jen pro jistotu

Zpráva

pavel68 · #1 Příspěvek od **pavel68** » 14 čer 2015 08:44

Dobrý den,prosím o kontrolu.
Děkuji.
Logfile of random's system information tool 1.10 (written by random/random)
Run by Pavel at 2015-06-14 09:39:36
Microsoft Windows 7 Professional Service Pack 1
System drive C: has 236 GB (25%) free of 954 GB
Total RAM: 8144 MB (72% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 9:39:40, on 14.6.2015
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v11.0 (11.00.9600.17840)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\extensions\adbhelper@mozilla.org\win32\adb.exe
C:\Program Files\trend micro\Pavel.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe,
O1 - Hosts: 148.251.86.245 10.100.0.65
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: Pomocná služba pro přihlášení k účtu Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F] "C:\program files (x86)\google\chrome\application\chrome.exe" --no-startup-window (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F] "C:\program files (x86)\google\chrome\application\chrome.exe" --no-startup-window (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user')
O9 - Extra button: Odeslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: Od&eslat do aplikace OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIE.dll
O9 - Extra button: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O9 - Extra 'Tools' menuitem: P&ropojené poznámky aplikace OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files (x86)\Microsoft Office\Office14\ONBttnIELinkedNotes.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files (x86)\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: @%systemroot%\system32\CISVC.EXE,-1 (CISVC) - Unknown owner - C:\Windows\system32\CISVC.EXE (file missing)
O23 - Service: EasyAntiCheat - EasyAntiCheat Ltd - C:\Windows\system32\EasyAntiCheat.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\Windows\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\Windows\system32\nvvsvc.exe (file missing)
O23 - Service: Origin Client Service - Electronic Arts - C:\Program Files (x86)\Origin\OriginClientService.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: ServiceLayer - Nokia - C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files (x86)\Skype\Updater\Updater.exe
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C:\Program Files (x86)\Common Files\Steam\SteamService.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 8654 bytes

======Listing Processes======

\SystemRoot\System32\smss.exe
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,20480,768 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ServerDll=sxssrv,4 ProfileControl=Off MaxRequestThreads=16
wininit.exe
winlogon.exe
C:\Windows\system32\services.exe
C:\Windows\system32\lsass.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
"C:\Windows\system32\nvvsvc.exe"
C:\Windows\system32\svchost.exe -k RPCSS
"c:\Program Files\Microsoft Security Client\MsMpEng.exe"
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\svchost.exe -k NetworkService
"C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe"
C:\Windows\system32\nvvsvc.exe -session -first
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k apphost
"taskhost.exe"
C:\Windows\system32\CISVC.EXE
C:\Windows\System32\svchost.exe -k utcsvc
"C:\Program Files\Intel\iCLS Client\HeciServer.exe"
C:\Windows\System32\svchost.exe -k ipripsvc
"C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe"
C:\Windows\System32\svchost.exe -k LPDService
"C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe"
C:\Windows\SysWOW64\PnkBstrA.exe
C:\Windows\System32\tcpsvcs.exe
C:\Windows\System32\snmp.exe
"C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
"C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE"
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe"
WLIDSvcM.exe 2604
"C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe"
"C:\Windows\system32\GWX\GWX.exe"
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"
C:\Windows\System32\alg.exe
"c:\Program Files\Microsoft Security Client\NisSrv.exe"
"C:\Windows\system32\Dwm.exe"
C:\Windows\Explorer.EXE
C:\Windows\System32\rundll32.exe shell32.dll,SHCreateLocalServerRunDll {995C996E-D918-4a8c-A302-45719A6F4EA7} -Embedding
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
"C:\Windows\System32\WUDFHost.exe" -HostGUID:{193a1820-d9ac-4997-8c55-be817523f6aa} -IoEventPortName:HostProcess-827dea58-f01c-4f72-8b8d-a5be6cb47942 -SystemEventPortName:HostProcess-4f96b718-759e-4b05-aa50-07256f353949 -IoCancelEventPortName:HostProcess-2eae0b4d-d3a9-4dac-a2aa-434622a2e2d2 -NonStateChangingEventPortName:HostProcess-8d0fd037-6cb0-4a1b-894c-132d322ae886 -ServiceSID:S-1-5-80-2652678385-582572993-1835434367-1344795993-749280709 -LifetimeId:66d6466d-0e3c-462f-9fd5-d0ed374a3f5b -DeviceGroupId:WpdFsGroup
"C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe" -s
"C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
C:\Windows\system32\SearchIndexer.exe /Embedding
"C:\Program Files\Windows Media Player\wmpnetwk.exe"
"C:\Windows\system32\SearchProtocolHost.exe" Global\UsGthrFltPipeMssGthrPipe1_ Global\UsGthrCtrlFltPipeMssGthrPipe1 1 -2147483646 "Software\Microsoft\Windows Search" "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT; MS Search 4.0 Robot)" "C:\ProgramData\Microsoft\Search\Data\Temp\usgthrsvc" "DownLevelDaemon"
C:\Windows\system32\svchost.exe -k imgsvc
"C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
adb fork-server server
C:\Windows\servicing\TrustedInstaller.exe

taskeng.exe {D6DB25E2-2D57-442E-B98A-7E28F812688A}
"C:\Users\Pavel\Downloads\RSITx64(2).exe"
"C:\Windows\system32\SearchFilterHost.exe" 0 528 532 540 65536 536
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\DllHost.exe /Processid:{F9717507-6651-4EDB-BFF7-AE615179BCCF}

======Scheduled tasks folder======

C:\Windows\tasks\Adobe Flash Player Updater.job - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe /ua /installsource scheduler
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000Core.job - C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe /c
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000UA.job - C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler

=========Mozilla firefox=========

ProfilePath - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410

prefs.js - "browser.search.useDBForOrder" - true
prefs.js - "browser.startup.homepage" - "https://www.seznam.cz/"

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@adobe.com/ShockwavePlayer]
"Description"=Adobe Shockwave Player
"Path"=C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@esn/npbattlelog,version=2.3.2]
"Description"=
"Path"=C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Google.com/GoogleEarthPlugin]
"Description"=Google Earth in your browser
"Path"=C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@google.com/npPicasa3,version=3.0.0]
"Description"=Picasa3 plugin
"Path"=C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42]
"Description"=Intel IPT WebApi plugin
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater]
"Description"=This plugin updates Intel WebAPI component
"Path"=C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/DTPlugin,version=10.45.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@java.com/JavaPlugin,version=10.45.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/SharePoint,version=14.0]
"Description"=Microsoft SharePoint Plug-in for Firefox
"Path"=C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3528.0331]
"Description"=WLPG Install MIME type
"Path"=C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVision]
"Description"=NVIDIA stereo images plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@nvidia.com/3DVisionStreaming]
"Description"=NVIDIA 3D Vision Streaming plugin for Mozilla browsers
"Path"=C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin]
"Description"=This plugin detects and launches Pando Media Booster
"Path"=C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=3]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@tools.google.com/Google Update;version=9]
"Description"=Google Update
"Path"=C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.3]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.1.5]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\@videolan.org/vlc,version=2.2.1]
"Description"=VLC Multimedia Plugin
"Path"=C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\Adobe Reader]
"Description"=Handles PDFs in-place in Firefox
"Path"=C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer]
"Description"=Adobe® Flash® Player 17.0.0.188 Plugin
"Path"=C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.40.2]
"Description"=Java™ Deployment Toolkit
"Path"=C:\Windows\system32\npDeployJava1.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.40.2]
"Description"=Oracle® Next Generation Java™ Plug-In
"Path"=C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE]
"Description"=
"Path"=disabled

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0]
"Description"=Ag Player Plugin
"Path"=c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0]
"Description"=Office Authorization plug-in for NPAPI browsers
"Path"=C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL

[HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\adobe.com/AdobeAAMDetect]
"Description"=
"Path"=C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll

C:\Program Files (x86)\Mozilla Firefox\plugins\
nppdf32.dll

C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\extensions\
adbhelper@mozilla.org
cs@dictionaries.addons.mozilla.org

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files\Java\jre7\bin\ssv.dll [2013-11-01 553384]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Windows Live ID Sign-in Helper - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 529664]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 690392]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-11-01 210856]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}]
Java(tm) Plug-In SSV Helper - C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08 462760]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9030D464-4C02-4ABF-8ECC-5164760863C6}]
Pomocná služba pro přihlášení k účtu Microsoft - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17 441592]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{B4F3A835-0E21-4959-BA22-42B3008E02FF}]
Office Document Cache Handler - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL [2013-03-06 562904]

[HKEY_LOCAL_MACHINE\SOFTWARE\wow6432node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08 171944]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"RTHDVCPL"=C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2012-06-12 6548112]
"MSC"=c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"AdobeBridge"= []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4600 Scan2PC]
C:\Windows\twain_32\Samsung\SCX4600\Scan2Pc.exe [2011-06-24 1990144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\5C15FE23AEB342AF49561D34CA158610F3B7D4A6._service_run]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-06-05 813896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM]
C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2014-12-19 1022152]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2014-09-19 557768]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [2012-03-09 1073312]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring]
C:\Program Files\CCleaner\CCleaner64.exe [2015-02-19 7416088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CDAServer]
C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate]
C:\Users\Pavel\AppData\Roaming\Seznam.cz\szninstall.exe -c []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop]
C:\Users\Pavel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe -q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite]
C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [2013-07-03 3673184]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dxtory Update Checker 2.0]
C:\Program Files (x86)\Dxtory Software\Dxtory2.0\UpdateChecker.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM]
H:\Origin\Origin.exe -AutoStart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe [2013-09-25 116648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup]
C:\Users\Pavel\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe /autostart []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F]
C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [2015-06-05 813896]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Handy Updater]
C:\Program Files (x86)\HandyUpdater\HUpdater.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe --auto-start []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC]
c:\Program Files\Microsoft Security Client\msseces.exe [2015-04-30 1337000]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MusicManager]
C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyDriveConnect.exe]
C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe [2014-10-03 1792376]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2]
C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend]
C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2015-05-23 2754704]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nvtmru]
C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Samsung PanelMgr]
C:\Windows\Samsung\PanelMgr\SSMMgr.exe [2011-07-13 688128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SCX4600_Scan2Pc]
C:\Windows\Twain_32\Samsung\SCX4600\Scan2pc.exe [2011-06-24 1990144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce]
C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay]
C:\Windows\system32\nvspcap64.dll [2015-05-23 1571696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
C:\Program Files (x86)\Skype\Phone\Skype.exe [2014-12-11 30877280]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMART Floating Tools]
C:\Program Files (x86)\SMART Technologies\Education Software\FloatingTools.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyComputer]
C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC]
C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]
H:\Steam\steam.exe -silent []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STO Backup Service]
C:\Program Files (x86)\SmarThru Office\BackUpSvr.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STO Launcher Service]
C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe /autorun []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2013-07-02 254336]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Super-Charger]
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe [2012-07-27 495616]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard]
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON]
C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [2012-03-26 291608]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\uTorrent]
C:\Users\Pavel\AppData\Roaming\uTorrent\utorrent.exe [2013-10-06 1141328]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsDriverScan64]
C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsDriverScan86]
C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate]
C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk]
C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Pavel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Deer Hunter 2005 Registration.lnk]
C:\Program Files (x86)\Atari\Deer Hunter 2005\ATR1.EXE [2004-08-27 4947968]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"=credssp.dll

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MsMpSvc]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\AFD]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\MsMpSvc]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=0
"ConsentPromptBehaviorUser"=3
"EnableLUA"=0
"EnableUIADesktopToggle"=0
"PromptOnSecureDesktop"=0
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLinkedConnections"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoActiveDesktop"=1
"NoActiveDesktopChanges"=1
"ForceActiveDesktopOn"=0
"NoDriveTypeAutoRun"=255

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.msadpcm"=msadp32.acm
"midimapper"=midimap.dll
"wavemapper"=msacm32.drv
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVYU"=msyuv.dll
"VIDC.IYUV"=iyuv_32.dll
"vidc.i420"=iyuv_32.dll
"VIDC.YVU9"=tsbyuv.dll
"msacm.l3acm"=C:\Windows\System32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"VIDC.FPS1"=frapsv64.dll
"vidc.tscc"=C:\Windows\SysWOW64\tsccvid64.dll
"vidc.tsc2"=C:\Windows\SysWOW64\tsc2_codec64.dll
"MSVideo8"=VfWWDM32.dll
"wave2"=wdmaud.drv
"midi2"=wdmaud.drv
"mixer2"=wdmaud.drv
"aux2"=wdmaud.drv
"VIDC.RTV1"=rtvcvfw64.dll
"wave3"=wdmaud.drv
"midi3"=wdmaud.drv
"mixer3"=wdmaud.drv
"wave4"=wdmaud.drv
"midi4"=wdmaud.drv
"mixer4"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"wave5"=wdmaud.drv
"midi5"=wdmaud.drv
"mixer5"=wdmaud.drv
"wave7"=wdmaud.drv
"midi7"=wdmaud.drv
"mixer7"=wdmaud.drv
"wave6"=wdmaud.drv
"midi6"=wdmaud.drv
"mixer6"=wdmaud.drv
"wave8"=wdmaud.drv
"midi8"=wdmaud.drv
"mixer8"=wdmaud.drv

======File associations======

.js - edit - C:\Windows\System32\Notepad.exe %1
.js - open - C:\Windows\System32\WScript.exe "%1" %*

