01086424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01047368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 01037640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00970568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00962192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00927440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00849552 _____ () C:\WINDOWS\system32\nvmcumd.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00175880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00154256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00150648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-04-14 12:55 - 2015-04-09 02:58 - 00128512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-04-12 20:40 - 2015-04-12 20:40 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-04-12 20:40 - 2015-04-12 20:40 - 00043112 _____ (Avast Software s.r.o.) C:\WINDOWS\avastSS.scr
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\SysWOW64\GWX
2015-04-08 10:59 - 2015-04-08 10:59 - 00000000 ___SD () C:\WINDOWS\system32\GWX
2015-04-07 15:12 - 2015-04-07 15:42 - 286932445 _____ () C:\Users\Miroslav\Downloads\Sony-Vegas-Pro-13-Plná-verze.zip
2015-04-07 15:04 - 2015-04-07 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fraps
2015-04-07 15:04 - 2012-09-02 00:12 - 02777920 _____ (Beepa Pty Ltd) C:\Users\Miroslav\Downloads\Fraps 3.5.9.exe
2015-04-07 14:12 - 2013-05-29 19:37 - 00000000 ____D () C:\Users\Miroslav\Downloads\Lego Star Wars 3 The Clone Wars
2015-04-04 18:25 - 2015-04-04 18:25 - 00000000 ____D () C:\Program Files (x86)\Origin Games
2015-04-04 14:38 - 2015-04-04 14:38 - 00003150 _____ () C:\WINDOWS\System32\Tasks\{6D4B4A1D-E5B0-491B-8CB1-056909B4FF42}
2015-04-03 12:01 - 2015-04-03 12:01 - 00353888 _____ () C:\WINDOWS\Minidump\040315-57421-01.dmp
2015-04-03 11:45 - 2015-04-03 11:58 - 00000000 ____D () C:\Users\Miroslav\AppData\Temp
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\Documents\ArcSoft ToGo
2015-04-03 11:45 - 2015-04-03 11:45 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\ArcSoft
2015-04-03 11:44 - 2015-04-03 12:08 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\ArcSoft
2015-04-03 11:44 - 2015-04-03 11:44 - 00000000 ____D () C:\ProgramData\ArcSoft
2015-04-03 11:44 - 2006-11-14 11:31 - 00022784 _____ (Arcsoft, Inc.) C:\WINDOWS\SysWOW64\Drivers\afc.sys
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2015-04-03 11:43 - 2015-04-03 12:09 - 00000000 ____D () C:\Program Files (x86)\MSI
2015-04-03 11:41 - 2007-12-26 21:57 - 00445952 _____ () C:\WINDOWS\afaunist.exe
2015-04-03 11:41 - 2007-10-26 11:26 - 00000224 _____ () C:\WINDOWS\system32\AF15IRTBL.bin
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\PAYDAY
2015-04-02 17:56 - 2015-04-02 17:56 - 00000000 ____D () C:\ProgramData\RELOADED
2015-04-02 17:32 - 2015-04-02 17:46 - 00000000 ____D () C:\Program Files (x86)\Payday The Heist
2015-04-02 10:46 - 2015-04-02 10:46 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Mama's_Little_Bakery
2015-04-02 10:33 - 2015-04-02 10:34 - 00000000 ____D () C:\Users\Miroslav\Downloads\common
2015-04-02 10:33 - 2015-04-02 10:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\J-Runner
2015-03-30 15:28 - 2015-03-30 15:28 - 00044296 ____H (LogMeIn Inc.) C:\WINDOWS\system32\Drivers\Hamdrv.sys
2015-03-28 21:04 - 2015-03-28 21:04 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Wargaming.net
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ___HD () C:\WINDOWS\msdownld.tmp
2015-03-28 20:20 - 2015-03-28 20:20 - 00000000 ____D () C:\WINDOWS\SysWOW64\directx
2015-03-27 20:32 - 2015-03-27 20:41 - 00000000 ____D () C:\Program Files (x86)\Oddworld - New 'n' Tasty
2015-03-26 16:08 - 2015-03-26 17:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\BlackHole
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ___HD () C:\ProgramData\CanonIJScan
2015-03-26 12:30 - 2015-03-26 12:30 - 00000000 ____D () C:\ProgramData\CanonIJ
2015-03-26 12:29 - 2015-03-26 12:30 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Canon
2015-03-26 12:29 - 2015-03-26 12:29 - 00000000 ___HD () C:\ProgramData\CanonIJEGV
2015-03-24 09:42 - 2015-03-03 15:17 - 00295552 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2015-03-23 10:02 - 2015-03-23 10:02 - 00002009 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-03-20 07:46 - 2015-04-09 02:58 - 00029329 _____ () C:\WINDOWS\system32\nvinfo.pb
