Zdravím,
poslední dobou se mi stává, že mi už od startu PC procesy vytěžují disk na 99%, v hlavní 4 nejžravějších procesů jsou Hostitelé služby např. Hostitel služby: síťové služby, místní systém (omezená síť), místní služby (omezená síť).
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by Dani-PC (administrator) on DANI on 04-05-2015 12:42:55
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) F:\Windows\System32\atiesrxx.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) F:\Windows\System32\dasHost.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Microsoft Corporation) F:\Program Files\Microsoft Xbox 360 Accessories\XBoxStat.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) F:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Razer Inc.) F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(Blizzard Entertainment) F:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Blizzard Entertainment) F:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) F:\Windows\System32\Taskmgr.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) F:\Windows\System32\dllhost.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => F:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [PivotSoftware] => F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM-x32\...\Run: [DT BEN] => F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122336 2014-08-12] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => f:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => F:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-30] (Avast Software s.r.o.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [GoogleChromeAutoLaunch_EDD9E8D82A82E117FD1DD54C81312571] => F:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Skype] => F:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-02] (Valve Corporation)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Battle.net] => F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2861104 2015-04-07] (Blizzard Entertainment)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => F:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://istart.webssearches.com/web/?typ ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://istart.webssearches.com/web/?typ ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> DefaultScope {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://istart.webssearches.com/web/?utm ... earchTerms}
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = http://istart.webssearches.com/web/?utm ... earchTerms}
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = http://istart.webssearches.com/web/?utm ... earchTerms}
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> F:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - F:\Program Files\Internet Explorer\iexplore.exe http://istart.webssearches.com/?type=sc ... XXZ1DBGNAA
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> F:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> F:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-2478564968-1396142455-567371876-1001: @unity3d.com/UnityPlayer,version=1.0 -> F:\Users\Dani-PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: F:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - F:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - F:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-04]
CHR Extension: (Google Docs) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-04]
CHR Extension: (Google Drive) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-04]
CHR Extension: (YouTube) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-04]
CHR Extension: (Tanki Online) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chnamgoimgnbgkabfjkikldbfdhhfhdo [2014-10-04]
CHR Extension: (Google Search) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-04]
CHR Extension: (Realm of the Mad God) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp [2014-10-04]
CHR Extension: (Google Sheets) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-04]
CHR Extension: (LoungeDestroyer) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-03-09]
CHR Extension: (Bookmark Manager) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Avast Online Security) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-30]
CHR Extension: (Twitch Now) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2014-10-04]
CHR Extension: (Google Wallet) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-04]
CHR Extension: (Gmail) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - F:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; F:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; F:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 c2wts; F:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-11-22] (Microsoft Corporation)
R2 DTSRVC; F:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
S3 fussvc; F:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-12] (Electronic Arts)
R2 Razer Game Scanner Service; F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
S3 SwitchBoard; F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; F:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; F:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)
S3 WdNisSvc; F:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; F:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; F:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; F:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; F:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; F:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; F:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; F:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
R1 aswSnx; F:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; F:\Windows\system32\drivers\aswSP.sys [442264 2015-04-30] (Avast Software s.r.o.)
R2 aswStm; F:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; F:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; F:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
R1 dtsoftbus01; F:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-03-08] (Disc Soft Ltd)
R3 rzdaendpt; F:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-12-30] (Razer Inc)
R2 rzpmgrk; F:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; F:\WINDOWS\system32\drivers\rzpnk.sys [129600 2014-10-23] (Razer, Inc.)
R3 rzvkeyboard; F:\Windows\System32\drivers\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
R3 ScpVBus; F:\Windows\System32\drivers\ScpVBus.sys [39168 2014-10-23] (Scarlet.Crush Productions)
R3 SensorsSimulatorDriver; F:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
S3 tapoas; F:\Windows\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WdNisDrv; F:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; F:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 12:42 - 2015-05-04 12:43 - 00020425 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
2015-05-04 12:42 - 2015-05-04 12:42 - 00000000 ____D () F:\FRST
2015-05-04 12:40 - 2015-05-04 12:41 - 21546080 _____ (Malwarebytes Corporation ) F:\Users\Dani-PC\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-04 12:30 - 2015-05-04 12:30 - 02101248 _____ (Farbar) F:\Users\Dani-PC\Desktop\FRST64.exe
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\Users\Dani-PC\Desktop\mbar
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-04 12:20 - 2015-05-04 12:20 - 00136408 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00107736 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00000000 ____D () F:\ProgramData\Malwarebytes
2015-05-04 12:19 - 2015-05-04 12:19 - 16502728 _____ (Malwarebytes Corp.) F:\Users\Dani-PC\Downloads\mbar-1.09.1.1004.exe
2015-05-04 00:04 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-04 00:04 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-05-04 00:04 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) F:\WINDOWS\system32\dwmcore.dll
2015-05-04 00:04 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-04 00:04 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-05-04 00:04 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) F:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) F:\WINDOWS\system32\SettingsHandlers.dll
2015-05-04 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbgeng.dll
2015-05-04 00:03 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbgeng.dll
2015-05-04 00:03 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbghelp.dll
2015-05-04 00:03 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbghelp.dll
2015-05-04 00:03 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) F:\WINDOWS\system32\win32k.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\sdbus.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\dumpsd.sys
2015-05-04 00:03 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) F:\WINDOWS\system32\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\udfs.sys
2015-05-04 00:03 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) F:\WINDOWS\system32\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:29 - 00410017 _____ () F:\WINDOWS\system32\ApnDatabase.xml
2015-05-04 00:03 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) F:\WINDOWS\system32\sdbinst.exe
2015-05-04 00:03 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-04 00:03 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) F:\WINDOWS\system32\wpdshext.dll
2015-05-04 00:03 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wevtsvc.dll
2015-05-04 00:03 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wpdshext.dll
2015-05-04 00:03 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) F:\WINDOWS\system32\dpapisrv.dll
2015-05-04 00:03 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\certcli.dll
2015-05-04 00:03 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\certcli.dll
2015-04-30 21:40 - 2015-04-30 21:40 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AVAST Software
2015-04-30 21:39 - 2015-05-04 12:37 - 00004182 _____ () F:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-30 21:39 - 2015-04-30 21:39 - 00442264 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00364472 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\aswBoot.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00335112 _____ (AVAST Software s. r. o.) F:\WINDOWS\AswCheck.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00272248 _____ () F:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00137288 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00093528 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00089944 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00065736 _____ () F:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00029168 _____ () F:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00001949 _____ () F:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\WINDOWS\System32\Tasks\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:38 - 01047320 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-30 21:38 - 2015-04-30 21:38 - 00043112 _____ (Avast Software s.r.o.) F:\WINDOWS\avastSS.scr
2015-04-30 21:38 - 2015-04-30 21:38 - 00000000 ____D () F:\Program Files\AVAST Software
2015-04-30 21:36 - 2015-04-30 21:36 - 00000000 ____D () F:\Users\Dani-PC\Tracing
2015-04-30 21:32 - 2015-05-01 14:32 - 00355986 _____ () F:\WINDOWS\PFRO.log
2015-04-29 14:12 - 2015-04-29 14:12 - 00281040 _____ () F:\WINDOWS\Minidump\042915-28718-01.dmp
2015-04-23 15:57 - 2015-04-23 15:57 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AMD
2015-04-22 22:05 - 2015-04-22 22:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Solvusoft
2015-04-22 22:05 - 2012-10-15 17:02 - 00019888 _____ (solvusoft) F:\WINDOWS\system32\roboot64.exe
2015-04-22 21:30 - 2015-04-22 21:31 - 00281040 _____ () F:\WINDOWS\Minidump\042215-23546-01.dmp
2015-04-19 18:59 - 2015-04-25 12:34 - 00000000 ____D () F:\Users\Dani-PC\Desktop\web
2015-04-17 19:10 - 2015-04-28 18:12 - 00000000 ____D () F:\Program Files (x86)\SpeedFan
2015-04-17 19:10 - 2015-04-17 19:10 - 00001030 _____ () F:\Users\Dani-PC\Desktop\SpeedFan.lnk
2015-04-17 19:10 - 2015-04-17 19:10 - 00000045 _____ () F:\WINDOWS\SysWOW64\initdebug.nfo
2015-04-17 15:26 - 2015-04-17 15:26 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-04-17 15:26 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-17 15:26 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-17 15:26 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) F:\WINDOWS\system32\rascfg.dll
2015-04-17 15:26 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\rascfg.dll
2015-04-16 21:01 - 2015-04-29 14:12 - 659939598 _____ () F:\WINDOWS\MEMORY.DMP
2015-04-16 21:01 - 2015-04-16 21:01 - 00281040 _____ () F:\WINDOWS\Minidump\041615-23187-01.dmp
2015-04-15 22:28 - 2015-04-15 22:28 - 00000000 ____D () F:\ProgramData\ATI
2015-04-15 22:25 - 2015-04-15 22:25 - 00033944 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152225403018.log
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\Program Files (x86)\AMD
2015-04-15 22:15 - 2015-04-15 22:15 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152215333428.log
2015-04-15 22:08 - 2015-04-15 22:08 - 00060385 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152208016234.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00052517 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152206364336.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Local\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Local\ATI
2015-04-15 20:06 - 2015-04-15 20:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Program Files (x86)\Notepad++
2015-04-15 18:25 - 2015-05-03 17:10 - 00000080 _____ () F:\Users\Dani-PC\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-04-15 18:25 - 2015-04-15 18:25 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Rockstar Games
2015-04-15 18:24 - 2015-04-15 18:26 - 00000000 ____D () F:\Users\Dani-PC\Documents\Rockstar Games
2015-04-15 18:23 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files (x86)\Rockstar Games
2015-04-15 18:22 - 2015-04-15 18:22 - 00001140 _____ () F:\WINDOWS\DirectX.log
2015-04-15 18:19 - 2015-04-15 18:19 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-15 15:48 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files\Rockstar Games
2015-04-15 11:20 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:20 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) F:\WINDOWS\system32\sechost.dll
2015-04-15 11:20 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 11:20 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) F:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:20 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) F:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) F:\WINDOWS\system32\tdh.dll
2015-04-15 11:20 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 11:20 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) F:\WINDOWS\system32\msctf.dll
2015-04-15 11:20 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 11:19 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) F:\WINDOWS\system32\aepdu.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) F:\WINDOWS\system32\aeinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) F:\WINDOWS\system32\appraiser.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) F:\WINDOWS\system32\invagent.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) F:\WINDOWS\system32\generaltel.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) F:\WINDOWS\system32\devinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) F:\WINDOWS\system32\acmigration.dll
2015-04-15 11:19 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:19 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups.dll
2015-04-15 11:19 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups2.dll
2015-04-15 11:19 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) F:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:19 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) F:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:19 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wups.dll
2015-04-15 11:19 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapp.exe
2015-04-15 11:19 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) F:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) F:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) F:\WINDOWS\system32\wudriver.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) F:\WINDOWS\system32\wucltux.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapi.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 11:19 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 11:19 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 11:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtml.dll
2015-04-15 11:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) F:\WINDOWS\system32\vbscript.dll
2015-04-15 11:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) F:\WINDOWS\system32\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript9.dll
2015-04-15 11:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 11:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 11:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) F:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) F:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) F:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) F:\WINDOWS\system32\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 11:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) F:\WINDOWS\system32\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) F:\WINDOWS\system32\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 11:19 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 11:19 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) F:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:19 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 11:19 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\http.sys