======List of files/folders created in the last 1 month======

2015-06-10 16:47:03 ----A---- C:\Windows\system32\drivers\nvvad64v.sys
2015-06-10 16:47:02 ----A---- C:\Windows\SYSWOW64\nvaudcap32v.dll
2015-06-10 10:38:52 ----A---- C:\Windows\system32\wmp.dll
2015-06-10 10:38:51 ----A---- C:\Windows\SYSWOW64\wmp.dll
2015-06-10 10:38:50 ----A---- C:\Windows\system32\spwmp.dll
2015-06-10 10:38:48 ----A---- C:\Windows\SYSWOW64\wmploc.DLL
2015-06-10 10:38:48 ----A---- C:\Windows\SYSWOW64\spwmp.dll
2015-06-10 10:38:48 ----A---- C:\Windows\SYSWOW64\dxmasf.dll
2015-06-10 10:38:48 ----A---- C:\Windows\system32\wmploc.DLL
2015-06-10 10:38:48 ----A---- C:\Windows\system32\dxmasf.dll
2015-06-10 10:38:37 ----A---- C:\Windows\system32\kerberos.dll
2015-06-10 10:38:37 ----A---- C:\Windows\system32\diagtrack.dll
2015-06-10 10:38:36 ----A---- C:\Windows\SYSWOW64\kerberos.dll
2015-06-10 10:38:36 ----A---- C:\Windows\SYSWOW64\advapi32.dll
2015-06-10 10:38:36 ----A---- C:\Windows\system32\lsasrv.dll
2015-06-10 10:38:36 ----A---- C:\Windows\system32\KernelBase.dll
2015-06-10 10:38:36 ----A---- C:\Windows\system32\kernel32.dll
2015-06-10 10:38:36 ----A---- C:\Windows\system32\advapi32.dll
2015-06-10 10:38:35 ----A---- C:\Windows\SYSWOW64\ntkrnlpa.exe
2015-06-10 10:38:35 ----A---- C:\Windows\system32\ntoskrnl.exe
2015-06-10 10:38:35 ----A---- C:\Windows\system32\ntdll.dll
2015-06-10 10:38:35 ----A---- C:\Windows\system32\drivers\ksecpkg.sys
2015-06-10 10:38:34 ----A---- C:\Windows\SYSWOW64\tracerpt.exe
2015-06-10 10:38:34 ----A---- C:\Windows\SYSWOW64\schannel.dll
2015-06-10 10:38:34 ----A---- C:\Windows\SYSWOW64\ntoskrnl.exe
2015-06-10 10:38:34 ----A---- C:\Windows\SYSWOW64\msv1_0.dll
2015-06-10 10:38:34 ----A---- C:\Windows\system32\wow64.dll
2015-06-10 10:38:34 ----A---- C:\Windows\system32\winsrv.dll
2015-06-10 10:38:34 ----A---- C:\Windows\system32\tracerpt.exe
2015-06-10 10:38:34 ----A---- C:\Windows\system32\srcore.dll
2015-06-10 10:38:34 ----A---- C:\Windows\system32\schannel.dll
2015-06-10 10:38:34 ----A---- C:\Windows\system32\rstrui.exe
2015-06-10 10:38:34 ----A---- C:\Windows\system32\conhost.exe
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\wdigest.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\typeperf.exe
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\TSpkg.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\tdh.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\setup16.exe
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\sechost.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\relog.exe
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\ntdll.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\ncrypt.dll
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\logman.exe
2015-06-10 10:38:33 ----A---- C:\Windows\SYSWOW64\auditpol.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\wdigest.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\typeperf.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\TSpkg.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\tdh.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\sspicli.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\smss.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\sechost.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\relog.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\ncrypt.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\msv1_0.dll
2015-06-10 10:38:33 ----A---- C:\Windows\system32\lsass.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\logman.exe
2015-06-10 10:38:33 ----A---- C:\Windows\system32\drivers\ksecdd.sys
2015-06-10 10:38:33 ----A---- C:\Windows\system32\auditpol.exe
2015-06-10 10:38:32 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\wow32.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\sspicli.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\srclient.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\secur32.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\ntvdm64.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\KernelBase.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\kernel32.dll
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\diskperf.exe
2015-06-10 10:38:32 ----A---- C:\Windows\SYSWOW64\credssp.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\wow64win.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\wow64cpu.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\sspisrv.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\srclient.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\secur32.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\ntvdm64.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\diskperf.exe
2015-06-10 10:38:32 ----A---- C:\Windows\system32\csrsrv.dll
2015-06-10 10:38:32 ----A---- C:\Windows\system32\credssp.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\SYSWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 10:38:31 ----AH---- C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 10:38:31 ----A---- C:\Windows\SYSWOW64\user.exe
2015-06-10 10:38:31 ----A---- C:\Windows\SYSWOW64\instnm.exe
2015-06-10 10:38:31 ----A---- C:\Windows\SYSWOW64\apisetschema.dll
2015-06-10 10:38:31 ----A---- C:\Windows\SYSWOW64\adtschema.dll
2015-06-10 10:38:31 ----A---- C:\Windows\system32\apisetschema.dll
2015-06-10 10:38:31 ----A---- C:\Windows\system32\adtschema.dll
2015-06-10 10:38:30 ----A---- C:\Windows\SYSWOW64\msobjs.dll
2015-06-10 10:38:30 ----A---- C:\Windows\SYSWOW64\msaudite.dll
2015-06-10 10:38:30 ----A---- C:\Windows\system32\UtcResources.dll
2015-06-10 10:38:30 ----A---- C:\Windows\system32\msobjs.dll
2015-06-10 10:38:30 ----A---- C:\Windows\system32\msaudite.dll
2015-06-10 10:38:23 ----A---- C:\Windows\SYSWOW64\comctl32.dll
2015-06-10 10:38:23 ----A---- C:\Windows\system32\comctl32.dll
2015-06-10 10:38:22 ----A---- C:\Windows\system32\win32k.sys
2015-06-10 10:38:16 ----A---- C:\Windows\system32\drivers\stream.sys
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\urlmon.dll
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\mshtmled.dll
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\MshtmlDac.dll
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\iernonce.dll
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\ieetwproxystub.dll
2015-06-10 10:38:12 ----A---- C:\Windows\SYSWOW64\iedkcs32.dll
2015-06-10 10:38:12 ----A---- C:\Windows\system32\iernonce.dll
2015-06-10 10:38:12 ----A---- C:\Windows\system32\ieetwproxystub.dll
2015-06-10 10:38:12 ----A---- C:\Windows\system32\ieetwcollector.exe
2015-06-10 10:38:12 ----A---- C:\Windows\system32\ie4uinit.exe
2015-06-10 10:38:11 ----A---- C:\Windows\SYSWOW64\vbscript.dll
2015-06-10 10:38:11 ----A---- C:\Windows\SYSWOW64\mshtml.dll
2015-06-10 10:38:11 ----A---- C:\Windows\SYSWOW64\msfeeds.dll
2015-06-10 10:38:11 ----A---- C:\Windows\SYSWOW64\JavaScriptCollectionAgent.dll
2015-06-10 10:38:11 ----A---- C:\Windows\SYSWOW64\dxtrans.dll
2015-06-10 10:38:11 ----A---- C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 10:38:10 ----A---- C:\Windows\SYSWOW64\iesetup.dll
2015-06-10 10:38:10 ----A---- C:\Windows\SYSWOW64\iertutil.dll
2015-06-10 10:38:10 ----A---- C:\Windows\SYSWOW64\ieapfltr.dll
2015-06-10 10:38:10 ----A---- C:\Windows\system32\urlmon.dll
2015-06-10 10:38:10 ----A---- C:\Windows\system32\iedkcs32.dll
2015-06-10 10:38:09 ----A---- C:\Windows\SYSWOW64\jsproxy.dll
2015-06-10 10:38:09 ----A---- C:\Windows\SYSWOW64\jscript9diag.dll
2015-06-10 10:38:09 ----A---- C:\Windows\SYSWOW64\jscript.dll
2015-06-10 10:38:09 ----A---- C:\Windows\SYSWOW64\ieUnatt.exe
2015-06-10 10:38:09 ----A---- C:\Windows\SYSWOW64\dxtmsft.dll
2015-06-10 10:38:09 ----A---- C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 10:38:09 ----A---- C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 10:38:09 ----A---- C:\Windows\system32\dxtrans.dll
2015-06-10 10:38:08 ----A---- C:\Windows\SYSWOW64\ieui.dll
2015-06-10 10:38:08 ----A---- C:\Windows\SYSWOW64\ieframe.dll
2015-06-10 10:38:08 ----A---- C:\Windows\system32\msfeeds.dll
2015-06-10 10:38:08 ----A---- C:\Windows\system32\iesetup.dll
2015-06-10 10:38:08 ----A---- C:\Windows\system32\ieapfltr.dll
2015-06-10 10:38:07 ----A---- C:\Windows\SYSWOW64\wininet.dll
2015-06-10 10:38:07 ----A---- C:\Windows\SYSWOW64\mshtmlmedia.dll
2015-06-10 10:38:07 ----A---- C:\Windows\SYSWOW64\jscript9.dll
2015-06-10 10:38:07 ----A---- C:\Windows\system32\vbscript.dll
2015-06-10 10:38:07 ----A---- C:\Windows\system32\jsproxy.dll
2015-06-10 10:38:07 ----A---- C:\Windows\system32\ieUnatt.exe
2015-06-10 10:38:07 ----A---- C:\Windows\system32\iertutil.dll
2015-06-10 10:38:06 ----A---- C:\Windows\SYSWOW64\msrating.dll
2015-06-10 10:38:06 ----A---- C:\Windows\system32\mshtmled.dll
2015-06-10 10:38:06 ----A---- C:\Windows\system32\ieui.dll
2015-06-10 10:38:06 ----A---- C:\Windows\system32\ieframe.dll
2015-06-10 10:38:06 ----A---- C:\Windows\system32\dxtmsft.dll
2015-06-10 10:38:05 ----A---- C:\Windows\system32\wininet.dll
2015-06-10 10:38:05 ----A---- C:\Windows\system32\mshtmlmedia.dll
2015-06-10 10:38:05 ----A---- C:\Windows\system32\jscript9diag.dll
2015-06-10 10:38:05 ----A---- C:\Windows\system32\jscript9.dll
2015-06-10 10:38:05 ----A---- C:\Windows\system32\jscript.dll
2015-06-10 10:38:04 ----A---- C:\Windows\system32\msrating.dll
2015-06-10 10:38:04 ----A---- C:\Windows\system32\MshtmlDac.dll
2015-06-10 10:38:04 ----A---- C:\Windows\system32\mshtml.dll
2015-06-09 21:49:13 ----D---- C:\Program Files (x86)\Mozilla Firefox
2015-06-05 11:14:23 ----A---- C:\Windows\system32\invagent.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\generaltel.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\devinv.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\appraiser.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\aepic.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\aepdu.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\aeinv.dll
2015-06-05 11:14:23 ----A---- C:\Windows\system32\acmigration.dll
2015-06-04 20:00:41 ----D---- C:\Program Files (x86)\The Witcher 2 (CZ)
2015-06-02 19:34:28 ----A---- C:\Windows\BAKA32.INI
2015-06-02 19:23:38 ----A---- C:\Windows\SYSWOW64\gsserver.dll
2015-06-02 19:23:38 ----A---- C:\Windows\SYSWOW64\gsjpg32.dll
2015-06-02 19:23:38 ----A---- C:\Windows\SYSWOW64\gsfkill.exe
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\OC30.DLL
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\msxml3a.dll
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\MFCANS32.DLL
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\GSWDLL32.DLL
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\GSWAG32.DLL
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\GSW32.EXE
2015-06-02 19:14:49 ----A---- C:\Windows\SYSWOW64\GSPROP32.DLL
2015-06-01 07:20:26 ----A---- C:\odpovedi.txt
2015-05-31 14:48:20 ----D---- C:\Program Files\Bulk Rename Utility
2015-05-27 20:03:00 ----D---- C:\Users\Pavel\AppData\Roaming\Python
2015-05-27 20:02:19 ----D---- C:\ProgramData\Autodesk
2015-05-27 20:02:18 ----D---- C:\Users\Pavel\AppData\Roaming\Autodesk
2015-05-24 11:04:31 ----D---- C:\Users\Pavel\AppData\Roaming\Cocoon Software
2015-05-24 11:04:10 ----D---- C:\Program Files\QuickMediaConverter
2015-05-24 09:53:20 ----D---- C:\Users\Pavel\AppData\Roaming\Mael
2015-05-19 16:54:09 ----D---- C:\Users\Pavel\AppData\Roaming\com.playsaurus.heroclicker
2015-05-19 15:41:31 ----D---- C:\Users\Pavel\AppData\Roaming\A
2015-05-19 15:32:45 ----D---- C:\Users\Pavel\AppData\Roaming\InstallShield
2015-05-19 15:17:09 ----D---- C:\Users\Pavel\AppData\Roaming\Media Player Classic

======List of files/folders modified in the last 1 month======

2015-06-14 09:39:40 ----D---- C:\Windows\Prefetch
2015-06-14 09:39:39 ----D---- C:\Program Files\trend micro
2015-06-14 09:31:12 ----D---- C:\Windows\system32\config
2015-06-14 09:29:19 ----D---- C:\Windows\Temp
2015-06-14 09:07:57 ----D---- C:\ProgramData\NVIDIA
2015-06-13 22:42:47 ----D---- C:\Program Files (x86)\Steam
2015-06-13 20:15:46 ----RD---- C:\Program Files (x86)
2015-06-13 20:14:03 ----SHD---- C:\System Volume Information
2015-06-13 20:12:56 ----SHD---- C:\Windows\Installer
2015-06-13 13:16:41 ----D---- C:\Program Files (x86)\MSI Afterburner
2015-06-13 13:07:47 ----D---- C:\Windows\system32\Tasks
2015-06-13 10:05:27 ----D---- C:\Windows\rescache
2015-06-11 14:28:57 ----D---- C:\Users\Pavel\AppData\Roaming\Mp3tag
2015-06-11 13:37:37 ----D---- C:\Windows\System32
2015-06-11 13:37:37 ----D---- C:\Windows\inf
2015-06-11 13:37:37 ----A---- C:\Windows\system32\PerfStringBackup.INI
2015-06-11 13:31:43 ----D---- C:\Windows
2015-06-11 13:31:38 ----D---- C:\Windows\winsxs
2015-06-11 13:28:00 ----D---- C:\Windows\SysWOW64
2015-06-11 13:28:00 ----D---- C:\Program Files\Windows Media Player
2015-06-11 13:28:00 ----D---- C:\Program Files (x86)\Windows Media Player
2015-06-11 13:27:59 ----D---- C:\Windows\SYSWOW64\cs-CZ
2015-06-11 13:27:58 ----D---- C:\Windows\system32\cs-CZ
2015-06-11 13:27:57 ----D---- C:\Windows\AppPatch
2015-06-11 13:27:56 ----D---- C:\Windows\system32\drivers
2015-06-11 13:27:54 ----D---- C:\Program Files\Internet Explorer
2015-06-11 13:27:53 ----D---- C:\Windows\SYSWOW64\en-US
2015-06-11 13:27:53 ----D---- C:\Windows\PolicyDefinitions
2015-06-11 13:27:52 ----D---- C:\Windows\system32\en-US
2015-06-11 13:27:52 ----D---- C:\Program Files (x86)\Internet Explorer
2015-06-10 22:21:55 ----D---- C:\ProgramData\Microsoft Help
2015-06-10 22:19:57 ----D---- C:\Windows\system32\MRT
2015-06-10 22:11:13 ----A---- C:\Windows\system32\MRT.exe
2015-06-10 22:10:04 ----A---- C:\Windows\win.ini
2015-06-10 16:48:07 ----D---- C:\ProgramData\NVIDIA Corporation
2015-06-10 16:47:31 ----D---- C:\Windows\system32\DriverStore
2015-06-10 16:47:05 ----D---- C:\ProgramData\boost_interprocess
2015-06-10 10:36:54 ----D---- C:\Windows\system32\catroot2
2015-06-09 20:59:34 ----A---- C:\Windows\SYSWOW64\FlashPlayerApp.exe
2015-06-09 20:21:20 ----D---- C:\Windows\system32\FxsTmp
2015-06-08 19:26:07 ----D---- C:\Users\Pavel\AppData\Roaming\.minecraft
2015-06-07 22:16:40 ----D---- C:\Windows\system32\catroot
2015-06-07 10:23:51 ----D---- C:\Program Files (x86)\Nokia
2015-06-07 10:23:51 ----D---- C:\Program Files (x86)\Common Files
2015-06-07 10:15:09 ----D---- C:\Users\Pavel\AppData\Roaming\PC Suite
2015-06-07 10:15:07 ----D---- C:\Users\Pavel\AppData\Roaming\Nokia
2015-06-06 08:39:36 ----SD---- C:\Windows\system32\CompatTel
2015-06-06 08:39:35 ----D---- C:\Windows\system32\appraiser
2015-06-04 20:14:11 ----D---- C:\Windows\SYSWOW64\directx
2015-06-04 20:14:02 ----HD---- C:\Windows\msdownld.tmp
2015-06-02 19:15:26 ----SD---- C:\Users\Pavel\AppData\Roaming\Microsoft
2015-06-02 00:10:46 ----D---- C:\Users\Pavel\AppData\Roaming\uTorrent
2015-05-31 14:48:20 ----RD---- C:\Program Files
2015-05-29 14:52:30 ----SHD---- C:\$Recycle.Bin
2015-05-29 14:44:52 ----RD---- C:\Users
2015-05-29 14:44:30 ----AHD---- C:\ProgramData
2015-05-28 22:23:59 ----D---- C:\Windows\CSC
2015-05-27 07:02:12 ----D---- C:\Windows\system32\NDF
2015-05-24 15:40:21 ----D---- C:\Windows\SYSWOW64\inetsrv
2015-05-24 15:40:21 ----D---- C:\Windows\system32\inetsrv
2015-05-24 14:50:20 ----HD---- C:\Program Files (x86)\InstallShield Installation Information
2015-05-24 14:50:20 ----D---- C:\Program Files (x86)\Piranha Bytes
2015-05-24 10:58:50 ----D---- C:\Users\Pavel\AppData\Roaming\vlc
2015-05-23 15:24:56 ----D---- C:\Users\Pavel\AppData\Roaming\OBS
2015-05-23 03:47:15 ----A---- C:\Windows\SYSWOW64\nvspcap.dll
2015-05-23 03:47:15 ----A---- C:\Windows\SYSWOW64\nvspbridge.dll
2015-05-23 03:47:06 ----A---- C:\Windows\system32\nvspcap64.dll
2015-05-23 03:47:06 ----A---- C:\Windows\system32\nvspbridge64.dll
2015-05-22 21:21:28 ----D---- C:\Users\Pavel\AppData\Roaming\GHISLER
2015-05-20 21:44:42 ----SD---- C:\Windows\SYSWOW64\GWX
2015-05-20 21:44:42 ----SD---- C:\Windows\system32\GWX
2015-05-17 15:27:12 ----D---- C:\Windows\Tasks

