Dragon Branch Adwords

[goprocibaczech]

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Cibulka (administrator) on PHANTOM on 12-05-2015 16:55:26
Running from C:\Users\Cibulka\Downloads
Loaded Profiles: Cibulka (Available profiles: Cibulka)
Platform: Windows 7 Professional (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
() C:\Program Files (x86)\Opera\21.0.1432.67\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugincontainer.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugins\8\Plugin.exe
() C:\Program Files (x86)\Common Files\b56dff5a-df23-4e43-acde-a4f08b8dcffb\updater.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugins\3\Plugin.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugins\5\Plugin.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugins\2\Plugin.exe
() C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugins\3\Plugin.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Farbar) C:\Users\Cibulka\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: F - F:\Autoplay.exe -auto
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: {d93af510-f359-11e4-b06c-b7af72c88041} - F:\Autoplay.exe -auto
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-12] (Avast Software s.r.o.)
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\S-1-5-21-1439765233-3629945508-1984359166-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-12] (Avast Software s.r.o.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-12] (Avast Software s.r.o.)
BHO-x32: Dragon Branch -> {d640ce67-58e4-43c2-9adc-6bb959d7c606} -> C:\Program Files (x86)\Dragon Branch\Extensions\d640ce67-58e4-43c2-9adc-6bb959d7c606.dll [2015-05-05] ()
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.145.45

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-04-03] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-03] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-12]

Chrome:
=======
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04]
CHR Extension: (Google Docs) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04]
CHR Extension: (YouTube) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04]
CHR Extension: (Google Search) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04]
CHR Extension: (Google Sheets) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04]
CHR Extension: (Bookmark Manager) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-27]
CHR Extension: (Google Wallet) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04]
CHR Extension: (Gmail) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-12]