2015-04-15 11:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) F:\WINDOWS\system32\lsm.dll
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Raptr
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Program Files (x86)\Raptr
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\library_dir
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\ProgramData\AMD
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Program Files (x86)\AMD AVT
2015-04-14 16:57 - 2015-04-14 16:57 - 00053392 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141657582014.log
2015-04-14 16:54 - 2015-04-14 16:54 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141654276099.log
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\SysWOW64\GWX
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\system32\GWX
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () F:\ProgramData\Codemasters
2015-04-04 18:29 - 2015-04-04 18:29 - 00466456 _____ (Creative Labs) F:\WINDOWS\system32\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00444952 _____ (Creative Labs) F:\WINDOWS\SysWOW64\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\system32\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\SysWOW64\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00000000 ____D () F:\Program Files (x86)\OpenAL
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 12:40 - 2014-10-04 12:56 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Battle.net
2015-05-04 12:38 - 2015-02-11 21:47 - 00000914 _____ () F:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-04 12:37 - 2014-10-04 12:43 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Skype
2015-05-04 12:27 - 2013-09-30 06:24 - 01858927 _____ () F:\WINDOWS\WindowsUpdate.log
2015-05-04 12:12 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\NDF
2015-05-04 12:10 - 2014-10-04 01:27 - 00003962 _____ () F:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0C875E54-3221-428F-8DA2-055DE63F0D71}
2015-05-04 12:08 - 2014-10-04 12:31 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-04 12:06 - 2015-01-25 17:52 - 00003758 _____ () F:\WINDOWS\System32\Tasks\AutoKMS
2015-05-04 12:03 - 2014-10-04 01:27 - 00000966 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-04 12:01 - 2015-03-31 16:49 - 00017013 _____ () F:\WINDOWS\setupact.log
2015-05-04 12:01 - 2013-08-22 16:45 - 00000006 ____H () F:\WINDOWS\Tasks\SA.DAT
2015-05-04 12:01 - 2013-08-22 16:44 - 05104984 _____ () F:\WINDOWS\system32\FNTCACHE.DAT
2015-05-04 00:15 - 2013-08-22 17:36 - 00000000 ___RD () F:\WINDOWS\ImmersiveControlPanel
2015-05-04 00:15 - 2013-08-22 15:36 - 00000000 ____D () F:\WINDOWS\system32\AdvancedInstallers
2015-05-04 00:06 - 2013-08-22 17:20 - 00000000 ____D () F:\WINDOWS\CbsTemp
2015-05-04 00:00 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\sru
2015-05-03 23:49 - 2014-10-04 01:27 - 00000970 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-03 20:54 - 2014-10-04 01:16 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Packages
2015-05-03 03:45 - 2014-10-16 21:41 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\uTorrent
2015-05-03 03:45 - 2014-05-24 16:28 - 00000000 ____D () F:\Users\Dani-PC\Desktop\filmy
2015-05-03 01:53 - 2014-11-09 14:44 - 00000000 ____D () F:\KMPlayer
2015-05-02 18:29 - 2013-08-22 15:25 - 00262144 ___SH () F:\WINDOWS\system32\config\BBI
2015-05-02 01:34 - 2014-10-04 01:21 - 00003598 _____ () F:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2478564968-1396142455-567371876-1001
2015-05-02 01:15 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppReadiness
2015-05-01 01:50 - 2014-10-04 01:27 - 00002214 _____ () F:\Users\Public\Desktop\Google Chrome.lnk
2015-04-30 21:37 - 2014-10-04 01:30 - 00000000 ____D () F:\ProgramData\AVAST Software
2015-04-30 21:36 - 2014-10-04 01:13 - 00000000 ____D () F:\Users\Dani-PC
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ____D () F:\ProgramData\Skype
2015-04-29 14:12 - 2014-10-23 16:11 - 00000000 ____D () F:\WINDOWS\Minidump
2015-04-27 00:18 - 2014-10-04 13:06 - 00000000 ____D () F:\ProgramData\Origin
2015-04-26 18:12 - 2013-09-30 06:20 - 01847990 _____ () F:\WINDOWS\system32\PerfStringBackup.INI
2015-04-26 18:12 - 2013-09-30 05:57 - 00772496 _____ () F:\WINDOWS\system32\perfh005.dat
2015-04-26 18:12 - 2013-09-30 05:57 - 00168614 _____ () F:\WINDOWS\system32\perfc005.dat
2015-04-21 00:10 - 2014-05-15 15:57 - 00000000 ____D () F:\Users\Dani-PC\Desktop\hry
2015-04-20 15:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\rescache
2015-04-17 15:44 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppCompat
2015-04-17 15:26 - 2014-10-16 22:01 - 00000000 ___RD () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-17 15:26 - 2014-10-16 21:57 - 00000000 ____D () F:\ProgramData\Microsoft Help
2015-04-15 22:25 - 2014-10-04 01:08 - 00000000 ____D () F:\Program Files\AMD
2015-04-15 22:06 - 2014-10-04 01:09 - 00000000 ____D () F:\ProgramData\Package Cache
2015-04-15 15:48 - 2014-12-29 22:01 - 00000000 ___HD () F:\Program Files (x86)\InstallShield Installation Information
2015-04-15 12:35 - 2014-10-04 01:50 - 00000000 ____D () F:\WINDOWS\system32\MRT
2015-04-15 12:32 - 2014-10-04 01:50 - 128913832 _____ (Microsoft Corporation) F:\WINDOWS\system32\MRT.exe
2015-04-15 12:29 - 2013-08-22 15:25 - 00000167 _____ () F:\WINDOWS\win.ini
2015-04-15 12:25 - 2014-12-11 00:36 - 00000000 ____D () F:\WINDOWS\system32\appraiser
2015-04-15 12:25 - 2014-10-04 15:06 - 00000000 ___SD () F:\WINDOWS\system32\CompatTel
2015-04-14 20:03 - 2015-01-25 17:21 - 00000000 ____D () F:\Program Files (x86)\Hearthstone
2015-04-14 18:38 - 2015-02-11 21:47 - 00003802 _____ () F:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 17:40 - 2015-01-31 02:32 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Trine2
2015-04-14 17:39 - 2015-01-30 02:13 - 00000000 ____D () F:\Users\Dani-PC\Documents\Diablo III
2015-04-14 17:39 - 2014-10-01 19:16 - 00000000 ____D () F:\Users\Dani-PC\Documents\FIFA 15
2015-04-14 16:48 - 2014-05-15 14:56 - 00000000 ____D () F:\AMD
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 19:25 - 2014-10-04 12:56 - 00000000 ____D () F:\Program Files (x86)\Battle.net
2015-04-10 13:25 - 2015-02-11 21:47 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Adobe
2015-04-08 13:32 - 2015-01-21 16:22 - 00000000 ____D () F:\Program Files (x86)\Diablo III
2015-04-07 14:15 - 2014-05-15 15:23 - 00000000 ____D () F:\Program Files (x86)\World of Warcraft
2015-04-04 18:29 - 2014-12-11 00:01 - 00000000 ____D () F:\Users\Dani-PC\Documents\My Games
==================== Files in the root of some directories =======
2015-03-01 02:15 - 2015-03-01 02:15 - 0000132 _____ () F:\Users\Dani-PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-03-01 02:10 - 2015-03-01 03:14 - 0001480 _____ () F:\Users\Dani-PC\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-03-31 15:41 - 2015-03-31 16:14 - 0007600 _____ () F:\Users\Dani-PC\AppData\Local\Resmon.ResmonCfg
Some content of TEMP:
====================
F:\Users\Dani-PC\AppData\Local\Temp\CleanSchedule.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptrpatch.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptr_stub.exe
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00001.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00002.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfextra.dll
F:\Users\Dani-PC\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-24 17:01
==================== End Of Log ============================
Odvirování PC, zrychlení počítače, vzdálená pomoc prostřednictvím služby neslape.cz
Hostitel služby vytěžuje disk
Moderátor: Moderátoři
Pravidla fóra
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Pokud chcete pomoc, vložte log z FRST [návod zde] nebo RSIT [návod zde]
Jednotlivé thready budou po vyřešení uzamčeny. Stejně tak ty, které budou nečinné déle než 14 dní. Vizte Pravidlo o zamykání témat. Děkujeme za pochopení.
!NOVINKA!
Nově lze využívat služby vzdálené pomoci, kdy se k vašemu počítači připojí odborník a bližší informace o problému si od vás získá telefonicky! Více na www.neslape.cz
Hostitel služby vytěžuje disk
- Přílohy
-
- Addition.rar
- (13.41 KiB) Staženo 27 x
Re: Hostitel služby vytěžuje disk
Krasny den Vam preju 
Zepar haveti v PC mate, takze mu odlehcime a uvidime, do jake miry to pomuze.
MBAR nebo MBAM nejake hrozby nasly? Dejte pripadne log z jejich cinnosti.
V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).
Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
Zepar haveti v PC mate, takze mu odlehcime a uvidime, do jake miry to pomuze. MBAR nebo MBAM nejake hrozby nasly? Dejte pripadne log z jejich cinnosti. V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose). Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )
- ukoncete vsechny programy
- kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
- kliknete na Scan, pote na Cleaning
- po restartu na Vas vyskoci log (pripadne jej najdete v F:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Hostitel služby vytěžuje disk
Mbar zadnou hrozbu nenasel.
# AdwCleaner v4.203 - Log vytvořen 04/05/2015 v 13:16:27
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-05-02.1 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : Dani-PC - DANI
# Spuštěno z : F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
# Nastavení : Čištění
***** [ Služby ] *****
***** [ Soubory / Složky ] *****
Složka Smazáno : F:\ProgramData\IHProtectUpDate
Složka Smazáno : F:\Users\Dani-PC\AppData\Roaming\Solvusoft
Soubor Smazáno : F:\WINDOWS\System32\roboot64.exe
***** [ Naplánované úlohy ] *****
***** [ Zástupci ] *****
***** [ Registry ] *****
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Klíč Smazáno : HKLM\SOFTWARE\SupDp
Klíč Smazáno : HKLM\SOFTWARE\SupTab
Klíč Smazáno : HKLM\SOFTWARE\Uniblue
Klíč Smazáno : HKLM\SOFTWARE\webssearchesSoftware
Klíč Smazáno : HKLM\SOFTWARE\IHProtect
***** [ Prohlížeče ] *****
-\\ Internet Explorer v11.0.9600.17416
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v42.0.2311.135
[F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
[F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : ", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA
*************************
AdwCleaner[R0].txt - [2999 bytů] - [04/05/2015 13:15:11]
AdwCleaner[S0].txt - [2010 bytů] - [04/05/2015 13:16:27]
########## EOF - F:\AdwCleaner\AdwCleaner[S0].txt - [2068 bytů] ##########
# AdwCleaner v4.203 - Log vytvořen 04/05/2015 v 13:16:27
# Aktualizováno 30/04/2015 by Xplode
# Databáze : 2015-05-02.1 [Server]
# Operační system : Windows 8.1 Pro (x64)
# Uživatelské jméno : Dani-PC - DANI
# Spuštěno z : F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
# Nastavení : Čištění
***** [ Služby ] *****
***** [ Soubory / Složky ] *****
Složka Smazáno : F:\ProgramData\IHProtectUpDate
Složka Smazáno : F:\Users\Dani-PC\AppData\Roaming\Solvusoft
Soubor Smazáno : F:\WINDOWS\System32\roboot64.exe
***** [ Naplánované úlohy ] *****
***** [ Zástupci ] *****
***** [ Registry ] *****
Klíč Smazáno : [x64] HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0}
Data Obnoveno : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Klíč Smazáno : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{E733165D-CBCF-4FDA-883E-ADEF965B476C}
Klíč Smazáno : HKLM\SOFTWARE\SupDp
Klíč Smazáno : HKLM\SOFTWARE\SupTab
Klíč Smazáno : HKLM\SOFTWARE\Uniblue
Klíč Smazáno : HKLM\SOFTWARE\webssearchesSoftware
Klíč Smazáno : HKLM\SOFTWARE\IHProtect
***** [ Prohlížeče ] *****
-\\ Internet Explorer v11.0.9600.17416
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Nastavení Obnoveno : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
-\\ Google Chrome v42.0.2311.135
[F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Extension] : eofcbnmajmjmplflapaojjnihcjkigck
[F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : ", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA
*************************
AdwCleaner[R0].txt - [2999 bytů] - [04/05/2015 13:15:11]
AdwCleaner[S0].txt - [2010 bytů] - [04/05/2015 13:16:27]
########## EOF - F:\AdwCleaner\AdwCleaner[S0].txt - [2068 bytů] ##########
Re: Hostitel služby vytěžuje disk
Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Hostitel služby vytěžuje disk
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by Dani-PC (administrator) on DANI on 04-05-2015 13:27:08
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) F:\Windows\System32\atiesrxx.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) F:\Windows\System32\dasHost.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) F:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Razer Inc.) F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastUI.exe
(Blizzard Entertainment) F:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Blizzard Entertainment) F:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => F:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [PivotSoftware] => F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM-x32\...\Run: [DT BEN] => F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122336 2014-08-12] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => f:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => F:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-30] (Avast Software s.r.o.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [GoogleChromeAutoLaunch_EDD9E8D82A82E117FD1DD54C81312571] => F:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Skype] => F:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-02] (Valve Corporation)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Battle.net] => F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2861104 2015-04-07] (Blizzard Entertainment)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => F:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> F:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> F:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> F:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-2478564968-1396142455-567371876-1001: @unity3d.com/UnityPlayer,version=1.0 -> F:\Users\Dani-PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: F:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - F:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - F:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-04]
CHR Extension: (Google Docs) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-04]
CHR Extension: (Google Drive) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-04]
CHR Extension: (YouTube) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-04]
CHR Extension: (Tanki Online) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chnamgoimgnbgkabfjkikldbfdhhfhdo [2014-10-04]
CHR Extension: (Google Search) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-04]
CHR Extension: (Realm of the Mad God) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp [2014-10-04]
CHR Extension: (Google Sheets) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-04]
CHR Extension: (LoungeDestroyer) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-03-09]
CHR Extension: (Bookmark Manager) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Avast Online Security) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-30]
CHR Extension: (Twitch Now) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2014-10-04]
CHR Extension: (Google Wallet) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-04]
CHR Extension: (Gmail) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - F:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; F:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; F:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 c2wts; F:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-11-22] (Microsoft Corporation)
R2 DTSRVC; F:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
S3 fussvc; F:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-12] (Electronic Arts)
R2 Razer Game Scanner Service; F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
S3 SwitchBoard; F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; F:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; F:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)
S3 WdNisSvc; F:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; F:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; F:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; F:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; F:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; F:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; F:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; F:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
R1 aswSnx; F:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; F:\Windows\system32\drivers\aswSP.sys [442264 2015-04-30] (Avast Software s.r.o.)
R2 aswStm; F:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; F:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; F:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
R1 dtsoftbus01; F:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-03-08] (Disc Soft Ltd)
R3 rzdaendpt; F:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-12-30] (Razer Inc)
R2 rzpmgrk; F:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; F:\WINDOWS\system32\drivers\rzpnk.sys [129600 2014-10-23] (Razer, Inc.)