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 iusb3hcs;Ovladač přepínání hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hcs.sys [2012-03-26 19224]
R0 MpFilter;Microsoft Malware Protection Driver; C:\Windows\system32\DRIVERS\MpFilter.sys [2015-03-04 280376]
R0 rdyboost;ReadyBoost; C:\Windows\System32\drivers\rdyboost.sys [2010-11-20 213888]
R0 sptd;sptd; C:\Windows\System32\Drivers\sptd.sys [2014-07-19 834544]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\Windows\system32\DRIVERS\dtsoftbus01.sys [2013-09-17 283064]
R1 vmm;Virtual Machine Monitor; \??\C:\Windows\system32\Drivers\vmm.sys [2013-11-04 294232]
R1 vwififlt;Virtual WiFi Filter Driver; C:\Windows\system32\DRIVERS\vwififlt.sys [2011-01-25 60416]
R2 atksgt;atksgt; C:\Windows\system32\DRIVERS\atksgt.sys [2013-12-24 314016]
R2 Dokan;Dokan; \??\C:\Windows\system32\drivers\dokan.sys [2014-11-25 57552]
R2 lirsgt;lirsgt; C:\Windows\system32\DRIVERS\lirsgt.sys [2013-12-24 43680]
R2 NisDrv;Microsoft Network Inspection System; C:\Windows\system32\DRIVERS\NisDrvWFP.sys [2015-03-04 124568]
R2 ParagonLDM;ParagonLDM; \??\C:\Windows\system32\drivers\biont_bs.sys [2014-04-11 19208]
R2 SSPORT;SSPORT; \??\C:\Windows\system32\Drivers\SSPORT.sys [2009-02-16 11576]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\Windows\system32\drivers\RTKVHD64.sys [2012-06-12 4060560]
R3 iusb3hub;Ovladač rozbočovače Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3hub.sys [2012-03-26 356632]
R3 iusb3xhc;Ovladač rozšiřitelného hostitelského řadiče Intel(R) USB 3.0; C:\Windows\system32\DRIVERS\iusb3xhc.sys [2012-03-26 789272]
R3 MBfilt;MBfilt; C:\Windows\system32\drivers\MBfilt64.sys [2009-11-18 32344]
R3 MEIx64;Intel(R) Management Engine Interface ; C:\Windows\system32\DRIVERS\HECIx64.sys [2012-07-02 62784]
R3 NVHDA;Service for NVIDIA High Definition Audio Driver; C:\Windows\system32\drivers\nvhda64v.sys [2015-03-13 195728]
R3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM); C:\Windows\system32\drivers\nvvad64v.sys [2015-04-03 38032]
R3 RDPDR;Terminal Server Device Redirector Driver; C:\Windows\System32\drivers\rdpdr.sys [2010-11-20 165888]
R3 RTL8167;Realtek 8167 NT Driver; C:\Windows\system32\DRIVERS\Rt64win7.sys [2012-02-16 676968]
R3 VPCNetS2;Virtual Machine Network Services Driver; C:\Windows\system32\DRIVERS\VMNetSrv.sys [2007-01-29 79760]
S1 ElRawDisk;ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys []
S2 DgiVecp;DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys []
S2 SVKP;SVKP; \??\C:\Windows\syswow64\SVKP.sys []
S3 athur;Atheros AR9271 Wireless Network Adapter Service; C:\Windows\system32\DRIVERS\athurx.sys [2013-06-02 1931264]
S3 Bridge;@%SystemRoot%\system32\bridgeres.dll,-3; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BridgeMP;@%SystemRoot%\system32\bridgeres.dll,-1; C:\Windows\system32\DRIVERS\bridge.sys [2009-07-14 95232]
S3 BthEnum;Ovladač pro Bluetooth Request Block; C:\Windows\system32\DRIVERS\BthEnum.sys [2009-07-14 41984]
S3 BthPan;Zařízení Bluetooth (síť PAN); C:\Windows\system32\DRIVERS\bthpan.sys [2009-07-14 118784]
S3 BTHPORT;Ovladač portu Bluetooth; C:\Windows\System32\Drivers\BTHport.sys [2012-07-06 552960]
S3 BTHUSB;Ovladač rozhraní USB radiostanice Bluetooth; C:\Windows\System32\Drivers\BTHUSB.sys [2011-04-28 80384]
S3 DroidCam;DroidCam Virtual Audio; C:\Windows\system32\DRIVERS\droidcam.sys [2015-04-25 33080]
S3 DroidCamVideo;DroidCam Source 3; C:\Windows\system32\DRIVERS\droidcamvideo.sys [2015-04-25 228408]
S3 FairplayKD;FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys []
S3 hamachi;Hamachi Network Interface; C:\Windows\system32\DRIVERS\hamachi.sys [2015-01-14 33856]
S3 ISCT;Intel(R) Smart Connect Technology Device Driver; C:\Windows\system32\DRIVERS\ISCTD64.sys [2012-07-24 46016]
S3 Mac606;Mac606 Filter; C:\Windows\system32\DRIVERS\Mac606a.sys []
S3 MotioninJoyXFilter;MotioninJoy Virtual Xinput device Filter Driver; C:\Windows\system32\DRIVERS\MijXfilt.sys [2012-05-12 121416]
S3 nmwcd;Nokia USB Phone Parent Driver; C:\Windows\system32\drivers\ccdcmbx64.sys [2012-01-09 19968]
S3 nmwcdc;Nokia USB Communication Driver; C:\Windows\system32\drivers\ccdcmbox64.sys [2012-01-09 27136]
S3 nmwcdnsucx64;Nokia USB Flashing Generic; C:\Windows\system32\drivers\nmwcdnsucx64.sys [2012-01-09 12800]
S3 nmwcdnsux64;Nokia USB Flashing Phone Parent; C:\Windows\system32\drivers\nmwcdnsux64.sys [2012-01-09 171008]
S3 NTIOLib_1_0_3;NTIOLib_1_0_3; \??\C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [2010-01-18 14136]
S3 NTIOLib_1_0_C;NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys []
S3 NvStreamKms;NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [2015-05-23 19600]
S3 pccsmcfd;PCCS Mode Change Filter Driver; C:\Windows\system32\DRIVERS\pccsmcfdx64.sys [2012-06-11 26112]
S3 pciide;pciide; C:\Windows\system32\drivers\pciide.sys [2009-07-14 12352]
S3 pwdrvio;pwdrvio; \??\C:\Windows\syswow64\pwdrvio.sys []
S3 pwdspio;pwdspio; \??\C:\Windows\syswow64\pwdspio.sys []
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver; C:\Windows\System32\drivers\rdpvideominiport.sys [2012-08-23 19456]
S3 RFCOMM;Zařízení Bluetooth (RFCOMM protokol TDI); C:\Windows\system32\DRIVERS\rfcomm.sys [2009-07-14 158720]
S3 RTCore64;RTCore64; \??\C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [2015-05-27 13536]
S3 ScreamBAudioSvc;ScreamBee Audio; C:\Windows\system32\drivers\ScreamingBAudio64.sys [2010-07-01 38992]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM); C:\Windows\system32\DRIVERS\ss_bbus.sys [2009-09-19 127488]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter); C:\Windows\system32\DRIVERS\ss_bmdfl.sys [2009-09-19 18944]
S3 ss_bmdm;SAMSUNG USB Mobile Modem; C:\Windows\system32\DRIVERS\ss_bmdm.sys [2009-09-19 161280]
S3 StillCam;Ovladač digitálního fotoaparátu pro sériový port; C:\Windows\system32\DRIVERS\serscan.sys [2009-07-14 12288]
S3 tap0901;TAP-Win32 Adapter V9; C:\Windows\system32\DRIVERS\tap0901.sys [2011-06-07 40128]
S3 TsUsbFlt;@%SystemRoot%\system32\drivers\tsusbflt.sys,-1; C:\Windows\System32\drivers\tsusbflt.sys [2013-10-02 56832]
S3 upperdev;upperdev; C:\Windows\system32\DRIVERS\usbser_lowerfltx64.sys [2012-01-09 9216]
S3 USB_Ethernet_Adaptor;USB to Ethernet Adapter; C:\Windows\system32\DRIVERS\USB_Ethernet_Adaptor.sys [2013-01-08 21504]
S3 usb_rndisx;Adaptér USB RNDIS; C:\Windows\system32\DRIVERS\usb8023x.sys [2013-02-12 19968]
S3 usbscan;Ovladač skeneru USB; C:\Windows\system32\DRIVERS\usbscan.sys [2013-07-03 42496]
S3 usbser;USB Modem Driver; C:\Windows\system32\drivers\usbser.sys [2013-08-29 33280]
S3 UsbserFilt;UsbserFilt; C:\Windows\system32\DRIVERS\usbser_lowerfltjx64.sys [2012-01-09 9216]
S3 vwifimp;Microsoft Virtual WiFi Miniport Service; C:\Windows\system32\DRIVERS\vwifimp.sys [2011-01-25 18432]
S4 CSC;@%systemroot%\system32\cscsvc.dll,-202; C:\Windows\system32\drivers\csc.sys [2010-11-20 514560]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 AppHostSvc;@%windir%\system32\inetsrv\iisres.dll,-30011; C:\Windows\system32\svchost.exe [2009-07-14 27136]
R2 CISVC;@%systemroot%\system32\CISVC.EXE,-1; C:\Windows\system32\CISVC.EXE [2009-07-14 19456]
R2 DiagTrack;@%SystemRoot%\system32\UtcResources.dll,-3001; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\iCLS Client\HeciServer.exe [2012-04-20 635104]
R2 iprip;@%Systemroot%\system32\iprip.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [2012-07-17 165760]
R2 LPDSVC;@%systemroot%\system32\lpdsvc.dll,-500; C:\Windows\System32\svchost.exe [2009-07-14 27136]
R2 MDM;Machine Debug Manager; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [2006-10-26 335872]
R2 MsMpSvc;Microsoft Antimalware Service; c:\Program Files\Microsoft Security Client\MsMpEng.exe [2015-04-30 23816]
R2 nvsvc;NVIDIA Display Driver Service; C:\Windows\system32\nvvsvc.exe [2015-04-08 936264]
R2 PnkBstrA;PnkBstrA; C:\Windows\syswow64\PnkBstrA.exe [2014-07-18 76888]
R2 simptcp;@%SystemRoot%\system32\simptcp.dll,-200; C:\Windows\System32\tcpsvcs.exe [2009-07-14 10240]
R2 SNMP;@%SystemRoot%\system32\snmp.exe,-3; C:\Windows\System32\snmp.exe [2010-11-20 49664]
R2 SQLWriter;SQL Server VSS Writer; C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe [2012-10-20 130024]
R3 NisSrv;@c:\Program Files\Microsoft Security Client\MpAsDesc.dll,-243; c:\Program Files\Microsoft Security Client\NisSrv.exe [2015-04-30 366544]
R3 UmRdpService;@%SystemRoot%\system32\umrdp.dll,-1000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2013-09-11 105144]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2013-09-11 124088]
S2 SkypeUpdate;Skype Updater; C:\Program Files (x86)\Skype\Updater\Updater.exe [2014-12-11 315496]
S2 UNS;Intel(R) Management and Security Application User Notification Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe [2012-07-17 364416]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-09 268464]
S3 AppMgmt;@appmgmts.dll,-3250; C:\Windows\system32\svchost.exe [2009-07-14 27136]
S3 aspnet_state;Stavová služba ASP.NET; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe [2013-09-11 51808]
S3 EasyAntiCheat;EasyAntiCheat; C:\Windows\syswow64\EasyAntiCheat.exe [2014-11-17 182304]
S3 IEEtwCollectorService;@%SystemRoot%\system32\ieetwcollectorres.dll,-1000; C:\Windows\system32\IEEtwCollector.exe [2015-05-22 114688]
S3 Origin Client Service;Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2015-04-14 1931632]
S3 ose;Office Source Engine; C:\Program Files (x86)\Common Files\Microsoft Shared\Source Engine\OSE.EXE [2010-01-09 149352]
S3 osppsvc;Office Software Protection Platform; C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184]
S3 PeerDistSvc;@%SystemRoot%\system32\peerdistsvc.dll,-9000; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 ServiceLayer;ServiceLayer; C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe [2012-06-11 724376]
S3 Steam Client Service;Steam Client Service; C:\Program Files (x86)\Common Files\Steam\SteamService.exe [2015-01-10 834240]
S3 StorSvc;@%SystemRoot%\System32\StorSvc.dll,-100; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S3 SwitchBoard;SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [2010-02-19 517096]
S4 AdobeARMservice;Adobe Acrobat Update Service; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [2014-12-19 81088]
S4 CscService;@%systemroot%\system32\cscsvc.dll,-200; C:\Windows\System32\svchost.exe [2009-07-14 27136]
S4 DokanMounter;DokanMounter; C:\Program Files (x86)\Paragon Software\Paragon ExtFS for Windows\Dokan\DokanLibrary\mounter.exe [2014-11-25 21200]
S4 GfExperienceService;NVIDIA GeForce Experience Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [2015-05-23 1152656]
S4 gupdate;Služba Google Update (gupdate); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20 107912]
S4 gupdatem;Služba Google Update (gupdatem); C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20 107912]
S4 gusvc;Google Software Updater; C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe [2013-09-17 194032]
S4 LMS;Intel(R) Management and Security Application Local Management Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe [2012-07-17 276864]
S4 MSI_SuperCharger;MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [2012-06-29 136704]
S4 NetMsmqActivator;@C:\Windows\Microsoft.NET\Framework64\v4.0.30319\\ServiceModelInstallRC.dll,-8195; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NetTcpActivator;Adaptér naslouchání Net.Tcp; C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [2013-09-11 139856]
S4 NvNetworkService;NVIDIA Network Service; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [2015-05-23 1893008]
S4 NvStreamSvc;NVIDIA Streamer Service; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [2015-05-23 23006864]
S4 Stereo Service;NVIDIA Stereoscopic 3D Driver Service; C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2015-04-08 410952]
S4 TlntSvr;@%SystemRoot%\system32\tlntsvr.exe,-119; C:\Windows\System32\tlntsvr.exe [2009-07-14 81920]

-----------------EOF-----------------

#2 Příspěvek od **altrok** » 14 čer 2015 09:35

Krasny den Vam preju

Modifikovany hosts mate schvalne?