Opera:
=======
OPR Extension: (Dragon Branch) - C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Extensions\enkgacgbeckkicmilhfokkjkdopicbbj [2015-05-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-12] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-12] (Avast Software s.r.o.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
R2 Service Mgr DragonBranch; C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb\plugincontainer.exe [556304 2015-05-12] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update Mgr DragonBranch; C:\Program Files (x86)\Common Files\b56dff5a-df23-4e43-acde-a4f08b8dcffb\updater.exe [478992 2015-05-12] ()
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-12] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-12] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-12] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-05-05] (Disc Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 16:55 - 2015-05-12 16:56 - 00013663 _____ () C:\Users\Cibulka\Downloads\FRST.txt
2015-05-12 16:54 - 2015-05-12 16:55 - 00000000 ____D () C:\FRST
2015-05-12 16:53 - 2015-05-12 16:53 - 02102784 _____ (Farbar) C:\Users\Cibulka\Downloads\FRST64 (1).exe
2015-05-12 16:49 - 2015-05-12 16:50 - 02102784 _____ (Farbar) C:\Users\Cibulka\Downloads\FRST64.exe
2015-05-12 14:14 - 2015-05-12 14:14 - 00000476 __RSH () C:\ProgramData\ntuser.pol
2015-05-12 10:05 - 2015-05-12 10:05 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\AVAST Software
2015-05-12 09:43 - 2015-05-12 09:43 - 00001982 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-05-12 09:43 - 2015-05-12 09:43 - 00001922 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2015-05-12 09:43 - 2015-05-12 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-12 09:42 - 2015-05-12 09:42 - 00003924 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-12 09:42 - 2015-05-12 09:41 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-12 09:41 - 2015-05-12 09:41 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-05-12 09:41 - 2015-05-12 09:41 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-05-12 09:38 - 2015-05-12 09:38 - 00000000 ____D () C:\Program Files\AVAST Software
2015-05-12 09:36 - 2015-05-12 09:36 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-05-12 09:35 - 2015-05-12 09:36 - 05471128 _____ (Avast Software s.r.o.) C:\Users\Cibulka\Downloads\avast_internet_security_setup_online.exe
2015-05-10 16:03 - 2015-05-10 16:03 - 00000000 ____D () C:\Users\Cibulka\Desktop\Adobe After Effects Auto-Save
2015-05-10 15:42 - 2015-05-10 15:43 - 19961856 _____ () C:\Users\Cibulka\Desktop\Untitled Project.aep
2015-05-10 15:41 - 2015-05-10 16:04 - 01744347 _____ () C:\Users\Cibulka\Desktop\textden.c4d
2015-05-10 14:25 - 2015-05-10 14:25 - 16785648 _____ () C:\Users\Cibulka\Desktop\ytb.mp4
2015-05-10 13:22 - 2015-05-10 13:22 - 61675841 _____ () C:\Users\Cibulka\Desktop\Sequence 01_2.mp4
2015-05-10 13:07 - 2015-05-10 13:13 - 581714760 _____ () C:\Users\Cibulka\Desktop\Sequence 01_1.avi
2015-05-10 12:41 - 2015-05-10 12:52 - 1484725330 _____ () C:\Users\Cibulka\Desktop\Sequence 01.avi
2015-05-10 12:19 - 2015-05-10 12:19 - 182458297 _____ () C:\Users\Cibulka\Desktop\GOPR423511.mp4
2015-05-09 08:30 - 2015-05-10 08:09 - 00000000 ____D () C:\Users\Cibulka\Desktop\Kvetinovy den CANON
2015-05-09 08:30 - 2015-05-09 13:14 - 00000000 ____D () C:\Users\Cibulka\Desktop\Kvetinovy den GOPRO
2015-05-08 22:19 - 2015-05-09 00:31 - 00000000 ____D () C:\Users\Cibulka\Desktop\stabultest
2015-05-08 18:33 - 2015-05-08 19:08 - 00000000 ____D () C:\Users\Cibulka\Desktop\dentest
2015-05-08 16:54 - 2015-05-08 16:55 - 195855649 _____ () C:\Users\Cibulka\Desktop\GOPR4231.MP4
2015-05-08 15:13 - 2015-05-08 15:13 - 1438464856 _____ () C:\Users\Cibulka\Desktop\MVI_3734.MOV
2015-05-08 13:05 - 2015-05-08 12:54 - 01893416 ____N () C:\Users\Cibulka\Desktop\PIC000155-03.jpeg
2015-05-08 11:49 - 2015-05-08 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJI Product
2015-05-08 11:49 - 2015-05-08 11:49 - 00000000 ____D () C:\Program Files (x86)\DJI Product
2015-05-08 09:46 - 2015-05-08 09:46 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (2).torrent
2015-05-08 09:36 - 2015-05-08 09:36 - 00000997 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2014.lnk
2015-05-08 08:57 - 2015-05-10 15:46 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\MAXON
2015-05-08 08:07 - 2015-05-08 08:07 - 00000000 ____D () C:\Program Files\Maxon
2015-05-08 08:00 - 2015-05-08 08:00 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Publish Providers
2015-05-08 07:57 - 2015-05-08 07:58 - 00006088 _____ () C:\Windows\system32\--traceoff
2015-05-08 07:57 - 2015-05-08 07:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-05-08 07:57 - 2015-05-08 07:57 - 00000000 _____ () C:\Windows\system32\--debugoff
2015-05-08 07:56 - 2015-05-08 07:59 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\ProgramData\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\Program Files\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-05-08 07:55 - 2015-05-08 08:00 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Sony
2015-05-08 07:54 - 2015-05-08 08:10 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe Media Encoder CC 2014 v8.0.1 (x64-Patch) [ChingLiu]
2015-05-08 07:54 - 2015-05-08 07:54 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (1).torrent
2015-05-08 07:53 - 2015-05-08 07:53 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu.torrent
2015-05-05 22:29 - 2015-05-05 22:29 - 00000000 ____D () C:\Twixtor5AEManual
2015-05-05 22:29 - 2015-05-05 22:29 - 00000000 ____D () C:\Twixtor5AE
2015-05-05 22:11 - 2015-05-05 22:11 - 00001310 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Update Management Tool.lnk
2015-05-05 22:11 - 2015-05-05 22:11 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2014.lnk
2015-05-05 21:46 - 2015-05-05 21:46 - 00003504 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Phantom-Cibulka
2015-05-05 21:29 - 2015-05-05 21:30 - 00000000 ____D () C:\ProgramData\Package Cache
2015-05-05 21:24 - 2015-05-08 09:32 - 00001534 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-05-05 21:16 - 2015-05-12 15:20 - 00000000 ____D () C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb
2015-05-05 21:16 - 2015-05-05 21:16 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\RHEng
2015-05-05 21:16 - 2015-05-05 21:16 - 00000000 ____D () C:\Program Files (x86)\Dragon Branch
2015-05-05 21:16 - 2015-05-05 21:16 - 00000000 ____D () C:\Program Files (x86)\Disc Soft
2015-05-05 21:15 - 2015-05-05 21:17 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:16 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:15 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-05-05 21:15 - 2015-05-05 21:15 - 00001743 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-05-05 21:14 - 2015-05-05 21:15 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-05-05 21:13 - 2015-05-05 21:14 - 13146016 _____ (Disc Soft Ltd) C:\Users\Cibulka\Downloads\DTLite501-0406 (1).exe