2015-03-20 07:46 - 2015-03-13 21:41 - 01896136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434788.dll
2015-03-20 07:46 - 2015-03-13 21:41 - 01557648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434788.dll
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Terasoft
2015-03-19 16:47 - 2015-03-19 16:47 - 00000000 ____D () C:\Program Files (x86)\Terasoft
2015-03-19 16:47 - 2005-04-15 19:58 - 01351392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00662288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCOMCT2.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00440352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSHFLXGD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00416528 _____ (Microsoft Corporation ) C:\WINDOWS\SysWOW64\COMCT332.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00260880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFLXGRD.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00224016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTL32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00212240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\RICHTX32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00200224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCI32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00167968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMASK32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00152848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\COMDLG32.OCX
2015-03-19 16:47 - 2004-03-09 16:45 - 00084512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PICCLP32.OCX
2015-03-19 16:47 - 2004-02-23 20:42 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSSTDFMT.DLL
2015-03-19 16:47 - 2000-02-25 11:47 - 00045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CTL3D32.$$A
2015-03-19 16:47 - 1999-08-11 14:21 - 00129024 _____ (Visual Design Softscape AB) C:\WINDOWS\SysWOW64\VDGT.ocx
2015-03-19 16:47 - 1999-06-01 17:20 - 00924432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC40.$$A
2015-03-19 16:47 - 1998-06-26 21:22 - 00205848 _____ (Sheridan Software Systems, Inc.) C:\WINDOWS\SysWOW64\threed32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00094744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\grid32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00084000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msoutl32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00068640 _____ (MicroHelp, Inc.) C:\WINDOWS\SysWOW64\gauge32.ocx
2015-03-19 16:47 - 1998-06-26 21:22 - 00057880 _____ (Outrider Systems, Inc.) C:\WINDOWS\SysWOW64\spin32.ocx
2015-03-19 16:47 - 1998-06-23 20:57 - 00067376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SYSINFO.OCX
2015-03-19 16:47 - 1997-10-30 13:53 - 00138240 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxshp432.ocx
2015-03-19 16:47 - 1997-05-20 13:35 - 00130984 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxvid432.ocx
2015-03-19 16:47 - 1997-05-20 13:34 - 00033712 _____ (ImageFX) C:\WINDOWS\SysWOW64\FXTmr432.ocx
2015-03-19 16:47 - 1997-05-20 13:33 - 00090536 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxsnd432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00122800 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxrtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:32 - 00098216 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxmtx432.ocx
2015-03-19 16:47 - 1997-05-20 13:31 - 00134056 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxlbl432.ocx
2015-03-19 16:47 - 1997-05-20 13:30 - 00248744 _____ (ImageFX) C:\WINDOWS\SysWOW64\fximg432.ocx
2015-03-19 16:47 - 1997-04-10 14:08 - 00142752 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxpic432.ocx
2015-03-19 16:47 - 1997-04-02 13:11 - 00107008 _____ (ImageFX) C:\WINDOWS\SysWOW64\fxtls432.dll
2015-03-19 16:47 - 1996-10-07 08:42 - 00070144 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1313.DLL
2015-03-19 16:47 - 1996-10-07 08:38 - 00075776 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN1113.DLL
2015-03-19 16:47 - 1996-10-07 08:35 - 00030208 _____ (Pegasus Imaging Corp.) C:\WINDOWS\SysWOW64\PICN13.DLL
2015-03-18 20:12 - 2015-03-18 20:12 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Unity
2015-03-18 19:42 - 2015-03-18 19:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Unity