Otestujte na virustotal.com C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\extensions\adbhelper@mozilla.org\win32\adb.exe - pokud uz byl soubor otestovany, zvolte Reanalyse. Do pristiho prispevku dejte link (odkaz) s vysledky analyzy.

V ramci cisteni Vam budou vyprazdneny docasne adresare (vcetne Kose).

Ulozte na plochu AdwCleaner https://toolslib.net/downloads/viewdown ... dwcleaner/ (nebo http://www.bleepingcomputer.com/download/adwcleaner/ )

ukoncete vsechny programy
kliknete pravym na ikonu AdwCleaneru a vyberte Spustit jako spravce (v pripade Win XP spustte obycejne dvojklikem)
kliknete na Scan, pote na Cleaning
po restartu na Vas vyskoci log (pripadne jej najdete v C:\AdwCleaner\AdwCleaner [Sx].txt), jehoz obsah mi zkopirujte do pristi odpovedi

pavel68 · #3 Příspěvek od **pavel68** » 14 čer 2015 11:27

tady je log:
# AdwCleaner v4.206 - Log vytvořen 14/06/2015 v 12:15:54
# Aktualizováno 01/06/2015 by Xplode
# Databáze : 2015-06-09.1 [Server]
# Operační system : Windows 7 Professional Service Pack 1 (x64)
# Uživatelské jméno : Pavel - PAVEL-PC
# Spuštěno z : C:\Users\Pavel\Downloads\AdwCleaner.exe
# Nastavení : Čištění

***** [ Služby ] *****

***** [ Soubory / Složky ] *****

Soubor Smazáno : C:\Users\Pavel\AppData\Local\PUTTY.RND

***** [ Naplánované úlohy ] *****

***** [ Zástupci ] *****

***** [ Registry ] *****

***** [ Prohlížeče ] *****

-\\ Internet Explorer v11.0.9600.17840

-\\ Mozilla Firefox v38.0.5 (x86 cs)

-\\ Google Chrome v43.0.2357.124

[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://en.softonic.com/s/{searchTerms}
[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423322611&from=cvs&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S574288342883&q={searchTerms}
[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://istart.webssearches.com/web/?type=ds&ts=1423322611&from=cvs&uid=WDCXWD10EZEX-00KUWA0_WD-WCC1S574288342883&q={searchTerms}
[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Web Data] - Smazáno [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1 ... earchTerms}
[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Homepage] :
[C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] - Smazáno [Startup_URLs] : 30CFA57F6B2391F5755A3F0B90371D4222FB21DEA81309E2042A1244E44657B6"},"software_reporter":{"prompt_reason":"C0107938DFC1EDBF8B3CD261A81058C616B96ED4DE0EF991ACF4A16AAA93C223","prompt_seed":"434D275A9FA7EB7E9417DD8805DDAB66DEBDFC307F740BE09204CF6E1D0903AF","prompt_version":"6F636FC07543A0C2204904C504C68F1E0FBB3C9CA9967222187E5BE7A06C1892"},"sync":{"remaining_rollback_tries":"365D7AD7180D9B04DBBC778DBA18F27D38D73CD66ECDA2B86B1D054535DB2A15"}},"super_mac":"3BB9F79E450654FA04EB0F7BA05589214E5E522F8C781A642406E5949509C7A4"},"session":{"restore_on_startup":5,"startup_urls":["hxxp://www.google.com/","hxxp://istart.webssea ... 4288342883

*************************

AdwCleaner[R0].txt - [7982 bytů] - [10/12/2014 12:18:14]
AdwCleaner[R1].txt - [6684 bytů] - [07/02/2015 17:55:20]
AdwCleaner[R2].txt - [6743 bytů] - [07/02/2015 17:56:43]
AdwCleaner[R3].txt - [8686 bytů] - [14/06/2015 12:05:38]
AdwCleaner[S0].txt - [8170 bytů] - [10/12/2014 12:21:42]
AdwCleaner[S1].txt - [2764 bytů] - [14/06/2015 12:15:54]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [2822 bytů] ##########

#4 Příspěvek od **altrok** » 14 čer 2015 11:29

Otestujte na virustotal.com C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\extensions\adbhelper@mozilla.org\win32\adb.exe - pokud uz byl soubor otestovany, zvolte Reanalyse. Do pristiho prispevku dejte link (odkaz) s vysledky analyzy.

Dejte log FRST.txt, prilozte i Addition.txt - http://forum.viry.cz/viewtopic.php?f=30&t=133101

pavel68 · #5 Příspěvek od **pavel68** » 14 čer 2015 12:09

[quote="altrok"]

Otestujte na virustotal.com C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\extensions\adbhelper@mozilla.org\win32\adb.exe - pokud uz byl soubor otestovany, zvolte Reanalyse. Do pristiho prispevku dejte link (odkaz) s vysledky analyzy.
To to byl doplněk v prohlížeči ten sem odstranil.
tady je log:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015
Ran by Pavel (administrator) on PAVEL-PC on 14-06-2015 12:51:12
Running from C:\Users\Pavel\Desktop
Loaded Profiles: Pavel (Available Profiles: Pavel & Filip & Mcx1-PAVEL-PC & Classic .NET AppPool & DefaultAppPool)
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: Čeština (Česká republika)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/33 ... scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Microsoft Corporation) C:\Windows\System32\CISVC.EXE
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Windows\System32\TCPSVCS.EXE
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(forum.viry.cz) C:\Users\Pavel\Desktop\FRSTLauncher.exe

==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6548112 2012-06-12] (Realtek Semiconductor)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1337000 2015-04-30] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-20\...\Run: [Sidebar] => %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun
HKU\S-1-5-21-4105285322-3079417032-3333951049-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-4105285322-3079417032-3333951049-1000\...\Run: [GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-18\...\Run: [GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F] => C:\program files (x86)\google\chrome\application\chrome.exe [813896 2015-06-05] (Google Inc.)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2013-09-20] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre7\bin\ssv.dll [2013-11-01] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre7\bin\jp2ssv.dll [2013-11-01] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll [2013-10-08] (Oracle Corporation)
BHO-x32: Pomocná služba pro přihlášení k účtu Microsoft -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll [2013-10-08] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-4105285322-3079417032-3333951049-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 8.8.8.8

FireFox:
========
FF ProfilePath: C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410
FF Homepage: https://www.seznam.cz/
FF NetworkProxy: "http", "174.142.193.59"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "type", 0
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-06-09] ()
FF Plugin: @java.com/DTPlugin,version=10.40.2 -> C:\Windows\system32\npDeployJava1.dll [2013-11-01] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.40.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2013-11-01] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2014-09-19] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-06-09] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll [2014-04-15] (Adobe Systems, Inc.)
FF Plugin-x32: @esn/npbattlelog,version=2.3.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.2\npbattlelog.dll [2013-11-18] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-21] (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-06] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll [2013-10-08] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll [2013-10-08] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-17] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2014-09-19] (Adobe Systems)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @nsroblox.roblox.com/launcher -> C:\Program Files (x86)\Roblox\Versions\version-e7d5859bbf11477d\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @nsroblox.roblox.com/launcher64 -> C:\Program Files (x86)\Roblox\Versions\version-e7d5859bbf11477d\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Pavel\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2014-06-06] (Google)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @talk.google.com/O1DPlugin -> C:\Users\Pavel\AppData\Roaming\Mozilla\plugins\npo1d.dll [2014-06-06] (Google)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Pavel\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-06-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Pavel\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [2014-06-21] (Google Inc.)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Pavel\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-14] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-4105285322-3079417032-3333951049-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\nppdf32.dll [2015-05-01] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Pavel\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2014-06-06] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Pavel\AppData\Roaming\mozilla\plugins\npo1d.dll [2014-06-06] (Google)
FF Extension: Český slovník pro kontrolu pravopisu - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\Extensions\cs@dictionaries.addons.mozilla.org [2015-02-06]
FF Extension: MEGA - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\Extensions\firefox@mega.co.nz.xpi [2014-06-25]
FF Extension: Adblock Plus - C:\Users\Pavel\AppData\Roaming\Mozilla\Firefox\Profiles\1z7i1629.default-1386868423410\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-11-17]

Chrome:
=======
CHR Profile: C:\Users\Pavel\AppData\Local\Google\Chrome\User Data\Default