2015-05-05 21:13 - 2015-05-05 21:13 - 13146016 _____ (Disc Soft Ltd) C:\Users\Cibulka\Downloads\DTLite501-0406.exe
2015-05-05 21:10 - 2015-05-05 21:10 - 00000000 ____D () C:\Users\Cibulka\Desktop\InstagramLUTS
2015-05-05 18:21 - 2015-05-05 18:40 - 00000000 ____D () C:\Users\Cibulka\Downloads\Cinema 4D R14.042
2015-05-05 18:15 - 2015-05-05 18:16 - 00012280 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]cinema.4d.r14.042.heavygamerz.torrent
2015-05-05 16:11 - 2015-05-05 16:23 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe After Effects CC 2014 (v13.2.0) RUS-ENG Update 2 by Monkrus-=TEAM OS-={HKRG}
2015-05-05 16:10 - 2015-05-08 09:25 - 00000000 ____D () C:\Users\Cibulka\Desktop\Utorrent
2015-05-05 16:09 - 2015-05-05 16:10 - 00014036 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.after.effects.cc.2014.v13.2.0.rus.eng.update.2.by.monkrus.team.os.hkrg.torrent
2015-05-05 12:31 - 2015-05-05 12:31 - 00000492 _____ () C:\Users\Cibulka\Downloads\SRD.zip
2015-05-05 10:52 - 2015-05-05 10:52 - 00000102 _____ () C:\Users\Cibulka\Nojs01.nfp
2015-05-05 09:41 - 2015-05-05 09:41 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Reincubate
2015-05-05 09:41 - 2015-05-05 09:41 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2015-05-05 09:40 - 2015-05-05 09:41 - 03454320 _____ (Reincubate Ltd) C:\Users\Cibulka\Downloads\dmge-latest.exe
2015-05-05 09:37 - 2015-05-05 09:37 - 00361726 _____ () C:\Users\Cibulka\Downloads\utorrent-portable.zip
2015-05-05 09:36 - 2015-05-05 09:36 - 25531275 _____ () C:\Users\Cibulka\Downloads\Neat Video 3.1 Pro AE.dmg
2015-05-05 09:36 - 2015-05-05 09:36 - 00016180 _____ () C:\Users\Cibulka\Downloads\Neat_Video_3.1_Pro_for_After_Effects_CS6_CS5.5.torrent
2015-05-05 09:27 - 2015-05-08 07:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere
2015-05-05 00:55 - 2015-05-05 00:56 - 04884322 _____ () C:\Users\Cibulka\Downloads\Neat Video 3.5 Full + Crack [FILETIE-DC.COM].rar
2015-05-05 00:32 - 2015-05-05 00:32 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-05-05 00:32 - 2015-05-05 00:32 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-05-05 00:32 - 2015-05-05 00:32 - 00113543 _____ () C:\Windows\SysWOW64\slmgr.vbs
2015-05-05 00:32 - 2015-05-05 00:32 - 00002048 _____ () C:\Windows\SysWOW64\winver.exe
2015-05-05 00:32 - 2015-05-05 00:32 - 00001536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2015-05-04 23:59 - 2015-05-04 23:59 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\PACE Anti-Piracy
2015-05-04 23:59 - 2015-05-04 23:59 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\PACE Anti-Piracy
2015-05-04 23:59 - 2015-05-04 23:59 - 00000000 ____D () C:\ProgramData\PACE Anti-Piracy
2015-05-04 23:51 - 2015-05-04 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-05-04 23:15 - 2015-05-08 07:30 - 00000000 ____D () C:\Program Files\Neat Video for Premiere
2015-05-04 23:15 - 2015-05-08 07:30 - 00000000 ____D () C:\Program Files (x86)\Neat Video for Premiere
2015-05-04 23:14 - 2014-06-23 13:04 - 00000000 ____D () C:\Users\Cibulka\Desktop\Neat Video Pro 3.5 for Premiere Pro (cracked VR) [ChingLiu]
2015-05-03 12:38 - 2015-03-22 00:51 - 00000000 ___RD () C:\Users\Cibulka\Desktop\Touch Logo Pack - Flat Interactive Media Reveals
2015-05-03 11:30 - 2015-05-03 11:30 - 00000000 ____D () C:\Twix
2015-04-29 15:59 - 2015-04-29 15:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-04-29 14:23 - 2015-05-08 07:27 - 00450620 _____ () C:\Users\Cibulka\Desktop\logocibulka.psd
2015-04-29 13:47 - 2011-09-08 18:53 - 00000000 ____D () C:\Users\Cibulka\Desktop\Deus Ex - Human revolution soundtrack
2015-04-29 13:10 - 2015-04-29 13:13 - 63899324 _____ () C:\Users\Cibulka\Downloads\Deus-Ex----Human-revolution-soundtrack.rar
2015-04-26 20:05 - 2015-04-26 20:05 - 00557751 _____ () C:\Users\Cibulka\Downloads\ringbearer.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00499435 _____ () C:\Users\Cibulka\Downloads\CMU-serifextra.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00116174 _____ () C:\Users\Cibulka\Downloads\summertime.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00050490 _____ () C:\Users\Cibulka\Downloads\akatype_akadora.zip
2015-04-17 21:02 - 2015-05-06 20:02 - 00000000 ____D () C:\Users\Cibulka\Documents\Adobe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-12 16:25 - 2015-04-03 22:14 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-12 16:16 - 2009-07-14 06:45 - 00009600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-12 16:16 - 2009-07-14 06:45 - 00009600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-12 14:17 - 2015-04-03 19:22 - 00134397 _____ () C:\Windows\WindowsUpdate.log
2015-05-12 14:14 - 2015-04-03 22:14 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-12 14:14 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-12 14:14 - 2009-07-14 06:51 - 00021493 _____ () C:\Windows\setupact.log
2015-05-12 14:13 - 2015-04-04 15:51 - 00002206 _____ () C:\Windows\PFRO.log
2015-05-12 09:21 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-05-12 08:44 - 2015-04-03 19:54 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\Adobe
2015-05-11 10:46 - 2015-04-04 18:20 - 00004043 _____ () C:\Users\Cibulka\Desktop\Dtatus.txt
2015-05-10 12:22 - 2015-04-03 19:53 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\vlc
2015-05-08 18:30 - 2009-07-14 17:18 - 00665944 _____ () C:\Windows\system32\perfh005.dat
2015-05-08 18:30 - 2009-07-14 17:18 - 00139608 _____ () C:\Windows\system32\perfc005.dat
2015-05-08 18:30 - 2009-07-14 07:13 - 01575230 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-08 09:37 - 2015-04-03 19:55 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Adobe
2015-05-08 09:36 - 2015-04-03 20:08 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-05-08 09:35 - 2015-04-03 20:02 - 00000000 ____D () C:\Program Files\Adobe
2015-05-08 09:35 - 2015-04-03 20:00 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-08 09:28 - 2009-07-14 06:45 - 04968592 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-06 19:40 - 2015-04-03 19:55 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-05 22:14 - 2015-04-03 20:10 - 00058760 _____ () C:\Users\Cibulka\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-05 21:34 - 2015-04-03 20:03 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-05-05 10:52 - 2015-04-03 19:26 - 00000000 ____D () C:\Users\Cibulka
2015-05-04 23:59 - 2013-05-16 08:13 - 00000000 ___HD () C:\Users\Cibulka\AppData\Local\7yne6lOPW
2015-04-13 05:58 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-05 06:56