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-17 16:12 - 2015-01-29 13:24 - 01624652 _____ () C:\WINDOWS\WindowsUpdate.log
2015-04-17 16:12 - 2015-01-28 18:41 - 00003598 _____ () C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1734145228-1787166247-3967612736-1001
2015-04-17 16:10 - 2015-01-29 13:56 - 00000000 ____D () C:\Users\Miroslav\OneDrive
2015-04-17 16:06 - 2015-01-28 18:45 - 00000968 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-17 16:05 - 2015-01-29 13:24 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-04-17 16:05 - 2013-08-22 16:46 - 00311896 _____ () C:\WINDOWS\setupact.log
2015-04-17 16:05 - 2013-08-22 16:45 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-04-17 16:04 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\BBI
2015-04-17 16:00 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\sru
2015-04-17 15:59 - 2015-01-29 14:24 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Skype
2015-04-17 15:59 - 2015-01-29 09:19 - 00000914 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-04-17 15:55 - 2015-01-28 18:45 - 00000972 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-17 15:18 - 2015-01-29 13:32 - 00000000 ____D () C:\Users\Miroslav
2015-04-17 15:14 - 2015-02-15 17:20 - 00003970 _____ () C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{DF002838-4A77-4B12-9D81-559A5DBAA6BE}
2015-04-17 13:07 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\AppReadiness
2015-04-17 13:00 - 2014-11-21 06:54 - 01745984 _____ () C:\WINDOWS\system32\PerfStringBackup.INI
2015-04-17 13:00 - 2014-11-21 06:10 - 00738682 _____ () C:\WINDOWS\system32\perfh005.dat
2015-04-17 13:00 - 2014-11-21 06:10 - 00151404 _____ () C:\WINDOWS\system32\perfc005.dat
2015-04-17 09:03 - 2012-07-26 09:59 - 00000000 ____D () C:\WINDOWS\CbsTemp
2015-04-16 17:38 - 2015-01-31 18:00 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-04-16 17:13 - 2015-02-15 17:30 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\.minecraft
2015-04-16 09:59 - 2014-11-20 21:43 - 00040328 _____ () C:\WINDOWS\PFRO.log
2015-04-16 08:06 - 2015-01-29 15:21 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-16 08:05 - 2015-01-29 15:16 - 00000000 ____D () C:\ProgramData\Microsoft Help
2015-04-16 08:04 - 2013-08-22 15:25 - 00000167 _____ () C:\WINDOWS\win.ini
2015-04-16 08:02 - 2015-01-28 20:02 - 00000000 ____D () C:\WINDOWS\system32\MRT
2015-04-16 07:57 - 2015-01-28 20:02 - 128913832 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-04-16 07:48 - 2015-01-28 23:12 - 00000000 ____D () C:\WINDOWS\system32\appraiser
2015-04-16 07:48 - 2014-11-21 14:26 - 00000000 ___SD () C:\WINDOWS\system32\CompatTel
2015-04-15 16:59 - 2015-01-29 09:19 - 00003802 _____ () C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-15 16:05 - 2015-01-28 18:52 - 00004182 _____ () C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-14 16:24 - 2015-03-04 19:02 - 00000000 ____D () C:\ProgramData\CanonIJPLM
2015-04-14 12:59 - 2015-01-29 13:24 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-04-14 12:59 - 2015-01-28 19:10 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-04-14 12:52 - 2015-01-28 19:18 - 00001408 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk
2015-04-12 20:40 - 2015-02-01 15:17 - 00028144 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00271200 _____ () C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00136752 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00088408 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00065736 _____ () C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-12 20:40 - 2015-01-28 18:52 - 00029168 _____ () C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-12 16:03 - 2015-03-16 13:43 - 00000000 ____D () C:\Program Files (x86)\FastShare
2015-04-10 17:40 - 2015-02-12 10:32 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\abgx360
2015-04-10 16:06 - 2015-01-29 15:51 - 00000000 ____D () C:\ProgramData\Origin
2015-04-10 16:05 - 2015-01-29 15:51 - 00000000 ____D () C:\Program Files (x86)\Origin
2015-04-09 11:14 - 2015-01-29 14:23 - 00000000 ____D () C:\ProgramData\Skype