R3 rzvkeyboard; F:\Windows\System32\drivers\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
R3 ScpVBus; F:\Windows\System32\drivers\ScpVBus.sys [39168 2014-10-23] (Scarlet.Crush Productions)
R3 SensorsSimulatorDriver; F:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 tapoas; F:\Windows\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WdNisDrv; F:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; F:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 13:16 - 2015-05-04 13:20 - 00002159 _____ () F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt
2015-05-04 13:14 - 2015-05-04 13:20 - 00000000 ____D () F:\AdwCleaner
2015-05-04 13:14 - 2015-05-04 13:14 - 02204160 _____ () F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
2015-05-04 12:51 - 2015-05-04 12:51 - 00013730 _____ () F:\Users\Dani-PC\Desktop\Addition.rar
2015-05-04 12:42 - 2015-05-04 13:27 - 00018663 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
2015-05-04 12:42 - 2015-05-04 13:27 - 00000000 ____D () F:\FRST
2015-05-04 12:40 - 2015-05-04 12:41 - 21546080 _____ (Malwarebytes Corporation ) F:\Users\Dani-PC\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-04 12:30 - 2015-05-04 12:30 - 02101248 _____ (Farbar) F:\Users\Dani-PC\Desktop\FRST64.exe
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\Users\Dani-PC\Desktop\mbar
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-04 12:20 - 2015-05-04 12:20 - 00136408 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00107736 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00000000 ____D () F:\ProgramData\Malwarebytes
2015-05-04 12:19 - 2015-05-04 12:19 - 16502728 _____ (Malwarebytes Corp.) F:\Users\Dani-PC\Downloads\mbar-1.09.1.1004.exe
2015-05-04 00:04 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-04 00:04 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-05-04 00:04 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) F:\WINDOWS\system32\dwmcore.dll
2015-05-04 00:04 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-04 00:04 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-05-04 00:04 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) F:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) F:\WINDOWS\system32\SettingsHandlers.dll
2015-05-04 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbgeng.dll
2015-05-04 00:03 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbgeng.dll
2015-05-04 00:03 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbghelp.dll
2015-05-04 00:03 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbghelp.dll
2015-05-04 00:03 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) F:\WINDOWS\system32\win32k.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\sdbus.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\dumpsd.sys
2015-05-04 00:03 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) F:\WINDOWS\system32\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\udfs.sys
2015-05-04 00:03 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) F:\WINDOWS\system32\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:29 - 00410017 _____ () F:\WINDOWS\system32\ApnDatabase.xml
2015-05-04 00:03 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) F:\WINDOWS\system32\sdbinst.exe
2015-05-04 00:03 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-04 00:03 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) F:\WINDOWS\system32\wpdshext.dll
2015-05-04 00:03 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wevtsvc.dll
2015-05-04 00:03 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wpdshext.dll
2015-05-04 00:03 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) F:\WINDOWS\system32\dpapisrv.dll
2015-05-04 00:03 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\certcli.dll
2015-05-04 00:03 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\certcli.dll
2015-04-30 21:40 - 2015-04-30 21:40 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AVAST Software
2015-04-30 21:39 - 2015-05-04 13:07 - 00000000 ____D () F:\WINDOWS\System32\Tasks\AVAST Software
2015-04-30 21:39 - 2015-05-04 12:37 - 00004182 _____ () F:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-30 21:39 - 2015-04-30 21:39 - 00442264 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00364472 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\aswBoot.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00272248 _____ () F:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00137288 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00093528 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00089944 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00065736 _____ () F:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00029168 _____ () F:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00001949 _____ () F:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:38 - 01047320 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-30 21:38 - 2015-04-30 21:38 - 00043112 _____ (Avast Software s.r.o.) F:\WINDOWS\avastSS.scr
2015-04-30 21:38 - 2015-04-30 21:38 - 00000000 ____D () F:\Program Files\AVAST Software
2015-04-30 21:36 - 2015-04-30 21:36 - 00000000 ____D () F:\Users\Dani-PC\Tracing
2015-04-30 21:32 - 2015-05-01 14:32 - 00355986 _____ () F:\WINDOWS\PFRO.log
2015-04-29 14:12 - 2015-04-29 14:12 - 00281040 _____ () F:\WINDOWS\Minidump\042915-28718-01.dmp
2015-04-23 15:57 - 2015-04-23 15:57 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AMD
2015-04-22 21:30 - 2015-04-22 21:31 - 00281040 _____ () F:\WINDOWS\Minidump\042215-23546-01.dmp
2015-04-19 18:59 - 2015-04-25 12:34 - 00000000 ____D () F:\Users\Dani-PC\Desktop\web
2015-04-17 19:10 - 2015-04-28 18:12 - 00000000 ____D () F:\Program Files (x86)\SpeedFan
2015-04-17 19:10 - 2015-04-17 19:10 - 00001030 _____ () F:\Users\Dani-PC\Desktop\SpeedFan.lnk
2015-04-17 19:10 - 2015-04-17 19:10 - 00000045 _____ () F:\WINDOWS\SysWOW64\initdebug.nfo
2015-04-17 15:26 - 2015-04-17 15:26 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-04-17 15:26 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-17 15:26 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-17 15:26 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) F:\WINDOWS\system32\rascfg.dll
2015-04-17 15:26 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\rascfg.dll
2015-04-16 21:01 - 2015-04-29 14:12 - 659939598 _____ () F:\WINDOWS\MEMORY.DMP
2015-04-16 21:01 - 2015-04-16 21:01 - 00281040 _____ () F:\WINDOWS\Minidump\041615-23187-01.dmp
2015-04-15 22:28 - 2015-04-15 22:28 - 00000000 ____D () F:\ProgramData\ATI
2015-04-15 22:25 - 2015-04-15 22:25 - 00033944 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152225403018.log
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\Program Files (x86)\AMD
2015-04-15 22:15 - 2015-04-15 22:15 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152215333428.log
2015-04-15 22:08 - 2015-04-15 22:08 - 00060385 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152208016234.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00052517 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152206364336.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Local\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Local\ATI
2015-04-15 20:06 - 2015-04-15 20:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Program Files (x86)\Notepad++
2015-04-15 18:25 - 2015-05-03 17:10 - 00000080 _____ () F:\Users\Dani-PC\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-04-15 18:25 - 2015-04-15 18:25 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Rockstar Games
2015-04-15 18:24 - 2015-04-15 18:26 - 00000000 ____D () F:\Users\Dani-PC\Documents\Rockstar Games
2015-04-15 18:23 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files (x86)\Rockstar Games
2015-04-15 18:22 - 2015-04-15 18:22 - 00001140 _____ () F:\WINDOWS\DirectX.log
2015-04-15 18:19 - 2015-04-15 18:19 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-15 15:48 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files\Rockstar Games
2015-04-15 11:20 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:20 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) F:\WINDOWS\system32\sechost.dll
2015-04-15 11:20 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 11:20 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) F:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:20 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) F:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) F:\WINDOWS\system32\tdh.dll
2015-04-15 11:20 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 11:20 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) F:\WINDOWS\system32\msctf.dll
2015-04-15 11:20 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 11:19 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) F:\WINDOWS\system32\aepdu.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) F:\WINDOWS\system32\aeinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) F:\WINDOWS\system32\appraiser.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) F:\WINDOWS\system32\invagent.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) F:\WINDOWS\system32\generaltel.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) F:\WINDOWS\system32\devinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) F:\WINDOWS\system32\acmigration.dll
2015-04-15 11:19 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:19 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups.dll
2015-04-15 11:19 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups2.dll
2015-04-15 11:19 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) F:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:19 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) F:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:19 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wups.dll
2015-04-15 11:19 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapp.exe
2015-04-15 11:19 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) F:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) F:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) F:\WINDOWS\system32\wudriver.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) F:\WINDOWS\system32\wucltux.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapi.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 11:19 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 11:19 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 11:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtml.dll
2015-04-15 11:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) F:\WINDOWS\system32\vbscript.dll
2015-04-15 11:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) F:\WINDOWS\system32\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript9.dll
2015-04-15 11:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 11:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 11:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) F:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) F:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) F:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) F:\WINDOWS\system32\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 11:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) F:\WINDOWS\system32\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) F:\WINDOWS\system32\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 11:19 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 11:19 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) F:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:19 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 11:19 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\http.sys
2015-04-15 11:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) F:\WINDOWS\system32\lsm.dll
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Raptr
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Program Files (x86)\Raptr
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\library_dir
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\ProgramData\AMD
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Program Files (x86)\AMD AVT
2015-04-14 16:57 - 2015-04-14 16:57 - 00053392 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141657582014.log
2015-04-14 16:54 - 2015-04-14 16:54 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141654276099.log
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\SysWOW64\GWX
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\system32\GWX
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () F:\ProgramData\Codemasters
2015-04-04 18:29 - 2015-04-04 18:29 - 00466456 _____ (Creative Labs) F:\WINDOWS\system32\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00444952 _____ (Creative Labs) F:\WINDOWS\SysWOW64\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\system32\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\SysWOW64\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00000000 ____D () F:\Program Files (x86)\OpenAL
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 13:24 - 2014-10-04 12:56 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Battle.net
2015-05-04 13:24 - 2013-09-30 06:24 - 01899902 _____ () F:\WINDOWS\WindowsUpdate.log
2015-05-04 13:23 - 2015-01-25 17:52 - 00003758 _____ () F:\WINDOWS\System32\Tasks\AutoKMS
2015-05-04 13:23 - 2014-10-04 12:43 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Skype
2015-05-04 13:23 - 2014-10-04 01:21 - 00003596 _____ () F:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2478564968-1396142455-567371876-1001
2015-05-04 13:18 - 2014-10-04 12:31 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-04 13:18 - 2014-10-04 01:27 - 00000966 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-04 13:17 - 2015-03-31 16:49 - 00017129 _____ () F:\WINDOWS\setupact.log
2015-05-04 13:17 - 2013-08-22 16:45 - 00000006 ____H () F:\WINDOWS\Tasks\SA.DAT
2015-05-04 13:17 - 2013-08-22 15:25 - 00262144 ___SH () F:\WINDOWS\system32\config\BBI
2015-05-04 13:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\sru
2015-05-04 12:49 - 2014-10-04 01:27 - 00000970 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-04 12:38 - 2015-02-11 21:47 - 00000914 _____ () F:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-04 12:12 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\NDF
2015-05-04 12:10 - 2014-10-04 01:27 - 00003962 _____ () F:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0C875E54-3221-428F-8DA2-055DE63F0D71}
2015-05-04 12:01 - 2013-08-22 16:44 - 05104984 _____ () F:\WINDOWS\system32\FNTCACHE.DAT
2015-05-04 00:15 - 2013-08-22 17:36 - 00000000 ___RD () F:\WINDOWS\ImmersiveControlPanel
2015-05-04 00:15 - 2013-08-22 15:36 - 00000000 ____D () F:\WINDOWS\system32\AdvancedInstallers
2015-05-04 00:06 - 2013-08-22 17:20 - 00000000 ____D () F:\WINDOWS\CbsTemp
2015-05-03 20:54 - 2014-10-04 01:16 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Packages
2015-05-03 03:45 - 2014-10-16 21:41 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\uTorrent
2015-05-03 03:45 - 2014-05-24 16:28 - 00000000 ____D () F:\Users\Dani-PC\Desktop\filmy
2015-05-03 01:53 - 2014-11-09 14:44 - 00000000 ____D () F:\KMPlayer
2015-05-02 01:15 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppReadiness
2015-05-01 01:50 - 2014-10-04 01:27 - 00002214 _____ () F:\Users\Public\Desktop\Google Chrome.lnk
2015-04-30 21:37 - 2014-10-04 01:30 - 00000000 ____D () F:\ProgramData\AVAST Software
2015-04-30 21:36 - 2014-10-04 01:13 - 00000000 ____D () F:\Users\Dani-PC
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ____D () F:\ProgramData\Skype
2015-04-29 14:12 - 2014-10-23 16:11 - 00000000 ____D () F:\WINDOWS\Minidump
2015-04-27 00:18 - 2014-10-04 13:06 - 00000000 ____D () F:\ProgramData\Origin
2015-04-26 18:12 - 2013-09-30 06:20 - 01847990 _____ () F:\WINDOWS\system32\PerfStringBackup.INI
2015-04-26 18:12 - 2013-09-30 05:57 - 00772496 _____ () F:\WINDOWS\system32\perfh005.dat
2015-04-26 18:12 - 2013-09-30 05:57 - 00168614 _____ () F:\WINDOWS\system32\perfc005.dat
2015-04-21 00:10 - 2014-05-15 15:57 - 00000000 ____D () F:\Users\Dani-PC\Desktop\hry
2015-04-20 15:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\rescache
2015-04-17 15:44 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppCompat
2015-04-17 15:26 - 2014-10-16 22:01 - 00000000 ___RD () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-17 15:26 - 2014-10-16 21:57 - 00000000 ____D () F:\ProgramData\Microsoft Help
2015-04-15 22:25 - 2014-10-04 01:08 - 00000000 ____D () F:\Program Files\AMD
2015-04-15 22:06 - 2014-10-04 01:09 - 00000000 ____D () F:\ProgramData\Package Cache
2015-04-15 15:48 - 2014-12-29 22:01 - 00000000 ___HD () F:\Program Files (x86)\InstallShield Installation Information
2015-04-15 12:35 - 2014-10-04 01:50 - 00000000 ____D () F:\WINDOWS\system32\MRT
2015-04-15 12:32 - 2014-10-04 01:50 - 128913832 _____ (Microsoft Corporation) F:\WINDOWS\system32\MRT.exe
2015-04-15 12:29 - 2013-08-22 15:25 - 00000167 _____ () F:\WINDOWS\win.ini
2015-04-15 12:25 - 2014-12-11 00:36 - 00000000 ____D () F:\WINDOWS\system32\appraiser
2015-04-15 12:25 - 2014-10-04 15:06 - 00000000 ___SD () F:\WINDOWS\system32\CompatTel
2015-04-14 20:03 - 2015-01-25 17:21 - 00000000 ____D () F:\Program Files (x86)\Hearthstone
2015-04-14 18:38 - 2015-02-11 21:47 - 00003802 _____ () F:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 17:40 - 2015-01-31 02:32 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Trine2
2015-04-14 17:39 - 2015-01-30 02:13 - 00000000 ____D () F:\Users\Dani-PC\Documents\Diablo III
2015-04-14 17:39 - 2014-10-01 19:16 - 00000000 ____D () F:\Users\Dani-PC\Documents\FIFA 15
2015-04-14 16:48 - 2014-05-15 14:56 - 00000000 ____D () F:\AMD
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 19:25 - 2014-10-04 12:56 - 00000000 ____D () F:\Program Files (x86)\Battle.net
2015-04-10 13:25 - 2015-02-11 21:47 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Adobe
2015-04-08 13:32 - 2015-01-21 16:22 - 00000000 ____D () F:\Program Files (x86)\Diablo III
2015-04-07 14:15 - 2014-05-15 15:23 - 00000000 ____D () F:\Program Files (x86)\World of Warcraft
2015-04-04 18:29 - 2014-12-11 00:01 - 00000000 ____D () F:\Users\Dani-PC\Documents\My Games
==================== Files in the root of some directories =======
2015-03-01 02:15 - 2015-03-01 02:15 - 0000132 _____ () F:\Users\Dani-PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-03-01 02:10 - 2015-03-01 03:14 - 0001480 _____ () F:\Users\Dani-PC\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-03-31 15:41 - 2015-03-31 16:14 - 0007600 _____ () F:\Users\Dani-PC\AppData\Local\Resmon.ResmonCfg
Some content of TEMP:
====================
F:\Users\Dani-PC\AppData\Local\Temp\CleanSchedule.exe
F:\Users\Dani-PC\AppData\Local\Temp\Quarantine.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptrpatch.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptr_stub.exe
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00001.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00002.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfextra.dll
F:\Users\Dani-PC\AppData\Local\Temp\sqlite3.dll
F:\Users\Dani-PC\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-24 17:01
==================== End Of Log ============================
Ran by Dani-PC (administrator) on DANI on 04-05-2015 13:27:08
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) F:\Windows\System32\atiesrxx.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) F:\Windows\System32\dasHost.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Skype Technologies S.A.) F:\Program Files (x86)\Skype\Phone\Skype.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Razer Inc.) F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastUI.exe
(Blizzard Entertainment) F:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Blizzard Entertainment) F:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => F:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [PivotSoftware] => F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM-x32\...\Run: [DT BEN] => F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122336 2014-08-12] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => f:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => F:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-30] (Avast Software s.r.o.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [GoogleChromeAutoLaunch_EDD9E8D82A82E117FD1DD54C81312571] => F:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Skype] => F:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-02] (Valve Corporation)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Battle.net] => F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2861104 2015-04-07] (Blizzard Entertainment)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => F:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> F:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> F:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> F:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-2478564968-1396142455-567371876-1001: @unity3d.com/UnityPlayer,version=1.0 -> F:\Users\Dani-PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: F:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - F:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - F:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA"
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2014-10-04]
CHR Extension: (Google Docs) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-10-04]
CHR Extension: (Google Drive) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-10-04]
CHR Extension: (YouTube) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-10-04]
CHR Extension: (Tanki Online) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\chnamgoimgnbgkabfjkikldbfdhhfhdo [2014-10-04]
CHR Extension: (Google Search) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-10-04]
CHR Extension: (Realm of the Mad God) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhjfmaldpppkmjjgkmadddbanpabfflp [2014-10-04]
CHR Extension: (Google Sheets) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2014-10-04]
CHR Extension: (LoungeDestroyer) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-03-09]
CHR Extension: (Bookmark Manager) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Avast Online Security) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-04-30]
CHR Extension: (Twitch Now) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmbdmpjmlijibeockamioakdpmhjnpk [2014-10-04]
CHR Extension: (Google Wallet) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-10-04]
CHR Extension: (Gmail) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-10-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - F:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; F:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; F:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 c2wts; F:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-11-22] (Microsoft Corporation)
R2 DTSRVC; F:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
S3 fussvc; F:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-12] (Electronic Arts)
R2 Razer Game Scanner Service; F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
S3 SwitchBoard; F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; F:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; F:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)
S3 WdNisSvc; F:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; F:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; F:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; F:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; F:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; F:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; F:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; F:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
R1 aswSnx; F:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; F:\Windows\system32\drivers\aswSP.sys [442264 2015-04-30] (Avast Software s.r.o.)