==================== End Of Log ============================

[vyosek]

Zdravim

Stahnete AdwCleaner http://general-changelog-team.fr/fr/dow ... adwcleaner

• Ulozte nejlepe na plochu
• Ukoncete vsechny programy
• Po spusteni probehne stazeni databaze
• Kliknete na Scan a nasledne Clean
• Probehne oprava, restart PC a pak se objevi log, pripadne bude ulozen ve slozce c:\AdwCleaner\AdwCleaner[S?].txt, ten sem vlozte

Stahnete Zoek.exe http://hijackthis.nl/smeenk/ a ulozte jej na plochu

• Pokud pouzivate Win Vista ci W7, kliknete na Zoek pravym a dejte Run As Administrator ci Spustit jako spravce
• Do okna vlozte skript nize

• Kód: Vybrat vše

  autoclean;
  resethosts;
  emptyclsid;
  IEdefaults;
  FFdefaults;
  CHRdefaults;
  emptyIEcache;
  emptyFFcache;
  emptyCHRcache;
  emptyalltemp;
  emptyflash;
  emptyjava;
  emptyrecycle.bin;
  

• Nasledne kliknete na Run Script
• PC provede opravu, restartuje se a da Vam log, jeho obsah vlozte sem

[goprocibaczech]

Dobry den, prikladam log z AdwCleaneru

# AdwCleaner v4.204 - Log vytvořen 13/05/2015 v 08:12:01
# Aktualizováno 12/05/2015 by Xplode
# Databáze : 2015-05-12.2 [Server]
# Operační system : Windows 7 Professional (x64)
# Uživatelské jméno : Cibulka - PHANTOM
# Spuštěno z : C:\Users\Cibulka\Downloads\adwcleaner_4.204.exe
# Nastavení : Čištění

***** [ Služby ] *****

[#] Služba Smazáno : Update Mgr DragonBranch
Služba Smazáno : Service Mgr DragonBranch

***** [ Soubory / Složky ] *****

[!] Složka Smazáno : C:\ProgramData\b56dff5a-df23-4e43-acde-a4f08b8dcffb
[!] Složka Smazáno : C:\Program Files (x86)\Dragon Branch
[!] Složka Smazáno : C:\Program Files (x86)\Common Files\b56dff5a-df23-4e43-acde-a4f08b8dcffb
[!] Složka Smazáno : C:\Users\Cibulka\AppData\Roaming\RHEng
Soubor Smazáno : C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_dmg-extractor.en.softonic.com_0.localstorage
Soubor Smazáno : C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\hxxp_dmg-extractor.en.softonic.com_0.localstorage-journal

***** [ Naplánované úlohy ] *****


***** [ Zástupci ] *****


***** [ Registry ] *****

Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{B853E835-9F24-4F4B-B55C-E554D15CCCD2}
Klíč Smazáno : HKLM\SOFTWARE\Classes\CLSID\{F83D1872-D9FF-47F8-B5A0-49CC51E24EE8}

***** [ Prohlížeče ] *****

-\\ Internet Explorer v8.0.7600.16385


-\\ Google Chrome v42.0.2311.135


-\\ Opera v21.0.1432.67


*************************

AdwCleaner[R0].txt - [1609 bytů] - [13/05/2015 08:10:33]
AdwCleaner[S0].txt - [1544 bytů] - [13/05/2015 08:12:01]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1602 bytů] ##########

[vyosek]

Pokracujte Zoek-em

[goprocibaczech]

Zoek zde:


Zoek.exe v5.0.0.0 Updated 04-May-2015
Tool run by Cibulka on st 13.05.2015 at 8:25:22,65.
Microsoft Windows 7 Professional 6.1.7600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Cibulka\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

13.5.2015 8:26:50 Zoek.exe System Restore Point Created Successfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

# localhost name resolution is handled within DNS itself.
127.0.0.1 localhost
::1 localhost

==== Empty Folders Check ======================

C:\PROGRA~2\AGEIA Technologies deleted successfully
C:\Users\Cibulka\AppData\Roaming\Publish Providers deleted successfully
C:\Users\Cibulka\AppData\Local\PACE Anti-Piracy deleted successfully
C:\Users\Cibulka\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{d640ce67-58e4-43c2-9adc-6bb959d7c606} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d640ce67-58e4-43c2-9adc-6bb959d7c606} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\AGEIA Technologies not found
C:\install.exe deleted
C:\PROGRA~3\Package Cache deleted
C:\windows\SysNative\GroupPolicy\machine deleted
C:\windows\SysNative\GroupPolicy\gpt.ini deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [12.05.2015 09:41]

==== Chromium Look ======================

Google Chrome Version: 42.0.2311.135

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[12.05.2015 09:41]

Bookmark Manager - Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
{scripts [background.js]}content_scripts:[{js:[content.js]matches:[<all_urls>]run_at:document_end}]content_security_policy:script-src 'self' 'unsafe-eval' https://dragonbranch-a.akamaihd.net https://dragonbranch-a.akamaihd.net https://cdn.dragonbranch.net; object-src 'self'description:homepage_url:http://www.dragonbranch.neticons:{48:icon.png}key:MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MXdA+9AofLh7I3xIyNy02nyhhgXrkIVtuWRUWdB4Pqs7rvvnihOZ1G7ERQP4cP5sOyMr4yJVxBKCd/cB0uIZpC203UbkLvOivRmng8eR4mXc3ewogHDOSlrqNVmLJYWVLGtPLRoNcny1RqTbKWrXfuTYAND4/qExXOdAUIr4mLNDtoTnEFks1p0Gd6/XIuXwMVlEOGh76XZmroO9dREF5ta5LwCnN3ql5nJ1M8PN6f0Z1ESWL6O9LiKLIuPh+kMMcs7kpZnnmGSbEDLecaxM8+kQwQjFO6tVFzvswqHcwx/pH0HO3un0AdzeYLAA4CHGZxP3MndhUfo2hXP1hy+iQIDAQABmanifest_version:2name:Dragon Branchpermissions:[managementstoragetabswebRequestwebRequestBlocking<all_urls>]update_url:http://cdn.dragonbranch.net/updateversi ... 5609.26393} - Cibulka\AppData\Roaming\Opera Software\Opera Stable\Extensions\enkgacgbeckkicmilhfokkjkdopicbbj

==== Chromium Startpages ======================

C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.google.com/",
"startup_urls": [ "http://www.google.com/" ]


==== Chromium Fix ======================

C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_static.olark.com_0.localstorage deleted successfully
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\https_static.olark.com_0.localstorage-journal deleted successfully
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Extensions\enkgacgbeckkicmilhfokkjkdopicbbj deleted successfully
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Storage\chrome-extension_enkgacgbeckkicmilhfokkjkdopicbbj_0.localstorage deleted successfully

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTer ... ORM=IE8SRC"

==== Reset Google Chrome ======================

C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences was reset successfully
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Preferences was reset successfully
C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Web Data was reset successfully
C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal was reset successfully
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Web Data will be reset at reboot
C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal will be reset at reboot

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\wow6432node\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Users\Cibulka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Cibulka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache will be emptied at reboot
C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache is not empty, a reboot is needed