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S4 DokanMounter; C:\Program Files (x86)\Paragon Software\Paragon ExtFS for Windows\Dokan\DokanLibrary\mounter.exe [21200 2014-11-25] ()
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-11-17] (EasyAntiCheat Ltd)
S4 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
U2 iprip; C:\Windows\System32\iprip.dll [35328 2009-07-14] (Microsoft Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-17] (Intel Corporation)
R2 LPDSVC; C:\Windows\system32\lpdsvc.dll [45568 2009-07-14] (Microsoft Corporation)
R2 MDM; C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe [335872 2006-10-26] (Microsoft Corporation) [File not signed]
S4 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super-Charger\ChargeService.exe [136704 2012-06-29] (MSI) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23816 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [366544 2015-04-30] (Microsoft Corporation)
S4 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
S4 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-04-14] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-07-18] ()
R2 simptcp; C:\Windows\SysWOW64\tcpsvcs.exe [9216 2009-07-14] (Microsoft Corporation)
R2 SNMP; C:\Windows\System32\snmp.exe [49664 2010-11-20] (Microsoft Corporation)
R2 SNMP; C:\Windows\SysWOW64\snmp.exe [47616 2010-11-20] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S4 TlntSvr; C:\Windows\System32\tlntsvr.exe [81920 2009-07-14] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2013-12-24] ()
R2 Dokan; C:\Windows\system32\drivers\dokan.sys [57552 2014-11-25] (Windows (R) Win 7 DDK provider)
S3 DroidCam; C:\Windows\System32\DRIVERS\droidcam.sys [33080 2015-04-25] (Dev47Apps)
S3 DroidCamVideo; C:\Windows\System32\DRIVERS\droidcamvideo.sys [228408 2015-04-25] (Dev47Apps)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-09-17] (Disc Soft Ltd)
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46016 2012-07-24] ()
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2013-12-24] ()
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [280376 2015-03-04] (Microsoft Corporation)
R2 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [124568 2015-03-04] (Microsoft Corporation)
S3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super-Charger\NTIOLib_X64.sys [14136 2010-01-18] (MSI)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
R2 ParagonLDM; C:\Windows\system32\drivers\biont_bs.sys [19208 2014-04-11] ()
S3 pwdrvio; C:\Windows\system32\pwdrvio.sys [19152 2013-09-30] ()
S3 pwdspio; C:\Windows\system32\pwdspio.sys [12504 2013-09-30] ()
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2014-07-19] () [File not signed]
R2 SSPORT; C:\Windows\SysWOW64\Drivers\SSPORT.sys [11576 2009-02-19] (Samsung Electronics)
S3 USB_Ethernet_Adaptor; C:\Windows\System32\DRIVERS\USB_Ethernet_Adaptor.sys [21504 2013-01-08] (Corechip Semiconductor, Inc. Co Ltd.)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S1 ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Mac606; system32\DRIVERS\Mac606a.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]
S2 SVKP; \??\C:\Windows\system32\SVKP.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-14 12:51 - 2015-06-14 12:51 - 00018601 _____ C:\Users\Pavel\Desktop\FRST.txt
2015-06-14 12:50 - 2015-06-14 12:51 - 00000000 ____D C:\FRST
2015-06-14 12:49 - 2015-03-07 09:19 - 00112640 _____ (forum.viry.cz) C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-06-14 12:48 - 2015-06-14 12:49 - 00000600 _____ C:\Users\Pavel\AppData\Local\PUTTY.RND
2015-06-14 12:37 - 2015-06-14 12:37 - 02109952 _____ (Farbar) C:\Users\Pavel\Desktop\FRST64.exe
2015-06-14 12:00 - 2015-06-14 12:01 - 02231296 _____ C:\Users\Pavel\Downloads\AdwCleaner.exe
2015-06-14 09:39 - 2015-06-14 09:39 - 01222144 _____ C:\Users\Pavel\Downloads\RSITx64(2).exe
2015-06-13 21:27 - 2015-06-13 21:27 - 00000000 ____D C:\Users\Pavel\AppData\Local\CrashRpt
2015-06-12 19:33 - 2015-06-12 19:33 - 00002198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2015-06-12 17:08 - 2015-06-12 17:21 - 102909532 _____ C:\Users\Pavel\Downloads\Krone_Beastpack___MAN_Agrotruch_by_Bullgore_v12.00_06.04.2015.rar
2015-06-12 14:08 - 2015-06-12 14:09 - 00000000 ____D C:\Users\Pavel\Downloads\netinstall-6.29.1
2015-06-12 14:07 - 2015-06-12 14:07 - 12434945 _____ C:\Users\Pavel\Downloads\routeros-mipsbe-5.26.npk
2015-06-12 14:05 - 2015-06-12 14:06 - 19210478 _____ C:\Users\Pavel\Downloads\netinstall-6.29.1.zip
2015-06-11 21:51 - 2015-06-11 21:51 - 00361981 _____ C:\Users\Pavel\Downloads\navod_0000011877.rar
2015-06-11 21:51 - 2015-06-11 21:51 - 00000000 ____D C:\Users\Pavel\Downloads\navod_0000011877
2015-06-11 14:23 - 2015-06-11 14:23 - 00000000 ____D C:\Users\Pavel\Documents\Square Enix
2015-06-11 13:50 - 2015-06-11 13:50 - 01095792 _____ (TGRMN Software ) C:\Users\Pavel\Downloads\BRU_Setup_WinNTx64(1).exe
2015-06-10 16:47 - 2015-04-03 15:21 - 00048784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-06-10 16:47 - 2015-04-03 15:21 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-06-10 16:38 - 2015-06-10 16:38 - 00021954 _____ C:\Users\Pavel\Downloads\objednavka_31027024(3).html
2015-06-10 10:38 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-06-10 10:38 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-06-10 10:38 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-06-10 10:38 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-06-10 10:38 - 2015-05-25 20:24 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-06-10 10:38 - 2015-05-25 20:23 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-06-10 10:38 - 2015-05-25 20:23 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-06-10 10:38 - 2015-05-25 20:21 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 01255424 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00728576 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll
2015-06-10 10:38 - 2015-05-25 20:19 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll
2015-06-10 10:38 - 2015-05-25 20:18 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-06-10 10:38 - 2015-05-25 20:18 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-06-10 10:38 - 2015-05-25 20:18 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-06-10 10:38 - 2015-05-25 20:18 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-06-10 10:38 - 2015-05-25 20:18 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-06-10 10:38 - 2015-05-25 20:14 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-06-10 10:38 - 2015-05-25 20:14 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:11 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 20:07 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe
2015-06-10 10:38 - 2015-05-25 20:07 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe
2015-06-10 10:38 - 2015-05-25 20:04 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00551424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-06-10 10:38 - 2015-05-25 20:01 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll
2015-06-10 10:38 - 2015-05-25 20:00 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe
2015-06-10 10:38 - 2015-05-25 20:00 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe
2015-06-10 10:38 - 2015-05-25 19:59 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll
2015-06-10 10:38 - 2015-05-25 19:59 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2015-06-10 10:38 - 2015-05-25 19:59 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-06-10 10:38 - 2015-05-25 19:59 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll
2015-06-10 10:38 - 2015-05-25 19:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-06-10 10:38 - 2015-05-25 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-06-10 10:38 - 2015-05-25 19:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-06-10 10:38 - 2015-05-25 18:50 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe
2015-06-10 10:38 - 2015-05-25 18:50 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe
2015-06-10 10:38 - 2015-05-25 18:48 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 18:48 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 18:48 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll
2015-06-10 10:38 - 2015-05-25 18:48 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll
2015-06-10 10:38 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-06-10 10:38 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-06-10 10:38 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-06-10 10:38 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-06-10 10:38 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-06-10 10:38 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-06-10 10:38 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-06-10 10:38 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-06-10 10:38 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-06-10 10:38 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-06-10 10:38 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-06-10 10:38 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-06-10 10:38 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-06-10 10:38 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-06-10 10:38 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-06-10 10:38 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-06-10 10:38 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-06-10 10:38 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-06-10 10:38 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-06-10 10:38 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-06-10 10:38 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-06-10 10:38 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-06-10 10:38 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-06-10 10:38 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-06-10 10:38 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-06-10 10:38 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-06-10 10:38 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-06-10 10:38 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-06-10 10:38 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-06-10 10:38 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-06-10 10:38 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-06-10 10:38 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-06-10 10:38 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-06-10 10:38 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-06-10 10:38 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-06-10 10:38 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-06-10 10:38 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-06-10 10:38 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-06-10 10:38 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-06-10 10:38 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-06-10 10:38 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-06-10 10:38 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-06-10 10:38 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-06-10 10:38 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-06-10 10:38 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-06-10 10:38 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-06-10 10:38 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-06-10 10:38 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-06-10 10:38 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-06-10 10:38 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-06-10 10:38 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-06-10 10:38 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-06-10 10:38 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-06-10 10:38 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-06-10 10:38 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-06-10 10:38 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-06-10 10:38 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2015-06-10 10:38 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll
2015-06-10 10:38 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx
2015-06-10 10:38 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll
2015-06-10 10:38 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
2015-06-10 10:38 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2015-06-10 10:38 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll
2015-06-10 10:38 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx
2015-06-10 10:38 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll
2015-06-10 10:38 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
2015-06-10 10:38 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll
2015-06-10 10:38 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll
2015-06-10 10:38 - 2015-04-11 05:19 - 00069888 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stream.sys
2015-06-09 21:49 - 2015-06-09 22:33 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-06-09 17:44 - 2015-06-09 17:48 - 110584548 _____ C:\Users\Pavel\Downloads\FS15_JD6170R_FullPack.rar
2015-06-09 17:16 - 2015-06-09 17:31 - 339583548 _____ C:\Users\Pavel\Downloads\Old_Ridge.zip
2015-06-09 07:35 - 2015-06-09 07:35 - 00021954 _____ C:\Users\Pavel\Downloads\objednavka_31027024(2).html
2015-06-09 07:32 - 2015-06-09 07:32 - 00021954 _____ C:\Users\Pavel\Downloads\objednavka_31027024(1).html
2015-06-09 07:28 - 2015-06-09 07:28 - 00000225 _____ C:\Users\Pavel\Downloads\priloha(4)
2015-06-09 07:27 - 2015-06-09 07:27 - 00000225 _____ C:\Users\Pavel\Downloads\priloha(3)
2015-06-08 17:45 - 2015-06-08 17:45 - 00000225 _____ C:\Users\Pavel\Downloads\priloha(2)
2015-06-07 18:03 - 2015-06-07 18:03 - 00021954 _____ C:\Users\Pavel\Downloads\objednavka_31027024.html
2015-06-07 16:55 - 2015-06-07 16:55 - 00024992 _____ C:\Users\Pavel\Downloads\config(1).bin
2015-06-07 16:54 - 2015-06-07 16:54 - 03932160 _____ C:\Users\Pavel\Downloads\factory-to-ddwrt.bin
2015-06-07 16:54 - 2015-06-07 16:54 - 02832987 _____ C:\Users\Pavel\Downloads\tl-wr741nd_v1_v2-webrevert.rar
2015-06-07 16:14 - 2015-06-07 16:14 - 00019657 _____ C:\Users\Pavel\Downloads\objednavka_31027013(1).html
2015-06-07 10:09 - 2015-06-07 10:12 - 67963216 _____ () C:\Users\Pavel\Downloads\Nokia_PC_Suite_ALL(1).exe
2015-06-07 10:09 - 2015-06-07 10:09 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_ccdcmbx64_01009.Wdf
2015-06-07 10:05 - 2015-06-07 10:05 - 07319280 _____ C:\Users\Pavel\Downloads\MyPhoneExplorer_Setup_1.8.6.exe
2015-06-07 09:12 - 2015-06-07 09:13 - 00019657 _____ C:\Users\Pavel\Downloads\objednavka_31027013.html
2015-06-06 22:51 - 2015-06-06 22:51 - 00000000 ____D C:\Users\Pavel\Desktop\1523
2015-06-06 19:15 - 2015-06-06 19:16 - 56214822 _____ C:\Users\Pavel\Downloads\VID_20150212_204643.mp4
2015-06-06 10:43 - 2015-06-06 10:49 - 346718797 _____ C:\Users\Pavel\Downloads\VID_20150210_202813.mp4
2015-06-06 10:43 - 2015-06-06 10:45 - 00061472 _____ C:\Users\Pavel\Downloads\VID_20150211_192146.mp4.sfk
2015-06-06 10:31 - 2015-06-06 10:34 - 103414883 _____ C:\Users\Pavel\Downloads\VID_20150211_192146.mp4
2015-06-05 11:14 - 2015-05-22 20:18 - 01021440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-06-05 11:14 - 2015-05-22 20:18 - 00757248 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-06-05 11:14 - 2015-05-22 20:18 - 00700416 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-06-05 11:14 - 2015-05-22 20:18 - 00423424 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-06-05 11:14 - 2015-05-22 20:18 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-06-05 11:14 - 2015-05-22 20:18 - 00045568 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-06-05 11:14 - 2015-05-22 20:13 - 01119232 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-06-05 11:14 - 2015-05-21 15:19 - 00193536 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-06-04 20:17 - 2015-06-04 20:20 - 00000000 ____D C:\Users\Pavel\Documents\Witcher 2
2015-06-04 20:17 - 2015-06-04 20:17 - 00000000 ____D C:\Users\Pavel\AppData\Local\The Witcher 2
2015-06-04 20:13 - 2015-06-04 20:13 - 00001123 _____ C:\Users\Public\Desktop\Spustit hru The Witcher 2 (CZ).lnk
2015-06-04 20:13 - 2015-06-04 20:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher 2 (CZ)
2015-06-04 20:00 - 2015-06-04 20:13 - 00000000 ____D C:\Program Files (x86)\The Witcher 2 (CZ)
2015-06-04 13:30 - 2015-06-04 13:40 - 00000000 ____D C:\Users\Pavel\Desktop\doklad odpady
2015-06-02 19:43 - 2015-06-02 19:52 - 158154077 _____ C:\Users\Pavel\Downloads\Bakalari_12_13.zip
2015-06-02 19:34 - 2015-06-02 19:34 - 00000086 _____ C:\Windows\BAKA32.INI
2015-06-02 19:23 - 2015-06-03 17:23 - 00000025 _____ C:\Windows\bakadll.56
2015-06-02 19:23 - 2015-06-03 17:23 - 00000025 _____ C:\Windows\bakadll.23
2015-06-02 19:23 - 2001-03-27 05:08 - 00315461 _____ (Ringdale Ltd) C:\Windows\SysWOW64\gsserver.dll
2015-06-02 19:23 - 2001-03-27 05:08 - 00110592 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\gsjpg32.dll
2015-06-02 19:23 - 2001-03-27 05:08 - 00024576 _____ (Ringdale Ltd.) C:\Windows\SysWOW64\gsfkill.exe
2015-06-02 19:14 - 2001-10-22 18:07 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3a.dll
2015-06-02 19:14 - 2001-03-27 06:08 - 00647168 _____ (Ringdale Ltd) C:\Windows\SysWOW64\GSPROP32.DLL
2015-06-02 19:14 - 2001-03-27 06:08 - 00622592 _____ (Ringdale Ltd) C:\Windows\SysWOW64\GRAPHS32.OCX
2015-06-02 19:14 - 2001-03-27 06:08 - 00434176 _____ (Ringdale Ltd) C:\Windows\SysWOW64\GSW32.EXE
2015-06-02 19:14 - 2001-03-27 06:08 - 00253952 _____ (Ringdale Ltd) C:\Windows\SysWOW64\GSWAG32.DLL
2015-06-02 19:14 - 2001-03-27 06:08 - 00163840 _____ (Bits Per Second Ltd) C:\Windows\SysWOW64\GSWDLL32.DLL
2015-06-02 19:14 - 2000-03-07 02:12 - 00048606 _____ C:\Windows\SysWOW64\FOXPRO.INT
2015-06-02 19:14 - 1998-06-24 01:00 - 00137000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSMAPI32.OCX
2015-06-02 19:14 - 1998-03-19 01:00 - 00078848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSOUTL32.OCX
2015-06-02 19:14 - 1996-08-21 01:00 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BKFOXT32.FLL
2015-06-02 19:14 - 1995-11-13 01:00 - 00133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFCANS32.DLL
2015-06-02 19:14 - 1995-05-22 01:00 - 00640512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OC30.DLL
2015-06-02 18:54 - 2015-06-02 18:54 - 00000777 _____ C:\Users\Pavel\Downloads\licence.DBF
2015-06-02 18:48 - 2015-06-02 18:50 - 00000000 ____D C:\Users\Pavel\Downloads\AdvTor0.1.0.8
2015-06-02 18:48 - 2015-06-02 18:48 - 01823573 _____ C:\Users\Pavel\Downloads\AdvTor0.1.0.8.zip
2015-06-02 18:41 - 2015-06-02 18:47 - 251009023 _____ C:\Users\Pavel\Downloads\Bakalari_14_15.zip
2015-06-02 18:37 - 2015-06-02 18:37 - 00928532 _____ C:\Users\Pavel\Downloads\ivysved.zip
2015-06-01 14:29 - 2015-06-01 14:29 - 00000000 ____D C:\Users\Pavel\AppData\Local\GWX
2015-06-01 07:20 - 2015-06-01 07:17 - 00000332 _____ C:\odpovedi.txt
2015-05-31 15:14 - 2015-05-31 15:19 - 49109529 _____ C:\Users\Pavel\Downloads\2_geometry_dash.apk
2015-05-31 14:48 - 2015-06-11 14:23 - 00000000 ____D C:\Program Files\Bulk Rename Utility
2015-05-31 14:47 - 2015-05-31 14:48 - 01095792 _____ (TGRMN Software ) C:\Users\Pavel\Downloads\BRU_Setup_WinNTx64.exe
2015-05-31 11:45 - 2015-05-31 11:45 - 00096294 _____ C:\Users\Pavel\Downloads\laugh_skull.mp4
2015-05-29 17:02 - 2015-05-29 17:03 - 07475259 _____ C:\Users\Pavel\Downloads\B+_Model_v3.stl
2015-05-29 16:56 - 2015-05-29 16:56 - 18487278 _____ C:\Users\Pavel\Downloads\uploads_b7_64_ff_9e_d8_B%2B_Model_v4.skp
2015-05-29 14:44 - 2015-05-29 14:44 - 00000516 __RSH C:\ProgramData\ntuser.pol
2015-05-29 14:44 - 2015-05-29 14:44 - 00000020 ___SH C:\Users\Mcx1-PAVEL-PC\ntuser.ini
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Šablony
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Soubory cookie
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Poslední
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Okolní tiskárny
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Okolní síť
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Nabídka Start
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Dokumenty
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Documents\Obrázky
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Documents\Hudba
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Documents\Filmy
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\Data aplikací
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programy
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 _SHDL C:\Users\Mcx1-PAVEL-PC\AppData\Local\Data aplikací
2015-05-29 14:44 - 2015-05-29 14:44 - 00000000 ____D C:\Users\Mcx1-PAVEL-PC
2015-05-29 14:44 - 2014-08-28 16:41 - 00000000 ____D C:\Users\Mcx1-PAVEL-PC\AppData\Roaming\Macromedia
2015-05-29 14:44 - 2013-09-22 22:19 - 00000000 ____D C:\Users\Mcx1-PAVEL-PC\AppData\Local\Microsoft Help
2015-05-29 14:44 - 2009-07-14 06:54 - 00000000 ___RD C:\Users\Mcx1-PAVEL-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-05-29 14:44 - 2009-07-14 06:49 - 00000000 ___RD C:\Users\Mcx1-PAVEL-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-05-27 20:03 - 2015-05-27 20:03 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Python
2015-05-27 20:02 - 2015-05-27 20:02 - 00001519 _____ C:\Users\Pavel\Desktop\Autodesk Fusion 360.lnk
2015-05-27 20:02 - 2015-05-27 20:02 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Autodesk
2015-05-27 20:02 - 2015-05-27 20:02 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Autodesk
2015-05-27 20:02 - 2015-05-27 20:02 - 00000000 ____D C:\ProgramData\Autodesk
2015-05-27 19:40 - 2015-05-27 20:05 - 00000000 ____D C:\Users\Pavel\AppData\Local\Autodesk
2015-05-27 19:40 - 2015-05-27 19:40 - 07591536 _____ (Autodesk, Inc) C:\Users\Pavel\Downloads\Fusion 360 Client Downloader {ta_m-id%3A918-FOD-433%26token%3A_mch-autodesk.com-1432748370353-50108}.exe
2015-05-27 10:15 - 2015-05-27 10:15 - 00000000 ____D C:\Users\Pavel\Desktop\pojištění úrody2
2015-05-27 10:14 - 2015-05-27 10:14 - 00000000 ____D C:\Users\Pavel\Desktop\pojištění úrody
2015-05-24 11:04 - 2015-05-24 15:16 - 00000000 ____D C:\Program Files\QuickMediaConverter
2015-05-24 11:04 - 2015-05-24 11:04 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Cocoon Software
2015-05-24 11:04 - 2015-05-24 11:04 - 00000000 ____D C:\Users\Pavel\AppData\Local\WDSetup
2015-05-24 11:02 - 2015-05-24 11:02 - 07626090 _____ (FreeMediaConverter.org ) C:\Users\Pavel\Downloads\free-media-converter.exe
2015-05-24 09:53 - 2015-05-24 09:53 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Mael
2015-05-23 14:57 - 2015-05-23 14:58 - 00000000 ____D C:\Users\Pavel\Documents\ROBLOX
2015-05-22 19:16 - 2015-06-04 20:22 - 00001361 _____ C:\Users\Pavel\Desktop\ROBLOX Player.lnk
2015-05-22 19:14 - 2015-06-04 20:22 - 00001180 _____ C:\Users\Pavel\Desktop\ROBLOX Studio.lnk
2015-05-22 19:14 - 2015-06-04 20:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roblox
2015-05-22 19:13 - 2015-05-22 19:13 - 00969584 _____ (ROBLOX Corporation) C:\Users\Pavel\Downloads\RobloxPlayerLauncher(2).exe
2015-05-20 17:01 - 2015-05-20 17:01 - 00000000 ____D C:\Users\Pavel\Downloads\webmin-1.750
2015-05-20 17:00 - 2015-05-20 17:00 - 34421880 _____ C:\Users\Pavel\Downloads\webmin-1.750.zip
2015-05-19 19:12 - 2015-05-19 19:12 - 00007305 _____ C:\Users\Pavel\Downloads\8880004855.html
2015-05-19 16:54 - 2015-05-19 16:54 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\com.playsaurus.heroclicker
2015-05-19 16:35 - 2015-05-19 16:35 - 00001938 _____ C:\Users\Public\Desktop\MiVue Manager.lnk
2015-05-19 16:35 - 2015-05-19 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiVue
2015-05-19 16:34 - 2015-05-19 16:34 - 20606934 _____ (Macrovision Corporation) C:\Users\Pavel\Downloads\MiVue-Manager-1.0.30.4.exe
2015-05-19 16:32 - 2015-05-19 16:33 - 11032608 _____ C:\Users\Pavel\Downloads\SD_CarDV.bin
2015-05-19 15:41 - 2015-05-19 15:41 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\A
2015-05-19 15:41 - 2015-05-19 15:41 - 00000000 ____D C:\Users\Pavel\AppData\Local\A
2015-05-19 15:40 - 2015-05-19 15:40 - 28285442 _____ C:\Users\Pavel\Downloads\czgtavpc.zip
2015-05-19 15:40 - 2015-05-19 15:40 - 00000000 ____D C:\Users\Pavel\Downloads\czgtavpc
2015-05-19 15:32 - 2015-05-19 15:32 - 18531252 _____ (Macrovision Corporation) C:\Users\Pavel\Downloads\Setup(1).exe
2015-05-19 15:32 - 2015-05-19 15:32 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\InstallShield
2015-05-19 15:17 - 2015-05-19 15:17 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Media Player Classic
2015-05-19 15:15 - 2015-05-19 15:15 - 00625664 _____ C:\Users\Pavel\Downloads\WECPSetup.exe
2015-05-18 20:15 - 2015-05-18 20:16 - 00000000 ____D C:\Users\Pavel\Desktop\PP psi
2015-05-18 19:51 - 2015-05-18 20:15 - 00000000 ____D C:\Users\Pavel\Desktop\PP Ella2
2015-05-18 19:50 - 2015-05-18 20:16 - 00000000 ____D C:\Users\Pavel\Desktop\PP Ella
2015-05-18 17:32 - 2015-05-18 17:32 - 00000242 _____ C:\Users\Pavel\Downloads\priloha(1)
2015-05-18 15:11 - 2015-05-18 15:11 - 00000000 ____D C:\Users\Pavel\Downloads\kali-linux-1.1.0a-amd64-mini
2015-05-16 20:14 - 2015-05-16 20:14 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-06-14 12:48 - 2009-07-14 06:45 - 00032256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-14 12:48 - 2009-07-14 06:45 - 00032256 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-14 12:32 - 2013-09-17 19:21 - 00000952 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-06-14 12:23 - 2014-07-09 08:28 - 01777027 _____ C:\Windows\WindowsUpdate.log
2015-06-14 12:17 - 2014-10-20 11:20 - 00066612 _____ C:\Windows\setupact.log
2015-06-14 12:17 - 2013-09-17 19:21 - 00000948 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-06-14 12:17 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2015-06-14 12:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-06-14 12:16 - 2014-10-27 08:43 - 00136168 _____ C:\Windows\PFRO.log
2015-06-14 12:15 - 2014-12-10 12:14 - 00000000 ____D C:\AdwCleaner
2015-06-14 11:59 - 2013-09-17 20:17 - 00000914 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-06-14 11:42 - 2014-07-02 15:30 - 00000000 ____D C:\Users\Pavel\AppData\Local\Game Dev Tycoon - Steam
2015-06-14 11:41 - 2014-10-27 13:45 - 00000000 ____D C:\Program Files (x86)\Steam
2015-06-14 10:38 - 2013-10-05 16:03 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\vlc
2015-06-14 10:35 - 2014-12-02 14:11 - 00000000 ____D C:\Users\Pavel\AppData\Local\Mobilbonus
2015-06-14 10:16 - 2009-07-14 17:18 - 00767258 _____ C:\Windows\system32\perfh005.dat
2015-06-14 10:16 - 2009-07-14 17:18 - 00180570 _____ C:\Windows\system32\perfc005.dat
2015-06-14 10:16 - 2009-07-14 07:13 - 01848242 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-14 10:15 - 2009-07-14 06:57 - 00001547 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-06-14 09:39 - 2014-01-09 21:06 - 00000000 ____D C:\Program Files\trend micro
2015-06-14 09:07 - 2014-09-13 16:29 - 00000000 ____D C:\ProgramData\NVIDIA
2015-06-13 21:24 - 2014-07-16 08:55 - 00000000 ____D C:\Users\Pavel\AppData\Local\CrashDumps
2015-06-13 17:46 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-06-13 13:16 - 2013-11-07 23:06 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2015-06-13 10:05 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-06-11 14:28 - 2013-09-26 16:33 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Mp3tag
2015-06-11 14:24 - 2014-10-24 21:18 - 00000000 ____D C:\Users\Pavel\AppData\Local\SKIDROW
2015-06-11 13:30 - 2009-07-14 06:45 - 05047752 _____ C:\Windows\system32\FNTCACHE.DAT
2015-06-11 13:27 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-06-10 22:21 - 2013-09-22 18:14 - 00000000 ____D C:\ProgramData\Microsoft Help
2015-06-10 22:19 - 2013-10-26 08:46 - 00000000 ____D C:\Windows\system32\MRT
2015-06-10 22:11 - 2013-10-26 08:46 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-06-10 22:10 - 2009-07-14 04:34 - 00000897 _____ C:\Windows\win.ini
2015-06-10 19:48 - 2013-09-22 18:41 - 00000121 _____ C:\Users\Public\LMDebug.log
2015-06-10 16:48 - 2013-11-06 20:04 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-06-10 16:47 - 2013-11-09 12:04 - 00000000 ____D C:\ProgramData\boost_interprocess
2015-06-10 10:39 - 2014-12-23 14:04 - 00002225 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-06-09 20:59 - 2013-09-17 20:17 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-06-09 20:59 - 2013-09-17 20:17 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-06-09 20:59 - 2013-09-17 20:17 - 00003852 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-06-09 20:51 - 2013-09-28 09:58 - 00007647 _____ C:\Users\Pavel\AppData\Local\resmon.resmoncfg
2015-06-09 20:21 - 2013-10-11 21:46 - 00002332 ____H C:\Users\Pavel\Documents\Default.rdp
2015-06-09 20:21 - 2009-07-14 07:32 - 00000000 ____D C:\Windows\system32\FxsTmp
2015-06-08 19:26 - 2013-09-18 15:39 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\.minecraft
2015-06-07 10:23 - 2014-12-24 20:46 - 00000000 ____D C:\Program Files (x86)\Nokia
2015-06-07 10:23 - 2014-11-19 21:37 - 00087266 _____ C:\Windows\DPINST.LOG
2015-06-07 10:15 - 2014-12-24 20:47 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\PC Suite
2015-06-07 10:15 - 2014-12-24 20:47 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Nokia
2015-06-06 08:39 - 2014-12-13 09:43 - 00000000 ____D C:\Windows\system32\appraiser
2015-06-06 08:39 - 2014-05-06 22:26 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-06-05 15:18 - 2014-12-23 14:07 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Aplikace Chrome
2015-06-05 11:51 - 2013-09-17 19:15 - 00000000 ____D C:\Users\Pavel
2015-06-04 20:14 - 2013-09-18 12:21 - 00000000 ___HD C:\Windows\msdownld.tmp
2015-06-04 20:14 - 2013-09-18 12:21 - 00000000 ____D C:\Windows\SysWOW64\directx
2015-06-04 19:51 - 2015-04-29 20:05 - 00000000 ____D C:\Users\Pavel\Documents\Gothic3
2015-05-29 17:32 - 2013-11-07 23:07 - 00001132 _____ C:\Users\Pavel\Desktop\MSI Afterburner.lnk
2015-05-29 14:00 - 2013-09-30 07:22 - 00304330 _____ C:\Users\Pavel\Desktop\ovce evidence doma.xlsx
2015-05-28 22:23 - 2015-04-25 20:04 - 00000000 ____D C:\Windows\CSC
2015-05-27 07:02 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2015-05-24 15:40 - 2014-12-22 12:15 - 00053960 _____ C:\Windows\iis7.log
2015-05-24 15:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\SysWOW64\inetsrv
2015-05-24 15:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\inetsrv
2015-05-24 14:50 - 2015-04-28 13:15 - 00000000 ____D C:\Program Files (x86)\Piranha Bytes
2015-05-24 14:50 - 2013-09-17 19:21 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2015-05-24 06:43 - 2009-07-14 07:08 - 00032628 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-05-23 15:24 - 2013-09-22 17:31 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\OBS
2015-05-23 15:05 - 2014-06-22 16:53 - 00000000 ____D C:\Users\Pavel\AppData\Local\Roblox
2015-05-23 10:56 - 2014-01-26 14:31 - 00000000 ____D C:\Users\Pavel\AppData\Local\GHISLER
2015-05-23 03:47 - 2015-04-15 17:26 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-05-23 03:47 - 2015-04-15 17:26 - 01571696 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-05-23 03:47 - 2015-04-15 17:26 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-05-23 03:47 - 2015-04-15 17:26 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-05-22 21:21 - 2013-10-06 20:02 - 00000000 ____D C:\Users\Pavel\AppData\Roaming\GHISLER
2015-05-20 21:44 - 2015-04-04 21:57 - 00000000 ___SD C:\Windows\SysWOW64\GWX
2015-05-20 21:44 - 2015-04-04 21:57 - 00000000 ___SD C:\Windows\system32\GWX
2015-05-17 15:27 - 2013-09-17 19:21 - 00003948 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-17 15:27 - 2013-09-17 19:21 - 00003696 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-16 20:14 - 2013-09-24 19:57 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2015-05-16 20:00 - 2013-11-07 23:05 - 00000000 ____D C:\Users\Pavel\AppData\Local\Deployment