R2 aswStm; F:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; F:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; F:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
R1 dtsoftbus01; F:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-03-08] (Disc Soft Ltd)
R3 rzdaendpt; F:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-12-30] (Razer Inc)
R2 rzpmgrk; F:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; F:\WINDOWS\system32\drivers\rzpnk.sys [129600 2014-10-23] (Razer, Inc.)
R3 rzvkeyboard; F:\Windows\System32\drivers\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
R3 ScpVBus; F:\Windows\System32\drivers\ScpVBus.sys [39168 2014-10-23] (Scarlet.Crush Productions)
R3 SensorsSimulatorDriver; F:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 tapoas; F:\Windows\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WdNisDrv; F:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; F:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 13:16 - 2015-05-04 13:20 - 00002159 _____ () F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt
2015-05-04 13:14 - 2015-05-04 13:20 - 00000000 ____D () F:\AdwCleaner
2015-05-04 13:14 - 2015-05-04 13:14 - 02204160 _____ () F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
2015-05-04 12:51 - 2015-05-04 12:51 - 00013730 _____ () F:\Users\Dani-PC\Desktop\Addition.rar
2015-05-04 12:42 - 2015-05-04 13:27 - 00018663 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
2015-05-04 12:42 - 2015-05-04 13:27 - 00000000 ____D () F:\FRST
2015-05-04 12:40 - 2015-05-04 12:41 - 21546080 _____ (Malwarebytes Corporation ) F:\Users\Dani-PC\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-04 12:30 - 2015-05-04 12:30 - 02101248 _____ (Farbar) F:\Users\Dani-PC\Desktop\FRST64.exe
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\Users\Dani-PC\Desktop\mbar
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-04 12:20 - 2015-05-04 12:20 - 00136408 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00107736 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00000000 ____D () F:\ProgramData\Malwarebytes
2015-05-04 12:19 - 2015-05-04 12:19 - 16502728 _____ (Malwarebytes Corp.) F:\Users\Dani-PC\Downloads\mbar-1.09.1.1004.exe
2015-05-04 00:04 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-04 00:04 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-05-04 00:04 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) F:\WINDOWS\system32\dwmcore.dll
2015-05-04 00:04 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-04 00:04 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-05-04 00:04 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) F:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) F:\WINDOWS\system32\SettingsHandlers.dll
2015-05-04 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbgeng.dll
2015-05-04 00:03 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbgeng.dll
2015-05-04 00:03 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbghelp.dll
2015-05-04 00:03 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbghelp.dll
2015-05-04 00:03 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) F:\WINDOWS\system32\win32k.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\sdbus.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\dumpsd.sys
2015-05-04 00:03 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) F:\WINDOWS\system32\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\udfs.sys
2015-05-04 00:03 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) F:\WINDOWS\system32\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:29 - 00410017 _____ () F:\WINDOWS\system32\ApnDatabase.xml
2015-05-04 00:03 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) F:\WINDOWS\system32\sdbinst.exe
2015-05-04 00:03 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-04 00:03 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) F:\WINDOWS\system32\wpdshext.dll
2015-05-04 00:03 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wevtsvc.dll
2015-05-04 00:03 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wpdshext.dll
2015-05-04 00:03 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) F:\WINDOWS\system32\dpapisrv.dll
2015-05-04 00:03 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\certcli.dll
2015-05-04 00:03 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\certcli.dll
2015-04-30 21:40 - 2015-04-30 21:40 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AVAST Software
2015-04-30 21:39 - 2015-05-04 13:07 - 00000000 ____D () F:\WINDOWS\System32\Tasks\AVAST Software
2015-04-30 21:39 - 2015-05-04 12:37 - 00004182 _____ () F:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-30 21:39 - 2015-04-30 21:39 - 00442264 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00364472 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\aswBoot.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00272248 _____ () F:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00137288 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00093528 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00089944 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00065736 _____ () F:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00029168 _____ () F:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00001949 _____ () F:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:38 - 01047320 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-30 21:38 - 2015-04-30 21:38 - 00043112 _____ (Avast Software s.r.o.) F:\WINDOWS\avastSS.scr
2015-04-30 21:38 - 2015-04-30 21:38 - 00000000 ____D () F:\Program Files\AVAST Software
2015-04-30 21:36 - 2015-04-30 21:36 - 00000000 ____D () F:\Users\Dani-PC\Tracing
2015-04-30 21:32 - 2015-05-01 14:32 - 00355986 _____ () F:\WINDOWS\PFRO.log
2015-04-29 14:12 - 2015-04-29 14:12 - 00281040 _____ () F:\WINDOWS\Minidump\042915-28718-01.dmp
2015-04-23 15:57 - 2015-04-23 15:57 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AMD
2015-04-22 21:30 - 2015-04-22 21:31 - 00281040 _____ () F:\WINDOWS\Minidump\042215-23546-01.dmp
2015-04-19 18:59 - 2015-04-25 12:34 - 00000000 ____D () F:\Users\Dani-PC\Desktop\web
2015-04-17 19:10 - 2015-04-28 18:12 - 00000000 ____D () F:\Program Files (x86)\SpeedFan
2015-04-17 19:10 - 2015-04-17 19:10 - 00001030 _____ () F:\Users\Dani-PC\Desktop\SpeedFan.lnk
2015-04-17 19:10 - 2015-04-17 19:10 - 00000045 _____ () F:\WINDOWS\SysWOW64\initdebug.nfo
2015-04-17 15:26 - 2015-04-17 15:26 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-04-17 15:26 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-17 15:26 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-17 15:26 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) F:\WINDOWS\system32\rascfg.dll
2015-04-17 15:26 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\rascfg.dll
2015-04-16 21:01 - 2015-04-29 14:12 - 659939598 _____ () F:\WINDOWS\MEMORY.DMP
2015-04-16 21:01 - 2015-04-16 21:01 - 00281040 _____ () F:\WINDOWS\Minidump\041615-23187-01.dmp
2015-04-15 22:28 - 2015-04-15 22:28 - 00000000 ____D () F:\ProgramData\ATI
2015-04-15 22:25 - 2015-04-15 22:25 - 00033944 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152225403018.log
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\Program Files (x86)\AMD
2015-04-15 22:15 - 2015-04-15 22:15 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152215333428.log
2015-04-15 22:08 - 2015-04-15 22:08 - 00060385 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152208016234.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00052517 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152206364336.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Local\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Local\ATI
2015-04-15 20:06 - 2015-04-15 20:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Program Files (x86)\Notepad++
2015-04-15 18:25 - 2015-05-03 17:10 - 00000080 _____ () F:\Users\Dani-PC\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-04-15 18:25 - 2015-04-15 18:25 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Rockstar Games
2015-04-15 18:24 - 2015-04-15 18:26 - 00000000 ____D () F:\Users\Dani-PC\Documents\Rockstar Games
2015-04-15 18:23 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files (x86)\Rockstar Games
2015-04-15 18:22 - 2015-04-15 18:22 - 00001140 _____ () F:\WINDOWS\DirectX.log
2015-04-15 18:19 - 2015-04-15 18:19 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-15 15:48 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files\Rockstar Games
2015-04-15 11:20 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:20 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) F:\WINDOWS\system32\sechost.dll
2015-04-15 11:20 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 11:20 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) F:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:20 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) F:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) F:\WINDOWS\system32\tdh.dll
2015-04-15 11:20 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 11:20 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) F:\WINDOWS\system32\msctf.dll
2015-04-15 11:20 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 11:19 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) F:\WINDOWS\system32\aepdu.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) F:\WINDOWS\system32\aeinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) F:\WINDOWS\system32\appraiser.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) F:\WINDOWS\system32\invagent.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) F:\WINDOWS\system32\generaltel.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) F:\WINDOWS\system32\devinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) F:\WINDOWS\system32\acmigration.dll
2015-04-15 11:19 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:19 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups.dll
2015-04-15 11:19 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups2.dll
2015-04-15 11:19 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) F:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:19 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) F:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:19 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wups.dll
2015-04-15 11:19 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapp.exe
2015-04-15 11:19 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) F:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) F:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) F:\WINDOWS\system32\wudriver.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) F:\WINDOWS\system32\wucltux.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapi.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 11:19 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 11:19 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 11:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtml.dll
2015-04-15 11:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) F:\WINDOWS\system32\vbscript.dll
2015-04-15 11:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) F:\WINDOWS\system32\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript9.dll
2015-04-15 11:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 11:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 11:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) F:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) F:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) F:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) F:\WINDOWS\system32\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 11:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) F:\WINDOWS\system32\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) F:\WINDOWS\system32\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 11:19 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 11:19 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) F:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:19 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 11:19 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\http.sys
2015-04-15 11:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) F:\WINDOWS\system32\lsm.dll
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Raptr
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Program Files (x86)\Raptr
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\library_dir
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\ProgramData\AMD
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Program Files (x86)\AMD AVT
2015-04-14 16:57 - 2015-04-14 16:57 - 00053392 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141657582014.log
2015-04-14 16:54 - 2015-04-14 16:54 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141654276099.log
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\SysWOW64\GWX
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\system32\GWX
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () F:\ProgramData\Codemasters
2015-04-04 18:29 - 2015-04-04 18:29 - 00466456 _____ (Creative Labs) F:\WINDOWS\system32\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00444952 _____ (Creative Labs) F:\WINDOWS\SysWOW64\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\system32\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\SysWOW64\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00000000 ____D () F:\Program Files (x86)\OpenAL
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 13:24 - 2014-10-04 12:56 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Battle.net
2015-05-04 13:24 - 2013-09-30 06:24 - 01899902 _____ () F:\WINDOWS\WindowsUpdate.log
2015-05-04 13:23 - 2015-01-25 17:52 - 00003758 _____ () F:\WINDOWS\System32\Tasks\AutoKMS
2015-05-04 13:23 - 2014-10-04 12:43 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Skype
2015-05-04 13:23 - 2014-10-04 01:21 - 00003596 _____ () F:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2478564968-1396142455-567371876-1001
2015-05-04 13:18 - 2014-10-04 12:31 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-04 13:18 - 2014-10-04 01:27 - 00000966 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-04 13:17 - 2015-03-31 16:49 - 00017129 _____ () F:\WINDOWS\setupact.log
2015-05-04 13:17 - 2013-08-22 16:45 - 00000006 ____H () F:\WINDOWS\Tasks\SA.DAT
2015-05-04 13:17 - 2013-08-22 15:25 - 00262144 ___SH () F:\WINDOWS\system32\config\BBI
2015-05-04 13:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\sru
2015-05-04 12:49 - 2014-10-04 01:27 - 00000970 _____ () F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-04 12:38 - 2015-02-11 21:47 - 00000914 _____ () F:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-04 12:12 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\NDF
2015-05-04 12:10 - 2014-10-04 01:27 - 00003962 _____ () F:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0C875E54-3221-428F-8DA2-055DE63F0D71}
2015-05-04 12:01 - 2013-08-22 16:44 - 05104984 _____ () F:\WINDOWS\system32\FNTCACHE.DAT
2015-05-04 00:15 - 2013-08-22 17:36 - 00000000 ___RD () F:\WINDOWS\ImmersiveControlPanel
2015-05-04 00:15 - 2013-08-22 15:36 - 00000000 ____D () F:\WINDOWS\system32\AdvancedInstallers
2015-05-04 00:06 - 2013-08-22 17:20 - 00000000 ____D () F:\WINDOWS\CbsTemp
2015-05-03 20:54 - 2014-10-04 01:16 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Packages
2015-05-03 03:45 - 2014-10-16 21:41 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\uTorrent
2015-05-03 03:45 - 2014-05-24 16:28 - 00000000 ____D () F:\Users\Dani-PC\Desktop\filmy
2015-05-03 01:53 - 2014-11-09 14:44 - 00000000 ____D () F:\KMPlayer
2015-05-02 01:15 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppReadiness
2015-05-01 01:50 - 2014-10-04 01:27 - 00002214 _____ () F:\Users\Public\Desktop\Google Chrome.lnk
2015-04-30 21:37 - 2014-10-04 01:30 - 00000000 ____D () F:\ProgramData\AVAST Software
2015-04-30 21:36 - 2014-10-04 01:13 - 00000000 ____D () F:\Users\Dani-PC
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ____D () F:\ProgramData\Skype
2015-04-29 14:12 - 2014-10-23 16:11 - 00000000 ____D () F:\WINDOWS\Minidump
2015-04-27 00:18 - 2014-10-04 13:06 - 00000000 ____D () F:\ProgramData\Origin
2015-04-26 18:12 - 2013-09-30 06:20 - 01847990 _____ () F:\WINDOWS\system32\PerfStringBackup.INI
2015-04-26 18:12 - 2013-09-30 05:57 - 00772496 _____ () F:\WINDOWS\system32\perfh005.dat
2015-04-26 18:12 - 2013-09-30 05:57 - 00168614 _____ () F:\WINDOWS\system32\perfc005.dat
2015-04-21 00:10 - 2014-05-15 15:57 - 00000000 ____D () F:\Users\Dani-PC\Desktop\hry
2015-04-20 15:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\rescache
2015-04-17 15:44 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppCompat
2015-04-17 15:26 - 2014-10-16 22:01 - 00000000 ___RD () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-17 15:26 - 2014-10-16 21:57 - 00000000 ____D () F:\ProgramData\Microsoft Help
2015-04-15 22:25 - 2014-10-04 01:08 - 00000000 ____D () F:\Program Files\AMD
2015-04-15 22:06 - 2014-10-04 01:09 - 00000000 ____D () F:\ProgramData\Package Cache
2015-04-15 15:48 - 2014-12-29 22:01 - 00000000 ___HD () F:\Program Files (x86)\InstallShield Installation Information
2015-04-15 12:35 - 2014-10-04 01:50 - 00000000 ____D () F:\WINDOWS\system32\MRT
2015-04-15 12:32 - 2014-10-04 01:50 - 128913832 _____ (Microsoft Corporation) F:\WINDOWS\system32\MRT.exe
2015-04-15 12:29 - 2013-08-22 15:25 - 00000167 _____ () F:\WINDOWS\win.ini
2015-04-15 12:25 - 2014-12-11 00:36 - 00000000 ____D () F:\WINDOWS\system32\appraiser
2015-04-15 12:25 - 2014-10-04 15:06 - 00000000 ___SD () F:\WINDOWS\system32\CompatTel
2015-04-14 20:03 - 2015-01-25 17:21 - 00000000 ____D () F:\Program Files (x86)\Hearthstone
2015-04-14 18:38 - 2015-02-11 21:47 - 00003802 _____ () F:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 17:40 - 2015-01-31 02:32 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Trine2
2015-04-14 17:39 - 2015-01-30 02:13 - 00000000 ____D () F:\Users\Dani-PC\Documents\Diablo III
2015-04-14 17:39 - 2014-10-01 19:16 - 00000000 ____D () F:\Users\Dani-PC\Documents\FIFA 15
2015-04-14 16:48 - 2014-05-15 14:56 - 00000000 ____D () F:\AMD
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 19:25 - 2014-10-04 12:56 - 00000000 ____D () F:\Program Files (x86)\Battle.net
2015-04-10 13:25 - 2015-02-11 21:47 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Adobe
2015-04-08 13:32 - 2015-01-21 16:22 - 00000000 ____D () F:\Program Files (x86)\Diablo III
2015-04-07 14:15 - 2014-05-15 15:23 - 00000000 ____D () F:\Program Files (x86)\World of Warcraft
2015-04-04 18:29 - 2014-12-11 00:01 - 00000000 ____D () F:\Users\Dani-PC\Documents\My Games
==================== Files in the root of some directories =======
2015-03-01 02:15 - 2015-03-01 02:15 - 0000132 _____ () F:\Users\Dani-PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-03-01 02:10 - 2015-03-01 03:14 - 0001480 _____ () F:\Users\Dani-PC\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-03-31 15:41 - 2015-03-31 16:14 - 0007600 _____ () F:\Users\Dani-PC\AppData\Local\Resmon.ResmonCfg
Some content of TEMP:
====================
F:\Users\Dani-PC\AppData\Local\Temp\CleanSchedule.exe
F:\Users\Dani-PC\AppData\Local\Temp\Quarantine.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptrpatch.exe
F:\Users\Dani-PC\AppData\Local\Temp\raptr_stub.exe
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00001.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfamcc00002.dll
F:\Users\Dani-PC\AppData\Local\Temp\sfextra.dll
F:\Users\Dani-PC\AppData\Local\Temp\sqlite3.dll
F:\Users\Dani-PC\AppData\Local\Temp\xmlUpdater.exe
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-24 17:01
==================== End Of Log ============================
- Přílohy
-
- Addition.rar
- (13.32 KiB) Staženo 40 x
Re: Hostitel služby vytěžuje disk
- Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
- ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
- znovu spustte FRST a kliknete na Fix
- po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi
Kód: Vybrat vše
Start CloseProcesses: HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated) HKLM-x32\...\Run: [] => [X] HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated) HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X] HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd) HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd) HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe" HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=sp-006&q={searchTerms} HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006 HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006 SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=sp-006&q={searchTerms} CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA" S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X] 2015-05-04 13:16 - 2015-05-04 13:20 - 00002159 _____ () F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt 2015-05-04 13:14 - 2015-05-04 13:20 - 00000000 ____D () F:\AdwCleaner 2015-05-04 13:14 - 2015-05-04 13:14 - 02204160 _____ () F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe 2015-05-04 12:51 - 2015-05-04 12:51 - 00013730 _____ () F:\Users\Dani-PC\Desktop\Addition.rar 2015-05-04 12:42 - 2015-05-04 13:27 - 00018663 _____ () F:\Users\Dani-PC\Desktop\FRST.txt Task: {304DB5E0-40B5-4525-9A6F-D23066EDF15B} - System32\Tasks\AutoKMS => F:\WINDOWS\AutoKMS\AutoKMS.exe [2014-10-04] () F:\WINDOWS\AutoKMS Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe EmptyTemp: End
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Hostitel služby vytěžuje disk
Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 02-05-2015
Ran by Dani-PC at 2015-05-04 13:49:25 Run:1
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA"
S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X]
2015-05-04 13:16 - 2015-05-04 13:20 - 00002159 _____ () F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt
2015-05-04 13:14 - 2015-05-04 13:20 - 00000000 ____D () F:\AdwCleaner
2015-05-04 13:14 - 2015-05-04 13:14 - 02204160 _____ () F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
2015-05-04 12:51 - 2015-05-04 12:51 - 00013730 _____ () F:\Users\Dani-PC\Desktop\Addition.rar
2015-05-04 12:42 - 2015-05-04 13:27 - 00018663 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
Task: {304DB5E0-40B5-4525-9A6F-D23066EDF15B} - System32\Tasks\AutoKMS => F:\WINDOWS\AutoKMS\AutoKMS.exe [2014-10-04] ()
F:\WINDOWS\AutoKMS
Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-2478564968-1396142455-567371876-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3b085c37-48ea-11e4-824c-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{3b085c37-48ea-11e4-824c-806e6f6e6963} => Key not found.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Search Bar => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2478564968-1396142455-567371876-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Key deleted successfully.