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================


==== Empty Temp Folders ======================

C:\Users\Cibulka\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Cibulka\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Web Data" not found
"C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Web Data-journal" not found
"C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Users\Cibulka\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" deleted
"C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not deleted
"C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache\data_0" deleted
"C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache\data_1" deleted
"C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache\data_2" deleted
"C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache\data_3" deleted
"C:\Users\Cibulka\AppData\Local\Opera Software\Opera Stable\Cache\index" deleted
"C:\Users\Cibulka\AppData\Roaming\Opera Software\Opera Stable\Local Extension Settings\enkgacgbeckkicmilhfokkjkdopicbbj" deleted
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\a-v2.sndcdn.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\bbcdn-bbnaut.ibillboard.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\cache.lego.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\cdn1.static.spankwire.phncdn.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\cdn1.static.youporn.phncdn.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\cdn3b.static.hardsextube.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\fbstatic-a.akamaihd.net" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\media.novinky.cz" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\s1.adform.net" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\static.brazzers.com" not found
"C:\Users\Cibulka\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\7VEPWFRK\va1en.sftcdn.net" not found

==== EOF on st 13.05.2015 at 11:49:04,65 ======================

[vyosek]

Poprosim o novy log z FRST

[goprocibaczech]

No přijde mi to lepší

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 09-05-2015
Ran by Cibulka (administrator) on PHANTOM on 13-05-2015 16:52:49
Running from C:\Users\Cibulka\Downloads
Loaded Profiles: Cibulka (Available profiles: Cibulka)
Platform: Windows 7 Professional (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
() C:\Program Files (x86)\Opera\21.0.1432.67\opera_crashreporter.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe
(Opera Software) C:\Program Files (x86)\Opera\21.0.1432.67\opera.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2234144 2014-02-05] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-12] (Avast Software s.r.o.)
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: F - F:\Autoplay.exe -auto
HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: {d93af510-f359-11e4-b06c-b7af72c88041} - F:\Autoplay.exe -auto
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-12] (Avast Software s.r.o.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1439765233-3629945508-1984359166-1000 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = http://www.google.com/search?q={searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-12] (Avast Software s.r.o.)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-12] (Avast Software s.r.o.)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2009-07-14] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2009-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.145.45

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_134.dll [2015-04-03] ()
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-04-28] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-03] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-04-03] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2014-02-05] (VideoLAN)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-04-28] (Adobe Systems)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-05-12]