==================== Files in the root of some directories =======

2013-11-07 23:16 - 2013-11-07 23:16 - 0000000 ___RH () C:\Users\Pavel\AppData\Roaming\a23fb2848ae398f80617179ec26ed629
2015-04-02 14:20 - 2015-04-02 14:20 - 0000132 _____ () C:\Users\Pavel\AppData\Roaming\Adobe Formát BMP CS6 – předvolby
2015-03-31 21:44 - 2015-03-31 21:44 - 0000132 _____ () C:\Users\Pavel\AppData\Roaming\Adobe Formát PNG CS6 – předvolby
2015-01-18 12:50 - 2015-02-02 16:16 - 0000132 _____ () C:\Users\Pavel\AppData\Roaming\Adobe PNG Format CS6 Prefs
2013-11-03 22:02 - 2013-09-17 21:06 - 0000000 _____ () C:\Users\Pavel\AppData\Roaming\alsoft.ini
2013-11-18 22:17 - 2013-11-18 22:20 - 0217600 _____ () C:\Users\Pavel\AppData\Roaming\jacob-1.17-M2-x64.dll
2013-11-18 22:17 - 2013-11-18 22:20 - 0176128 _____ () C:\Users\Pavel\AppData\Roaming\jacob-1.17-M2-x86.dll
2014-12-27 16:42 - 2015-01-28 19:52 - 0000098 _____ () C:\Users\Pavel\AppData\Roaming\LauncherSettings_live.cfg
2013-10-28 12:28 - 2015-03-08 16:02 - 0000074 _____ () C:\Users\Pavel\AppData\Roaming\MinecraftLog.txt
2014-02-21 21:28 - 2014-02-21 21:28 - 0000110 _____ () C:\Users\Pavel\AppData\Roaming\net.telestream.wirecast.webstream.xml
2014-02-21 20:49 - 2014-02-21 21:28 - 0022870 _____ () C:\Users\Pavel\AppData\Roaming\net.telestream.wirecast.xml
2013-10-03 20:59 - 2014-07-10 11:04 - 0000000 _____ () C:\Users\Pavel\AppData\Roaming\Percussion Kit
2013-10-03 20:59 - 2014-07-10 11:05 - 0000000 _____ () C:\Users\Pavel\AppData\Roaming\Phaser
2013-10-03 20:59 - 2014-07-10 11:05 - 0000000 _____ () C:\Users\Pavel\AppData\Roaming\Plugins
2015-01-26 18:48 - 2015-01-26 18:48 - 0000040 _____ () C:\Users\Pavel\AppData\Roaming\TheHunterSettings_live.cfg
2015-01-27 20:57 - 2015-01-27 22:29 - 0000043 _____ () C:\Users\Pavel\AppData\Roaming\TheHunterSettings_local.cfg
2015-01-27 19:44 - 2015-01-27 19:44 - 0000040 _____ () C:\Users\Pavel\AppData\Roaming\TheHunterSettings_steam_live.cfg
2014-02-26 18:55 - 2014-02-26 18:55 - 0000757 _____ () C:\Users\Pavel\AppData\Roaming\titleConfig.yml
2013-10-23 16:42 - 2015-03-20 21:44 - 0000600 _____ () C:\Users\Pavel\AppData\Roaming\winscp.rnd
2015-04-24 18:12 - 2015-04-24 18:14 - 182564492 _____ () C:\Users\Pavel\AppData\Local\ACCCx3_0_0_74.zip.aamdownload
2015-04-24 18:12 - 2015-04-24 18:14 - 0002194 _____ () C:\Users\Pavel\AppData\Local\ACCCx3_0_0_74.zip.aamdownload.aamd
2013-10-05 16:37 - 2014-06-08 21:17 - 0005120 _____ () C:\Users\Pavel\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-07-04 19:14 - 2015-01-07 21:42 - 1065984 _____ () C:\Users\Pavel\AppData\Local\file__0.localstorage
2013-12-08 12:02 - 2013-12-08 12:02 - 0004096 ____H () C:\Users\Pavel\AppData\Local\keyfile3.drm
2014-06-26 20:32 - 2014-06-26 20:32 - 0000000 ___SH () C:\Users\Pavel\AppData\Local\LumaEmu
2015-06-14 12:48 - 2015-06-14 12:49 - 0000600 _____ () C:\Users\Pavel\AppData\Local\PUTTY.RND
2013-09-28 09:58 - 2015-06-09 20:51 - 0007647 _____ () C:\Users\Pavel\AppData\Local\resmon.resmoncfg
2015-04-25 18:49 - 2015-04-25 18:54 - 0000033 _____ () C:\ProgramData\droidcam-settings
2014-07-10 11:05 - 2014-07-10 11:05 - 0000000 _____ () C:\ProgramData\Metadata Importer
2013-10-03 20:59 - 2014-07-10 11:05 - 0000000 ____H () C:\ProgramData\PKP_DLeo.DAT
2013-10-03 21:00 - 2014-07-10 11:05 - 0000000 ____H () C:\ProgramData\PKP_DLes.DAT
2013-10-03 20:59 - 2014-07-10 11:04 - 0000000 ____H () C:\ProgramData\PKP_DLet.DAT
2013-10-03 20:59 - 2014-07-10 11:05 - 0000000 ____H () C:\ProgramData\PKP_DLev.DAT
2014-07-10 11:05 - 2014-07-10 11:05 - 0000000 _____ () C:\ProgramData\Plug-Ins