HKCR\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Key not found.
Chrome StartupUrls deleted successfully.
Ds3Service => Service deleted successfully.
F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt => Moved successfully.
F:\AdwCleaner => Moved successfully.
F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe => Moved successfully.
"F:\Users\Dani-PC\Desktop\Addition.rar" => File/Directory not found.
F:\Users\Dani-PC\Desktop\FRST.txt => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{304DB5E0-40B5-4525-9A6F-D23066EDF15B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{304DB5E0-40B5-4525-9A6F-D23066EDF15B}" => Key deleted successfully.
F:\Windows\System32\Tasks\AutoKMS => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => Key deleted successfully.
F:\WINDOWS\AutoKMS => Moved successfully.
F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
EmptyTemp: => Removed 1005.1 MB temporary data.
The system needed a reboot.
==== End of Fixlog 13:49:43 ====
Ran by Dani-PC at 2015-05-04 13:49:25 Run:1
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Boot Mode: Normal
==============================================
Content of fixlist:
*****************
Start
CloseProcesses:
HKLM\...\Run: [AdobeAAMUpdater-1.0] => F:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SwitchBoard] => F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => F:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [DAEMON Tools Lite] => F:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [CCleaner Monitoring] => F:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\MountPoints2: {3b085c37-48ea-11e4-824c-806e6f6e6963} - "G:\Setup.exe"
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.google.com/search?trackid=s ... earchTerms}
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.com/?trackid=sp-006
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.google.com/?trackid=sp-006
SearchScopes: HKLM-x32 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2478564968-1396142455-567371876-1001 -> {E9410C70-B6AE-41FF-AB71-32F4B279EA5F} URL = https://www.google.com/search?trackid=s ... earchTerms}
CHR StartupUrls: Default -> "", "hxxp://istart.webssearches.com/?type=hppp&ts=1423588273&from=kmp&uid=ST1000DM003-1CH162_Z1DBGNAAXXXXZ1DBGNAA"
S2 Ds3Service; "F:\Program Files\Scarlet.Crush Productions\bin\ScpService.exe" [X]
2015-05-04 13:16 - 2015-05-04 13:20 - 00002159 _____ () F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt
2015-05-04 13:14 - 2015-05-04 13:20 - 00000000 ____D () F:\AdwCleaner
2015-05-04 13:14 - 2015-05-04 13:14 - 02204160 _____ () F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe
2015-05-04 12:51 - 2015-05-04 12:51 - 00013730 _____ () F:\Users\Dani-PC\Desktop\Addition.rar
2015-05-04 12:42 - 2015-05-04 13:27 - 00018663 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
Task: {304DB5E0-40B5-4525-9A6F-D23066EDF15B} - System32\Tasks\AutoKMS => F:\WINDOWS\AutoKMS\AutoKMS.exe [2014-10-04] ()
F:\WINDOWS\AutoKMS
Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => F:\Program Files (x86)\Google\Update\GoogleUpdate.exe
EmptyTemp:
End
*****************
Processes closed successfully.
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeAAMUpdater-1.0 => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SwitchBoard => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\AdobeCS6ServiceManager => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\DAEMON Tools Lite => value deleted successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Monitoring => value deleted successfully.
"HKU\S-1-5-21-2478564968-1396142455-567371876-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3b085c37-48ea-11e4-824c-806e6f6e6963}" => Key deleted successfully.
HKCR\CLSID\{3b085c37-48ea-11e4-824c-806e6f6e6963} => Key not found.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\Software\Microsoft\Internet Explorer\Main\\Search Bar => value deleted successfully.
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKU\S-1-5-21-2478564968-1396142455-567371876-1001\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F}" => Key deleted successfully.
HKCR\CLSID\{E9410C70-B6AE-41FF-AB71-32F4B279EA5F} => Key not found.
Chrome StartupUrls deleted successfully.
Ds3Service => Service deleted successfully.
F:\Users\Dani-PC\Desktop\AdwCleaner[S0].txt => Moved successfully.
F:\AdwCleaner => Moved successfully.
F:\Users\Dani-PC\Downloads\adwcleaner_4.203.exe => Moved successfully.
"F:\Users\Dani-PC\Desktop\Addition.rar" => File/Directory not found.
F:\Users\Dani-PC\Desktop\FRST.txt => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{304DB5E0-40B5-4525-9A6F-D23066EDF15B}" => Key deleted successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{304DB5E0-40B5-4525-9A6F-D23066EDF15B}" => Key deleted successfully.
F:\Windows\System32\Tasks\AutoKMS => Moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoKMS" => Key deleted successfully.
F:\WINDOWS\AutoKMS => Moved successfully.
F:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => Moved successfully.
F:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => Moved successfully.
EmptyTemp: => Removed 1005.1 MB temporary data.
The system needed a reboot.
==== End of Fixlog 13:49:43 ====
Re: Hostitel služby vytěžuje disk
Jaky je momentalne stav uvodniho problemu? Dejte kdyztak aktualni log z FRST.
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Re: Hostitel služby vytěžuje disk
Prijde mi to mnohem lepší.Děkuji 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by Dani-PC (administrator) on DANI on 04-05-2015 14:07:06
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) F:\Windows\System32\atiesrxx.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) F:\Windows\System32\dasHost.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Skype Technologies S.A.) F:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Razer Inc.) F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) F:\Windows\System32\Taskmgr.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(Blizzard Entertainment) F:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
(Blizzard Entertainment) F:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => F:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [Razer Synapse] => F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [PivotSoftware] => F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM-x32\...\Run: [DT BEN] => F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122336 2014-08-12] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [StartCCC] => f:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => F:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-30] (Avast Software s.r.o.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [GoogleChromeAutoLaunch_EDD9E8D82A82E117FD1DD54C81312571] => F:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Skype] => F:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-02] (Valve Corporation)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Battle.net] => F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2861104 2015-04-07] (Blizzard Entertainment)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => F:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> F:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> F:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> F:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-2478564968-1396142455-567371876-1001: @unity3d.com/UnityPlayer,version=1.0 -> F:\Users\Dani-PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: F:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - F:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - F:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
Chrome:
=======
CHR Profile: F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-04]
CHR Extension: (Avast Online Security) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-04]
CHR Extension: (Google Wallet) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - F:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; F:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; F:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 c2wts; F:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-11-22] (Microsoft Corporation)
R2 DTSRVC; F:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
S3 fussvc; F:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-12] (Electronic Arts)
R2 Razer Game Scanner Service; F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
S3 SwitchBoard; F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; F:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; F:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)
S3 WdNisSvc; F:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; F:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; F:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; F:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; F:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; F:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; F:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; F:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
R1 aswSnx; F:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; F:\Windows\system32\drivers\aswSP.sys [442264 2015-04-30] (Avast Software s.r.o.)
R2 aswStm; F:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; F:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; F:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
R1 dtsoftbus01; F:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-03-08] (Disc Soft Ltd)
R3 rzdaendpt; F:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-12-30] (Razer Inc)
R2 rzpmgrk; F:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; F:\WINDOWS\system32\drivers\rzpnk.sys [129600 2014-10-23] (Razer, Inc.)