Chrome:
=======
CHR Profile: C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-04]
CHR Extension: (Google Docs) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-04]
CHR Extension: (Google Drive) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-04]
CHR Extension: (YouTube) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-04]
CHR Extension: (Google Search) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-04]
CHR Extension: (Google Sheets) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-04]
CHR Extension: (Bookmark Manager) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-27]
CHR Extension: (Google Wallet) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-04]
CHR Extension: (Gmail) - C:\Users\Cibulka\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-05-12]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-12] (Avast Software s.r.o.)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-12] (Avast Software s.r.o.)
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1593632 2014-02-05] (NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-12] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-12] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-12] (Avast Software s.r.o.)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-12] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-12] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-12] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-12] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-12] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-12] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-12] ()
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-05-05] (Disc Soft Ltd)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [39200 2013-12-27] (NVIDIA Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 11:49 - 2015-05-13 11:49 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\VirtualStore
2015-05-13 11:43 - 2015-05-13 08:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
2015-05-13 08:26 - 2015-05-13 11:49 - 00012417 _____ () C:\zoek-results.log
2015-05-13 08:24 - 2015-05-13 08:49 - 00000000 ____D () C:\zoek_backup
2015-05-13 08:16 - 2015-05-13 08:51 - 00491055 _____ () C:\Users\Cibulka\Downloads\adwcleaner_4.204 (1).exe.opdownload
2015-05-13 08:09 - 2015-05-13 08:09 - 01308672 _____ () C:\Users\Cibulka\Downloads\zoek.exe
2015-05-13 08:07 - 2015-05-13 08:12 - 00000000 ____D () C:\AdwCleaner
2015-05-13 08:06 - 2015-05-13 08:07 - 02209792 _____ () C:\Users\Cibulka\Downloads\adwcleaner_4.204.exe
2015-05-12 16:56 - 2015-05-12 16:58 - 00026573 _____ () C:\Users\Cibulka\Downloads\Addition.txt
2015-05-12 16:55 - 2015-05-13 16:52 - 00012220 _____ () C:\Users\Cibulka\Downloads\FRST.txt
2015-05-12 16:54 - 2015-05-13 16:52 - 00000000 ____D () C:\FRST
2015-05-12 16:53 - 2015-05-12 16:53 - 02102784 _____ (Farbar) C:\Users\Cibulka\Downloads\FRST64 (1).exe
2015-05-12 16:49 - 2015-05-12 16:50 - 02102784 _____ (Farbar) C:\Users\Cibulka\Downloads\FRST64.exe
2015-05-12 14:14 - 2015-05-13 10:04 - 00000008 __RSH () C:\ProgramData\ntuser.pol
2015-05-12 10:05 - 2015-05-12 10:05 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\AVAST Software
2015-05-12 09:43 - 2015-05-12 09:43 - 00001982 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-05-12 09:43 - 2015-05-12 09:43 - 00001922 _____ () C:\Users\Public\Desktop\Avast Internet Security.lnk
2015-05-12 09:43 - 2015-05-12 09:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-05-12 09:42 - 2015-05-13 16:20 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2015-05-12 09:42 - 2015-05-12 09:41 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00272248 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00065736 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-05-12 09:42 - 2015-05-12 09:41 - 00029168 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys
2015-05-12 09:41 - 2015-05-12 09:41 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-05-12 09:41 - 2015-05-12 09:41 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-05-12 09:41 - 2015-05-12 09:41 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
2015-05-12 09:38 - 2015-05-12 09:38 - 00000000 ____D () C:\Program Files\AVAST Software
2015-05-12 09:36 - 2015-05-12 09:36 - 00000000 ____D () C:\ProgramData\AVAST Software
2015-05-12 09:35 - 2015-05-12 09:36 - 05471128 _____ (Avast Software s.r.o.) C:\Users\Cibulka\Downloads\avast_internet_security_setup_online.exe
2015-05-10 16:03 - 2015-05-10 16:03 - 00000000 ____D () C:\Users\Cibulka\Desktop\Adobe After Effects Auto-Save
2015-05-10 15:42 - 2015-05-10 15:43 - 19961856 _____ () C:\Users\Cibulka\Desktop\Untitled Project.aep
2015-05-10 15:41 - 2015-05-10 16:04 - 01744347 _____ () C:\Users\Cibulka\Desktop\textden.c4d
2015-05-10 14:25 - 2015-05-10 14:25 - 16785648 _____ () C:\Users\Cibulka\Desktop\ytb.mp4
2015-05-10 13:22 - 2015-05-10 13:22 - 61675841 _____ () C:\Users\Cibulka\Desktop\Sequence 01_2.mp4
2015-05-10 13:07 - 2015-05-10 13:13 - 581714760 _____ () C:\Users\Cibulka\Desktop\Sequence 01_1.avi
2015-05-10 12:41 - 2015-05-10 12:52 - 1484725330 _____ () C:\Users\Cibulka\Desktop\Sequence 01.avi
2015-05-10 12:19 - 2015-05-10 12:19 - 182458297 _____ () C:\Users\Cibulka\Desktop\GOPR423511.mp4
2015-05-09 08:30 - 2015-05-13 13:01 - 00000000 ____D () C:\Users\Cibulka\Desktop\Kvetinovy den GOPRO
2015-05-09 08:30 - 2015-05-10 08:09 - 00000000 ____D () C:\Users\Cibulka\Desktop\Kvetinovy den CANON
2015-05-08 22:19 - 2015-05-09 00:31 - 00000000 ____D () C:\Users\Cibulka\Desktop\stabultest
2015-05-08 18:33 - 2015-05-08 19:08 - 00000000 ____D () C:\Users\Cibulka\Desktop\dentest
2015-05-08 16:54 - 2015-05-08 16:55 - 195855649 _____ () C:\Users\Cibulka\Desktop\GOPR4231.MP4
2015-05-08 15:13 - 2015-05-08 15:13 - 1438464856 _____ () C:\Users\Cibulka\Desktop\MVI_3734.MOV
2015-05-08 13:05 - 2015-05-08 12:54 - 01893416 ____N () C:\Users\Cibulka\Desktop\PIC000155-03.jpeg
2015-05-08 11:49 - 2015-05-08 11:49 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DJI Product
2015-05-08 11:49 - 2015-05-08 11:49 - 00000000 ____D () C:\Program Files (x86)\DJI Product
2015-05-08 09:46 - 2015-05-08 09:46 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (2).torrent
2015-05-08 09:36 - 2015-05-08 09:36 - 00000997 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder CC 2014.lnk
2015-05-08 08:57 - 2015-05-10 15:46 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\MAXON
2015-05-08 08:07 - 2015-05-08 08:07 - 00000000 ____D () C:\Program Files\Maxon
2015-05-08 07:57 - 2015-05-08 07:58 - 00006088 _____ () C:\Windows\system32\--traceoff
2015-05-08 07:57 - 2015-05-08 07:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sony
2015-05-08 07:57 - 2015-05-08 07:57 - 00000000 _____ () C:\Windows\system32\--debugoff
2015-05-08 07:56 - 2015-05-08 07:59 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\ProgramData\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\Program Files\Sony
2015-05-08 07:56 - 2015-05-08 07:56 - 00000000 ____D () C:\Program Files (x86)\Sony
2015-05-08 07:55 - 2015-05-08 08:00 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Sony
2015-05-08 07:54 - 2015-05-08 08:10 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe Media Encoder CC 2014 v8.0.1 (x64-Patch) [ChingLiu]
2015-05-08 07:54 - 2015-05-08 07:54 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (1).torrent
2015-05-08 07:53 - 2015-05-08 07:53 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu.torrent
2015-05-05 22:29 - 2015-05-05 22:29 - 00000000 ____D () C:\Twixtor5AEManual
2015-05-05 22:29 - 2015-05-05 22:29 - 00000000 ____D () C:\Twixtor5AE
2015-05-05 22:11 - 2015-05-05 22:11 - 00001310 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Update Management Tool.lnk
2015-05-05 22:11 - 2015-05-05 22:11 - 00001099 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe After Effects CC 2014.lnk
2015-05-05 21:46 - 2015-05-05 21:46 - 00003504 _____ () C:\Windows\System32\Tasks\AdobeAAMUpdater-1.0-Phantom-Cibulka
2015-05-05 21:24 - 2015-05-08 09:32 - 00001534 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Application Manager.lnk
2015-05-05 21:16 - 2015-05-05 21:16 - 00000000 ____D () C:\Program Files (x86)\Disc Soft
2015-05-05 21:15 - 2015-05-05 21:17 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:16 - 00000000 ____D () C:\Program Files\DAEMON Tools Lite
2015-05-05 21:15 - 2015-05-05 21:15 - 00030352 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtlitescsibus.sys
2015-05-05 21:15 - 2015-05-05 21:15 - 00001743 _____ () C:\Users\Public\Desktop\DAEMON Tools Lite.lnk
2015-05-05 21:14 - 2015-05-05 21:15 - 00000000 ____D () C:\ProgramData\DAEMON Tools Lite
2015-05-05 21:13 - 2015-05-05 21:14 - 13146016 _____ (Disc Soft Ltd) C:\Users\Cibulka\Downloads\DTLite501-0406 (1).exe
2015-05-05 21:13 - 2015-05-05 21:13 - 13146016 _____ (Disc Soft Ltd) C:\Users\Cibulka\Downloads\DTLite501-0406.exe
2015-05-05 21:10 - 2015-05-05 21:10 - 00000000 ____D () C:\Users\Cibulka\Desktop\InstagramLUTS
2015-05-05 18:21 - 2015-05-05 18:40 - 00000000 ____D () C:\Users\Cibulka\Downloads\Cinema 4D R14.042
2015-05-05 18:15 - 2015-05-05 18:16 - 00012280 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]cinema.4d.r14.042.heavygamerz.torrent
2015-05-05 16:11 - 2015-05-05 16:23 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe After Effects CC 2014 (v13.2.0) RUS-ENG Update 2 by Monkrus-=TEAM OS-={HKRG}
2015-05-05 16:10 - 2015-05-08 09:25 - 00000000 ____D () C:\Users\Cibulka\Desktop\Utorrent
2015-05-05 16:09 - 2015-05-05 16:10 - 00014036 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.after.effects.cc.2014.v13.2.0.rus.eng.update.2.by.monkrus.team.os.hkrg.torrent
2015-05-05 12:31 - 2015-05-05 12:31 - 00000492 _____ () C:\Users\Cibulka\Downloads\SRD.zip
2015-05-05 10:52 - 2015-05-05 10:52 - 00000102 _____ () C:\Users\Cibulka\Nojs01.nfp
2015-05-05 09:41 - 2015-05-05 09:41 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Reincubate
2015-05-05 09:41 - 2015-05-05 09:41 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Reincubate
2015-05-05 09:40 - 2015-05-05 09:41 - 03454320 _____ (Reincubate Ltd) C:\Users\Cibulka\Downloads\dmge-latest.exe
2015-05-05 09:37 - 2015-05-05 09:37 - 00361726 _____ () C:\Users\Cibulka\Downloads\utorrent-portable.zip
2015-05-05 09:36 - 2015-05-05 09:36 - 25531275 _____ () C:\Users\Cibulka\Downloads\Neat Video 3.1 Pro AE.dmg
2015-05-05 09:36 - 2015-05-05 09:36 - 00016180 _____ () C:\Users\Cibulka\Downloads\Neat_Video_3.1_Pro_for_After_Effects_CS6_CS5.5.torrent
2015-05-05 09:27 - 2015-05-08 07:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Neat Video for Premiere
2015-05-05 00:55 - 2015-05-05 00:56 - 04884322 _____ () C:\Users\Cibulka\Downloads\Neat Video 3.5 Full + Crack [FILETIE-DC.COM].rar
2015-05-05 00:32 - 2015-05-05 00:32 - 00833024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2015-05-05 00:32 - 2015-05-05 00:32 - 00410624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\systemcpl.dll
2015-05-05 00:32 - 2015-05-05 00:32 - 00113543 _____ () C:\Windows\SysWOW64\slmgr.vbs
2015-05-05 00:32 - 2015-05-05 00:32 - 00002048 _____ () C:\Windows\SysWOW64\winver.exe
2015-05-05 00:32 - 2015-05-05 00:32 - 00001536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sppcomapi.dll
2015-05-04 23:59 - 2015-05-04 23:59 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\PACE Anti-Piracy
2015-05-04 23:59 - 2015-05-04 23:59 - 00000000 ____D () C:\ProgramData\PACE Anti-Piracy
2015-05-04 23:51 - 2015-05-04 23:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2015-05-04 23:15 - 2015-05-08 07:30 - 00000000 ____D () C:\Program Files\Neat Video for Premiere
2015-05-04 23:15 - 2015-05-08 07:30 - 00000000 ____D () C:\Program Files (x86)\Neat Video for Premiere
2015-05-04 23:14 - 2014-06-23 13:04 - 00000000 ____D () C:\Users\Cibulka\Desktop\Neat Video Pro 3.5 for Premiere Pro (cracked VR) [ChingLiu]
2015-05-03 12:38 - 2015-03-22 00:51 - 00000000 ___RD () C:\Users\Cibulka\Desktop\Touch Logo Pack - Flat Interactive Media Reveals
2015-05-03 11:30 - 2015-05-03 11:30 - 00000000 ____D () C:\Twix
2015-04-29 15:59 - 2015-04-29 15:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
2015-04-29 14:23 - 2015-05-08 07:27 - 00450620 _____ () C:\Users\Cibulka\Desktop\logocibulka.psd
2015-04-29 13:47 - 2011-09-08 18:53 - 00000000 ____D () C:\Users\Cibulka\Desktop\Deus Ex - Human revolution soundtrack
2015-04-29 13:10 - 2015-04-29 13:13 - 63899324 _____ () C:\Users\Cibulka\Downloads\Deus-Ex----Human-revolution-soundtrack.rar
2015-04-26 20:05 - 2015-04-26 20:05 - 00557751 _____ () C:\Users\Cibulka\Downloads\ringbearer.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00499435 _____ () C:\Users\Cibulka\Downloads\CMU-serifextra.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00116174 _____ () C:\Users\Cibulka\Downloads\summertime.zip
2015-04-26 20:05 - 2015-04-26 20:05 - 00050490 _____ () C:\Users\Cibulka\Downloads\akatype_akadora.zip
2015-04-17 21:02 - 2015-05-06 20:02 - 00000000 ____D () C:\Users\Cibulka\Documents\Adobe