Files to move or delete:
====================
C:\Users\Pavel\test.bat

Some files in TEMP:
====================
C:\Users\Pavel\AppData\Local\Temp\1fe5o3ch.dll
C:\Users\Pavel\AppData\Local\Temp\917b0b87-3358-4e79-93de-3dfc2fc99ed0.exe
C:\Users\Pavel\AppData\Local\Temp\AdobeApplicationManager.exe
C:\Users\Pavel\AppData\Local\Temp\Bass.dll
C:\Users\Pavel\AppData\Local\Temp\Bass.Net.dll
C:\Users\Pavel\AppData\Local\Temp\drm_dialogs.dll
C:\Users\Pavel\AppData\Local\Temp\drm_dyndata_7380007.dll
C:\Users\Pavel\AppData\Local\Temp\jansi-64-git-Bukkit-jenkins-CraftBukkit-173.dll
C:\Users\Pavel\AppData\Local\Temp\npnv3dv.dll
C:\Users\Pavel\AppData\Local\Temp\nvImage.dll
C:\Users\Pavel\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Pavel\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Pavel\AppData\Local\Temp\nvStereoApiI.dll
C:\Users\Pavel\AppData\Local\Temp\nvStInst.exe
C:\Users\Pavel\AppData\Local\Temp\ose00001.exe
C:\Users\Pavel\AppData\Local\Temp\ovi-uninstall.exe
C:\Users\Pavel\AppData\Local\Temp\paint.net.4.0.3.install.exe
C:\Users\Pavel\AppData\Local\Temp\PidGenX.dll
C:\Users\Pavel\AppData\Local\Temp\Quarantine.exe
C:\Users\Pavel\AppData\Local\Temp\revs.exe
C:\Users\Pavel\AppData\Local\Temp\sfamcc00001.dll
C:\Users\Pavel\AppData\Local\Temp\sfextra.dll
C:\Users\Pavel\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Pavel\AppData\Local\Temp\sqlite3.dll
C:\Users\Pavel\AppData\Local\Temp\ubiE66D.tmp.exe
C:\Users\Pavel\AppData\Local\Temp\UmmyVideoDownloader.exe
C:\Users\Pavel\AppData\Local\Temp\Uninstall.exe
C:\Users\Pavel\AppData\Local\Temp\vlc-2.2.1-win32.exe
C:\Users\Pavel\AppData\Local\Temp\_is9A99.exe
C:\Users\Pavel\AppData\Local\Temp\_isC6C8.exe

==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-06-13 09:57

===***===***===***=== Extract of Additional scan result of Farbar Recovery Scan Tool ===***===***===***===

==================== Drive and Memory info ===================

Drive c: () (Fixed) (Total:931.41 GB) (Free:289.05 GB) NTFS
Drive k: () (Network) (Total:298.09 GB) (Free:158 GB)

Available physical RAM: 6127.25 MB
Total physical RAM: 8143.96 MB
Percentage of memory in use: 24%

==================== MBR and Partition Table ==================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 109B5A4B)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Scheduled Tasks (whitelisted) ==================

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000Core.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000UA.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe

==================== Alternate Data Streams (whitelisted) ==================

AlternateDataStreams: C:\ProgramData:NT
AlternateDataStreams: C:\ProgramData:NT2
AlternateDataStreams: C:\Users\All Users:NT
AlternateDataStreams: C:\Users\All Users:NT2
AlternateDataStreams: C:\ProgramData\Application Data:NT
AlternateDataStreams: C:\ProgramData\Application Data:NT2
AlternateDataStreams: C:\ProgramData\Data aplikací:NT
AlternateDataStreams: C:\ProgramData\Data aplikací:NT2
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT
AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2
AlternateDataStreams: C:\Users\Pavel\Data aplikací:NT
AlternateDataStreams: C:\Users\Pavel\Data aplikací:NT2
AlternateDataStreams: C:\Users\Pavel\AppData\Roaming:NT
AlternateDataStreams: C:\Users\Pavel\AppData\Roaming:NT2
AlternateDataStreams: C:\Users\Public\DRM:احتضان

==================== Security Center ==================

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

===***===***===***=== Supplementary Scan createdy by FRSTLauncher ===***===***===***===
Posledni aktualizace FRSTLauncheru: 25_11_2013 (01)
Posledni aktualizace Modifikacniho skriptu: 30_09_2013 (01)

***** Velikost "Plochy" *****

Velikost slozky "C:\Users\Pavel\Desktop" je 876 MB.

***** Startup Programs *****

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\4600 Scan2PC
"C:\Windows\twain_32\Samsung\SCX4600\Scan2Pc.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\5C15FE23AEB342AF49561D34CA158610F3B7D4A6._service_run
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --type=service [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe ARM
"C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0
"C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager
"C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe" -launchedbylogin [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CCleaner Monitoring
"C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CDAServer
C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.autoupdate
"C:\Users\Pavel\AppData\Roaming\Seznam.cz\szninstall.exe" -c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\cz.seznam.software.szndesktop
"C:\Users\Pavel\AppData\Roaming\Seznam.cz\bin\wszndesktop.exe" -q [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools Lite
"C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Dxtory Update Checker 2.0
C:\Program Files (x86)\Dxtory Software\Dxtory2.0\UpdateChecker.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EADM
"H:\Origin\Origin.exe" -AutoStart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update
"C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe" /c [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google+ Auto Backup
"C:\Users\Pavel\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GoogleChromeAutoLaunch_7629D47B6AAB0AC4663EF6E10C5E858F
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --no-startup-window [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor
"C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Handy Updater
"C:\Program Files (x86)\HandyUpdater\HUpdater.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui
"C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSC
"c:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MusicManager
"C:\Users\Pavel\AppData\Local\Programs\Google\MusicManager\MusicManager.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyDriveConnect.exe
"C:\Program Files (x86)\MyDrive Connect\MyDriveConnect.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nikon Message Center 2
C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NvBackend
"C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nvtmru
"C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\nvtmru.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Samsung PanelMgr
C:\Windows\Samsung\PanelMgr\SSMMgr.exe /autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SCX4600_Scan2Pc
C:\Windows\Twain_32\Samsung\SCX4600\Scan2pc.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\seznam-listicka-distribuce
"C:\Program Files (x86)\Seznam.cz\distribution\szninstall.exe" -s -d listicka 1 szn-software-listicka cz.seznam.software.autoupdate [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ShadowPlay
C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar
C:\Program Files\Windows Sidebar\sidebar.exe /autoRun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype
"C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SMART Floating Tools
"C:\Program Files (x86)\SMART Technologies\Education Software\FloatingTools.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedUpMyComputer
C:\Program Files (x86)\SmartTweak\SpeedUpMyComputer\SpeedUpMyComputer.exe /ot /as [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC
"C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam
"H:\Steam\steam.exe" -silent [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STO Backup Service
C:\Program Files (x86)\SmarThru Office\BackUpSvr.exe [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\STO Launcher Service
C:\Program Files (x86)\SmarThru Office\x64\LegacyLauncher.exe /autorun [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched
"C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Super-Charger
C:\Program Files (x86)\MSI\Super-Charger\Super-Charger.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg
"C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SwitchBoard
C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\USB3MON
"C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsDriverScan64
C:\Program Files (x86)\Adobe Arkalis\Arkalis.lnk [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WindowsDriverScan86
C:\Program Files (x86)\Adobe Arkalis\Arkalis86.lnk [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Zoner Photo Studio Autoupdate
C:\PROGRAM FILES\ZONER\PHOTO STUDIO 15\Program32\ZPSTRAY.EXE [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^AML Device Install.lnk
C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe aml [x]

HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Users^Pavel^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Deer Hunter 2005 Registration.lnk
C:\Program Files (x86)\Atari\Deer Hunter 2005\ATR1.EXE /remind /language=CSY /PRNM="Deer Hunter 2005"/PRMP="DH05"/SKUN="PCXX"/GTYP="OUTD" [x]

***** Firewall rules *****

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
DisableNotifications REG_DWORD 0x0
EnableFirewall REG_DWORD 0x1
DoNotAllowExceptions REG_DWORD 0x0

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\GloballyOpenPorts\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]

***** System Restore *****

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"Generalize_DisableSR"=dword:00000000

==================== End Of Log ==============================

=======================

pavel68 · #6 Příspěvek od **pavel68** » 14 čer 2015 12:12

+zip s druhým logem

#7 Příspěvek od **altrok** » 14 čer 2015 12:55

Odinstalujte stare a zranitelne verze javy Java 7 Update 40 (64-bit), Java 7 Update 45 a Java SE Development Kit 7 Update 40 (64-bit). Pokud javu potrebujete, pak nainstalujte novou z java.com - pozor na adware pri jeji instalaci http://forum.viry.cz/viewtopic.php?p=1374438#p1374438 . Z hlediska bezpecnosti (exploity) je lepsi ji nemit.

Velikost plochy by nemela presahovat 200 MB. Zpomaluje se pak start i samotny chod celeho PC. Doporucuji hlavne velke soubory a slozky premistit napr. do Dokumentu a na plochu umistit pouze zastupce.

Do Poznamkoveho bloku (Start -> spustit -> notepad) zkopirujte obsah bileho pole
ulozte na plochu jako fixlist (Typ souboru: Textovy dokument)
znovu spustte FRST a kliknete na Fix

po restartu bude na plose ulozen fixlog, jehoz obsah mi vlozte do pristi odpovedi

Kód: Vybrat vše

Start
CloseProcesses:
CreateRestorePoint:
File: C:\Users\Pavel\test.bat
HKU\S-1-5-21-4105285322-3079417032-3333951049-1000\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

FF NetworkProxy: "http", "174.142.193.59"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "type", 0

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S1 ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Mac606; system32\DRIVERS\Mac606a.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

2015-06-14 12:49 - 2015-03-07 09:19 - 00112640 _____ (forum.viry.cz) C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-06-14 12:00 - 2015-06-14 12:01 - 02231296 _____ C:\Users\Pavel\Downloads\AdwCleaner.exe
2015-06-14 09:39 - 2015-06-14 09:39 - 01222144 _____ C:\Users\Pavel\Downloads\RSITx64(2).exe
2015-06-14 12:15 - 2014-12-10 12:14 - 00000000 ____D C:\AdwCleaner
2015-06-14 09:39 - 2014-01-09 21:06 - 00000000 ____D C:\Program Files\trend micro
C:\Users\Pavel\AppData\Local\Temp
AlternateDataStreams: C:\Users\Public\DRM:احتضان

Task: {0057BF87-61C4-4C8A-B276-958497B7724F} - System32\Tasks\{73D1730C-77E2-4BD9-8EC4-7A19CAC2F3BC} => F:\setup.exe
Task: {0D547A19-B58B-489D-A462-7731C6171B8D} - System32\Tasks\{302A3F98-4E6D-4A12-8250-2BA4A4B62502} => C:\Users\Pavel\Desktop\x360ce.App-2.1.2.191\x360ce.exe
Task: {16291657-953D-457D-BBEB-765A7C4BCAC3} - System32\Tasks\{B87175C6-E0BD-45F5-A177-33F676847ABA} => C:\Users\Pavel\Downloads\elem.exe [2014-02-24] ()
Task: {1D49B8FD-27F3-49E8-ABC3-52D3555CF7C7} - System32\Tasks\{D8ED41C4-E8D0-41C9-99E5-6679C34C1C8F} => pcalua.exe -a "C:\Program Files (x86)\Bethesda Softworks\The Elder Scrolls V Skyrim - Legendary Edition CZ\VCRedist\vcredist_x86.exe" -d "C:\Program Files (x86)\Bethesda Softworks\The Elder Scrolls V Skyrim - Legendary Edition CZ\VCRedist"
Task: {2B6AB8C9-FEFE-42BB-860D-9EDEAC16010C} - System32\Tasks\{2BDF4609-E3A7-4766-B231-492BB096DE4D} => F:\setup.exe
Task: {2EE29816-2532-4B34-B780-791640FC9568} - System32\Tasks\{B13FD3C5-5D11-4426-A293-F015FF7F534E} => pcalua.exe -a C:\Users\Pavel\Downloads\F-D3100-V102W.exe -d C:\Users\Pavel\Downloads
Task: {45BD6345-ED7D-4CD6-90C4-2164B7D4C09A} - System32\Tasks\Steam-S-1-8-22-9865GUI => C:\Users\Pavel\AppData\Roaming\Steam\Reversed\steam.exe <==== ATTENTION
Task: {45CA6C1B-E2C5-4894-8A72-D585AB00C27B} - \{3BEAD877-FF27-4FBF-9819-1A3DFC192B3F} No Task File <==== ATTENTION
Task: {5BB4ED86-5996-46F9-B12D-26CAFE62B7C7} - System32\Tasks\{C010D12A-48E6-4B90-BCF3-BFC5B0816B00} => pcalua.exe -a "G:\Origin Games\The Sims 3\__Installer\Sims3Setup.exe" -d "G:\Origin Games\The Sims 3\__Installer"
Task: {6C490472-A406-4DDA-9F7C-CC20EF3FBD06} - System32\Tasks\{F7759F72-D924-4BD7-A6E0-691F2A923691} => C:\Users\Pavel\Downloads\elem.exe [2014-02-24] ()
Task: {6DF029EE-9D04-494C-A0A3-4CE94CECD8EC} - System32\Tasks\{8FF6BFEA-4F3A-42F5-8D94-BCECF7846B8E} => pcalua.exe -a C:\Users\Pavel\Downloads\ccleaner-lista-centrumcz.exe -d C:\Users\Pavel\Downloads
Task: {78E6F65C-C7D0-496A-8162-6FB35DB902F5} - System32\Tasks\{1E7CB314-85ED-40B7-BCEA-38283833608A} => H:\The SIMS 4-Deluxe Edition-SKIDROWCRACK\Game\Bin\The.Sims.4.Launcher.exe
Task: {BE2E8EFD-D9BB-46E7-808F-477053556700} - System32\Tasks\{8EFB3C13-C96E-40E4-9715-D77F6539C355} => pcalua.exe -a E:\xfire\xfire_installer.exe -d E:\xfire
Task: {C6EAEE48-B82A-454B-94F1-AF37A45DE99B} - System32\Tasks\{BD80E575-CA14-4468-877F-9D9E99FDC047} => pcalua.exe -a C:\Users\Pavel\AppData\Roaming\webssearches\UninstallManager.exe -c  -ptid=cvs <==== ATTENTION
Task: {DE688C9F-1151-44F4-955A-2691DF1656F0} - System32\Tasks\{E1B4A3CE-EAD0-46DA-B099-DD3A02CEEFC2} => pcalua.exe -a C:\Users\Pavel\AppData\Local\Temp\CIVIV_CZ110\CIVIV_CZ110.exe -d C:\Users\Pavel\AppData\Local\Temp\CIVIV_CZ110
Task: {F89EACC8-DAB1-45B4-9BBA-FED0B1A12C29} - System32\Tasks\{5DFE5787-532C-4444-A078-D7B9CEB8E385} => pcalua.exe -a F:\AutoStarter.exe -d F:\
Task: {FF4B8435-5DB2-4168-8155-EEEE7F81A507} - System32\Tasks\{7073C9AC-B8BB-4F8B-BF6F-DE3B03CC839E} => H:\The SIMS 4-Deluxe Edition-SKIDROWCRACK\Game\Bin\The.Sims.4.Launcher.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000Core.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000UA.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe
Hosts:
End

pavel68 · #8 Příspěvek od **pavel68** » 14 čer 2015 14:56

plochu jsem zredukoval

log:
Fix result of Farbar Recovery Scan Tool (x64) Version:13-06-2015
Ran by Pavel at 2015-06-14 15:46:46 Run:1
Running from C:\Users\Pavel\Desktop
Loaded Profiles: Pavel (Available Profiles: Pavel & Filip & Mcx1-PAVEL-PC & Classic .NET AppPool & DefaultAppPool)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Start
CloseProcesses:
CreateRestorePoint:
File: C:\Users\Pavel\test.bat
HKU\S-1-5-21-4105285322-3079417032-3333951049-1000\...\Run: [AdobeBridge] => [X]
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =

FF NetworkProxy: "http", "174.142.193.59"
FF NetworkProxy: "http_port", 80
FF NetworkProxy: "type", 0

FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File

S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
S1 ElRawDisk; \??\C:\Windows\system32\drivers\rsdrvx64.sys [X]
S3 FairplayKD; \??\C:\ProgramData\MTA San Andreas All\Common\temp\FairplayKD.sys [X]
S3 Mac606; system32\DRIVERS\Mac606a.sys [X]
S3 NTIOLib_1_0_C; \??\D:\NTIOLib_X64.sys [X]

2015-06-14 12:49 - 2015-03-07 09:19 - 00112640 _____ (forum.viry.cz) C:\Users\Pavel\Desktop\FRSTLauncher.exe
2015-06-14 12:00 - 2015-06-14 12:01 - 02231296 _____ C:\Users\Pavel\Downloads\AdwCleaner.exe
2015-06-14 09:39 - 2015-06-14 09:39 - 01222144 _____ C:\Users\Pavel\Downloads\RSITx64(2).exe
2015-06-14 12:15 - 2014-12-10 12:14 - 00000000 ____D C:\AdwCleaner
2015-06-14 09:39 - 2014-01-09 21:06 - 00000000 ____D C:\Program Files\trend micro
C:\Users\Pavel\AppData\Local\Temp
AlternateDataStreams: C:\Users\Public\DRM:??????