2015-04-09 02:58 - 2015-01-28 19:23 - 17176128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 14617288 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 12689592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-04-09 02:58 - 2015-01-28 19:23 - 03317344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-04-09 02:58 - 2015-01-28 18:44 - 00078480 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-04-09 02:58 - 2015-01-28 18:44 - 00066704 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 06841488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 03478344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 02558608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 00936264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-04-08 23:30 - 2015-01-29 13:24 - 00385168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-04-08 23:30 - 2015-01-29 13:24 - 00062608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-04-08 19:52 - 2015-01-29 13:24 - 04336074 _____ () C:\WINDOWS\system32\nvcoproc.bin
2015-04-07 15:22 - 2015-02-20 19:39 - 00000000 ____D () C:\Program Files (x86)\Fraps
2015-04-04 15:23 - 2015-01-29 13:52 - 00001437 _____ () C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-04-04 15:23 - 2015-01-28 18:46 - 00002214 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-04-03 12:01 - 2015-02-10 20:24 - 552809807 _____ () C:\WINDOWS\MEMORY.DMP
2015-04-03 12:01 - 2015-02-10 20:24 - 00000000 ____D () C:\WINDOWS\Minidump
2015-04-03 11:49 - 2013-08-22 15:25 - 00262144 ___SH () C:\WINDOWS\system32\config\ELAM
2015-04-02 16:12 - 2015-01-31 18:39 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-03-28 21:54 - 2015-02-24 20:18 - 00347464 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2015-03-28 21:38 - 2015-02-03 18:57 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\PunkBuster
2015-03-28 21:38 - 2015-02-03 18:50 - 00281288 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2015-03-28 21:36 - 2015-01-31 16:42 - 00000000 ____D () C:\Users\Miroslav\AppData\Roaming\NVIDIA
2015-03-28 21:30 - 2015-01-29 19:50 - 00546600 _____ () C:\WINDOWS\DirectX.log
2015-03-28 20:19 - 2014-07-24 15:42 - 00000000 ____D () C:\games
2015-03-28 05:44 - 2015-01-28 19:17 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-03-28 05:44 - 2015-01-28 19:17 - 01316000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-03-28 05:43 - 2015-01-28 19:17 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-03-28 05:43 - 2015-01-28 19:17 - 01570672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-03-27 20:45 - 2015-01-28 18:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\VirtualStore
2015-03-26 16:04 - 2015-01-31 17:59 - 00000000 ____D () C:\Users\Miroslav\Desktop\mirdáskovi věci
2015-03-26 12:54 - 2015-01-29 15:51 - 00000000 ____D () C:\ProgramData\Electronic Arts
2015-03-24 14:43 - 2015-01-28 18:33 - 00000000 ____D () C:\Users\Miroslav\AppData\Local\Packages
2015-03-23 10:02 - 2015-01-28 18:53 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-03-22 08:38 - 2013-08-22 17:36 - 00000000 ____D () C:\WINDOWS\system32\NDF
2015-03-20 07:52 - 2015-01-29 13:24 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation
2015-03-20 07:49 - 2015-01-29 13:24 - 00000000 ____D () C:\Program Files\NVIDIA Corporation

==================== Files in the root of some directories =======


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed



===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================


Available physical RAM: 4478.05 MB
Total physical RAM: 6143.36 MB
Percentage of memory in use: 27%

==================== MBR and Partition Table ==================


==================== Scheduled Tasks (whitelisted) ==================

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\Users\Miroslav\OneDrive:ms-properties

==================== Security Center ==================

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}



===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)


***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Miroslav\Desktop" je 1712 MB.


***** Startup Programs *****


***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
EnableFirewall REG_DWORD 0x1
DisableNotifications REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]


***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000


==================== End Of Log ==============================
Nahoru
mirekd
Návštěvník
Návštěvník
Příspěvky: 30
Registrován: 25 dub 2008 07:48

Re: Search protect

#7 Příspěvek od mirekd »

vše je o.k. díkes moc.jaká je odměna ? :-)
Nahoru
Zamčeno

Zpět na „Řešení problémů, logy“