R3 rzvkeyboard; F:\Windows\System32\drivers\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
R3 ScpVBus; F:\Windows\System32\drivers\ScpVBus.sys [39168 2014-10-23] (Scarlet.Crush Productions)
R3 SensorsSimulatorDriver; F:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 tapoas; F:\Windows\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WdNisDrv; F:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; F:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 14:07 - 2015-05-04 14:07 - 00013841 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
2015-05-04 13:27 - 2015-05-04 13:28 - 00055515 _____ () F:\Users\Dani-PC\Desktop\Addition.txt
2015-05-04 12:42 - 2015-05-04 14:07 - 00000000 ____D () F:\FRST
2015-05-04 12:40 - 2015-05-04 12:41 - 21546080 _____ (Malwarebytes Corporation ) F:\Users\Dani-PC\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-04 12:30 - 2015-05-04 12:30 - 02101248 _____ (Farbar) F:\Users\Dani-PC\Desktop\FRST64.exe
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\Users\Dani-PC\Desktop\mbar
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-04 12:20 - 2015-05-04 12:20 - 00136408 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00107736 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00000000 ____D () F:\ProgramData\Malwarebytes
2015-05-04 12:19 - 2015-05-04 12:19 - 16502728 _____ (Malwarebytes Corp.) F:\Users\Dani-PC\Downloads\mbar-1.09.1.1004.exe
2015-05-04 00:04 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-04 00:04 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-05-04 00:04 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) F:\WINDOWS\system32\dwmcore.dll
2015-05-04 00:04 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-04 00:04 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-05-04 00:04 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) F:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) F:\WINDOWS\system32\SettingsHandlers.dll
2015-05-04 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbgeng.dll
2015-05-04 00:03 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbgeng.dll
2015-05-04 00:03 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbghelp.dll
2015-05-04 00:03 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbghelp.dll
2015-05-04 00:03 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) F:\WINDOWS\system32\win32k.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\sdbus.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\dumpsd.sys
2015-05-04 00:03 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) F:\WINDOWS\system32\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\udfs.sys
2015-05-04 00:03 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) F:\WINDOWS\system32\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:29 - 00410017 _____ () F:\WINDOWS\system32\ApnDatabase.xml
2015-05-04 00:03 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) F:\WINDOWS\system32\sdbinst.exe
2015-05-04 00:03 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-04 00:03 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) F:\WINDOWS\system32\wpdshext.dll
2015-05-04 00:03 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wevtsvc.dll
2015-05-04 00:03 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wpdshext.dll
2015-05-04 00:03 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) F:\WINDOWS\system32\dpapisrv.dll
2015-05-04 00:03 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\certcli.dll
2015-05-04 00:03 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\certcli.dll
2015-04-30 21:40 - 2015-04-30 21:40 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AVAST Software
2015-04-30 21:39 - 2015-05-04 13:07 - 00000000 ____D () F:\WINDOWS\System32\Tasks\AVAST Software
2015-04-30 21:39 - 2015-05-04 12:37 - 00004182 _____ () F:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-30 21:39 - 2015-04-30 21:39 - 00442264 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00364472 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\aswBoot.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00272248 _____ () F:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00137288 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00093528 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00089944 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00065736 _____ () F:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00029168 _____ () F:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00001949 _____ () F:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:38 - 01047320 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-30 21:38 - 2015-04-30 21:38 - 00043112 _____ (Avast Software s.r.o.) F:\WINDOWS\avastSS.scr
2015-04-30 21:38 - 2015-04-30 21:38 - 00000000 ____D () F:\Program Files\AVAST Software
2015-04-30 21:36 - 2015-04-30 21:36 - 00000000 ____D () F:\Users\Dani-PC\Tracing
2015-04-30 21:32 - 2015-05-01 14:32 - 00355986 _____ () F:\WINDOWS\PFRO.log
2015-04-29 14:12 - 2015-04-29 14:12 - 00281040 _____ () F:\WINDOWS\Minidump\042915-28718-01.dmp
2015-04-23 15:57 - 2015-04-23 15:57 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AMD
2015-04-22 21:30 - 2015-04-22 21:31 - 00281040 _____ () F:\WINDOWS\Minidump\042215-23546-01.dmp
2015-04-19 18:59 - 2015-05-04 13:48 - 00000000 ____D () F:\Users\Dani-PC\Desktop\web
2015-04-17 19:10 - 2015-04-28 18:12 - 00000000 ____D () F:\Program Files (x86)\SpeedFan
2015-04-17 19:10 - 2015-04-17 19:10 - 00001030 _____ () F:\Users\Dani-PC\Desktop\SpeedFan.lnk
2015-04-17 19:10 - 2015-04-17 19:10 - 00000045 _____ () F:\WINDOWS\SysWOW64\initdebug.nfo
2015-04-17 15:26 - 2015-04-17 15:26 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-04-17 15:26 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-17 15:26 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-17 15:26 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) F:\WINDOWS\system32\rascfg.dll
2015-04-17 15:26 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\rascfg.dll
2015-04-16 21:01 - 2015-04-29 14:12 - 659939598 _____ () F:\WINDOWS\MEMORY.DMP
2015-04-16 21:01 - 2015-04-16 21:01 - 00281040 _____ () F:\WINDOWS\Minidump\041615-23187-01.dmp
2015-04-15 22:28 - 2015-04-15 22:28 - 00000000 ____D () F:\ProgramData\ATI
2015-04-15 22:25 - 2015-04-15 22:25 - 00033944 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152225403018.log
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\Program Files (x86)\AMD
2015-04-15 22:15 - 2015-04-15 22:15 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152215333428.log
2015-04-15 22:08 - 2015-04-15 22:08 - 00060385 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152208016234.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00052517 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152206364336.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Local\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Local\ATI
2015-04-15 20:06 - 2015-04-15 20:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Program Files (x86)\Notepad++
2015-04-15 18:25 - 2015-05-03 17:10 - 00000080 _____ () F:\Users\Dani-PC\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-04-15 18:25 - 2015-04-15 18:25 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Rockstar Games
2015-04-15 18:24 - 2015-04-15 18:26 - 00000000 ____D () F:\Users\Dani-PC\Documents\Rockstar Games
2015-04-15 18:23 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files (x86)\Rockstar Games
2015-04-15 18:22 - 2015-04-15 18:22 - 00001140 _____ () F:\WINDOWS\DirectX.log
2015-04-15 18:19 - 2015-04-15 18:19 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-15 15:48 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files\Rockstar Games
2015-04-15 11:20 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:20 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) F:\WINDOWS\system32\sechost.dll
2015-04-15 11:20 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 11:20 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) F:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:20 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) F:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) F:\WINDOWS\system32\tdh.dll
2015-04-15 11:20 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 11:20 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) F:\WINDOWS\system32\msctf.dll
2015-04-15 11:20 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 11:19 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) F:\WINDOWS\system32\aepdu.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) F:\WINDOWS\system32\aeinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) F:\WINDOWS\system32\appraiser.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) F:\WINDOWS\system32\invagent.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) F:\WINDOWS\system32\generaltel.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) F:\WINDOWS\system32\devinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) F:\WINDOWS\system32\acmigration.dll
2015-04-15 11:19 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:19 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups.dll
2015-04-15 11:19 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups2.dll
2015-04-15 11:19 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) F:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:19 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) F:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:19 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wups.dll
2015-04-15 11:19 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapp.exe
2015-04-15 11:19 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) F:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) F:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) F:\WINDOWS\system32\wudriver.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) F:\WINDOWS\system32\wucltux.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapi.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 11:19 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 11:19 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 11:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtml.dll
2015-04-15 11:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) F:\WINDOWS\system32\vbscript.dll
2015-04-15 11:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) F:\WINDOWS\system32\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript9.dll
2015-04-15 11:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 11:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 11:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) F:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) F:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) F:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) F:\WINDOWS\system32\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 11:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) F:\WINDOWS\system32\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) F:\WINDOWS\system32\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 11:19 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 11:19 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) F:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:19 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 11:19 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\http.sys
2015-04-15 11:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) F:\WINDOWS\system32\lsm.dll
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Raptr
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Program Files (x86)\Raptr
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\library_dir
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\ProgramData\AMD
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Program Files (x86)\AMD AVT
2015-04-14 16:57 - 2015-04-14 16:57 - 00053392 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141657582014.log
2015-04-14 16:54 - 2015-04-14 16:54 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141654276099.log
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\SysWOW64\GWX
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\system32\GWX
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () F:\ProgramData\Codemasters
2015-04-04 18:29 - 2015-04-04 18:29 - 00466456 _____ (Creative Labs) F:\WINDOWS\system32\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00444952 _____ (Creative Labs) F:\WINDOWS\SysWOW64\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\system32\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\SysWOW64\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00000000 ____D () F:\Program Files (x86)\OpenAL
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 14:06 - 2013-09-30 06:24 - 01938998 _____ () F:\WINDOWS\WindowsUpdate.log
2015-05-04 14:04 - 2014-10-04 12:56 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Battle.net
2015-05-04 14:03 - 2014-10-04 12:43 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Skype
2015-05-04 14:00 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\sru
2015-05-04 13:56 - 2014-10-04 01:21 - 00003596 _____ () F:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2478564968-1396142455-567371876-1001
2015-05-04 13:52 - 2014-10-04 12:31 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-04 13:51 - 2015-03-31 16:49 - 00017245 _____ () F:\WINDOWS\setupact.log
2015-05-04 13:51 - 2013-08-22 16:45 - 00000006 ____H () F:\WINDOWS\Tasks\SA.DAT
2015-05-04 13:38 - 2015-02-11 21:47 - 00000914 _____ () F:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-04 13:17 - 2013-08-22 15:25 - 00262144 ___SH () F:\WINDOWS\system32\config\BBI
2015-05-04 12:12 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\NDF
2015-05-04 12:10 - 2014-10-04 01:27 - 00003962 _____ () F:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0C875E54-3221-428F-8DA2-055DE63F0D71}
2015-05-04 12:01 - 2013-08-22 16:44 - 05104984 _____ () F:\WINDOWS\system32\FNTCACHE.DAT
2015-05-04 00:15 - 2013-08-22 17:36 - 00000000 ___RD () F:\WINDOWS\ImmersiveControlPanel
2015-05-04 00:15 - 2013-08-22 15:36 - 00000000 ____D () F:\WINDOWS\system32\AdvancedInstallers
2015-05-04 00:06 - 2013-08-22 17:20 - 00000000 ____D () F:\WINDOWS\CbsTemp
2015-05-03 20:54 - 2014-10-04 01:16 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Packages
2015-05-03 03:45 - 2014-10-16 21:41 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\uTorrent
2015-05-03 03:45 - 2014-05-24 16:28 - 00000000 ____D () F:\Users\Dani-PC\Desktop\filmy
2015-05-03 01:53 - 2014-11-09 14:44 - 00000000 ____D () F:\KMPlayer
2015-05-02 01:15 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppReadiness
2015-05-01 01:50 - 2014-10-04 01:27 - 00002214 _____ () F:\Users\Public\Desktop\Google Chrome.lnk
2015-04-30 21:37 - 2014-10-04 01:30 - 00000000 ____D () F:\ProgramData\AVAST Software
2015-04-30 21:36 - 2014-10-04 01:13 - 00000000 ____D () F:\Users\Dani-PC
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ____D () F:\ProgramData\Skype
2015-04-29 14:12 - 2014-10-23 16:11 - 00000000 ____D () F:\WINDOWS\Minidump
2015-04-27 00:18 - 2014-10-04 13:06 - 00000000 ____D () F:\ProgramData\Origin
2015-04-26 18:12 - 2013-09-30 06:20 - 01847990 _____ () F:\WINDOWS\system32\PerfStringBackup.INI
2015-04-26 18:12 - 2013-09-30 05:57 - 00772496 _____ () F:\WINDOWS\system32\perfh005.dat
2015-04-26 18:12 - 2013-09-30 05:57 - 00168614 _____ () F:\WINDOWS\system32\perfc005.dat
2015-04-21 00:10 - 2014-05-15 15:57 - 00000000 ____D () F:\Users\Dani-PC\Desktop\hry
2015-04-20 15:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\rescache
2015-04-17 15:44 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppCompat
2015-04-17 15:26 - 2014-10-16 22:01 - 00000000 ___RD () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-17 15:26 - 2014-10-16 21:57 - 00000000 ____D () F:\ProgramData\Microsoft Help
2015-04-15 22:25 - 2014-10-04 01:08 - 00000000 ____D () F:\Program Files\AMD
2015-04-15 22:06 - 2014-10-04 01:09 - 00000000 ____D () F:\ProgramData\Package Cache
2015-04-15 15:48 - 2014-12-29 22:01 - 00000000 ___HD () F:\Program Files (x86)\InstallShield Installation Information
2015-04-15 12:35 - 2014-10-04 01:50 - 00000000 ____D () F:\WINDOWS\system32\MRT
2015-04-15 12:32 - 2014-10-04 01:50 - 128913832 _____ (Microsoft Corporation) F:\WINDOWS\system32\MRT.exe
2015-04-15 12:29 - 2013-08-22 15:25 - 00000167 _____ () F:\WINDOWS\win.ini
2015-04-15 12:25 - 2014-12-11 00:36 - 00000000 ____D () F:\WINDOWS\system32\appraiser
2015-04-15 12:25 - 2014-10-04 15:06 - 00000000 ___SD () F:\WINDOWS\system32\CompatTel
2015-04-14 20:03 - 2015-01-25 17:21 - 00000000 ____D () F:\Program Files (x86)\Hearthstone
2015-04-14 18:38 - 2015-02-11 21:47 - 00003802 _____ () F:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 17:40 - 2015-01-31 02:32 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Trine2
2015-04-14 17:39 - 2015-01-30 02:13 - 00000000 ____D () F:\Users\Dani-PC\Documents\Diablo III
2015-04-14 17:39 - 2014-10-01 19:16 - 00000000 ____D () F:\Users\Dani-PC\Documents\FIFA 15
2015-04-14 16:48 - 2014-05-15 14:56 - 00000000 ____D () F:\AMD
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 19:25 - 2014-10-04 12:56 - 00000000 ____D () F:\Program Files (x86)\Battle.net
2015-04-10 13:25 - 2015-02-11 21:47 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Adobe
2015-04-08 13:32 - 2015-01-21 16:22 - 00000000 ____D () F:\Program Files (x86)\Diablo III
2015-04-07 14:15 - 2014-05-15 15:23 - 00000000 ____D () F:\Program Files (x86)\World of Warcraft
2015-04-04 18:29 - 2014-12-11 00:01 - 00000000 ____D () F:\Users\Dani-PC\Documents\My Games
==================== Files in the root of some directories =======
2015-03-01 02:15 - 2015-03-01 02:15 - 0000132 _____ () F:\Users\Dani-PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-03-01 02:10 - 2015-03-01 03:14 - 0001480 _____ () F:\Users\Dani-PC\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-03-31 15:41 - 2015-03-31 16:14 - 0007600 _____ () F:\Users\Dani-PC\AppData\Local\Resmon.ResmonCfg
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-24 17:01
==================== End Of Log ============================
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 02-05-2015
Ran by Dani-PC (administrator) on DANI on 04-05-2015 14:07:06
Running from F:\Users\Dani-PC\Desktop
Loaded Profiles: Dani-PC (Available profiles: Dani-PC)
Platform: Windows 8.1 Pro (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AMD) F:\Windows\System32\atiesrxx.exe
(AMD) F:\Windows\System32\atieclxx.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) F:\Windows\System32\rundll32.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DTSRVC.exe
(Microsoft Corporation) F:\Windows\System32\dasHost.exe
(Portrait Displays, Inc.) F:\Program Files (x86)\Common Files\Portrait Displays\Drivers\pdisrvc.exe
() F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
(Microsoft Corporation) F:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Skype Technologies S.A.) F:\Program Files (x86)\Skype\Phone\Skype.exe
(Valve Corporation) F:\Program Files (x86)\Steam\Steam.exe
(Razer Inc.) F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(Avast Software s.r.o.) F:\Program Files\AVAST Software\Avast\AvastUI.exe
(Advanced Micro Devices Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) F:\Windows\System32\Taskmgr.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\wpCtrl.exe
() F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Floater.exe
(Blizzard Entertainment) F:\Program Files (x86)\Battle.net\Battle.net.5669\Battle.net.exe
(Blizzard Entertainment) F:\ProgramData\Battle.net\Agent\Agent.3987\Agent.exe
(ATI Technologies Inc.) F:\Program Files (x86)\AMD\ATI.ACE\Core-Static\CCC.exe
(Valve Corporation) F:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) F:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) F:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [XboxStat] => F:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-10-01] (Microsoft Corporation)
HKLM-x32\...\Run: [Razer Synapse] => F:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [590144 2015-03-12] (Razer Inc.)
HKLM-x32\...\Run: [PivotSoftware] => F:\Program Files (x86)\Portrait Displays\Pivot Pro Plugin\Pivot_startup.exe [112424 2013-06-18] ()
HKLM-x32\...\Run: [DT BEN] => F:\Program Files (x86)\Common Files\Portrait Displays\Shared\DT_startup.exe [122336 2014-08-12] (Portrait Displays, Inc.)
HKLM-x32\...\Run: [StartCCC] => f:\Program Files (x86)\AMD\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-03-31] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => F:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-04-30] (Avast Software s.r.o.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [GoogleChromeAutoLaunch_EDD9E8D82A82E117FD1DD54C81312571] => F:\Program Files (x86)\Google\Chrome\Application\chrome.exe [812872 2015-04-28] (Google Inc.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Skype] => F:\Program Files (x86)\Skype\Phone\Skype.exe [31282816 2015-04-17] (Skype Technologies S.A.)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Steam] => F:\Program Files (x86)\Steam\steam.exe [2888384 2015-05-02] (Valve Corporation)
HKU\S-1-5-21-2478564968-1396142455-567371876-1001\...\Run: [Battle.net] => F:\Program Files (x86)\Battle.net\Battle.net Launcher.exe [2861104 2015-04-07] (Blizzard Entertainment)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => F:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-30] (Avast Software s.r.o.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-30] (Avast Software s.r.o.)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> F:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2015-03-31] (Microsoft Corporation)
BHO-x32: Microsoft Web Test Recorder 12.0 Helper -> {432dd630-7e03-4c97-9d62-b99f52df4fc2} -> F:\Program Files (x86)\Microsoft Visual Studio 12.0\Common7\IDE\PrivateAssemblies\Microsoft.VisualStudio.QualityTools.RecorderBarBHO100.dll [2013-10-05] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> F:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-30] (Avast Software s.r.o.)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> F:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2015-03-18] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - F:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-10-15] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> F:\WINDOWS\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> F:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> F:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-03-31] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> f:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-14] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> F:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-22] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> F:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-05] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> F:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-02-27] (VideoLAN)
FF Plugin HKU\S-1-5-21-2478564968-1396142455-567371876-1001: @unity3d.com/UnityPlayer,version=1.0 -> F:\Users\Dani-PC\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-10-08] (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: F:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2015-03-31] (Microsoft Corporation)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - F:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - F:\Program Files\AVAST Software\Avast\WebRep\FF [2015-04-30]
Chrome:
=======
CHR Profile: F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Bookmark Manager) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-04]
CHR Extension: (Avast Online Security) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-05-04]
CHR Extension: (Google Wallet) - F:\Users\Dani-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - F:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-30]
==================== Services (Whitelisted) =================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; F:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-30] (Avast Software s.r.o.)