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 16:25 - 2015-04-03 22:14 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-13 16:19 - 2015-04-03 22:14 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-13 16:19 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-13 16:18 - 2009-07-14 06:51 - 00021661 _____ () C:\Windows\setupact.log
2015-05-13 15:20 - 2009-07-14 06:45 - 00009600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 15:20 - 2009-07-14 06:45 - 00009600 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 14:17 - 2015-04-03 19:22 - 00145539 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 12:28 - 2015-04-03 19:53 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\vlc
2015-05-13 11:45 - 2015-04-04 15:51 - 00003686 _____ () C:\Windows\PFRO.log
2015-05-13 08:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\GroupPolicy
2015-05-12 08:44 - 2015-04-03 19:54 - 00000000 ____D () C:\Users\Cibulka\AppData\Local\Adobe
2015-05-11 10:46 - 2015-04-04 18:20 - 00004043 _____ () C:\Users\Cibulka\Desktop\Dtatus.txt
2015-05-08 18:30 - 2009-07-14 17:18 - 00665944 _____ () C:\Windows\system32\perfh005.dat
2015-05-08 18:30 - 2009-07-14 17:18 - 00139608 _____ () C:\Windows\system32\perfc005.dat
2015-05-08 18:30 - 2009-07-14 07:13 - 01575230 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-08 09:37 - 2015-04-03 19:55 - 00000000 ____D () C:\Users\Cibulka\AppData\Roaming\Adobe
2015-05-08 09:36 - 2015-04-03 20:08 - 00000000 ____D () C:\ProgramData\regid.1986-12.com.adobe
2015-05-08 09:35 - 2015-04-03 20:02 - 00000000 ____D () C:\Program Files\Adobe
2015-05-08 09:35 - 2015-04-03 20:00 - 00000000 ____D () C:\Program Files\Common Files\Adobe
2015-05-08 09:28 - 2009-07-14 06:45 - 04968592 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-06 19:40 - 2015-04-03 19:55 - 00000000 ____D () C:\ProgramData\Adobe
2015-05-05 22:14 - 2015-04-03 20:10 - 00058760 _____ () C:\Users\Cibulka\AppData\Local\GDIPFONTCACHEV1.DAT
2015-05-05 21:34 - 2015-04-03 20:03 - 00000000 ____D () C:\Program Files (x86)\Adobe
2015-05-05 10:52 - 2015-04-03 19:26 - 00000000 ____D () C:\Users\Cibulka
2015-05-04 23:59 - 2013-05-16 08:13 - 00000000 ___HD () C:\Users\Cibulka\AppData\Local\7yne6lOPW
2015-04-13 05:58 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-05 06:56