Task: {0057BF87-61C4-4C8A-B276-958497B7724F} - System32\Tasks\{73D1730C-77E2-4BD9-8EC4-7A19CAC2F3BC} => F:\setup.exe
Task: {0D547A19-B58B-489D-A462-7731C6171B8D} - System32\Tasks\{302A3F98-4E6D-4A12-8250-2BA4A4B62502} => C:\Users\Pavel\Desktop\x360ce.App-2.1.2.191\x360ce.exe
Task: {16291657-953D-457D-BBEB-765A7C4BCAC3} - System32\Tasks\{B87175C6-E0BD-45F5-A177-33F676847ABA} => C:\Users\Pavel\Downloads\elem.exe [2014-02-24] ()
Task: {1D49B8FD-27F3-49E8-ABC3-52D3555CF7C7} - System32\Tasks\{D8ED41C4-E8D0-41C9-99E5-6679C34C1C8F} => pcalua.exe -a "C:\Program Files (x86)\Bethesda Softworks\The Elder Scrolls V Skyrim - Legendary Edition CZ\VCRedist\vcredist_x86.exe" -d "C:\Program Files (x86)\Bethesda Softworks\The Elder Scrolls V Skyrim - Legendary Edition CZ\VCRedist"
Task: {2B6AB8C9-FEFE-42BB-860D-9EDEAC16010C} - System32\Tasks\{2BDF4609-E3A7-4766-B231-492BB096DE4D} => F:\setup.exe
Task: {2EE29816-2532-4B34-B780-791640FC9568} - System32\Tasks\{B13FD3C5-5D11-4426-A293-F015FF7F534E} => pcalua.exe -a C:\Users\Pavel\Downloads\F-D3100-V102W.exe -d C:\Users\Pavel\Downloads
Task: {45BD6345-ED7D-4CD6-90C4-2164B7D4C09A} - System32\Tasks\Steam-S-1-8-22-9865GUI => C:\Users\Pavel\AppData\Roaming\Steam\Reversed\steam.exe <==== ATTENTION
Task: {45CA6C1B-E2C5-4894-8A72-D585AB00C27B} - \{3BEAD877-FF27-4FBF-9819-1A3DFC192B3F} No Task File <==== ATTENTION
Task: {5BB4ED86-5996-46F9-B12D-26CAFE62B7C7} - System32\Tasks\{C010D12A-48E6-4B90-BCF3-BFC5B0816B00} => pcalua.exe -a "G:\Origin Games\The Sims 3\__Installer\Sims3Setup.exe" -d "G:\Origin Games\The Sims 3\__Installer"
Task: {6C490472-A406-4DDA-9F7C-CC20EF3FBD06} - System32\Tasks\{F7759F72-D924-4BD7-A6E0-691F2A923691} => C:\Users\Pavel\Downloads\elem.exe [2014-02-24] ()
Task: {6DF029EE-9D04-494C-A0A3-4CE94CECD8EC} - System32\Tasks\{8FF6BFEA-4F3A-42F5-8D94-BCECF7846B8E} => pcalua.exe -a C:\Users\Pavel\Downloads\ccleaner-lista-centrumcz.exe -d C:\Users\Pavel\Downloads
Task: {78E6F65C-C7D0-496A-8162-6FB35DB902F5} - System32\Tasks\{1E7CB314-85ED-40B7-BCEA-38283833608A} => H:\The SIMS 4-Deluxe Edition-SKIDROWCRACK\Game\Bin\The.Sims.4.Launcher.exe
Task: {BE2E8EFD-D9BB-46E7-808F-477053556700} - System32\Tasks\{8EFB3C13-C96E-40E4-9715-D77F6539C355} => pcalua.exe -a E:\xfire\xfire_installer.exe -d E:\xfire
Task: {C6EAEE48-B82A-454B-94F1-AF37A45DE99B} - System32\Tasks\{BD80E575-CA14-4468-877F-9D9E99FDC047} => pcalua.exe -a C:\Users\Pavel\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=cvs <==== ATTENTION
Task: {DE688C9F-1151-44F4-955A-2691DF1656F0} - System32\Tasks\{E1B4A3CE-EAD0-46DA-B099-DD3A02CEEFC2} => pcalua.exe -a C:\Users\Pavel\AppData\Local\Temp\CIVIV_CZ110\CIVIV_CZ110.exe -d C:\Users\Pavel\AppData\Local\Temp\CIVIV_CZ110
Task: {F89EACC8-DAB1-45B4-9BBA-FED0B1A12C29} - System32\Tasks\{5DFE5787-532C-4444-A078-D7B9CEB8E385} => pcalua.exe -a F:\AutoStarter.exe -d F:\
Task: {FF4B8435-5DB2-4168-8155-EEEE7F81A507} - System32\Tasks\{7073C9AC-B8BB-4F8B-BF6F-DE3B03CC839E} => H:\The SIMS 4-Deluxe Edition-SKIDROWCRACK\Game\Bin\The.Sims.4.Launcher.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000Core.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000UA.job => C:\Users\Pavel\AppData\Local\Google\Update\GoogleUpdate.exe
Hosts:
End
*****************

Processes closed successfully.
Restore point was successfully created.

========================= File: C:\Users\Pavel\test.bat ========================

MD5: EB88C7C79BB47C029FE92BCF93615213
Creation and modification date: 2014-08-17 18:37 - 2014-08-17 18:38
Size: 0000112
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product Name:
Description:
File Version:
Product Version:
Copyright$creamod:

====== End of File: ======

HKU\S-1-5-21-4105285322-3079417032-3333951049-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
Firefox Proxy settings were reset.
"HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
"HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE" => key removed successfully
DgiVecp => Service removed successfully
ElRawDisk => Service removed successfully
FairplayKD => Service removed successfully
Mac606 => Service removed successfully
NTIOLib_1_0_C => Service removed successfully
C:\Users\Pavel\Desktop\FRSTLauncher.exe => moved successfully.
C:\Users\Pavel\Downloads\AdwCleaner.exe => moved successfully.
C:\Users\Pavel\Downloads\RSITx64(2).exe => moved successfully.
C:\AdwCleaner => moved successfully.
C:\Program Files\trend micro => moved successfully.

"C:\Users\Pavel\AppData\Local\Temp" folder move:

Could not move "C:\Users\Pavel\AppData\Local\Temp" folder => Scheduled to move on reboot.

"C:\Users\Public\DRM" => ":??????" ADS not found.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0057BF87-61C4-4C8A-B276-958497B7724F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0057BF87-61C4-4C8A-B276-958497B7724F}" => key removed successfully
C:\Windows\System32\Tasks\{73D1730C-77E2-4BD9-8EC4-7A19CAC2F3BC} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{73D1730C-77E2-4BD9-8EC4-7A19CAC2F3BC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0D547A19-B58B-489D-A462-7731C6171B8D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0D547A19-B58B-489D-A462-7731C6171B8D}" => key removed successfully
C:\Windows\System32\Tasks\{302A3F98-4E6D-4A12-8250-2BA4A4B62502} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{302A3F98-4E6D-4A12-8250-2BA4A4B62502}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{16291657-953D-457D-BBEB-765A7C4BCAC3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{16291657-953D-457D-BBEB-765A7C4BCAC3}" => key removed successfully
C:\Windows\System32\Tasks\{B87175C6-E0BD-45F5-A177-33F676847ABA} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B87175C6-E0BD-45F5-A177-33F676847ABA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1D49B8FD-27F3-49E8-ABC3-52D3555CF7C7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1D49B8FD-27F3-49E8-ABC3-52D3555CF7C7}" => key removed successfully
C:\Windows\System32\Tasks\{D8ED41C4-E8D0-41C9-99E5-6679C34C1C8F} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D8ED41C4-E8D0-41C9-99E5-6679C34C1C8F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2B6AB8C9-FEFE-42BB-860D-9EDEAC16010C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2B6AB8C9-FEFE-42BB-860D-9EDEAC16010C}" => key removed successfully
C:\Windows\System32\Tasks\{2BDF4609-E3A7-4766-B231-492BB096DE4D} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{2BDF4609-E3A7-4766-B231-492BB096DE4D}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2EE29816-2532-4B34-B780-791640FC9568}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2EE29816-2532-4B34-B780-791640FC9568}" => key removed successfully
C:\Windows\System32\Tasks\{B13FD3C5-5D11-4426-A293-F015FF7F534E} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{B13FD3C5-5D11-4426-A293-F015FF7F534E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{45BD6345-ED7D-4CD6-90C4-2164B7D4C09A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45BD6345-ED7D-4CD6-90C4-2164B7D4C09A}" => key removed successfully
C:\Windows\System32\Tasks\Steam-S-1-8-22-9865GUI => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Steam-S-1-8-22-9865GUI" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{45CA6C1B-E2C5-4894-8A72-D585AB00C27B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{45CA6C1B-E2C5-4894-8A72-D585AB00C27B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3BEAD877-FF27-4FBF-9819-1A3DFC192B3F}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{5BB4ED86-5996-46F9-B12D-26CAFE62B7C7}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5BB4ED86-5996-46F9-B12D-26CAFE62B7C7}" => key removed successfully
C:\Windows\System32\Tasks\{C010D12A-48E6-4B90-BCF3-BFC5B0816B00} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{C010D12A-48E6-4B90-BCF3-BFC5B0816B00}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6C490472-A406-4DDA-9F7C-CC20EF3FBD06}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C490472-A406-4DDA-9F7C-CC20EF3FBD06}" => key removed successfully
C:\Windows\System32\Tasks\{F7759F72-D924-4BD7-A6E0-691F2A923691} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{F7759F72-D924-4BD7-A6E0-691F2A923691}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{6DF029EE-9D04-494C-A0A3-4CE94CECD8EC}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6DF029EE-9D04-494C-A0A3-4CE94CECD8EC}" => key removed successfully
C:\Windows\System32\Tasks\{8FF6BFEA-4F3A-42F5-8D94-BCECF7846B8E} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8FF6BFEA-4F3A-42F5-8D94-BCECF7846B8E}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{78E6F65C-C7D0-496A-8162-6FB35DB902F5}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{78E6F65C-C7D0-496A-8162-6FB35DB902F5}" => key removed successfully
C:\Windows\System32\Tasks\{1E7CB314-85ED-40B7-BCEA-38283833608A} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{1E7CB314-85ED-40B7-BCEA-38283833608A}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE2E8EFD-D9BB-46E7-808F-477053556700}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE2E8EFD-D9BB-46E7-808F-477053556700}" => key removed successfully
C:\Windows\System32\Tasks\{8EFB3C13-C96E-40E4-9715-D77F6539C355} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{8EFB3C13-C96E-40E4-9715-D77F6539C355}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C6EAEE48-B82A-454B-94F1-AF37A45DE99B}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C6EAEE48-B82A-454B-94F1-AF37A45DE99B}" => key removed successfully
C:\Windows\System32\Tasks\{BD80E575-CA14-4468-877F-9D9E99FDC047} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{BD80E575-CA14-4468-877F-9D9E99FDC047}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{DE688C9F-1151-44F4-955A-2691DF1656F0}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DE688C9F-1151-44F4-955A-2691DF1656F0}" => key removed successfully
C:\Windows\System32\Tasks\{E1B4A3CE-EAD0-46DA-B099-DD3A02CEEFC2} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E1B4A3CE-EAD0-46DA-B099-DD3A02CEEFC2}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F89EACC8-DAB1-45B4-9BBA-FED0B1A12C29}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F89EACC8-DAB1-45B4-9BBA-FED0B1A12C29}" => key removed successfully
C:\Windows\System32\Tasks\{5DFE5787-532C-4444-A078-D7B9CEB8E385} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{5DFE5787-532C-4444-A078-D7B9CEB8E385}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{FF4B8435-5DB2-4168-8155-EEEE7F81A507}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF4B8435-5DB2-4168-8155-EEEE7F81A507}" => key removed successfully
C:\Windows\System32\Tasks\{7073C9AC-B8BB-4F8B-BF6F-DE3B03CC839E} => moved successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{7073C9AC-B8BB-4F8B-BF6F-DE3B03CC839E}" => key removed successfully
C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000Core.job => moved successfully.
C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4105285322-3079417032-3333951049-1000UA.job => moved successfully.
C:\Windows\System32\Drivers\etc\hosts => moved successfully.
Hosts restored successfully.

Result of scheduled files to move (Boot Mode: Normal) (Date&Time: 2015-06-14 15:51:38)<=

"C:\Users\Pavel\AppData\Local\Temp" => Could not move

==== End of Fixlog 15:51:41 ====

#9 Příspěvek od **altrok** » 14 čer 2015 15:18

Takze jeste uklidime.

Stahnete a spustte DelFix - https://toolslib.net/downloads/viewdownload/2-delfix/
Oznacte jen moznost "Remove disinfection tools"
kliknete na Run

A pokud nejsou dotazy ci jine problemy, je to ode mne vse.

pavel68 · #10 Příspěvek od **pavel68** » 14 čer 2015 16:27

Díky za pomoc a Váš čas.

#11 Příspěvek od **altrok** » 14 čer 2015 16:50

Nemate zac, rad jsem pomohl

Mejte se krasne a treba zase nekdy

VIRY.CZ

jen pro jistotu

jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu

Re: jen pro jistotu