S3 BthHFSrv; F:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 c2wts; F:\Program Files\Windows Identity Foundation\v3.5\c2wtshost.exe [5632 2014-11-22] (Microsoft Corporation)
R2 DTSRVC; F:\Program Files (x86)\Common Files\Portrait Displays\Shared\dtsrvc.exe [138720 2014-08-12] (Portrait Displays, Inc.)
S3 fussvc; F:\Program Files (x86)\Windows Kits\8.1\App Certification Kit\fussvc.exe [142336 2013-08-22] (Microsoft Corporation) [File not signed]
S3 Origin Client Service; F:\Program Files (x86)\Origin\OriginClientService.exe [1910640 2015-03-12] (Electronic Arts)
R2 Razer Game Scanner Service; F:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()
S3 SwitchBoard; F:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 Te.Service; F:\Program Files (x86)\Windows Kits\8.1\Testing\Runtimes\TAEF\Wex.Services.exe [119808 2013-08-22] (Microsoft Corporation) [File not signed]
S3 VsEtwService120; F:\Program Files\Microsoft Visual Studio 12.0\Common7\Packages\Debugger\Services\VsEtwService.exe [87728 2013-10-05] (Microsoft Corporation)
S3 WdNisSvc; F:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; F:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)
S0 amdkmafd; F:\Windows\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
R0 amdkmpfd; F:\Windows\System32\drivers\amdkmpfd.sys [62152 2014-10-28] (Advanced Micro Devices, Inc.)
R2 aswHwid; F:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-30] ()
R2 aswMonFlt; F:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-30] (Avast Software s.r.o.)
R1 aswRdr; F:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-30] (Avast Software s.r.o.)
R0 aswRvrt; F:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-30] ()
R1 aswSnx; F:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-30] (Avast Software s.r.o.)
R1 aswSP; F:\Windows\system32\drivers\aswSP.sys [442264 2015-04-30] (Avast Software s.r.o.)
R2 aswStm; F:\Windows\system32\drivers\aswStm.sys [137288 2015-04-30] (Avast Software s.r.o.)
R0 aswVmm; F:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-30] ()
R3 AtiHDAudioService; F:\Windows\system32\drivers\AtihdWB6.sys [223232 2014-12-21] (Advanced Micro Devices)
R1 dtsoftbus01; F:\Windows\System32\drivers\dtsoftbus01.sys [283064 2015-03-08] (Disc Soft Ltd)
R3 rzdaendpt; F:\Windows\System32\drivers\rzdaendpt.sys [33448 2014-12-30] (Razer Inc)
R2 rzpmgrk; F:\WINDOWS\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)
R2 rzpnk; F:\WINDOWS\system32\drivers\rzpnk.sys [129600 2014-10-23] (Razer, Inc.)
R3 rzvkeyboard; F:\Windows\System32\drivers\rzvkeyboard.sys [31912 2014-12-30] (Razer Inc)
R3 ScpVBus; F:\Windows\System32\drivers\ScpVBus.sys [39168 2014-10-23] (Scarlet.Crush Productions)
R3 SensorsSimulatorDriver; F:\Windows\system32\DRIVERS\WUDFRd.sys [226304 2014-10-29] (Microsoft Corporation)
R3 tapoas; F:\Windows\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S3 WdNisDrv; F:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R3 xusb22; F:\Windows\System32\drivers\xusb22.sys [87040 2014-03-18] (Microsoft Corporation)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)
==================== One Month Created Files and Folders ========
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 14:07 - 2015-05-04 14:07 - 00013841 _____ () F:\Users\Dani-PC\Desktop\FRST.txt
2015-05-04 13:27 - 2015-05-04 13:28 - 00055515 _____ () F:\Users\Dani-PC\Desktop\Addition.txt
2015-05-04 12:42 - 2015-05-04 14:07 - 00000000 ____D () F:\FRST
2015-05-04 12:40 - 2015-05-04 12:41 - 21546080 _____ (Malwarebytes Corporation ) F:\Users\Dani-PC\Downloads\mbam-setup-2.1.6.1022.exe
2015-05-04 12:30 - 2015-05-04 12:30 - 02101248 _____ (Farbar) F:\Users\Dani-PC\Desktop\FRST64.exe
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\Users\Dani-PC\Desktop\mbar
2015-05-04 12:20 - 2015-05-04 12:40 - 00000000 ____D () F:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-05-04 12:20 - 2015-05-04 12:20 - 00136408 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00107736 _____ (Malwarebytes Corporation) F:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-05-04 12:20 - 2015-05-04 12:20 - 00000000 ____D () F:\ProgramData\Malwarebytes
2015-05-04 12:19 - 2015-05-04 12:19 - 16502728 _____ (Malwarebytes Corp.) F:\Users\Dani-PC\Downloads\mbar-1.09.1.1004.exe
2015-05-04 00:04 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ahcache.sys
2015-05-04 00:04 - 2015-03-17 19:26 - 00467776 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\USBHUB3.SYS
2015-05-04 00:04 - 2015-03-13 04:49 - 02256896 _____ (Microsoft Corporation) F:\WINDOWS\system32\dwmcore.dll
2015-05-04 00:04 - 2015-03-13 04:28 - 01943040 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dwmcore.dll
2015-05-04 00:04 - 2015-03-09 04:02 - 00057856 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\bthhfenum.sys
2015-05-04 00:04 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) F:\WINDOWS\system32\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-04 00:04 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) F:\WINDOWS\system32\SettingsHandlers.dll
2015-05-04 00:03 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\PhotoMetadataHandler.dll
2015-05-04 00:03 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbgeng.dll
2015-05-04 00:03 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbgeng.dll
2015-05-04 00:03 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) F:\WINDOWS\system32\dbghelp.dll
2015-05-04 00:03 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\dbghelp.dll
2015-05-04 00:03 - 2015-03-14 04:03 - 04179968 _____ (Microsoft Corporation) F:\WINDOWS\system32\win32k.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00239424 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\sdbus.sys
2015-05-04 00:03 - 2015-03-13 06:03 - 00154432 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\dumpsd.sys
2015-05-04 00:03 - 2015-03-13 04:59 - 00430080 _____ (Microsoft Corporation) F:\WINDOWS\system32\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:38 - 00358912 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\schannel.dll
2015-05-04 00:03 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\udfs.sys
2015-05-04 00:03 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) F:\WINDOWS\system32\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\SRH.dll
2015-05-04 00:03 - 2015-03-13 02:29 - 00410017 _____ () F:\WINDOWS\system32\ApnDatabase.xml
2015-05-04 00:03 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) F:\WINDOWS\system32\sdbinst.exe
2015-05-04 00:03 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sdbinst.exe
2015-05-04 00:03 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) F:\WINDOWS\system32\wpdshext.dll
2015-05-04 00:03 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wevtsvc.dll
2015-05-04 00:03 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wpdshext.dll
2015-05-04 00:03 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) F:\WINDOWS\system32\dpapisrv.dll
2015-05-04 00:03 - 2015-02-13 04:22 - 00445440 _____ (Microsoft Corporation) F:\WINDOWS\system32\certcli.dll
2015-05-04 00:03 - 2015-02-13 03:46 - 00324096 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\certcli.dll
2015-04-30 21:40 - 2015-04-30 21:40 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AVAST Software
2015-04-30 21:39 - 2015-05-04 13:07 - 00000000 ____D () F:\WINDOWS\System32\Tasks\AVAST Software
2015-04-30 21:39 - 2015-05-04 12:37 - 00004182 _____ () F:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-04-30 21:39 - 2015-04-30 21:39 - 00442264 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSP.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00364472 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\aswBoot.exe
2015-04-30 21:39 - 2015-04-30 21:39 - 00272248 _____ () F:\WINDOWS\system32\Drivers\aswVmm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00137288 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswStm.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00093528 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswRdr2.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00089944 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00065736 _____ () F:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00029168 _____ () F:\WINDOWS\system32\Drivers\aswHwid.sys
2015-04-30 21:39 - 2015-04-30 21:39 - 00001949 _____ () F:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-04-30 21:39 - 2015-04-30 21:39 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-04-30 21:39 - 2015-04-30 21:38 - 01047320 _____ (Avast Software s.r.o.) F:\WINDOWS\system32\Drivers\aswSnx.sys
2015-04-30 21:38 - 2015-04-30 21:38 - 00043112 _____ (Avast Software s.r.o.) F:\WINDOWS\avastSS.scr
2015-04-30 21:38 - 2015-04-30 21:38 - 00000000 ____D () F:\Program Files\AVAST Software
2015-04-30 21:36 - 2015-04-30 21:36 - 00000000 ____D () F:\Users\Dani-PC\Tracing
2015-04-30 21:32 - 2015-05-01 14:32 - 00355986 _____ () F:\WINDOWS\PFRO.log
2015-04-29 14:12 - 2015-04-29 14:12 - 00281040 _____ () F:\WINDOWS\Minidump\042915-28718-01.dmp
2015-04-23 15:57 - 2015-04-23 15:57 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\AMD
2015-04-22 21:30 - 2015-04-22 21:31 - 00281040 _____ () F:\WINDOWS\Minidump\042215-23546-01.dmp
2015-04-19 18:59 - 2015-05-04 13:48 - 00000000 ____D () F:\Users\Dani-PC\Desktop\web
2015-04-17 19:10 - 2015-04-28 18:12 - 00000000 ____D () F:\Program Files (x86)\SpeedFan
2015-04-17 19:10 - 2015-04-17 19:10 - 00001030 _____ () F:\Users\Dani-PC\Desktop\SpeedFan.lnk
2015-04-17 19:10 - 2015-04-17 19:10 - 00000045 _____ () F:\WINDOWS\SysWOW64\initdebug.nfo
2015-04-17 15:26 - 2015-04-17 15:26 - 00000000 ____D () F:\Program Files (x86)\Mozilla Firefox
2015-04-17 15:26 - 2015-01-06 05:01 - 00072192 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\ndproxy.sys
2015-04-17 15:26 - 2015-01-06 04:59 - 00080896 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\wanarp.sys
2015-04-17 15:26 - 2015-01-06 03:12 - 00185856 _____ (Microsoft Corporation) F:\WINDOWS\system32\rascfg.dll
2015-04-17 15:26 - 2015-01-06 03:02 - 00164864 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\rascfg.dll
2015-04-16 21:01 - 2015-04-29 14:12 - 659939598 _____ () F:\WINDOWS\MEMORY.DMP
2015-04-16 21:01 - 2015-04-16 21:01 - 00281040 _____ () F:\WINDOWS\Minidump\041615-23187-01.dmp
2015-04-15 22:28 - 2015-04-15 22:28 - 00000000 ____D () F:\ProgramData\ATI
2015-04-15 22:25 - 2015-04-15 22:25 - 00033944 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152225403018.log
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center
2015-04-15 22:25 - 2015-04-15 22:25 - 00000000 ____D () F:\Program Files (x86)\AMD
2015-04-15 22:15 - 2015-04-15 22:15 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152215333428.log
2015-04-15 22:08 - 2015-04-15 22:08 - 00060385 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152208016234.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00052517 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504152206364336.log
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default\AppData\Local\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Roaming\ATI
2015-04-15 22:06 - 2015-04-15 22:06 - 00000000 ____D () F:\Users\Default User\AppData\Local\ATI
2015-04-15 20:06 - 2015-04-15 20:08 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2015-04-15 20:06 - 2015-04-15 20:06 - 00000000 ____D () F:\Program Files (x86)\Notepad++
2015-04-15 18:25 - 2015-05-03 17:10 - 00000080 _____ () F:\Users\Dani-PC\AppData\Local剜捯獫慴慇敭屳呇⁁屖湥楴汴浥湥湩潦
2015-04-15 18:25 - 2015-04-15 18:25 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Rockstar Games
2015-04-15 18:24 - 2015-04-15 18:26 - 00000000 ____D () F:\Users\Dani-PC\Documents\Rockstar Games
2015-04-15 18:23 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files (x86)\Rockstar Games
2015-04-15 18:22 - 2015-04-15 18:22 - 00001140 _____ () F:\WINDOWS\DirectX.log
2015-04-15 18:19 - 2015-04-15 18:19 - 00000000 ____D () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2015-04-15 15:48 - 2015-04-17 14:21 - 00000000 ____D () F:\Program Files\Rockstar Games
2015-04-15 11:20 - 2015-03-23 23:59 - 07476032 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntoskrnl.exe
2015-04-15 11:20 - 2015-03-23 23:59 - 01733952 _____ (Microsoft Corporation) F:\WINDOWS\system32\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:59 - 00360480 _____ (Microsoft Corporation) F:\WINDOWS\system32\sechost.dll
2015-04-15 11:20 - 2015-03-23 23:58 - 01498872 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ntdll.dll
2015-04-15 11:20 - 2015-03-23 23:45 - 00257216 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\sechost.dll
2015-04-15 11:20 - 2015-03-20 06:12 - 00246272 _____ (Microsoft Corporation) F:\WINDOWS\system32\microsoft-windows-system-events.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00285184 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64.dll
2015-04-15 11:20 - 2015-03-20 06:10 - 00013312 _____ (Microsoft Corporation) F:\WINDOWS\system32\wow64cpu.dll
2015-04-15 11:20 - 2015-03-20 05:17 - 00411648 _____ (Microsoft Corporation) F:\WINDOWS\system32\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:41 - 00369152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tracerpt.exe
2015-04-15 11:20 - 2015-03-20 04:40 - 00950784 _____ (Microsoft Corporation) F:\WINDOWS\system32\tdh.dll
2015-04-15 11:20 - 2015-03-20 04:16 - 00749568 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\tdh.dll
2015-04-15 11:20 - 2015-03-14 10:20 - 01385256 _____ (Microsoft Corporation) F:\WINDOWS\system32\msctf.dll
2015-04-15 11:20 - 2015-03-14 10:13 - 01124352 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msctf.dll
2015-04-15 11:19 - 2015-03-23 00:45 - 00227328 _____ (Microsoft Corporation) F:\WINDOWS\system32\aepdu.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 01111552 _____ (Microsoft Corporation) F:\WINDOWS\system32\aeinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00957440 _____ (Microsoft Corporation) F:\WINDOWS\system32\appraiser.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00769024 _____ (Microsoft Corporation) F:\WINDOWS\system32\invagent.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00726528 _____ (Microsoft Corporation) F:\WINDOWS\system32\generaltel.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00419328 _____ (Microsoft Corporation) F:\WINDOWS\system32\devinv.dll