==================== End Of Log ============================

[vyosek]

Tvorba fixlistu pro FRST

• Spustte poznamkovy blok (Start-spustit-notepad)
• Zkopirujte skript nize

• Kód: Vybrat vše

  Start
  CloseProcesses:
  CreateRestorePoint:
  
  HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [558496 2014-02-27] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
  HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
  HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
  HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [AdobeBridge] => [X]
  HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
  HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: F - F:\Autoplay.exe -auto
  HKU\S-1-5-21-1439765233-3629945508-1984359166-1000\...\MountPoints2: {d93af510-f359-11e4-b06c-b7af72c88041} - F:\Autoplay.exe -auto
  
  SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
  
  2015-05-13 11:43 - 2015-05-13 08:24 - 00024064 _____ () C:\Windows\zoek-delete.exe
  2015-05-13 08:26 - 2015-05-13 11:49 - 00012417 _____ () C:\zoek-results.log
  2015-05-13 08:24 - 2015-05-13 08:49 - 00000000 ____D () C:\zoek_backup
  2015-05-13 08:16 - 2015-05-13 08:51 - 00491055 _____ () C:\Users\Cibulka\Downloads\adwcleaner_4.204 (1).exe.opdownload
  2015-05-13 08:09 - 2015-05-13 08:09 - 01308672 _____ () C:\Users\Cibulka\Downloads\zoek.exe
  2015-05-13 08:07 - 2015-05-13 08:12 - 00000000 ____D () C:\AdwCleaner
  2015-05-13 08:06 - 2015-05-13 08:07 - 02209792 _____ () C:\Users\Cibulka\Downloads\adwcleaner_4.204.exe
  2015-05-12 16:56 - 2015-05-12 16:58 - 00026573 _____ () C:\Users\Cibulka\Downloads\Addition.txt
  2015-05-12 16:55 - 2015-05-13 16:52 - 00012220 _____ () C:\Users\Cibulka\Downloads\FRST.txt
  2015-05-12 09:35 - 2015-05-12 09:36 - 05471128 _____ (Avast Software s.r.o.) C:\Users\Cibulka\Downloads\avast_internet_security_setup_online.exe
  2015-05-08 09:46 - 2015-05-08 09:46 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (2).torrent
  2015-05-08 07:54 - 2015-05-08 08:10 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe Media Encoder CC 2014 v8.0.1 (x64-Patch) [ChingLiu]
  2015-05-08 07:54 - 2015-05-08 07:54 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu (1).torrent
  2015-05-08 07:53 - 2015-05-08 07:53 - 00026668 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.media.encoder.cc.2014.v8.0.1.x64.patch.chingliu.torrent
  2015-05-05 18:15 - 2015-05-05 18:16 - 00012280 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]cinema.4d.r14.042.heavygamerz.torrent
  2015-05-05 16:11 - 2015-05-05 16:23 - 00000000 ____D () C:\Users\Cibulka\Downloads\Adobe After Effects CC 2014 (v13.2.0) RUS-ENG Update 2 by Monkrus-=TEAM OS-={HKRG}
  2015-05-05 16:09 - 2015-05-05 16:10 - 00014036 _____ () C:\Users\Cibulka\Downloads\[katproxy.com]adobe.after.effects.cc.2014.v13.2.0.rus.eng.update.2.by.monkrus.team.os.hkrg.torrent
  2015-05-05 00:32 - 2015-05-05 00:32 - 00113543 _____ () C:\Windows\SysWOW64\slmgr.vbs
  2015-05-05 00:32 - 2015-05-05 00:32 - 00002048 _____ () C:\Windows\SysWOW64\winver.exe
  2015-05-04 23:59 - 2013-05-16 08:13 - 00000000 ___HD () C:\Users\Cibulka\AppData\Local\7yne6lOPW
  
  2015-05-13 16:25 - 2015-04-03 22:14 - 00000952 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
  2015-05-13 16:19 - 2015-04-03 22:14 - 00000948 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
  
  Hosts:
  EmptyTemp:
  Reboot:
  End
  

• Ulozte vytvoreny TXT jako fixlist.txt
• Presunte vytvoreny fixlist vedle FRST

Spustte znovu FRST.exe

• Kliknete na Fix
• Probehne oprava a vytvori log Fixlog.txt

Restart PC a dejte mi sem fixlog.txt