2015-04-15 11:19 - 2015-03-23 00:09 - 00030720 _____ (Microsoft Corporation) F:\WINDOWS\system32\acmigration.dll
2015-04-15 11:19 - 2015-03-14 10:54 - 00133256 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuauclt.exe
2015-04-15 11:19 - 2015-03-14 03:56 - 00066048 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups.dll
2015-04-15 11:19 - 2015-03-14 03:56 - 00052224 _____ (Microsoft Corporation) F:\WINDOWS\system32\wups2.dll
2015-04-15 11:19 - 2015-03-14 03:51 - 00015360 _____ (Microsoft Corporation) F:\WINDOWS\system32\wu.upgrade.ps.dll
2015-04-15 11:19 - 2015-03-14 03:37 - 00267264 _____ (Microsoft Corporation) F:\WINDOWS\system32\WinSetupUI.dll
2015-04-15 11:19 - 2015-03-14 03:14 - 00027136 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wups.dll
2015-04-15 11:19 - 2015-03-14 02:22 - 03678720 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuaueng.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00140288 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:12 - 00035840 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapp.exe
2015-04-15 11:19 - 2015-03-14 02:09 - 00200192 _____ (Microsoft Corporation) F:\WINDOWS\system32\storewuauth.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00408064 _____ (Microsoft Corporation) F:\WINDOWS\system32\WUSettingsProvider.dll
2015-04-15 11:19 - 2015-03-14 02:08 - 00095744 _____ (Microsoft Corporation) F:\WINDOWS\system32\wudriver.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 02373632 _____ (Microsoft Corporation) F:\WINDOWS\system32\wucltux.dll
2015-04-15 11:19 - 2015-03-14 02:06 - 00891392 _____ (Microsoft Corporation) F:\WINDOWS\system32\wuapi.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00124928 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuwebv.dll
2015-04-15 11:19 - 2015-03-14 02:02 - 00029696 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapp.exe
2015-04-15 11:19 - 2015-03-14 01:59 - 00721920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wuapi.dll
2015-04-15 11:19 - 2015-03-14 01:59 - 00081920 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wudriver.dll
2015-04-15 11:19 - 2015-03-13 06:32 - 24980480 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtml.dll
2015-04-15 11:19 - 2015-03-13 06:08 - 00584192 _____ (Microsoft Corporation) F:\WINDOWS\system32\vbscript.dll
2015-04-15 11:19 - 2015-03-13 06:07 - 02886144 _____ (Microsoft Corporation) F:\WINDOWS\system32\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:53 - 00816128 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:50 - 06025216 _____ (Microsoft Corporation) F:\WINDOWS\system32\jscript9.dll
2015-04-15 11:19 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\mshtml.dll
2015-04-15 11:19 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\vbscript.dll
2015-04-15 11:19 - 2015-03-13 05:26 - 00092160 _____ (Microsoft Corporation) F:\WINDOWS\system32\mshtmled.dll
2015-04-15 11:19 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\iertutil.dll
2015-04-15 11:19 - 2015-03-13 05:17 - 01032704 _____ (Microsoft Corporation) F:\WINDOWS\system32\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 05:16 - 00664064 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript.dll
2015-04-15 11:19 - 2015-03-13 05:08 - 00720384 _____ (Microsoft Corporation) F:\WINDOWS\system32\ie4uinit.exe
2015-04-15 11:19 - 2015-03-13 05:07 - 00801280 _____ (Microsoft Corporation) F:\WINDOWS\system32\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 05:00 - 14397440 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:58 - 00259072 _____ (Microsoft Corporation) F:\WINDOWS\system32\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:50 - 00880128 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\inetcomm.dll
2015-04-15 11:19 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\jscript9.dll
2015-04-15 11:19 - 2015-03-13 04:45 - 02358784 _____ (Microsoft Corporation) F:\WINDOWS\system32\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\msfeeds.dll
2015-04-15 11:19 - 2015-03-13 04:37 - 00208896 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\pku2u.dll
2015-04-15 11:19 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieframe.dll
2015-04-15 11:19 - 2015-03-13 04:33 - 01548288 _____ (Microsoft Corporation) F:\WINDOWS\system32\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:22 - 00800768 _____ (Microsoft Corporation) F:\WINDOWS\system32\ieapfltr.dll
2015-04-15 11:19 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\wininet.dll
2015-04-15 11:19 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\urlmon.dll
2015-04-15 11:19 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\ieapfltr.dll
2015-04-15 11:19 - 2015-03-04 12:25 - 00377152 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\clfs.sys
2015-04-15 11:19 - 2015-03-04 05:04 - 00075264 _____ (Microsoft Corporation) F:\WINDOWS\system32\clfsw32.dll
2015-04-15 11:19 - 2015-03-04 04:19 - 00058880 _____ (Microsoft Corporation) F:\WINDOWS\SysWOW64\clfsw32.dll
2015-04-15 11:19 - 2015-02-24 10:32 - 00991552 _____ (Microsoft Corporation) F:\WINDOWS\system32\Drivers\http.sys
2015-04-15 11:19 - 2015-02-21 01:49 - 00780800 _____ (Microsoft Corporation) F:\WINDOWS\system32\lsm.dll
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Raptr
2015-04-14 16:58 - 2015-04-14 17:59 - 00000000 ____D () F:\Program Files (x86)\Raptr
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\library_dir
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\ProgramData\AMD
2015-04-14 16:58 - 2015-04-14 16:58 - 00000000 ____D () F:\Program Files (x86)\AMD AVT
2015-04-14 16:57 - 2015-04-14 16:57 - 00053392 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141657582014.log
2015-04-14 16:54 - 2015-04-14 16:54 - 00059540 _____ () F:\WINDOWS\SysWOW64\CCCInstall_201504141654276099.log
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\SysWOW64\GWX
2015-04-05 02:15 - 2015-04-05 02:15 - 00000000 ___SD () F:\WINDOWS\system32\GWX
2015-04-04 18:30 - 2015-04-04 18:30 - 00000000 ____D () F:\ProgramData\Codemasters
2015-04-04 18:29 - 2015-04-04 18:29 - 00466456 _____ (Creative Labs) F:\WINDOWS\system32\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00444952 _____ (Creative Labs) F:\WINDOWS\SysWOW64\wrap_oal.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\system32\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) F:\WINDOWS\SysWOW64\OpenAL32.dll
2015-04-04 18:29 - 2015-04-04 18:29 - 00000000 ____D () F:\Program Files (x86)\OpenAL
==================== One Month Modified Files and Folders =======
(If an entry is included in the fixlist, the file\folder will be moved.)
2015-05-04 14:06 - 2013-09-30 06:24 - 01938998 _____ () F:\WINDOWS\WindowsUpdate.log
2015-05-04 14:04 - 2014-10-04 12:56 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Battle.net
2015-05-04 14:03 - 2014-10-04 12:43 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Skype
2015-05-04 14:00 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\sru
2015-05-04 13:56 - 2014-10-04 01:21 - 00003596 _____ () F:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2478564968-1396142455-567371876-1001
2015-05-04 13:52 - 2014-10-04 12:31 - 00000000 ____D () F:\Program Files (x86)\Steam
2015-05-04 13:51 - 2015-03-31 16:49 - 00017245 _____ () F:\WINDOWS\setupact.log
2015-05-04 13:51 - 2013-08-22 16:45 - 00000006 ____H () F:\WINDOWS\Tasks\SA.DAT
2015-05-04 13:38 - 2015-02-11 21:47 - 00000914 _____ () F:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-05-04 13:17 - 2013-08-22 15:25 - 00262144 ___SH () F:\WINDOWS\system32\config\BBI
2015-05-04 12:12 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\system32\NDF
2015-05-04 12:10 - 2014-10-04 01:27 - 00003962 _____ () F:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{0C875E54-3221-428F-8DA2-055DE63F0D71}
2015-05-04 12:01 - 2013-08-22 16:44 - 05104984 _____ () F:\WINDOWS\system32\FNTCACHE.DAT
2015-05-04 00:15 - 2013-08-22 17:36 - 00000000 ___RD () F:\WINDOWS\ImmersiveControlPanel
2015-05-04 00:15 - 2013-08-22 15:36 - 00000000 ____D () F:\WINDOWS\system32\AdvancedInstallers
2015-05-04 00:06 - 2013-08-22 17:20 - 00000000 ____D () F:\WINDOWS\CbsTemp
2015-05-03 20:54 - 2014-10-04 01:16 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Packages
2015-05-03 03:45 - 2014-10-16 21:41 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\uTorrent
2015-05-03 03:45 - 2014-05-24 16:28 - 00000000 ____D () F:\Users\Dani-PC\Desktop\filmy
2015-05-03 01:53 - 2014-11-09 14:44 - 00000000 ____D () F:\KMPlayer
2015-05-02 01:15 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppReadiness
2015-05-01 01:50 - 2014-10-04 01:27 - 00002214 _____ () F:\Users\Public\Desktop\Google Chrome.lnk
2015-04-30 21:37 - 2014-10-04 01:30 - 00000000 ____D () F:\ProgramData\AVAST Software
2015-04-30 21:36 - 2014-10-04 01:13 - 00000000 ____D () F:\Users\Dani-PC
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ___RD () F:\Program Files (x86)\Skype
2015-04-30 21:35 - 2014-10-04 12:42 - 00000000 ____D () F:\ProgramData\Skype
2015-04-29 14:12 - 2014-10-23 16:11 - 00000000 ____D () F:\WINDOWS\Minidump
2015-04-27 00:18 - 2014-10-04 13:06 - 00000000 ____D () F:\ProgramData\Origin
2015-04-26 18:12 - 2013-09-30 06:20 - 01847990 _____ () F:\WINDOWS\system32\PerfStringBackup.INI
2015-04-26 18:12 - 2013-09-30 05:57 - 00772496 _____ () F:\WINDOWS\system32\perfh005.dat
2015-04-26 18:12 - 2013-09-30 05:57 - 00168614 _____ () F:\WINDOWS\system32\perfc005.dat
2015-04-21 00:10 - 2014-05-15 15:57 - 00000000 ____D () F:\Users\Dani-PC\Desktop\hry
2015-04-20 15:02 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\rescache
2015-04-17 15:44 - 2013-08-22 17:36 - 00000000 ____D () F:\WINDOWS\AppCompat
2015-04-17 15:26 - 2014-10-16 22:01 - 00000000 ___RD () F:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-04-17 15:26 - 2014-10-16 21:57 - 00000000 ____D () F:\ProgramData\Microsoft Help
2015-04-15 22:25 - 2014-10-04 01:08 - 00000000 ____D () F:\Program Files\AMD
2015-04-15 22:06 - 2014-10-04 01:09 - 00000000 ____D () F:\ProgramData\Package Cache
2015-04-15 15:48 - 2014-12-29 22:01 - 00000000 ___HD () F:\Program Files (x86)\InstallShield Installation Information
2015-04-15 12:35 - 2014-10-04 01:50 - 00000000 ____D () F:\WINDOWS\system32\MRT
2015-04-15 12:32 - 2014-10-04 01:50 - 128913832 _____ (Microsoft Corporation) F:\WINDOWS\system32\MRT.exe
2015-04-15 12:29 - 2013-08-22 15:25 - 00000167 _____ () F:\WINDOWS\win.ini
2015-04-15 12:25 - 2014-12-11 00:36 - 00000000 ____D () F:\WINDOWS\system32\appraiser
2015-04-15 12:25 - 2014-10-04 15:06 - 00000000 ___SD () F:\WINDOWS\system32\CompatTel
2015-04-14 20:03 - 2015-01-25 17:21 - 00000000 ____D () F:\Program Files (x86)\Hearthstone
2015-04-14 18:38 - 2015-02-11 21:47 - 00003802 _____ () F:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-04-14 17:40 - 2015-01-31 02:32 - 00000000 ____D () F:\Users\Dani-PC\AppData\Roaming\Trine2
2015-04-14 17:39 - 2015-01-30 02:13 - 00000000 ____D () F:\Users\Dani-PC\Documents\Diablo III
2015-04-14 17:39 - 2014-10-01 19:16 - 00000000 ____D () F:\Users\Dani-PC\Documents\FIFA 15
2015-04-14 16:48 - 2014-05-15 14:56 - 00000000 ____D () F:\AMD
2015-04-14 01:24 - 2013-08-22 17:38 - 00792056 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-04-14 01:24 - 2013-08-22 17:38 - 00178168 _____ (Adobe Systems Incorporated) F:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-10 19:25 - 2014-10-04 12:56 - 00000000 ____D () F:\Program Files (x86)\Battle.net
2015-04-10 13:25 - 2015-02-11 21:47 - 00000000 ____D () F:\Users\Dani-PC\AppData\Local\Adobe
2015-04-08 13:32 - 2015-01-21 16:22 - 00000000 ____D () F:\Program Files (x86)\Diablo III
2015-04-07 14:15 - 2014-05-15 15:23 - 00000000 ____D () F:\Program Files (x86)\World of Warcraft
2015-04-04 18:29 - 2014-12-11 00:01 - 00000000 ____D () F:\Users\Dani-PC\Documents\My Games
==================== Files in the root of some directories =======
2015-03-01 02:15 - 2015-03-01 02:15 - 0000132 _____ () F:\Users\Dani-PC\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-03-01 02:10 - 2015-03-01 03:14 - 0001480 _____ () F:\Users\Dani-PC\AppData\Local\Adobe Uložit pro web 13.0 Prefs
2015-03-31 15:41 - 2015-03-31 16:14 - 0007600 _____ () F:\Users\Dani-PC\AppData\Local\Resmon.ResmonCfg
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
F:\Windows\System32\winlogon.exe => File is digitally signed
F:\Windows\System32\wininit.exe => File is digitally signed
F:\Windows\explorer.exe => File is digitally signed
F:\Windows\SysWOW64\explorer.exe => File is digitally signed
F:\Windows\System32\svchost.exe => File is digitally signed
F:\Windows\SysWOW64\svchost.exe => File is digitally signed
F:\Windows\System32\services.exe => File is digitally signed
F:\Windows\System32\User32.dll => File is digitally signed
F:\Windows\SysWOW64\User32.dll => File is digitally signed
F:\Windows\System32\userinit.exe => File is digitally signed
F:\Windows\SysWOW64\userinit.exe => File is digitally signed
F:\Windows\System32\rpcss.dll => File is digitally signed
F:\Windows\System32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-04-24 17:01
==================== End Of Log ============================
- Přílohy
-
- Addition.rar
- (13.27 KiB) Staženo 44 x
Re: Hostitel služby vytěžuje disk
RSIT i FRST logy jsou ted ciste, ale muzete tam pustit jeste pro kontrolu nejaky sken (napr. MBAM). S pripadnymi nalezy klidne poradim.
- Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
- Oznacte jen moznost "Remove disinfection tools"
- kliknete na Run
Pokud je cokoliv nejasného, ihned se ptej.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
V případě spokojenosti prosím podpořte forum.
Pro dotazy, které se nehodí na forum, je možné využít altrokzavináčforum.viry.cz
Máš-li chuť pomáhat návštěvníkům tohoto fora, přihlas se do naší školičky.
Přispějete na provoz fóra?